{"metadata": {"vulnerability": "CVE-2024-20356", "count": 47, "kinds": {"milestone": 8, "sighting": 17, "kev": 0, "other": 22}}, "data": [{"timestamp": "2023-11-08T15:08:07.648Z", "date_only": false, "value": "2023-11-08T15:08:07.648Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-20356", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:21:42.956Z", "date_only": false, "value": "2023-12-13T01:21:42.956736Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-20356", "record": "GSD-2024-20356", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-17T16:00:00Z", "date_only": false, "value": "2024-04-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-CIMC-CMD-INJ-BLUPCB", "record": "CISCO-SA-CIMC-CMD-INJ-BLUPCB", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-17T16:00:02Z", "date_only": false, "value": "2024-04-17T16:00:02+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CIMC-CMD-INJ-BLUPCB", "record": "CISCO-SA-CIMC-CMD-INJ-BLUPCB", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-17T22:00:00Z", "date_only": false, "value": "2024-04-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0919", "record": "WID-SEC-W-2024-0919", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-17T22:00:00Z", "date_only": false, "value": "2024-04-17T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0919", "record": "WID-SEC-W-2024-0919", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-17T22:00:00Z", "date_only": false, "value": "2024-04-17T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0919", "record": "WID-SEC-W-2024-0919", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-04-17T22:00:00Z", "date_only": false, "value": "2024-04-17T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0919", "record": "WID-SEC-W-2024-0919", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-18T00:00:00Z", "date_only": false, "value": "2024-04-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0319", "record": "CERTFR-2024-AVI-0319", "field": "last_revision_date"}, {"timestamp": "2024-04-18T00:00:00Z", "date_only": false, "value": "2024-04-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0319", "record": "CERTFR-2024-AVI-0319", "field": "initial_release_date"}, {"timestamp": "2024-04-18T00:00:00Z", "date_only": false, "value": "2024-04-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0319", "record": "CERTFR-2024-AVI-0319", "field": "revisions.0.revision_date"}, {"timestamp": "2024-04-18T14:55:08Z", "date_only": false, "value": "2024-04-18T14:55:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RedTeamFeed/273", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "a5804e38-e3dc-4c85-95b9-e9cdc478fb85", "content": "CVE-2024-20356: Jailbreaking a Cisco appliance to run DOOM\n#nettitude\n\nThe Cisco C195 is a Cisco Email Security Appliance device. Its role is to act as an SMTP gateway on your network perimeter. This device (and the full range of appliance devices) is heavily locked down and prevents unauthorised code from running. Source: https://www.melbourneglobal.com.au/cisco-esa-c195-k9-esa-c195-email/ I recently took one of these apart in order [...]\n\nvia Nettitude Labs Blog (author: Aaron Thacker)", "url": "https://t.me/RedTeamFeed/273"}, {"timestamp": "2024-04-19T16:36:18Z", "date_only": false, "value": "2024-04-19T16:36:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CIMC-CMD-INJ-BLUPCB", "record": "CISCO-SA-CIMC-CMD-INJ-BLUPCB", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-04-20T02:10:24Z", "date_only": false, "value": "2024-04-20T02:10:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2349", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "f84ad46b-2882-4ee7-bc45-553a51626ff6", "content": "https://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom/\n\nCVE-2024-20356: Jailbreaking a Cisco appliance to run DOOM\n#\u5206\u6790 #poc", "url": "https://t.me/CNArsenal/2349"}, {"timestamp": "2024-04-20T12:36:36Z", "date_only": false, "value": "2024-04-20T12:36:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/12767", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "d5cda04a-bbcc-4aa3-982e-bd7bb22a9eed", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2024-20356: Jailbreaking a Cisco appliance to run DOOM.\n\nhttps://labs.nettitude.com/blog/cve-2024-20356-jailbreaking-a-cisco-appliance-to-run-doom/", "url": "https://t.me/cKure/12767"}, {"timestamp": "2024-04-22T10:03:51Z", "date_only": false, "value": "2024-04-22T10:03:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2012", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "b93a4cc4-95c9-4c87-8124-1f4f83c25053", "content": "CVE-2024-20356\nJailbreaking a Cisco appliance to run DOOM\n*\n\u0421\u0430\u043c POC exploit\n*\n\u041d\u0443 \u043a\u0430\u043a \u0441\u0430\u043c DOOM \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u043d\u0430 \u0446\u0438\u0441\u043a\u0435 \u043f\u043e\u0434\u043e\u0434\u0435\u044f\u043b\u044c\u043d\u0438\u043a\u0435 \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0443\u0442\n\n#IDDQD #IDKFA", "url": "https://t.me/proxy_bar/2012"}, {"timestamp": "2024-04-23T09:13:21Z", "date_only": false, "value": "2024-04-23T09:13:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2364", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "e37c8ef5-571e-4fe4-975e-99fc698a7b91", "content": "https://github.com/nettitude/CVE-2024-20356\n\nThis is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.\n#github #poc", "url": "https://t.me/CNArsenal/2364"}, {"timestamp": "2024-04-24T19:40:33.312Z", "date_only": false, "value": "2024-04-24T19:40:33.312Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-20356", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-24T19:40:33.312Z", "date_only": false, "value": "2024-04-24T19:40:33.312Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2024-20356", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-24T20:15:07Z", "date_only": false, "value": "2024-04-24T20:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M2XM-R93V-MJRM", "record": "GHSA-M2XM-R93V-MJRM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-24T20:15:07.477Z", "date_only": false, "value": "2024-04-24T20:15:07.477", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20356", "record": "FKIE_CVE-2024-20356", "field": "published"}, {"timestamp": "2024-04-24T20:15:07.477Z", "date_only": false, "value": "2024-04-24T20:15:07.477", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-20356", "record": "GSD-2024-20356", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-24T21:31:56Z", "date_only": false, "value": "2024-04-24T21:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M2XM-R93V-MJRM", "record": "GHSA-M2XM-R93V-MJRM", "field": "published"}, {"timestamp": "2024-04-24T21:31:56Z", "date_only": false, "value": "2024-04-24T21:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M2XM-R93V-MJRM", "record": "GHSA-M2XM-R93V-MJRM", "field": "modified"}, {"timestamp": "2024-04-25T13:18:20.370Z", "date_only": false, "value": "2024-04-25T13:18:20.370", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-20356", "record": "GSD-2024-20356", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-25T17:53:52.218Z", "date_only": false, "value": "2024-04-25T17:53:52.218954Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20356", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-04-25T17:53:52.218Z", "date_only": false, "value": "2024-04-25T17:53:52.218954Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20356", "record": "FKIE_CVE-2024-20356", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-05-20T01:00:41Z", "date_only": false, "value": "2024-05-20T01:00:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7342", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "3725f594-cc6e-4f4d-92b1-d06e5c63381b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA oxidized version of https://github.com/nettitude/CVE-2024-20356/blob/main/CVE-2024-20356.py\nURL\uff1ahttps://github.com/SherllyNeo/CVE_2024_20356\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7342"}, {"timestamp": "2024-06-04T17:40:42.092Z", "date_only": false, "value": "2024-06-04T17:40:42.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-20356", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-05T05:24:55Z", "date_only": false, "value": "2024-06-05T05:24:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/X1XGaX2zUJfZQX1mIckcJZ_9DGvp9ENiz4f48qr3xBA2ibI", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "9637e941-baba-4ee6-ac11-e6c931cb2d08"}, {"timestamp": "2024-06-28T15:22:37Z", "date_only": false, "value": "2024-06-28T15:22:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-CIMC-CMD-INJ-BLUPCB", "record": "CISCO-SA-CIMC-CMD-INJ-BLUPCB", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-06-28T15:22:37Z", "date_only": false, "value": "2024-06-28T15:22:37+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-CIMC-CMD-INJ-BLUPCB", "record": "CISCO-SA-CIMC-CMD-INJ-BLUPCB", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-28T15:22:41Z", "date_only": false, "value": "2024-06-28T15:22:41+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-CIMC-CMD-INJ-BLUPCB", "record": "CISCO-SA-CIMC-CMD-INJ-BLUPCB", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-01T21:59:41.754Z", "date_only": false, "value": "2024-08-01T21:59:41.754Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-20356", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:59:41.754Z", "date_only": false, "value": "2024-08-01T21:59:41.754Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-20356", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:07:55.034Z", "date_only": false, "value": "2024-08-15T18:07:55.034+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0919", "record": "WID-SEC-W-2024-0919", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-23T16:58:04Z", "date_only": false, "value": "2024-11-23T16:58:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/haj3imad/20800", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "0f182ded-fb1c-4b2a-b725-b682b14d97f8", "content": "https://github.com/nettitude/CVE-2024-20356\n\nThis is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.\n#github #exploit", "url": "https://t.me/haj3imad/20800"}, {"timestamp": "2024-11-24T05:25:14Z", "date_only": false, "value": "2024-11-24T05:25:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Rootsec_2/5231", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "b2f6416c-2e5a-4503-ac00-727015fe07e9", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/Rootsec_2/5231"}, {"timestamp": "2024-11-25T11:41:33Z", "date_only": false, "value": "2024-11-25T11:41:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11470", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "c997f6aa-09e1-419e-8281-e715f0f92459", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/CyberSecurityTechnologies/11470"}, {"timestamp": "2024-12-14T21:15:02Z", "date_only": false, "value": "2024-12-14T21:15:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ctftm/655", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "337e1c14-8198-4aa7-9adf-15b06a9f370f", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/ctftm/655"}, {"timestamp": "2024-12-31T06:28:27Z", "date_only": false, "value": "2024-12-31T06:28:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/684", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "4273cc3e-5f49-46be-93b4-f565b65909ba", "content": "#exploit\n1. CVE-2024-20356:\nhttps://github.com/nettitude/CVE-2024-20356\n\n2. \"Randar\" Minecraft Exploit:\nExplanation and Information\nhttps://github.com/spawnmason/randar-explanation\n\n3. CVE-2023-20198:\nCisco IOS XE\u00a0Privilege Escalation\nhttps://github.com/XiaomingX/CVE-2023-20198-poc", "url": "https://t.me/AGENTZSECURITY/684"}, {"timestamp": "2026-06-17T07:06:48.240Z", "date_only": false, "value": "2026-06-17T07:06:48.240", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-20356", "record": "FKIE_CVE-2024-20356", "field": "lastModified"}, {"timestamp": "2026-07-29T12:03:17.701Z", "date_only": false, "value": "2026-07-29T12:03:17.701738Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2121", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "6bda2492-2fc5-4964-b13c-cc16cdea108b", "url": "https://t.me/sysadm_in_up/2121"}, {"timestamp": "2026-07-30T00:03:03.463Z", "date_only": false, "value": "2026-07-30T00:03:03.463783Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/2121", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "afccaf83-bc0b-47a3-8ec9-64398dc79e87", "url": "https://t.me/sysadm_in_up/2121"}, {"timestamp": "2026-08-04T01:00:03.639Z", "date_only": false, "value": "2026-08-04T01:00:03.639275Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2121", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "27cddada-62d6-4f7d-afb1-2725390f0c83", "url": "https://t.me/sysadm_in_up/2121"}, {"timestamp": "2026-08-05T00:00:59.959Z", "date_only": false, "value": "2026-08-05T00:00:59.959360Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/2121", "record": "CVE-2024-20356", "field": "creation_timestamp", "uuid": "274be399-5348-479d-983a-faf0fb48eaa2", "url": "https://t.me/sysadm_in_up/2121"}, {"timestamp": "2026-09-09T13:54:24.243Z", "date_only": false, "value": "2026-09-09T13:54:24.243604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mv3os6hyco2u", "record": "cve-2024-20356", "field": "creation_timestamp", "uuid": "50cb22ab-dced-4b74-905c-c051c196904d", "url": "https://bsky.app/profile/oxfemale.bsky.social/post/3mv3os6hyco2u"}]}