{"metadata": {"vulnerability": "CVE-2024-12988", "count": 28, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 19}}, "data": [{"timestamp": "2024-12-27T00:00:00Z", "date_only": false, "value": "2024-12-27T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-12988", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2024-12-27T01:00:00Z", "date_only": false, "value": "2024-12-27T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-12988", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2024-12-27T08:33:50.934Z", "date_only": false, "value": "2024-12-27T08:33:50.934Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-12-27T08:39:33.116Z", "date_only": false, "value": "2024-12-27T08:39:33.116802Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/113723885007461469", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "4d6de915-6f21-4ac5-a7b1-74077ed8a3f8", "url": "https://infosec.exchange/users/vuldb/statuses/113723885007461469"}, {"timestamp": "2024-12-27T17:00:14.876Z", "date_only": false, "value": "2024-12-27T17:00:14.876Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-12-27T17:15:08Z", "date_only": false, "value": "2024-12-27T17:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9JGQ-4MJQ-QCC9", "record": "GHSA-9JGQ-4MJQ-QCC9", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-12-27T17:15:08.130Z", "date_only": false, "value": "2024-12-27T17:15:08.130000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202412-2475", "record": "VAR-202412-2475", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2024-12-27T17:15:08.130Z", "date_only": false, "value": "2024-12-27T17:15:08.130", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12988", "record": "FKIE_CVE-2024-12988", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-12-27T17:15:26.969Z", "date_only": false, "value": "2024-12-27T17:15:26.969315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecihxhwr62k", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "53c5a6b5-664b-4646-a0f3-3501798a62c0", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecihxhwr62k"}, {"timestamp": "2024-12-27T18:22:40.452Z", "date_only": false, "value": "2024-12-27T18:22:40.452260Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12988", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-27T18:22:40.452Z", "date_only": false, "value": "2024-12-27T18:22:40.452260Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12988", "record": "FKIE_CVE-2024-12988", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-12-27T18:23:48.498Z", "date_only": false, "value": "2024-12-27T18:23:48.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12988", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-27T18:30:26Z", "date_only": false, "value": "2024-12-27T18:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9JGQ-4MJQ-QCC9", "record": "GHSA-9JGQ-4MJQ-QCC9", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-12-27T19:22:13Z", "date_only": false, "value": "2024-12-27T19:22:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/13789", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "687de3ac-2a16-4b96-88f2-10428eb282fa", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12988 - Netgear R6900P and R7000P HTTP Header Handler Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12988 \nPublished : Dec. 27, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/13789"}, {"timestamp": "2024-12-30T00:00:00Z", "date_only": true, "value": "2024-12-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-13417", "record": "CNVD-2025-13417", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-01-14T13:59:51.349Z", "date_only": false, "value": "2025-01-14T13:59:51.349Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-14T13:59:51.349Z", "date_only": false, "value": "2025-01-14T13:59:51.349Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2024-12988", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-14T14:10:25Z", "date_only": false, "value": "2025-01-14T14:10:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1477", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "acf68be8-715f-4eea-996c-d60da4b6ce76", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12988\n\ud83d\udd39 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2024-12-27T17:00:14.876Z\n\ud83d\udccf Modified: 2025-01-14T13:59:51.349Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289381\n2. https://vuldb.com/?ctiid.289381\n3. https://vuldb.com/?submit.462781\n4. https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154\n5. https://www.netgear.com/about/eos/\n6. https://www.netgear.com/", "url": "https://t.me/DarkWebInformer_CVEAlerts/1477", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-14T15:00:03Z", "date_only": false, "value": "2025-01-14T15:00:03.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-12988", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2025-01-14T15:30:50Z", "date_only": false, "value": "2025-01-14T15:30:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9JGQ-4MJQ-QCC9", "record": "GHSA-9JGQ-4MJQ-QCC9", "field": "modified", "linked_record": true}, {"timestamp": "2025-05-28T20:19:05.267Z", "date_only": false, "value": "2025-05-28T20:19:05.267000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202412-2475", "record": "VAR-202412-2475", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2025-05-29T00:00:00Z", "date_only": false, "value": "2025-05-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202412-2475", "record": "VAR-202412-2475", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2025-05-29T02:26:00Z", "date_only": false, "value": "2025-05-29T02:26:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202412-2475", "record": "VAR-202412-2475", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2025-06-25T00:00:00Z", "date_only": false, "value": "2025-06-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202412-2475", "record": "VAR-202412-2475", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2025-06-25T00:00:00Z", "date_only": true, "value": "2025-06-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-13417", "record": "CNVD-2025-13417", "field": "openTime", "linked_record": true}, {"timestamp": "2025-06-26T23:20:50.288Z", "date_only": false, "value": "2025-06-26T23:20:50.288000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202412-2475", "record": "VAR-202412-2475", "field": "last_update_date", "linked_record": true}, {"timestamp": "2026-03-27T14:18:10.216Z", "date_only": false, "value": "2026-03-27T14:18:10.216463Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-a857457d-5caacd1223a0e069", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "45f32e94-2b9b-4f74-9417-5b18405caf2c", "url": "https://poliverso.org/objects/0477a01e-a857457d-5caacd1223a0e069"}, {"timestamp": "2026-06-17T07:00:55.473Z", "date_only": false, "value": "2026-06-17T07:00:55.473", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12988", "record": "FKIE_CVE-2024-12988", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T06:57:59.856Z", "anchors": {"origin": {"timestamp": "2024-12-27T17:00:14.876Z", "date_only": false, "value": "2024-12-27T17:00:14.876Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-12-27T17:00:14.876Z", "date_only": false, "value": "2024-12-27T17:00:14.876Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-01-14T14:10:25Z", "date_only": false, "value": "2025-01-14T14:10:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1477", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "acf68be8-715f-4eea-996c-d60da4b6ce76", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12988\n\ud83d\udd39 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2024-12-27T17:00:14.876Z\n\ud83d\udccf Modified: 2025-01-14T13:59:51.349Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289381\n2. https://vuldb.com/?ctiid.289381\n3. https://vuldb.com/?submit.462781\n4. https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154\n5. https://www.netgear.com/about/eos/\n6. https://www.netgear.com/", "url": "https://t.me/DarkWebInformer_CVEAlerts/1477", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1545010.124, "hours": 429.16947888888893, "days": 17.882061620370372, "min_seconds": 1545010.124, "max_seconds": 1545010.124, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-12-27T17:00:14.876Z", "date_only": false, "value": "2024-12-27T17:00:14.876Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-01-14T14:10:25Z", "date_only": false, "value": "2025-01-14T14:10:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1477", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "acf68be8-715f-4eea-996c-d60da4b6ce76", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12988\n\ud83d\udd39 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2024-12-27T17:00:14.876Z\n\ud83d\udccf Modified: 2025-01-14T13:59:51.349Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289381\n2. https://vuldb.com/?ctiid.289381\n3. https://vuldb.com/?submit.462781\n4. https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154\n5. https://www.netgear.com/about/eos/\n6. https://www.netgear.com/", "url": "https://t.me/DarkWebInformer_CVEAlerts/1477", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 58802264.98064, "hours": 16333.962494622223, "days": 680.5817706092593, "min_seconds": 58802264.98064, "max_seconds": 58802264.98064, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-12-27T17:00:14.876Z", "date_only": false, "value": "2024-12-27T17:00:14.876Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12988", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T06:57:59.856Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 57257254.85664, "hours": 15904.793015733334, "days": 662.6997089888889, "min_seconds": 57257254.85664, "max_seconds": 57257254.85664, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-14T14:10:25Z", "date_only": false, "value": "2025-01-14T14:10:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1477", "record": "CVE-2024-12988", "field": "creation_timestamp", "uuid": "acf68be8-715f-4eea-996c-d60da4b6ce76", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12988\n\ud83d\udd39 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2024-12-27T17:00:14.876Z\n\ud83d\udccf Modified: 2025-01-14T13:59:51.349Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289381\n2. https://vuldb.com/?ctiid.289381\n3. https://vuldb.com/?submit.462781\n4. https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154\n5. https://www.netgear.com/about/eos/\n6. https://www.netgear.com/", "url": "https://t.me/DarkWebInformer_CVEAlerts/1477", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T06:57:59.856Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}