{"metadata": {"vulnerability": "CVE-2022-20821", "count": 52, "kinds": {"milestone": 5, "sighting": 14, "kev": 11, "other": 22}}, "data": [{"timestamp": "2021-11-02T00:00:00Z", "date_only": false, "value": "2021-11-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-20821", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-20T00:00:00Z", "date_only": false, "value": "2022-05-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2022-20821", "field": "containers.cna.datePublic"}, {"timestamp": "2022-05-20T16:00:00Z", "date_only": false, "value": "2022-05-20T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXR-REDIS-ABJYE5XK", "record": "CISCO-SA-IOSXR-REDIS-ABJYE5XK", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-05-20T16:00:03Z", "date_only": false, "value": "2022-05-20T16:00:03+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXR-REDIS-ABJYE5XK", "record": "CISCO-SA-IOSXR-REDIS-ABJYE5XK", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-05-20T23:00:00Z", "date_only": false, "value": "2022-05-20T23:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / cisco", "record": "CVE-2022-20821", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-05-20T23:00:00Z", "date_only": false, "value": "2022-05-20T23:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-20821", "record": "GSD-2022-20821", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-05-22T10:35:24Z", "date_only": false, "value": "2022-05-22T10:35:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/690", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "159c85d0-374f-4979-8ee9-df0592399ec4", "content": "\u200b\u2692 Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441 \u041e\u0421 IOS XR.\n\n\ud83d\udcac \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0432\u043e\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441 \u041e\u0421 IOS XR, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u043c Redis, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u043c \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445 NOSi Docker.\n\n\u041f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b IOS XR \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Cisco, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0439 NCS 540 \u0438 560, NCS 5500, 8000 \u0438 ASR 9000.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20821 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 RPM \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 TCP-\u043f\u043e\u0440\u0442 6379. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Redis \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u043f\u043e\u0440\u0442\u0443. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 Redis.\n\n\u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u043d \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u043e\u0441\u0442\u0430, \u0442\u0430\u043a \u043a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Redis \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435.\n\n\u0425\u043e\u0442\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u0441\u0435\u0440\u0438\u0438 Cisco 8000 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 RPM, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u041f\u041e.\n\n#Cisco #Redis \n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/690"}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-20821", "field": "timestamps.asserted_at", "uuid": "aaf4a9de-3195-4aa4-8c75-e92b26693d02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-20821", "field": "timestamps.asserted_at", "uuid": "f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": true, "value": "2022-05-23", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20821", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-20821", "field": "evidence.0.details.added_date", "uuid": "f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": true, "value": "2022-05-23", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-20821", "field": "evidence.0.details.date_added", "uuid": "aaf4a9de-3195-4aa4-8c75-e92b26693d02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-20821", "field": "timestamps.first_seen_at", "uuid": "aaf4a9de-3195-4aa4-8c75-e92b26693d02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-20821", "field": "timestamps.first_seen_at", "uuid": "f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-20821", "field": "status.status_updated_at", "uuid": "aaf4a9de-3195-4aa4-8c75-e92b26693d02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-20821", "field": "status.status_updated_at", "uuid": "f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-23T00:00:00Z", "date_only": false, "value": "2022-05-23T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20821", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-05-23T04:00:00Z", "date_only": false, "value": "2022-05-23T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=809", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "3c217a67-a8a1-42d8-af24-8a64f77cb20c", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=809"}, {"timestamp": "2022-05-26T14:00:31Z", "date_only": false, "value": "2022-05-26T14:00:31.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2022-20821", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-26T14:00:31.613Z", "date_only": false, "value": "2022-05-26T14:00:31.613Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-20821", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-26T14:15:00Z", "date_only": false, "value": "2022-05-26T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6WHC-CMC9-99Q6", "record": "GHSA-6WHC-CMC9-99Q6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-26T14:15:00Z", "date_only": false, "value": "2022-05-26T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-20821", "record": "GSD-2022-20821", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-05-26T14:15:08.123Z", "date_only": false, "value": "2022-05-26T14:15:08.123", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20821", "record": "FKIE_CVE-2022-20821", "field": "published"}, {"timestamp": "2022-05-26T18:14:14Z", "date_only": false, "value": "2022-05-26T18:14:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/43385", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "ff6ab996-7a4d-4537-8eb0-d1967a498776", "content": "\u203c CVE-2022-20821 \u203c\n\nA vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attacker could exploit this vulnerability by connecting to the Redis instance on the open port. A successful exploit could allow the attacker to write to the Redis in-memory database, write arbitrary files to the container filesystem, and retrieve information about the Redis database. Given the configuration of the sandboxed container that the Redis instance runs in, a remote attacker would be unable to execute remote code or abuse the integrity of the Cisco IOS XR Software host system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/43385"}, {"timestamp": "2022-05-27T00:00:59Z", "date_only": false, "value": "2022-05-27T00:00:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6WHC-CMC9-99Q6", "record": "GHSA-6WHC-CMC9-99Q6", "field": "published"}, {"timestamp": "2022-06-01T13:59:56Z", "date_only": false, "value": "2022-06-01T13:59:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXR-REDIS-ABJYE5XK", "record": "CISCO-SA-IOSXR-REDIS-ABJYE5XK", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-06-07T16:51:00Z", "date_only": false, "value": "2022-06-07T16:51Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-20821", "record": "GSD-2022-20821", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-06-13T00:00:00Z", "date_only": true, "value": "2022-06-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-20821", "field": "evidence.0.details.due_date", "uuid": "aaf4a9de-3195-4aa4-8c75-e92b26693d02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "6fe905f1-bcd9-4085-90c0-6c5bc8bb040f"}, {"timestamp": "2023-12-13T01:19:16.960Z", "date_only": false, "value": "2023-12-13T01:19:16.960668Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-20821", "record": "GSD-2022-20821", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-24T02:51:29Z", "date_only": false, "value": "2023-12-24T02:51:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2141", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "e3e95f8a-39f0-4f29-8711-a3f5c5a34147", "content": "#ExploitObserverAlert\n\nCVE-2022-20821\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-20821. A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running within the NOSi container. This vulnerability exists because the health check RPM opens TCP port 6379 by default upon activation. An attacker could exploit this vulnerability by connecting to the Redis instance on the open port. A successful exploit could allow the attacker to write to the Redis in-memory database, write arbitrary files to the container filesystem, and retrieve information about the Redis database. Given the configuration of the sandboxed container that the Redis instance runs in, a remote attacker would be unable to execute remote code or abuse the integrity of the Cisco IOS XR Software host system.\n\nFIRST-EPSS: 0.003670000\nNVD-IS: 2.5\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2141"}, {"timestamp": "2024-03-15T16:55:47Z", "date_only": false, "value": "2024-03-15T16:55:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXR-REDIS-ABJYE5XK", "record": "CISCO-SA-IOSXR-REDIS-ABJYE5XK", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-03-15T16:55:47Z", "date_only": false, "value": "2024-03-15T16:55:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXR-REDIS-ABJYE5XK", "record": "CISCO-SA-IOSXR-REDIS-ABJYE5XK", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-05-10T23:16:16Z", "date_only": false, "value": "2024-05-10T23:16:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-IOSXR-REDIS-ABJYE5XK", "record": "CISCO-SA-IOSXR-REDIS-ABJYE5XK", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-03T02:24:49.991Z", "date_only": false, "value": "2024-08-03T02:24:49.991Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-20821", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-29T16:11:07.480Z", "date_only": false, "value": "2024-10-29T16:11:07.480784Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20821", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-29T16:11:07.480Z", "date_only": false, "value": "2024-10-29T16:11:07.480784Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20821", "record": "FKIE_CVE-2022-20821", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-24T20:31:14.391Z", "date_only": false, "value": "2024-12-24T20:31:14.391546Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971567", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "6967344f-6dd8-423a-a94c-fa701e3b9912", "url": "https://feedsin.space/feed/CISAKevBot/items/2971567"}, {"timestamp": "2025-02-23T02:10:33Z", "date_only": false, "value": "2025-02-23T02:10:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "978c290e-8d02-4635-8b44-e0c218d79a5a"}, {"timestamp": "2025-10-21T23:15:39.420Z", "date_only": false, "value": "2025-10-21T23:15:39.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-20821", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:39.420Z", "date_only": false, "value": "2025-10-21T23:15:39.420Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-20821", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:33Z", "date_only": false, "value": "2025-10-22T00:32:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6WHC-CMC9-99Q6", "record": "GHSA-6WHC-CMC9-99Q6", "field": "modified"}, {"timestamp": "2026-02-02T12:27:41.375Z", "date_only": false, "value": "2026-02-02T12:27:41.375764Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bfb8f0ed-30fd-4281-aa15-5f46555011ef", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "86b30a71-8250-49b1-beae-c5d7b2451a13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bfb8f0ed-30fd-4281-aa15-5f46555011ef"}, {"timestamp": "2026-02-02T12:27:41.375Z", "date_only": false, "value": "2026-02-02T12:27:41.375764Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bfb8f0ed-30fd-4281-aa15-5f46555011ef", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "1c4e30e5-7ef3-426b-9371-f1d1de135085", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bfb8f0ed-30fd-4281-aa15-5f46555011ef"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-20821", "field": "timestamps.recorded_at", "uuid": "aaf4a9de-3195-4aa4-8c75-e92b26693d02", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:25:11.087Z", "date_only": false, "value": "2026-06-17T04:25:11.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-20821", "record": "FKIE_CVE-2022-20821", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:16.092Z", "date_only": false, "value": "2026-06-19T12:47:16.092308Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8fc3438c-8c93-46d1-b027-c11b446294c7", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "b3acfe32-bac1-44b0-9f14-932b181b3277", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8fc3438c-8c93-46d1-b027-c11b446294c7"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-20821", "field": "timestamps.recorded_at", "uuid": "f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:51.197Z", "date_only": false, "value": "2026-06-23T11:13:51.197432Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "119c5e3a-2d9a-4d0a-8444-d3d73fd66ce5", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f9c3ff4b-937a-459c-bcb6-c3d42fbd2b6d"}, {"timestamp": "2026-06-23T14:05:23.139Z", "date_only": false, "value": "2026-06-23T14:05:23.139313Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/faf8aab5-307e-4de0-9be0-13d4113efe5e", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "e2870a4e-6c24-451e-9b6c-22d779e88e21", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/faf8aab5-307e-4de0-9be0-13d4113efe5e"}, {"timestamp": "2026-07-17T05:00:04.717Z", "date_only": false, "value": "2026-07-17T05:00:04.717902Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/298", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "ac6d3c97-8e97-4066-b84e-a9a2312981ec", "url": "https://t.me/EchelonEyes/298"}, {"timestamp": "2026-07-18T00:00:39.525Z", "date_only": false, "value": "2026-07-18T00:00:39.525684Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/298", "record": "CVE-2022-20821", "field": "creation_timestamp", "uuid": "373cd579-d852-4e3a-aa9e-9ffbe8c15fa0", "url": "https://t.me/EchelonEyes/298"}]}