{"metadata": {"vulnerability": "CVE-2025-0626", "count": 33, "kinds": {"milestone": 5, "sighting": 16, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-01-21T17:29:48.728Z", "date_only": false, "value": "2025-01-21T17:29:48.728Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-0626", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-30T07:00:00Z", "date_only": false, "value": "2025-01-30T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSMA-25-030-01", "record": "ICSMA-25-030-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-30T07:00:00Z", "date_only": false, "value": "2025-01-30T07:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSMA-25-030-01", "record": "ICSMA-25-030-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-30T18:17:29.717Z", "date_only": false, "value": "2025-01-30T18:17:29.717Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-0626", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-30T18:23:26.318Z", "date_only": false, "value": "2025-01-30T18:23:26.318513Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113918699498185844", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "b57527b5-ba36-4a31-ad37-f8cd4c9c61fd", "url": "https://infosec.exchange/users/cve/statuses/113918699498185844"}, {"timestamp": "2025-01-30T19:08:00.729Z", "date_only": false, "value": "2025-01-30T19:08:00.729447Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0626", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-30T19:08:00.729Z", "date_only": false, "value": "2025-01-30T19:08:00.729447Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0626", "record": "FKIE_CVE-2025-0626", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T19:15:14Z", "date_only": false, "value": "2025-01-30T19:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P2J3-FM26-85WV", "record": "GHSA-P2J3-FM26-85WV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-30T19:15:14.010Z", "date_only": false, "value": "2025-01-30T19:15:14.010", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0626", "record": "FKIE_CVE-2025-0626", "field": "published"}, {"timestamp": "2025-01-30T21:31:21Z", "date_only": false, "value": "2025-01-30T21:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P2J3-FM26-85WV", "record": "GHSA-P2J3-FM26-85WV", "field": "published"}, {"timestamp": "2025-01-30T22:30:06.671Z", "date_only": false, "value": "2025-01-30T22:30:06.671956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mytechnotalent.bsky.social/post/3lgyjvwampk2s", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "2020864a-f69b-4abc-8719-83f335dd4414", "url": "https://bsky.app/profile/mytechnotalent.bsky.social/post/3lgyjvwampk2s"}, {"timestamp": "2025-01-30T22:38:31Z", "date_only": false, "value": "2025-01-30T22:38:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16830", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "12ee79a2-8d1c-4b8c-9011-b0841afab9f0", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0626 - CVE-2023: Cisco System Backdoor Remote Access Elevation of Privilege\", \n  \"Content\": \"CVE ID : CVE-2025-0626 \nPublished : Jan. 30, 2025, 7:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : The affected product sends out remote access requests to a hard-coded IP address, bypassing existing device network settings to do so. This could serve as a backdoor and lead to a malicious actor being able to upload and overwrite files on the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16830"}, {"timestamp": "2025-01-31T11:10:23.814Z", "date_only": false, "value": "2025-01-31T11:10:23.814591Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sonoclaudio.bsky.social/post/3lgzuffeb6s2i", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "cae9fc10-3eea-4f9b-af1f-bafa3c64856d", "url": "https://bsky.app/profile/sonoclaudio.bsky.social/post/3lgzuffeb6s2i"}, {"timestamp": "2025-01-31T12:10:00Z", "date_only": false, "value": "2025-01-31T12:10:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/01/cisa-and-fda-warn-of-critical-backdoor.html", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "83d5fb89-2e63-47cd-9957-ae935de08d4a", "url": "https://thehackernews.com/2025/01/cisa-and-fda-warn-of-critical-backdoor.html"}, {"timestamp": "2025-01-31T14:10:50.910Z", "date_only": false, "value": "2025-01-31T14:10:50.910125Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/ef590220-936b-4bad-a04d-fea5234fae47", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "126c81c8-1094-480e-a496-4e2acd0f0dfd", "url": "https://vulnerability.circl.lu/bundle/ef590220-936b-4bad-a04d-fea5234fae47"}, {"timestamp": "2025-01-31T15:37:36.861Z", "date_only": false, "value": "2025-01-31T15:37:36.861Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-0626", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-31T18:31:05Z", "date_only": false, "value": "2025-01-31T18:31:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P2J3-FM26-85WV", "record": "GHSA-P2J3-FM26-85WV", "field": "modified"}, {"timestamp": "2025-01-31T20:32:34Z", "date_only": false, "value": "2025-01-31T20:32:34.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l4YT3oT_UOHfMyuj1cjA94fRkxkmjR1q1EzxbXt2fpG-3A", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "4dc0f6ab-0954-4ece-8fa0-cc9dcd28ef11"}, {"timestamp": "2025-01-31T22:12:52.607Z", "date_only": false, "value": "2025-01-31T22:12:52.607530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yokoi.bsky.social/post/3lh2zfugt3s23", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "d65aadd8-151e-4753-b996-b71d4cab328d", "url": "https://bsky.app/profile/yokoi.bsky.social/post/3lh2zfugt3s23"}, {"timestamp": "2025-02-04T16:37:06.484Z", "date_only": false, "value": "2025-02-04T16:37:06.484211Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113946592921398161", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "d491fc13-495a-40f6-9ecd-e2d434c992c8", "url": "https://infosec.exchange/users/screaminggoat/statuses/113946592921398161"}, {"timestamp": "2025-02-12T20:41:36.928Z", "date_only": false, "value": "2025-02-12T20:41:36.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0626", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-25T07:00:00Z", "date_only": false, "value": "2025-02-25T07:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSMA-25-030-01", "record": "ICSMA-25-030-01", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-02-25T07:00:00Z", "date_only": false, "value": "2025-02-25T07:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSMA-25-030-01", "record": "ICSMA-25-030-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-01T17:12:24.132Z", "date_only": false, "value": "2025-03-01T17:12:24.132Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-0626", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-01T17:12:24.132Z", "date_only": false, "value": "2025-03-01T17:12:24.132Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "CVE-2025-0626", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-01T17:32:05Z", "date_only": false, "value": "2025-03-01T17:32:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6078", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "4342b55a-a9f2-42c5-ad47-ea8f8639217a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0626\n\ud83d\udd25 CVSS Score: 7.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The \"monitor\" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to update the device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being able to upload and overwrite files on the device.\n\ud83d\udccf Published: 2025-01-30T18:17:29.717Z\n\ud83d\udccf Modified: 2025-03-01T17:12:24.132Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-030-01\n2. https://www.fda.gov/medical-devices/safety-communications/cybersecurity-vulnerabilities-certain-patient-monitors-contec-and-epsimed-fda-safety-communication", "url": "https://t.me/DarkWebInformer_CVEAlerts/6078"}, {"timestamp": "2025-03-02T11:46:59Z", "date_only": false, "value": "2025-03-02T11:46:59.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/H5xkhoxSjj2DG00FJiIfyLQ6-LCksgC3aVYyg9RPQN-6J9VY", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "ecbace6e-e8d3-439f-8bfb-9889a2a64bf9"}, {"timestamp": "2025-08-26T18:36:19Z", "date_only": false, "value": "2025-08-26T18:36:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "976e52a6-295b-4a4d-b98e-c8a10085a532"}, {"timestamp": "2026-01-28T21:03:01.738Z", "date_only": false, "value": "2026-01-28T21:03:01.738314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccsizi27", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "6488d6c0-6c5b-4d62-b51c-54cb4e2dad0a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccsizi27"}, {"timestamp": "2026-03-12T15:15:03Z", "date_only": false, "value": "2026-03-12T15:15:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/dismal002/0b7468c8472ddb1f78071d305ff6b5ed", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "5d2e6b77-721d-48c2-842a-0e14c2497a2b", "url": "https://gist.github.com/dismal002/0b7468c8472ddb1f78071d305ff6b5ed"}, {"timestamp": "2026-06-17T08:26:51.603Z", "date_only": false, "value": "2026-06-17T08:26:51.603", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0626", "record": "FKIE_CVE-2025-0626", "field": "lastModified"}, {"timestamp": "2026-08-04T13:00:14.051Z", "date_only": false, "value": "2026-08-04T13:00:14.051608Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/223", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "9cf5069d-e03c-43ce-a109-3fecfed6c9f5", "url": "https://t.me/purp_sec/223"}, {"timestamp": "2026-08-05T00:00:10.804Z", "date_only": false, "value": "2026-08-05T00:00:10.804252Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/223", "record": "CVE-2025-0626", "field": "creation_timestamp", "uuid": "ddab75b6-3902-4df4-ac09-14ad8d43463c", "url": "https://t.me/purp_sec/223"}]}