{"metadata": {"vulnerability": "cve-2021-38406", "count": 65, "kinds": {"milestone": 5, "sighting": 14, "kev": 11, "other": 35}}, "data": [{"timestamp": "2021-04-13T00:00:00Z", "date_only": false, "value": "2021-04-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_release_date.data.3.date", "linked_record": true}, {"timestamp": "2021-04-14T00:00:00Z", "date_only": false, "value": "2021-04-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2021-08-09T00:00:00Z", "date_only": false, "value": "2021-08-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2021-08-10T00:00:00Z", "date_only": false, "value": "2021-08-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-38406", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_release_date.data.4.date", "linked_record": true}, {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / icscert", "record": "cve-2021-38406", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2021-09-09T14:34:00Z", "date_only": false, "value": "2021-09-09T14:34:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / icscert", "record": "cve-2021-38406", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-09-09T14:34:00Z", "date_only": false, "value": "2021-09-09T14:34:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2021-38406", "record": "GSD-2021-38406", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2021-09-11T00:00:00Z", "date_only": true, "value": "2021-09-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-70155", "record": "CNVD-2021-70155", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-09-12T00:00:00Z", "date_only": false, "value": "2021-09-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2021-09-12T00:00:00Z", "date_only": true, "value": "2021-09-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-70155", "record": "CNVD-2021-70155", "field": "openTime", "linked_record": true}, {"timestamp": "2021-09-13T00:00:00Z", "date_only": false, "value": "2021-09-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_release_date.data.5.date", "linked_record": true}, {"timestamp": "2021-09-13T06:46:00Z", "date_only": false, "value": "2021-09-13T06:46:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.5.date", "linked_record": true}, {"timestamp": "2021-09-17T00:00:00Z", "date_only": false, "value": "2021-09-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_release_date.data.2.date", "linked_record": true}, {"timestamp": "2021-09-17T18:54:29Z", "date_only": false, "value": "2021-09-17T18:54:29.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / icscert", "record": "cve-2021-38406", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-17T18:54:29.386Z", "date_only": false, "value": "2021-09-17T18:54:29.386Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-38406", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-17T19:15:00Z", "date_only": false, "value": "2021-09-17T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J3XH-C39X-QGHW", "record": "GHSA-J3XH-C39X-QGHW", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-09-17T19:15:00Z", "date_only": false, "value": "2021-09-17T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-38406", "record": "GSD-2021-38406", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-09-17T19:15:08.710Z", "date_only": false, "value": "2021-09-17T19:15:08.710000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_release_date.data.6.date", "linked_record": true}, {"timestamp": "2021-09-17T19:15:08.710Z", "date_only": false, "value": "2021-09-17T19:15:08.710", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38406", "record": "FKIE_CVE-2021-38406", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-17T22:24:09Z", "date_only": false, "value": "2021-09-17T22:24:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/29062", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "e1e20786-cfce-4d50-874e-13c0bd5fe86c", "content": "\u203c CVE-2021-38406 \u203c\n\nDelta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/29062"}, {"timestamp": "2021-10-04T00:00:00Z", "date_only": false, "value": "2021-10-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2021-10-04T18:13:00Z", "date_only": false, "value": "2021-10-04T18:13Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-38406", "record": "GSD-2021-38406", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2021-10-08T00:00:00Z", "date_only": false, "value": "2021-10-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.4.date", "linked_record": true}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2022-05-24T19:14:55Z", "date_only": false, "value": "2022-05-24T19:14:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J3XH-C39X-QGHW", "record": "GHSA-J3XH-C39X-QGHW", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-38406", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8a199667-d424-4478-ae52-b9201113168c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-38406", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-38406", "field": "evidence.0.details.added_date", "uuid": "8a199667-d424-4478-ae52-b9201113168c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "evidence.0.details.date_added", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-38406", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8a199667-d424-4478-ae52-b9201113168c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "status.status_updated_at", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-38406", "field": "status.status_updated_at", "uuid": "8a199667-d424-4478-ae52-b9201113168c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-38406", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2021-38406 added to CISA KEV"}, {"timestamp": "2022-09-15T00:00:00Z", "date_only": true, "value": "2022-09-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "evidence.0.details.due_date", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "e98b1592-4aff-4b2d-a0ab-99eff8e8d11c"}, {"timestamp": "2023-12-03T23:57:55Z", "date_only": false, "value": "2023-12-03T23:57:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1063", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "3bd7797a-e1b1-44c3-82fb-ce1da6e80419", "content": "#ExploitObserverAlert\n\nCVE-2021-38406\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2021-38406. Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.\n\nFIRST-EPSS: 0.929090000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1063"}, {"timestamp": "2023-12-13T01:23:17.639Z", "date_only": false, "value": "2023-12-13T01:23:17.639308Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-38406", "record": "GSD-2021-38406", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T01:37:16.611Z", "date_only": false, "value": "2024-08-04T01:37:16.611Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-38406", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:32:51.832Z", "date_only": false, "value": "2024-12-24T20:32:51.832906Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971691", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "e08aff90-b399-48e8-91b3-921822173b7e", "url": "https://feedsin.space/feed/CISAKevBot/items/2971691"}, {"timestamp": "2025-02-04T14:44:03.809Z", "date_only": false, "value": "2025-02-04T14:44:03.809123Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-38406", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-04T14:44:03.809Z", "date_only": false, "value": "2025-02-04T14:44:03.809123Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38406", "record": "FKIE_CVE-2021-38406", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-23T02:10:31Z", "date_only": false, "value": "2025-02-23T02:10:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "fd55eef2-a737-4a06-b445-9bfebef93b52"}, {"timestamp": "2025-10-21T23:25:32.113Z", "date_only": false, "value": "2025-10-21T23:25:32.113Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-38406", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:32.113Z", "date_only": false, "value": "2025-10-21T23:25:32.113Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-38406", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:21Z", "date_only": false, "value": "2025-10-22T00:32:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J3XH-C39X-QGHW", "record": "GHSA-J3XH-C39X-QGHW", "field": "modified", "linked_record": true}, {"timestamp": "2025-10-30T15:54:29.457Z", "date_only": false, "value": "2025-10-30T15:54:29.457000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "sources_update_date.data.6.date", "linked_record": true}, {"timestamp": "2025-11-18T15:00:34.131Z", "date_only": false, "value": "2025-11-18T15:00:34.131000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202109-1255", "record": "VAR-202109-1255", "field": "last_update_date", "linked_record": true}, {"timestamp": "2026-02-02T12:27:15.475Z", "date_only": false, "value": "2026-02-02T12:27:15.475187Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/71c7d200-7205-45f7-9b14-8e6388d9ac28", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "884f1159-ec54-4124-9f61-72766a77ad9f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/71c7d200-7205-45f7-9b14-8e6388d9ac28", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:27:15.475Z", "date_only": false, "value": "2026-02-02T12:27:15.475187Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/71c7d200-7205-45f7-9b14-8e6388d9ac28", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "0bdedd64-4b33-4ff7-987d-f01af67903df", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/71c7d200-7205-45f7-9b14-8e6388d9ac28", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T04:02:02.373Z", "date_only": false, "value": "2026-06-17T04:02:02.373", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-38406", "record": "FKIE_CVE-2021-38406", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:47:05.507Z", "date_only": false, "value": "2026-06-19T12:47:05.507901Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8d2bb4f3-50fe-4347-bfd8-7b1132911b25", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "ec33244e-9c2c-4b4b-92cf-45cf95bea1c2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8d2bb4f3-50fe-4347-bfd8-7b1132911b25", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-38406", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "8a199667-d424-4478-ae52-b9201113168c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:59.604Z", "date_only": false, "value": "2026-06-23T11:13:59.604170Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8a199667-d424-4478-ae52-b9201113168c", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "4eff6655-a9f6-4838-8885-6673756d4d15", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8a199667-d424-4478-ae52-b9201113168c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:05:31.738Z", "date_only": false, "value": "2026-06-23T14:05:31.738746Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c88e3e7c-add7-4fef-b38f-bf325a2f68c5", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "85ef4c20-751b-4392-b3c1-0052680389d8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c88e3e7c-add7-4fef-b38f-bf325a2f68c5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:41.902Z", "date_only": false, "value": "2026-07-26T02:02:41.902860Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "0b331edc-77b2-4f33-99e6-d338fc8a2f0d", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-27T00:01:17.592Z", "date_only": false, "value": "2026-07-27T00:01:17.592460Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "423d1ba2-786f-49dc-ab11-e9afc93e2e23", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-28T09:00:07.296Z", "date_only": false, "value": "2026-07-28T09:00:07.296869Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "ba1a2124-4c17-46e9-936a-ed52eb044dbb", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-29T00:00:41.449Z", "date_only": false, "value": "2026-07-29T00:00:41.449351Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2021-38406", "field": "creation_timestamp", "uuid": "1c22ef20-f754-4b99-943d-cd64ebabf0a2", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-14T08:04:26.901Z", "anchors": {"origin": {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 30240000.0, "hours": 8400.0, "days": 350.0, "min_seconds": 30153600.0, "max_seconds": 30326400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 30240000.0, "hours": 8400.0, "days": 350.0, "min_seconds": 30153600.0, "max_seconds": 30326400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 163497866.901802, "hours": 45416.07413938944, "days": 1892.3364224745603, "min_seconds": 163411466.901802, "max_seconds": 163497866.901802, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-09T00:00:00Z", "date_only": false, "value": "2021-09-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-21-252-02", "record": "ICSA-21-252-02", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-14T08:04:26.901Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 133257866.901802, "hours": 37016.07413938944, "days": 1542.3364224745603, "min_seconds": 133171466.901802, "max_seconds": 133257866.901802, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-38406", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "20748ff6-861c-4248-ad49-7e5f58843342", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-14T08:04:26.901Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}