{"metadata": {"vulnerability": "cve-2022-43571", "count": 32, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 22}}, "data": [{"timestamp": "2022-10-20T18:37:09.183Z", "date_only": false, "value": "2022-10-20T18:37:09.183Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-43571", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-02T23:00:00Z", "date_only": false, "value": "2022-11-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-02T23:00:00Z", "date_only": false, "value": "2022-11-02T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-02T23:00:00Z", "date_only": false, "value": "2022-11-02T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-986", "record": "CERTFR-2022-AVI-986", "field": "initial_release_date"}, {"timestamp": "2022-11-03T00:00:00Z", "date_only": false, "value": "2022-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-986", "record": "CERTFR-2022-AVI-986", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-03T16:00:00Z", "date_only": false, "value": "2022-11-03T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Splunk", "record": "cve-2022-43571", "field": "containers.cna.datePublic"}, {"timestamp": "2022-11-03T22:56:44.862Z", "date_only": false, "value": "2022-11-03T22:56:44.862Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-43571", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-03T22:56:44.862Z", "date_only": false, "value": "2022-11-03T22:56:44.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Splunk", "record": "cve-2022-43571", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-03T23:00:00Z", "date_only": false, "value": "2022-11-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-11-03T23:15:00Z", "date_only": false, "value": "2022-11-03T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FW8H-QC74-R2C2", "record": "GHSA-FW8H-QC74-R2C2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-03T23:15:00Z", "date_only": false, "value": "2022-11-03T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-43571", "record": "GSD-2022-43571", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-03T23:15:21.987Z", "date_only": false, "value": "2022-11-03T23:15:21.987", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-43571", "record": "FKIE_CVE-2022-43571", "field": "published"}, {"timestamp": "2022-11-04T00:00:00Z", "date_only": false, "value": "2022-11-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-986", "record": "CERTFR-2022-AVI-986", "field": "last_revision_date"}, {"timestamp": "2022-11-04T00:00:00Z", "date_only": false, "value": "2022-11-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-986", "record": "CERTFR-2022-AVI-986", "field": "revisions.1.revision_date"}, {"timestamp": "2022-11-04T12:00:22Z", "date_only": false, "value": "2022-11-04T12:00:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FW8H-QC74-R2C2", "record": "GHSA-FW8H-QC74-R2C2", "field": "published"}, {"timestamp": "2022-11-07T17:02:00Z", "date_only": false, "value": "2022-11-07T17:02Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-43571", "record": "GSD-2022-43571", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-07T19:00:18Z", "date_only": false, "value": "2022-11-07T19:00:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FW8H-QC74-R2C2", "record": "GHSA-FW8H-QC74-R2C2", "field": "modified"}, {"timestamp": "2022-12-27T23:00:00Z", "date_only": false, "value": "2022-12-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-12-27T23:00:00Z", "date_only": false, "value": "2022-12-27T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-03T20:18:12Z", "date_only": false, "value": "2023-01-03T20:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2222", "record": "CVE-2022-43571", "field": "creation_timestamp", "uuid": "36c3b96a-e148-4268-89b3-466cb84baf98", "content": "Cyber Security News - \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\nMeddler-in-the-Middle Phishing Attacks Explained\n\nhttps://unit42.paloaltonetworks.com/meddler-phishing-attacks\n\n\u200aOWASSRF \u2013 New Exploit Let Attacker Execute Remote Code on Microsoft Exchange Server\n\nhttps://gbhackers.com/owassrf/\n\n\u200b\u200bWindows Drivers Reverse Engineering Methodology\n\nThis blog post details a methodology for reverse engineering and finding vulnerable code paths in Windows drivers.\nIncluding a guide for setting up a lab for (the pesky) kernel debugging.\n\nhttps://voidsec.com/windows-drivers-reverse-engineering-methodology/\n\n\u200aGuide: Reporting Telnyx LLC spam\n\nhttps://latesthackingnews.com/2022/12/22/guide-reporting-telnyx-llc-spam/\n\n\u200aNetLlix - A Project Created With An Aim To Emulate And Test Exfiltration Of Data Over Different Network Protocols\n\nhttp://www.kitploit.com/2022/12/netllix-project-created-with-aim-to.html\n\n\u200aZoom Whiteboard patches XSS bug\n\nhttps://portswigger.net/daily-swig/zoom-whiteboard-patches-xss-bug\n\n\u200aBug bounty and AI: How machine learning is changing the game for cybersecurity\n\nhttps://blog.intigriti.com/2022/12/22/bug-bounty-and-ai-how-machine-learning-is-changing-the-game-for-cybersecurity/\n\n\u200aBlack Hat Europe 2022 NOC: The SOC Inside the NOC\n\nhttps://blogs.cisco.com/security/black-hat-europe-2022-noc-the-soc-inside-the-noc\n\nCVE-2020-9854: \"Unauthd\" - three logic bugs ftw\n\nhttps://objective-see.org/blog/blog_0x4D.html\n\nCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aLean, green coding machine: How sustainable computing drive can reduce attack surfaces\n\nhttps://portswigger.net/daily-swig/lean-green-coding-machine-how-sustainable-computing-drive-can-reduce-attack-surfaces\n\n\u200aBrave launches FrodoPIR, a privacy-focused database query system\n\nhttps://www.bleepingcomputer.com/news/security/brave-launches-frodopir-a-privacy-focused-database-query-system/\n\n\u200aHTTP Header Injection\n\nhttps://infosecwriteups.com/http-header-injection-4ba857fb9a16?source=rss----7b722bfd1b8d---4\n\n\u200aVice Society ransomware gang switches to new custom encryptor\n\nhttps://www.bleepingcomputer.com/news/security/vice-society-ransomware-gang-switches-to-new-custom-encryptor/\n\n\u200aComcast Xfinity accounts hacked in widespread 2FA bypass attacks\n\nhttps://www.bleepingcomputer.com/news/security/comcast-xfinity-accounts-hacked-in-widespread-2fa-bypass-attacks/\n\n\u200aInsiders worry CISA is too distracted from critical cyber mission\n\nhttps://www.cyberscoop.com/cisa-dhs-easterly-cyber-mission/\n\n\u200aDuckDuckGo now blocks Google sign-in pop-ups on all sites\n\nhttps://www.bleepingcomputer.com/news/security/duckduckgo-now-blocks-google-sign-in-pop-ups-on-all-sites/\n\n\u200aSoftware bills of material face long road to adoption\n\nhttps://www.cyberscoop.com/dhs-sbom-adoption/\n\n\u200aLastpass: Hackers stole customer vault data in cloud storage breach\n\nhttps://www.bleepingcomputer.com/news/security/lastpass-hackers-stole-customer-vault-data-in-cloud-storage-breach/\n\n\u200aLeading sports betting firm BetMGM discloses data breach\n\nhttps://www.bleepingcomputer.com/news/security/leading-sports-betting-firm-betmgm-discloses-data-breach/\n\n\u200aCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aPoC Code Published for Triggering RCE (CVE-2022-43571) in Splunk Enterprise\n\nhttps://securityonline.info/poc-code-published-for-triggering-rce-cve-2022-43571-in-splunk-enterprise/\n\n\u200aRaspberry Robin Malware Attacks Against Telecom and Government Sectors\n\nhttps://cybersecuritynews.com/raspberry-robin-malware/\n\n\u200aNew Zerobot Malware Exploiting Apache Vulnerabilities to Launch DDoS Attack\n\nhttps://cybersecuritynews.com/zerobot-malware/\n\n\u200aKmsdBot Botnet Leverages SSH to Compromise Systems and to Launch DDoS Attacks\n\nhttps://gbhackers.com/kmsdbot-ddos-botnet/\n\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/2222"}, {"timestamp": "2023-01-03T20:18:12Z", "date_only": false, "value": "2023-01-03T20:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/339", "record": "CVE-2022-43571", "field": "creation_timestamp", "uuid": "3c7a0869-f776-4e3e-b03a-a34388837512", "content": "Cyber Security News - \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\nMeddler-in-the-Middle Phishing Attacks Explained\n\nhttps://unit42.paloaltonetworks.com/meddler-phishing-attacks\n\n\u200aOWASSRF \u2013 New Exploit Let Attacker Execute Remote Code on Microsoft Exchange Server\n\nhttps://gbhackers.com/owassrf/\n\n\u200b\u200bWindows Drivers Reverse Engineering Methodology\n\nThis blog post details a methodology for reverse engineering and finding vulnerable code paths in Windows drivers.\nIncluding a guide for setting up a lab for (the pesky) kernel debugging.\n\nhttps://voidsec.com/windows-drivers-reverse-engineering-methodology/\n\n\u200aGuide: Reporting Telnyx LLC spam\n\nhttps://latesthackingnews.com/2022/12/22/guide-reporting-telnyx-llc-spam/\n\n\u200aNetLlix - A Project Created With An Aim To Emulate And Test Exfiltration Of Data Over Different Network Protocols\n\nhttp://www.kitploit.com/2022/12/netllix-project-created-with-aim-to.html\n\n\u200aZoom Whiteboard patches XSS bug\n\nhttps://portswigger.net/daily-swig/zoom-whiteboard-patches-xss-bug\n\n\u200aBug bounty and AI: How machine learning is changing the game for cybersecurity\n\nhttps://blog.intigriti.com/2022/12/22/bug-bounty-and-ai-how-machine-learning-is-changing-the-game-for-cybersecurity/\n\n\u200aBlack Hat Europe 2022 NOC: The SOC Inside the NOC\n\nhttps://blogs.cisco.com/security/black-hat-europe-2022-noc-the-soc-inside-the-noc\n\nCVE-2020-9854: \"Unauthd\" - three logic bugs ftw\n\nhttps://objective-see.org/blog/blog_0x4D.html\n\nCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aLean, green coding machine: How sustainable computing drive can reduce attack surfaces\n\nhttps://portswigger.net/daily-swig/lean-green-coding-machine-how-sustainable-computing-drive-can-reduce-attack-surfaces\n\n\u200aBrave launches FrodoPIR, a privacy-focused database query system\n\nhttps://www.bleepingcomputer.com/news/security/brave-launches-frodopir-a-privacy-focused-database-query-system/\n\n\u200aHTTP Header Injection\n\nhttps://infosecwriteups.com/http-header-injection-4ba857fb9a16?source=rss----7b722bfd1b8d---4\n\n\u200aVice Society ransomware gang switches to new custom encryptor\n\nhttps://www.bleepingcomputer.com/news/security/vice-society-ransomware-gang-switches-to-new-custom-encryptor/\n\n\u200aComcast Xfinity accounts hacked in widespread 2FA bypass attacks\n\nhttps://www.bleepingcomputer.com/news/security/comcast-xfinity-accounts-hacked-in-widespread-2fa-bypass-attacks/\n\n\u200aInsiders worry CISA is too distracted from critical cyber mission\n\nhttps://www.cyberscoop.com/cisa-dhs-easterly-cyber-mission/\n\n\u200aDuckDuckGo now blocks Google sign-in pop-ups on all sites\n\nhttps://www.bleepingcomputer.com/news/security/duckduckgo-now-blocks-google-sign-in-pop-ups-on-all-sites/\n\n\u200aSoftware bills of material face long road to adoption\n\nhttps://www.cyberscoop.com/dhs-sbom-adoption/\n\n\u200aLastpass: Hackers stole customer vault data in cloud storage breach\n\nhttps://www.bleepingcomputer.com/news/security/lastpass-hackers-stole-customer-vault-data-in-cloud-storage-breach/\n\n\u200aLeading sports betting firm BetMGM discloses data breach\n\nhttps://www.bleepingcomputer.com/news/security/leading-sports-betting-firm-betmgm-discloses-data-breach/\n\n\u200aCritical Remote Code Execution Vulnerability in Linux Kernel\n\nhttps://securityonline.info/critical-remote-code-execution-vulnerability-in-linux-kernel/\n\n\u200aPoC Code Published for Triggering RCE (CVE-2022-43571) in Splunk Enterprise\n\nhttps://securityonline.info/poc-code-published-for-triggering-rce-cve-2022-43571-in-splunk-enterprise/\n\n\u200aRaspberry Robin Malware Attacks Against Telecom and Government Sectors\n\nhttps://cybersecuritynews.com/raspberry-robin-malware/\n\n\u200aNew Zerobot Malware Exploiting Apache Vulnerabilities to Launch DDoS Attack\n\nhttps://cybersecuritynews.com/zerobot-malware/\n\n\u200aKmsdBot Botnet Leverages SSH to Compromise Systems and to Launch DDoS Attacks\n\nhttps://gbhackers.com/kmsdbot-ddos-botnet/\n\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/339"}, {"timestamp": "2023-12-13T01:19:31.614Z", "date_only": false, "value": "2023-12-13T01:19:31.614311Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-43571", "record": "GSD-2022-43571", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T13:32:59.741Z", "date_only": false, "value": "2024-08-03T13:32:59.741Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-43571", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:37:30.387Z", "date_only": false, "value": "2024-08-15T17:37:30.387+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1950", "record": "WID-SEC-W-2022-1950", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-02T18:24:19.490Z", "date_only": false, "value": "2025-05-02T18:24:19.490886Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-43571", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-02T18:24:19.490Z", "date_only": false, "value": "2025-05-02T18:24:19.490886Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-43571", "record": "FKIE_CVE-2022-43571", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-02T18:24:40.047Z", "date_only": false, "value": "2025-05-02T18:24:40.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-43571", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-02T18:24:40.047Z", "date_only": false, "value": "2025-05-02T18:24:40.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-43571", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-20T20:45:59Z", "date_only": false, "value": "2026-01-20T20:45:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/splunk_auth_rce_cve_2022_43571.rb", "record": "CVE-2022-43571", "field": "creation_timestamp", "uuid": "cab0b652-f034-4620-86e9-b9f5d3d14d3d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/splunk_auth_rce_cve_2022_43571.rb"}, {"timestamp": "2026-01-21T21:03:01.392Z", "date_only": false, "value": "2026-01-21T21:03:01.392201Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcxkzuoni62j", "record": "CVE-2022-43571", "field": "creation_timestamp", "uuid": "8d926821-9319-4dd2-a8c1-4d27e0ce0245", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcxkzuoni62j"}, {"timestamp": "2026-06-17T05:06:52.013Z", "date_only": false, "value": "2026-06-17T05:06:52.013", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-43571", "record": "FKIE_CVE-2022-43571", "field": "lastModified"}]}