{"metadata": {"vulnerability": "cve-2021-20090", "count": 92, "kinds": {"milestone": 4, "sighting": 39, "kev": 17, "other": 32}}, "data": [{"timestamp": "2020-12-17T00:00:00Z", "date_only": false, "value": "2020-12-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-20090", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_release_date.data.4.date"}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.4.date"}, {"timestamp": "2021-04-27T00:00:00Z", "date_only": false, "value": "2021-04-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-04-28T00:00:00Z", "date_only": true, "value": "2021-04-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-56801", "record": "CNVD-2021-56801", "field": "submitTime"}, {"timestamp": "2021-04-29T00:00:00Z", "date_only": false, "value": "2021-04-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_release_date.data.2.date"}, {"timestamp": "2021-04-29T00:00:00Z", "date_only": false, "value": "2021-04-29T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-20090", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-04-29T15:15:00Z", "date_only": false, "value": "2021-04-29T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6466-44WR-C6VV", "record": "GHSA-6466-44WR-C6VV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-04-29T15:15:00Z", "date_only": false, "value": "2021-04-29T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-20090", "record": "GSD-2021-20090", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-04-29T15:15:10.630Z", "date_only": false, "value": "2021-04-29T15:15:10.630000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-04-29T15:15:10.630Z", "date_only": false, "value": "2021-04-29T15:15:10.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20090", "record": "FKIE_CVE-2021-20090", "field": "published"}, {"timestamp": "2021-07-20T00:00:00Z", "date_only": false, "value": "2021-07-20T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_release_date.data.0.date"}, {"timestamp": "2021-07-27T00:00:00Z", "date_only": false, "value": "2021-07-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_release_date.data.5.date"}, {"timestamp": "2021-07-27T05:10:00Z", "date_only": false, "value": "2021-07-27T05:10:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.5.date"}, {"timestamp": "2021-07-30T00:00:00Z", "date_only": false, "value": "2021-07-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-07-30T00:00:00Z", "date_only": true, "value": "2021-07-30", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-56801", "record": "CNVD-2021-56801", "field": "openTime"}, {"timestamp": "2021-08-04T11:27:01Z", "date_only": false, "value": "2021-08-04T11:27:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3986", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "e00ee792-a7b4-4be9-a08f-722ee423954d", "content": "#Red_Team_Tactics\n1. PostMessage XSS Attack\nhttps://medium.com/@youghourtaghannei/postmessage-xss-vulnerability-on-private-program-18e773e1a1ba\n2. Bypassing Authentication on Arcadyan Routers with CVE-2021-20090 and rooting some Buffalo\nhttps://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2", "url": "https://t.me/CyberSecurityTechnologies/3986"}, {"timestamp": "2021-08-08T08:22:21Z", "date_only": false, "value": "2021-08-08T08:22:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/6532", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "43f0b799-edd8-46ff-b8be-704825d3ff5c", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 CVE-2021-20090 actively exploited to target millions of IoT devices worldwide.\n\nhttps://hackademicus.nl/cve-2021-20090-actively-exploited-to-target-millions-of-iot-devices-worldwide/", "url": "https://t.me/cKure/6532"}, {"timestamp": "2021-08-08T14:28:35Z", "date_only": false, "value": "2021-08-08T14:28:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/4021", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "73c86674-54e6-41f5-8020-4262735338cf", "content": "#Threat_Research\n1. CVE-2021-20090 - Attack Details\nhttps://blogs.juniper.net/en-us/security/freshly-disclosed-vulnerability-cve-2021-20090-exploited-in-the-wild\n2. OTP bypass and Account takeover using response manipulation\nhttps://infosecwriteups.com/otp-bypass-and-account-takeover-using-response-manipulation-685ad4e1ea76", "url": "https://t.me/CyberSecurityTechnologies/4021"}, {"timestamp": "2021-08-08T18:22:44Z", "date_only": false, "value": "2021-08-08T18:22:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/6536", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "9f92dff0-d6ef-4056-a66d-f8ca1582cf8e", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Bypassing Authentication on Arcadyan Routers with CVE-2021\u201320090 and rooting some Buffalo\n\nhttps://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2", "url": "https://t.me/cKure/6536"}, {"timestamp": "2021-08-08T19:39:20Z", "date_only": false, "value": "2021-08-08T19:39:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cybred/311", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "a75b3918-8471-435c-8dfa-190745d3f22f", "content": "https://www.bleepingcomputer.com/news/security/actively-exploited-bug-bypasses-authentication-on-millions-of-routers/\n\nhttps://blogs.juniper.net/en-us/security/freshly-disclosed-vulnerability-cve-2021-20090-exploited-in-the-wild\n\nhttps://medium.com/tenable-techblog/bypassing-authentication-on-arcadyan-routers-with-cve-2021-20090-and-rooting-some-buffalo-ea1dd30980c2", "url": "https://t.me/cybred/311"}, {"timestamp": "2021-08-09T18:59:25Z", "date_only": false, "value": "2021-08-09T18:59:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1984", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "a5fda5ba-46ca-4cf6-b18b-cdb5e211f2c4", "content": "\u200b\u200b\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 Unit 42 \u0432 \u043c\u0430\u0440\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u0431\u043e\u0442\u043d\u0435\u0442 Mirai \u043d\u0430\u0447\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u0430\u043d\u0441\u0438\u044e. \n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Juniper Threat Labs \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-20090, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 Arcadyan.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u044b\u0440\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Tenable \u0435\u0449\u0451 26 \u0430\u043f\u0440\u0435\u043b\u044f, \u0438, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 10 \u043b\u0435\u0442, \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 20 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043e\u0442 17 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Asus, British Telecom, Deutsche Telekom, Orange, O2 (Telefonica), Verizon, Vodafone, Telstra \u0438 Telus. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0421\u043f\u0443\u0441\u0442\u044f 2 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442 3 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 PoC, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u044f\u043b\u0438\u0441\u044c \u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0431\u0430\u0433\u0443, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Mirai \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u0410\u0442\u0430\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0423\u0445\u0430\u043d\u0435, \u043f\u0440\u043e\u0432\u0438\u043d\u0446\u0438\u044f \u0425\u0443\u0431\u044d\u0439, \u041a\u0438\u0442\u0430\u0439.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c Mirai \u0435\u0449\u0435 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0430\u0434\u043c\u0438\u043d\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0438\u043b\u0438 \u0438 CVE-2021-20090. \u0410 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043c\u043e\u0433\u0443\u0442 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442 \u0438 \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0434\u044b\u0440\u044b, \u0434\u0430 \u0438 \u0437\u043d\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d \u0443\u043c\u0435\u0440 - \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439, \u0434\u0435\u0448\u0435\u0432\u043e\u0439 \u0438 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 IOC, \u0432\u043a\u043b\u044e\u0447\u0430\u044f IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0430\u0442\u0430\u043a, \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0445\u044d\u0448\u0435\u0439 \u0438 \u0441\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0435\u0432\u0430\u0439\u0441\u044b \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445.", "url": "https://t.me/true_secator/1984"}, {"timestamp": "2021-08-09T18:59:54Z", "date_only": false, "value": "2021-08-09T18:59:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/821", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "c2506406-5696-4ac2-83b4-3c11e0f4999a", "content": "\u200b\u200b\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 Unit 42 \u0432 \u043c\u0430\u0440\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u0431\u043e\u0442\u043d\u0435\u0442 Mirai \u043d\u0430\u0447\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u0430\u043d\u0441\u0438\u044e. \n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Juniper Threat Labs \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-20090, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439 Arcadyan.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u044b\u0440\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Tenable \u0435\u0449\u0451 26 \u0430\u043f\u0440\u0435\u043b\u044f, \u0438, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 10 \u043b\u0435\u0442, \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0432 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 20 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043e\u0442 17 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Asus, British Telecom, Deutsche Telekom, Orange, O2 (Telefonica), Verizon, Vodafone, Telstra \u0438 Telus. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0421\u043f\u0443\u0441\u0442\u044f 2 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442 3 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 PoC, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u044f\u043b\u0438\u0441\u044c \u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0431\u0430\u0433\u0443, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Mirai \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u0410\u0442\u0430\u043a\u0438 \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0423\u0445\u0430\u043d\u0435, \u043f\u0440\u043e\u0432\u0438\u043d\u0446\u0438\u044f \u0425\u0443\u0431\u044d\u0439, \u041a\u0438\u0442\u0430\u0439.\n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c Mirai \u0435\u0449\u0435 18 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0430\u0434\u043c\u0438\u043d\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432 \u0441\u0432\u043e\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0438\u043b\u0438 \u0438 CVE-2021-20090. \u0410 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043c\u043e\u0433\u0443\u0442 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u043e\u0442\u043d\u0435\u0442 \u0438 \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0434\u044b\u0440\u044b, \u0434\u0430 \u0438 \u0437\u043d\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d \u0443\u043c\u0435\u0440 - \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439, \u0434\u0435\u0448\u0435\u0432\u043e\u0439 \u0438 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0432\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 IOC, \u0432\u043a\u043b\u044e\u0447\u0430\u044f IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0430\u0442\u0430\u043a, \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0445\u044d\u0448\u0435\u0439 \u0438 \u0441\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0434\u0435\u0432\u0430\u0439\u0441\u044b \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445.", "url": "https://t.me/S_E_Reborn/821"}, {"timestamp": "2021-09-02T11:05:07Z", "date_only": false, "value": "2021-09-02T11:05:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4203", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "72740e85-878c-430e-8992-1ab8511cbed1", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Aug 1-31)\nCVE-2021-1675 - Print Spooler EoP\nhttps://t.me/cybersecuritytechnologies/3723\nCVE-2021-31956 - Win NTFS EoP\nhttps://t.me/cybersecuritytechnologies/4110\nCVE-2021-36958 - Print Spooler RCE\nhttps://mobile.twitter.com/gentilkiwi/status/1416429860566847490?s=20\nCVE-2021-39137 - A consensus-vuln in go-eth\nCVE-2021-22937 - Pulse ConnSecure RCE\nhttps://t.me/cybersecuritytechnologies/4044\nCVE-2021-34473 - Pre-auth Path Confusion\nhttps://www.zerodayinitiative.com/blog/2021/8/17/from-pwn2own-2021-a-new-attack-surface-on-microsoft-exchange-proxyshell\nCVE-2021-21225 - Vuln in V8's Array.prototype.concat\nhttps://t.me/cybersecuritytechnologies/4090\nCVE-2021-20090 - Path traversal in Buffalo routers\nhttps://t.me/cybersecuritytechnologies/3986\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-3711 - Vulns in OpenSSL\nhttps://nakedsecurity.sophos.com/2021/08/27/big-bad-decryption-bug-in-openssl-but-no-cause-for-alarm", "url": "https://t.me/CyberSecurityTechnologies/4203"}, {"timestamp": "2021-10-07T00:00:00Z", "date_only": false, "value": "2021-10-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-10-11T20:24:48Z", "date_only": false, "value": "2021-10-11T20:24:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/30354", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "d6ee3a33-8191-4ab0-be71-0608f02c991c", "content": "\u203c CVE-2021-20122 \u203c\n\nThe Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass authentication vulnerability like CVE-2021-20090 could leverage this issue to run commands or gain a shell as root on the target device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/30354"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-20090", "field": "timestamps.asserted_at", "uuid": "d980f377-d959-4814-8882-4b55359673d5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-20090", "field": "timestamps.asserted_at", "uuid": "c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-20090", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-20090", "record": "GSD-2021-20090", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-20090", "field": "evidence.0.details.added_date", "uuid": "c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-20090", "field": "evidence.0.details.date_added", "uuid": "d980f377-d959-4814-8882-4b55359673d5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-20090", "field": "timestamps.first_seen_at", "uuid": "d980f377-d959-4814-8882-4b55359673d5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-20090", "field": "timestamps.first_seen_at", "uuid": "c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-20090", "field": "status.status_updated_at", "uuid": "d980f377-d959-4814-8882-4b55359673d5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-20090", "field": "status.status_updated_at", "uuid": "c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-20090", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "7f0689d9-d714-4236-80bc-c2df487ee2f6"}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-20090", "field": "evidence.0.details.due_date", "uuid": "d980f377-d959-4814-8882-4b55359673d5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-17T00:00:00Z", "date_only": true, "value": "2021-11-17", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-20090", "record": "GSD-2021-20090", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "2c2d2991-a827-4169-ba1c-144c90df394a"}, {"timestamp": "2021-11-26T17:51:38Z", "date_only": false, "value": "2021-11-26T17:51:38.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l1-SBAej084DkAil_f6ffgsqHe8WdlZgx3qLo97HstzOK0YX", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "1eadc57a-af38-438a-81e1-67b9f33ad9a2"}, {"timestamp": "2022-04-27T00:00:00Z", "date_only": false, "value": "2022-04-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-05-24T17:49:10Z", "date_only": false, "value": "2022-05-24T17:49:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6466-44WR-C6VV", "record": "GHSA-6466-44WR-C6VV", "field": "published"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20090.yaml", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "4fc89811-afa8-49d9-a805-eeb6453f4a38", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20090.yaml"}, {"timestamp": "2023-10-18T00:00:00Z", "date_only": false, "value": "2023-10-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-10-18T01:15:00Z", "date_only": false, "value": "2023-10-18T01:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-20090", "record": "GSD-2021-20090", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-18T11:29:20.400Z", "date_only": false, "value": "2023-10-18T11:29:20.400Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / tenable", "record": "cve-2021-20090", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-13T01:23:12.563Z", "date_only": false, "value": "2023-12-13T01:23:12.563623Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-20090", "record": "GSD-2021-20090", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-30T08:23:49Z", "date_only": false, "value": "2023-12-30T08:23:49+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-20090", "field": "timestamps.asserted_at", "uuid": "562bb734-5954-41b9-8329-774a7745bade", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-30T08:23:49Z", "date_only": false, "value": "2023-12-30T08:23:49+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-20090", "field": "timestamps.first_seen_at", "uuid": "562bb734-5954-41b9-8329-774a7745bade", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-03T17:30:07.572Z", "date_only": false, "value": "2024-08-03T17:30:07.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-20090", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-30T00:00:00Z", "date_only": false, "value": "2024-08-30T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-20090", "field": "timestamps.last_seen_at", "uuid": "562bb734-5954-41b9-8329-774a7745bade", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-30T00:00:00Z", "date_only": true, "value": "2024-08-30", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-20090", "field": "evidence.0.details.observation_date", "uuid": "562bb734-5954-41b9-8329-774a7745bade", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-30T00:00:00Z", "date_only": false, "value": "2024-08-30T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-20090", "field": "status.status_updated_at", "uuid": "562bb734-5954-41b9-8329-774a7745bade", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-11-14T06:09:35Z", "date_only": false, "value": "2024-11-14T06:09:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e095ef94-467b-41a6-a282-7f86f3a8010c", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "ade2bac7-ba20-4e7f-bf24-15c777a413d7"}, {"timestamp": "2024-12-24T20:24:37.957Z", "date_only": false, "value": "2024-12-24T20:24:37.957498Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971126", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "47cd4af0-d357-4776-8bfc-8587b8e3e2da", "url": "https://feedsin.space/feed/CISAKevBot/items/2971126"}, {"timestamp": "2025-02-06T20:25:22.891Z", "date_only": false, "value": "2025-02-06T20:25:22.891349Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-20090", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-06T20:25:22.891Z", "date_only": false, "value": "2025-02-06T20:25:22.891349Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20090", "record": "FKIE_CVE-2021-20090", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:09:51Z", "date_only": false, "value": "2025-02-23T02:09:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "d12da6e2-7795-4705-86ed-c623228560a4"}, {"timestamp": "2025-10-21T23:25:47.628Z", "date_only": false, "value": "2025-10-21T23:25:47.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-20090", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:47.628Z", "date_only": false, "value": "2025-10-21T23:25:47.628Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-20090", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:07Z", "date_only": false, "value": "2025-10-22T00:32:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6466-44WR-C6VV", "record": "GHSA-6466-44WR-C6VV", "field": "modified"}, {"timestamp": "2025-11-03T18:59:30.060Z", "date_only": false, "value": "2025-11-03T18:59:30.060000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "sources_update_date.data.6.date"}, {"timestamp": "2025-11-18T13:25:51.510Z", "date_only": false, "value": "2025-11-18T13:25:51.510000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202104-0768", "record": "VAR-202104-0768", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:38.717Z", "date_only": false, "value": "2026-02-02T12:28:38.717271Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6daca379-ed96-45eb-bd27-d9969513d77e", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "1a7611c2-2bb1-40d7-af6f-b76ba8bf3cf0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6daca379-ed96-45eb-bd27-d9969513d77e"}, {"timestamp": "2026-02-02T12:28:38.717Z", "date_only": false, "value": "2026-02-02T12:28:38.717271Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6daca379-ed96-45eb-bd27-d9969513d77e", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "1a83d1fe-1f51-462c-b29d-4852e523f6d4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6daca379-ed96-45eb-bd27-d9969513d77e"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-20090", "field": "timestamps.recorded_at", "uuid": "d980f377-d959-4814-8882-4b55359673d5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T03:33:15.487Z", "date_only": false, "value": "2026-06-17T03:33:15.487", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20090", "record": "FKIE_CVE-2021-20090", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:56.862Z", "date_only": false, "value": "2026-06-19T12:47:56.862824Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c128a2d2-1ecf-4e17-9688-86c345f9d8af", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "7d68ff8c-4fdf-4cc7-b385-040316293c01", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c128a2d2-1ecf-4e17-9688-86c345f9d8af"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-20090", "field": "timestamps.recorded_at", "uuid": "c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:22.763Z", "date_only": false, "value": "2026-06-23T11:13:22.763879Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "e78ee0a8-10e1-4cb5-a217-7db5296378ca", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c680e9d9-e2c3-46b1-9698-4a42ac1d5f1b"}, {"timestamp": "2026-06-23T14:04:46.639Z", "date_only": false, "value": "2026-06-23T14:04:46.639403Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/32568c32-6a47-4805-9e62-30fbe4f33268", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "549e22d9-e295-4dc8-b098-93c61e4100e6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/32568c32-6a47-4805-9e62-30fbe4f33268"}, {"timestamp": "2026-06-30T10:22:04.920Z", "date_only": false, "value": "2026-06-30T10:22:04.920319Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1467eb86-65ae-4e39-8add-2bbaf7c3b0c8", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "a9a4cdbb-86a8-4649-99d3-0d7dd680e0ee", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1467eb86-65ae-4e39-8add-2bbaf7c3b0c8"}, {"timestamp": "2026-07-01T07:17:55.423Z", "date_only": false, "value": "2026-07-01T07:17:55.423716Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/562bb734-5954-41b9-8329-774a7745bade", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "5166c586-0c0b-445d-87ff-7d45a9570a10", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/562bb734-5954-41b9-8329-774a7745bade"}, {"timestamp": "2026-07-01T12:47:07Z", "date_only": false, "value": "2026-07-01T12:47:07+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-20090", "field": "timestamps.recorded_at", "uuid": "562bb734-5954-41b9-8329-774a7745bade", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-29T12:03:13.126Z", "date_only": false, "value": "2026-07-29T12:03:13.126608Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/906", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "401e67e5-9893-4838-810c-6b132830cb34", "url": "https://t.me/cisoclub/906"}, {"timestamp": "2026-07-30T00:02:59.714Z", "date_only": false, "value": "2026-07-30T00:02:59.714909Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/906", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "4c36d3ed-c06f-4c2e-ba76-38174f17a755", "url": "https://t.me/cisoclub/906"}, {"timestamp": "2026-08-03T22:00:05.154Z", "date_only": false, "value": "2026-08-03T22:00:05.154497Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/906", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "1fb24b6b-f627-404d-a1ee-dad5dfbdbc59", "url": "https://t.me/cisoclub/906"}, {"timestamp": "2026-08-04T00:00:11.541Z", "date_only": false, "value": "2026-08-04T00:00:11.541441Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/906", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "199cefd5-f275-45d3-928e-df05bf1f6f73", "url": "https://t.me/cisoclub/906"}, {"timestamp": "2026-09-01T17:00:41.647Z", "date_only": false, "value": "2026-09-01T17:00:41.647184Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4242", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "8684a3e8-f02f-419c-b9e0-0e37f427dd10", "url": "https://t.me/cissp/4242"}, {"timestamp": "2026-09-01T17:00:43.224Z", "date_only": false, "value": "2026-09-01T17:00:43.224273Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3982", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "fb8e6d39-0196-4fd5-9fdb-76e381541aa5", "url": "https://t.me/cissp/3982"}, {"timestamp": "2026-09-01T17:00:44.032Z", "date_only": false, "value": "2026-09-01T17:00:44.032246Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/3967", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "53dee3fa-cc4c-419e-b8b6-e91bd748f382", "url": "https://t.me/cissp/3967"}, {"timestamp": "2026-09-01T20:02:29.533Z", "date_only": false, "value": "2026-09-01T20:02:29.533223Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/19651", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "b7c6dee1-9ca6-41cc-a98b-ce6a261c29ba", "url": "https://t.me/hacking_Attack/19651"}, {"timestamp": "2026-09-01T20:02:29.662Z", "date_only": false, "value": "2026-09-01T20:02:29.662039Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/19650", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "3489ebb4-9220-435b-9666-b204336fd8b6", "url": "https://t.me/hacking_Attack/19650"}, {"timestamp": "2026-09-01T20:02:30.187Z", "date_only": false, "value": "2026-09-01T20:02:30.187908Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/18858", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "2a8fb303-e7cf-4374-b12f-a4582b61146c", "url": "https://t.me/hacking_Attack/18858"}, {"timestamp": "2026-09-01T20:02:30.227Z", "date_only": false, "value": "2026-09-01T20:02:30.227301Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/18860", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "46653d85-d089-4208-b03c-ecabfada4823", "url": "https://t.me/hacking_Attack/18860"}, {"timestamp": "2026-09-07T21:00:05.706Z", "date_only": false, "value": "2026-09-07T21:00:05.706456Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/19650", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "4a725688-efcb-43e3-b827-0ed4685757aa", "url": "https://t.me/hacking_Attack/19650"}, {"timestamp": "2026-09-07T22:00:07.062Z", "date_only": false, "value": "2026-09-07T22:00:07.062652Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/18860", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "bca9870f-67fe-4064-92b1-b278ebe851c7", "url": "https://t.me/hacking_Attack/18860"}, {"timestamp": "2026-09-07T22:00:07.112Z", "date_only": false, "value": "2026-09-07T22:00:07.112580Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/18858", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "dc45e157-6b88-41fc-8af2-8f36f29c4194", "url": "https://t.me/hacking_Attack/18858"}, {"timestamp": "2026-09-10T23:00:04.815Z", "date_only": false, "value": "2026-09-10T23:00:04.815318Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3967", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "1043e154-252f-4dff-8ab1-573bdb82df53", "url": "https://t.me/cissp/3967"}, {"timestamp": "2026-09-10T23:00:05.029Z", "date_only": false, "value": "2026-09-10T23:00:05.029372Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/3982", "record": "CVE-2021-20090", "field": "creation_timestamp", "uuid": "7c3b30c4-4bf6-4d38-a0c0-6421334164f4", "url": "https://t.me/cissp/3982"}]}