{"metadata": {"vulnerability": "CVE-2021-34991", "count": 30, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 20}}, "data": [{"timestamp": "2021-06-17T00:00:00Z", "date_only": false, "value": "2021-06-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-34991", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-11T00:00:00Z", "date_only": false, "value": "2021-11-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-11-13T00:00:00Z", "date_only": true, "value": "2021-11-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-06693", "record": "CNVD-2022-06693", "field": "submitTime"}, {"timestamp": "2021-11-15T15:40:16Z", "date_only": false, "value": "2021-11-15T15:40:16.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-34991", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-11-15T16:15:00Z", "date_only": false, "value": "2021-11-15T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4FWH-3QPR-42FF", "record": "GHSA-4FWH-3QPR-42FF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-15T16:15:00Z", "date_only": false, "value": "2021-11-15T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-34991", "record": "GSD-2021-34991", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-15T16:15:09.547Z", "date_only": false, "value": "2021-11-15T16:15:09.547000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-11-15T16:15:09.547Z", "date_only": false, "value": "2021-11-15T16:15:09.547", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-34991", "record": "FKIE_CVE-2021-34991", "field": "published"}, {"timestamp": "2021-11-17T16:33:00Z", "date_only": false, "value": "2021-11-17T16:33Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-34991", "record": "GSD-2021-34991", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-17T16:33:07.393Z", "date_only": false, "value": "2021-11-17T16:33:07.393000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_update_date.data.4.date"}, {"timestamp": "2021-11-18T12:13:14Z", "date_only": false, "value": "2021-11-18T12:13:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/2341", "record": "CVE-2021-34991", "field": "creation_timestamp", "uuid": "a4157aec-5466-4bf2-a1ce-f67464ce4a9c", "content": "Netgear \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-34991 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u043c\u0430\u043b\u043e\u0433\u043e \u0438\u043b\u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0433\u043e \u043e\u0444\u0438\u0441\u0430 (SOHO). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 (LAN) \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u044b\u043b\u0430\u0441\u044c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u0434\u0435\u043c\u043e\u043d\u0430 upnpd, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 HTTP SUBSCRIBE \u0438 UNSUBSCRIBE \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u043e\u0442\u044f\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 UPnP.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438\u00a0 GRIMM, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c PoC, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0434\u0430\u0436\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043c\u043e\u0434\u0435\u043c\u044b \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0442\u0435\u043b\u0438 \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 WiFi. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u043d\u0430 \u0433\u0438\u0442\u0445\u0430\u0431\n\nNetgear \u0443\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0442\u0447\u0435\u0439, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/true_secator/2341"}, {"timestamp": "2021-11-18T14:01:08Z", "date_only": false, "value": "2021-11-18T14:01:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1663", "record": "CVE-2021-34991", "field": "creation_timestamp", "uuid": "b2dc5719-183c-43a4-b72d-8e543c8ccdda", "content": "A critical pre-authentication RCE as root #vulnerability (CVE-2021-34991) affects several models of Netgear SOHO routers.\n\nRead: https://thehackernews.com/2021/11/critical-root-rce-bug-affects-multiple.html", "url": "https://t.me/thehackernews/1663"}, {"timestamp": "2021-11-18T14:03:28Z", "date_only": false, "value": "2021-11-18T14:03:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlackHut_Egy/778", "record": "CVE-2021-34991", "field": "creation_timestamp", "uuid": "83116bcc-3d1e-45d2-8299-2bfc004b8381", "content": "A critical pre-authentication RCE as root #vulnerability (CVE-2021-34991) affects several models of Netgear SOHO routers.\n\nRead: https://thehackernews.com/2021/11/critical-root-rce-bug-affects-multiple.html", "url": "https://t.me/BlackHut_Egy/778"}, {"timestamp": "2021-11-18T17:05:15Z", "date_only": false, "value": "2021-11-18T17:05:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/8090", "record": "CVE-2021-34991", "field": "creation_timestamp", "uuid": "ef2a17ec-2f1f-4a6c-b295-815cd3878ccf", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-34991: Pre-Authentication Buffer Overflow on Multiple Products, PSV-2021-0168 (Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models).\n\nNetworking equipment company Netgear has\u00a0released\u00a0yet\u00a0another round\u00a0of\u00a0patches\u00a0to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system.\n\nhttps://kb.netgear.com/000064361/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Multiple-Products-PSV-2021-0168\n\nhttps://thehackernews.com/2021/11/critical-root-rce-bug-affects-multiple.html", "url": "https://t.me/cKure/8090"}, {"timestamp": "2021-11-18T18:19:15Z", "date_only": false, "value": "2021-11-18T18:19:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/anony_islamicTM/410", "record": "CVE-2021-34991", "field": "creation_timestamp", "uuid": "95cdc59b-0fef-4fbc-acf6-3ea2265110e7", "content": "\u062a\u0624\u062b\u0631 \u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0645\u0633\u0628\u0642\u0629 \u0627\u0644\u0647\u0627\u0645\u0629 RCE \u0628\u0627\u0639\u062a\u0628\u0627\u0631\u0647\u0627 \u062c\u0630\u0631 # \u062b\u063a\u0631\u0629 (CVE-2021-34991) \u0639\u0644\u0649 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0646\u0645\u0627\u0630\u062c \u0623\u062c\u0647\u0632\u0629 \u062a\u0648\u062c\u064a\u0647 Netgear SOHO.", "url": "https://t.me/anony_islamicTM/410"}, {"timestamp": "2021-11-19T13:17:59Z", "date_only": false, "value": "2021-11-19T13:17:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/anwar1213xx/1298", "record": "CVE-2021-34991", "field": "creation_timestamp", "uuid": "0a747bd8-000b-4455-a6ae-060e6d3fc3e7", "content": "\u062a\u0624\u062b\u0631 \u0639\u0645\u0644\u064a\u0629 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0627\u0644\u0645\u0633\u0628\u0642\u0629 \u0627\u0644\u0647\u0627\u0645\u0629 RCE \u0628\u0627\u0639\u062a\u0628\u0627\u0631\u0647\u0627 \u062c\u0630\u0631 # \u062b\u063a\u0631\u0629 (CVE-2021-34991) \u0639\u0644\u0649 \u0627\u0644\u0639\u062f\u064a\u062f \u0645\u0646 \u0646\u0645\u0627\u0630\u062c \u0623\u062c\u0647\u0632\u0629 \u062a\u0648\u062c\u064a\u0647 Netgear SOHO.", "url": "https://t.me/anwar1213xx/1298"}, {"timestamp": "2021-11-24T00:00:00Z", "date_only": false, "value": "2021-11-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-12-23T00:00:00Z", "date_only": false, "value": "2021-12-23T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-01-13T21:44:43Z", "date_only": false, "value": "2022-01-13T21:44:43.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / zdi", "record": "CVE-2021-34991", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": false, "value": "2022-01-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-01-25T00:00:00Z", "date_only": true, "value": "2022-01-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-06693", "record": "CNVD-2022-06693", "field": "openTime"}, {"timestamp": "2022-05-24T19:20:54Z", "date_only": false, "value": "2022-05-24T19:20:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4FWH-3QPR-42FF", "record": "GHSA-4FWH-3QPR-42FF", "field": "published"}, {"timestamp": "2022-05-24T19:20:54Z", "date_only": false, "value": "2022-05-24T19:20:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4FWH-3QPR-42FF", "record": "GHSA-4FWH-3QPR-42FF", "field": "modified"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": false, "value": "2022-11-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-11-09T07:46:00Z", "date_only": false, "value": "2022-11-09T07:46:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-12-13T01:23:14.305Z", "date_only": false, "value": "2023-12-13T01:23:14.305109Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-34991", "record": "GSD-2021-34991", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T00:26:55.733Z", "date_only": false, "value": "2024-08-04T00:26:55.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-34991", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T00:26:55.733Z", "date_only": false, "value": "2024-08-04T00:26:55.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-34991", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-14T14:25:08.117Z", "date_only": false, "value": "2024-08-14T14:25:08.117000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202111-0632", "record": "VAR-202111-0632", "field": "last_update_date"}, {"timestamp": "2026-06-17T03:56:56.520Z", "date_only": false, "value": "2026-06-17T03:56:56.520", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-34991", "record": "FKIE_CVE-2021-34991", "field": "lastModified"}]}