{"metadata": {"vulnerability": "CVE-2022-2347", "count": 55, "kinds": {"milestone": 12, "sighting": 13, "kev": 0, "other": 30}}, "data": [{"timestamp": "2022-07-07T00:00:00Z", "date_only": false, "value": "2022-07-07T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Google", "record": "CVE-2022-2347", "field": "containers.cna.datePublic"}, {"timestamp": "2022-07-07T22:00:00Z", "date_only": false, "value": "2022-07-07T22:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / Google", "record": "CVE-2022-2347", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-07-07T22:00:00Z", "date_only": false, "value": "2022-07-07T22:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-2347", "record": "GSD-2022-2347", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-07-08T00:00:00Z", "date_only": false, "value": "2022-07-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-2347", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-23T12:50:08Z", "date_only": false, "value": "2022-09-23T12:50:08.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Google", "record": "CVE-2022-2347", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-23T12:50:08.787Z", "date_only": false, "value": "2022-09-23T12:50:08.787Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2347", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-23T13:15:00Z", "date_only": false, "value": "2022-09-23T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-57WW-QGJV-3G3C", "record": "GHSA-57WW-QGJV-3G3C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-23T13:15:00Z", "date_only": false, "value": "2022-09-23T13:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2347", "record": "UBUNTU-CVE-2022-2347", "field": "published"}, {"timestamp": "2022-09-23T13:15:00Z", "date_only": false, "value": "2022-09-23T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2347", "record": "GSD-2022-2347", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-23T13:15:10.133Z", "date_only": false, "value": "2022-09-23T13:15:10.133", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2347", "record": "FKIE_CVE-2022-2347", "field": "published"}, {"timestamp": "2022-09-23T16:13:24Z", "date_only": false, "value": "2022-09-23T16:13:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/50314", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "dcec96fe-bf47-410a-bf0b-d87e3edf19c9", "content": "\u203c CVE-2022-2347 \u203c\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/50314"}, {"timestamp": "2022-09-25T00:00:26Z", "date_only": false, "value": "2022-09-25T00:00:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-57WW-QGJV-3G3C", "record": "GHSA-57WW-QGJV-3G3C", "field": "published"}, {"timestamp": "2022-09-29T13:51:00Z", "date_only": false, "value": "2022-09-29T13:51Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2347", "record": "GSD-2022-2347", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-05T09:45:10Z", "date_only": false, "value": "2022-11-05T09:45:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/freeosint/1172", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "217c9e1c-c2fe-4329-b716-8161a9a1643b", "content": "\ud83d\udce1U-boot \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Starlink \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u0431\u0443\u0442\u043b\u043e\u0430\u0434\u0435\u0440\u0430 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 (\u043f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0441\u0442\u0430\u043c \u0432 \u043a\u0430\u043d\u0430\u043b\u0435 \u0443\u0436\u0435 \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e \u0437\u043d\u0430\u0435\u0442\u0435, \u0438\u043b\u0438 \u0440\u0430\u043d\u0435\u0435 \u0437\u043d\u0430\u043b\u0438), \u0435\u0441\u043b\u0438 \u043a\u0442\u043e \u0432\u0434\u0440\u0443\u0433 \u0437\u0430\u0445\u043e\u0447\u0435\u0442 \u0437\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u0435\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c,  \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e \u043d\u0438\u0436\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\n\n\ud83d\udce1U-boot is used in Starlink as the main bootloader in terminal (according to some posts in the channel, you probably already know, or previously knew), if someone suddenly wants to do his research, I attach the links below to simplify the process.\n\n\ud83d\udcbeU-Boot Source Tree\n\ud83d\udcbeu-boot from starlink wi-fi gen2 \n\ud83d\udcbeU-Boot in OpenWrt\n\ud83d\udcbeu-boot docs \n\ud83d\udcbeThe u-booting securely\n\ud83d\udcbeU-Boot Secure Boot\n\ud83d\udcbeU-Boot Verified Boot vulnerability: CVE-2020-10648\n\ud83d\udcbeAnalysis and reverse-engineering of the original Starlink router(helpful information about u-boot in Starlink)\n\ud83d\udcbeReversing embedded device bootloader (U-Boot) - p.1\n\ud83d\udcbeReversing embedded device bootloader (U-Boot) - p.2\n\ud83d\udcbeDas U-Boot Verified Boot Bypass\n\ud83d\udcbeRecovering Firmware Through U-boot\n\ud83d\udcbeBushwhacking your way around a bootloader\n\ud83d\udcbeMultiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552)\n\ud83d\udcbeCVE-2022-2347\n\ud83d\udcbedepthcharge is an U-Boot hacking toolkit for security researchers and tinkerers", "url": "https://t.me/freeosint/1172"}, {"timestamp": "2023-01-21T12:39:40Z", "date_only": false, "value": "2023-01-21T12:39:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/orderofsixangles/1787", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "184d64a0-b8bf-418b-b2eb-ec431536c0be", "content": "Technical Advisory \u2013 U-Boot \u2013 Unchecked Download Size and Direction in USB DFU (CVE-2022-2347)\n\nhttps://research.nccgroup.com/2023/01/20/technical-advisory-u-boot-unchecked-download-size-and-direction-in-usb-dfu-cve-2022-2347/", "url": "https://t.me/orderofsixangles/1787"}, {"timestamp": "2023-01-21T18:22:10Z", "date_only": false, "value": "2023-01-21T18:22:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/88408", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "9771896c-638e-4a76-82b0-d0c8e92b1c99", "content": "Technical Advisory \u2013 U-Boot \u2013 Unchecked Download Size and Direction in USB DFU (CVE-2022-2347)\n\nhttps://ift.tt/HcgkhjU", "url": "https://t.me/ctinow/88408"}, {"timestamp": "2023-01-22T09:02:14Z", "date_only": false, "value": "2023-01-22T09:02:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/10626", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "279faf25-c90a-49a7-9cb0-f1adcf3735b8", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 Technical Advisory \u2013 U-Boot \u2013 Unchecked Download Size and Direction in USB DFU (CVE-2022-2347).\n\nhttps://research.nccgroup.com/2023/01/20/technical-advisory-u-boot-unchecked-download-size-and-direction-in-usb-dfu-cve-2022-2347/", "url": "https://t.me/cKure/10626"}, {"timestamp": "2023-01-24T11:01:01Z", "date_only": false, "value": "2023-01-24T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7610", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "8209b7a2-e6b9-49e0-b52e-5b2b69d080b5", "content": "#exploit\n1. A Step-By-Step Introduction To The Use Of ROP Gadgets To Bypass DEP\nhttps://cybergeeks.tech/a-step-by-step-introduction-to-the-use-of-rop-gadgets-to-bypass-dep\n\n2. b3typer - Simple typer bug\nhttps://blog.bi0s.in/2023/01/23/Pwn/bi0sCTF22-b3typer\n\n3. CVE-2022-2347:\nU-Boot - Unchecked Download Size/Direction in USB DFU\nhttps://research.nccgroup.com/2023/01/20/technical-advisory-u-boot-unchecked-download-size-and-direction-in-usb-dfu-cve-2022-2347", "url": "https://t.me/CyberSecurityTechnologies/7610"}, {"timestamp": "2023-01-24T14:44:40Z", "date_only": false, "value": "2023-01-24T14:44:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2408", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "47d10f14-7353-4eff-84e3-adbf2615e847", "content": "#exploit\n1. A Step-By-Step Introduction To The Use Of ROP Gadgets To Bypass DEP\nhttps://cybergeeks.tech/a-step-by-step-introduction-to-the-use-of-rop-gadgets-to-bypass-dep\n\n2. b3typer - Simple typer bug\nhttps://blog.bi0s.in/2023/01/23/Pwn/bi0sCTF22-b3typer\n\n3. CVE-2022-2347:\nU-Boot - Unchecked Download Size/Direction in USB DFU\nhttps://research.nccgroup.com/2023/01/20/technical-advisory-u-boot-unchecked-download-size-and-direction-in-usb-dfu-cve-2022-2347", "url": "https://t.me/crackcodes/2408"}, {"timestamp": "2023-12-13T01:19:19.661Z", "date_only": false, "value": "2023-12-13T01:19:19.661359Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2347", "record": "GSD-2022-2347", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-09-27T11:07:39Z", "date_only": false, "value": "2024-09-27T11:07:39Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2024-2186", "record": "OESA-2024-2186", "field": "published"}, {"timestamp": "2024-09-27T11:07:39Z", "date_only": false, "value": "2024-09-27T11:07:39Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2024-2187", "record": "OESA-2024-2187", "field": "published"}, {"timestamp": "2024-09-27T11:07:39Z", "date_only": false, "value": "2024-09-27T11:07:39Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2024-2188", "record": "OESA-2024-2188", "field": "published"}, {"timestamp": "2024-09-27T11:07:39Z", "date_only": false, "value": "2024-09-27T11:07:39Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2024-2189", "record": "OESA-2024-2189", "field": "published"}, {"timestamp": "2025-04-21T13:39:55.300Z", "date_only": false, "value": "2025-04-21T13:39:55.300279Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2347", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-21T13:39:55.300Z", "date_only": false, "value": "2025-04-21T13:39:55.300279Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2347", "record": "FKIE_CVE-2022-2347", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-21T13:48:54.147Z", "date_only": false, "value": "2025-04-21T13:48:54.147Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2347", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0147", "record": "NCSC-2026-0147", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-03T19:26:52.354Z", "date_only": false, "value": "2025-11-03T19:26:52.354Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-2347", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-134-16", "record": "ICSA-26-134-16", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-577017", "record": "SSA-577017", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-134-16", "record": "ICSA-26-134-16", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-577017", "record": "SSA-577017", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-577017", "record": "SSA-577017", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-12T10:12:24.850Z", "date_only": false, "value": "2026-05-12T10:12:24.850Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-2347", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-12T10:12:24.850Z", "date_only": false, "value": "2026-05-12T10:12:24.850Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2022-2347", "field": "containers.adp.2.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-12T12:31:28Z", "date_only": false, "value": "2026-05-12T12:31:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-57WW-QGJV-3G3C", "record": "GHSA-57WW-QGJV-3G3C", "field": "modified"}, {"timestamp": "2026-05-13T06:33:28.624Z", "date_only": false, "value": "2026-05-13T06:33:28.624303Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0147", "record": "NCSC-2026-0147", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-13T06:33:28.624Z", "date_only": false, "value": "2026-05-13T06:33:28.624303Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0147", "record": "NCSC-2026-0147", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-13T06:33:28.624Z", "date_only": false, "value": "2026-05-13T06:33:28.624303Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0147", "record": "NCSC-2026-0147", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-13T19:19:00.090Z", "date_only": false, "value": "2026-05-13T19:19:00.090407Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-134-16", "record": "ICSA-26-134-16", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-134-16", "record": "ICSA-26-134-16", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-134-16", "record": "ICSA-26-134-16", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-14T10:00:00Z", "date_only": false, "value": "2026-05-14T10:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "78704f26-8285-4d55-8a34-9feaed458b6f", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16"}, {"timestamp": "2026-06-17T04:41:44.320Z", "date_only": false, "value": "2026-06-17T04:41:44.320", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2347", "record": "FKIE_CVE-2022-2347", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:34.371Z", "date_only": false, "value": "2026-07-29T12:02:34.371154Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3063", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "35d96116-747a-4f55-8466-469017dd2540", "url": "https://t.me/reverseame/3063"}, {"timestamp": "2026-07-30T00:02:32.692Z", "date_only": false, "value": "2026-07-30T00:02:32.692914Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3063", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "1a14c2a7-ad20-4d2c-afb2-a1d7bf890c44", "url": "https://t.me/reverseame/3063"}, {"timestamp": "2026-08-02T20:15:15.357Z", "date_only": false, "value": "2026-08-02T20:15:15.357019Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3063", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "6e66dd06-a6ce-4fd4-8f4f-2ab5e7c0ea96", "url": "https://t.me/reverseame/3063"}, {"timestamp": "2026-08-03T01:11:28.977Z", "date_only": false, "value": "2026-08-03T01:11:28.977897Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3063", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "5215d86f-950f-4beb-a48b-f1290ef4e077", "url": "https://t.me/reverseame/3063"}, {"timestamp": "2026-08-06T11:07:39Z", "date_only": false, "value": "2026-08-06T11:07:39Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2024-2186", "record": "OESA-2024-2186", "field": "modified"}, {"timestamp": "2026-08-06T11:07:39Z", "date_only": false, "value": "2026-08-06T11:07:39Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2024-2187", "record": "OESA-2024-2187", "field": "modified"}, {"timestamp": "2026-08-06T11:07:39Z", "date_only": false, "value": "2026-08-06T11:07:39Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2024-2188", "record": "OESA-2024-2188", "field": "modified"}, {"timestamp": "2026-08-06T11:07:39Z", "date_only": false, "value": "2026-08-06T11:07:39Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2024-2189", "record": "OESA-2024-2189", "field": "modified"}, {"timestamp": "2026-09-01T17:00:11.836Z", "date_only": false, "value": "2026-09-01T17:00:11.836639Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/freeosint/2862", "record": "CVE-2022-2347", "field": "creation_timestamp", "uuid": "3ada470c-1e13-454e-b2be-8684dcb723d6", "url": "https://t.me/freeosint/2862"}, {"timestamp": "2026-10-17T09:10:19Z", "date_only": false, "value": "2026-10-17T09:10:19Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2347", "record": "UBUNTU-CVE-2022-2347", "field": "modified"}]}