{"metadata": {"vulnerability": "cve-2025-34058", "count": 28, "kinds": {"milestone": 4, "sighting": 5, "kev": 6, "other": 13}}, "data": [{"timestamp": "2021-03-05T00:00:00Z", "date_only": false, "value": "2021-03-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-1808", "record": "VAR-202103-1808", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-03-25T00:00:00Z", "date_only": false, "value": "2021-03-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-1808", "record": "VAR-202103-1808", "field": "sources_release_date.data.0.date"}, {"timestamp": "2025-04-15T19:15:22.549Z", "date_only": false, "value": "2025-04-15T19:15:22.549Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-34058", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-01T14:48:40.033Z", "date_only": false, "value": "2025-07-01T14:48:40.033Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-34058", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-07-01T15:08:02Z", "date_only": false, "value": "2025-07-01T15:08:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20048", "record": "CVE-2025-34058", "field": "creation_timestamp", "uuid": "770c832a-bb2c-4727-98c5-90a83457bd1e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-34058\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php endpoint via directory traversal in the fileName parameter. This exploit chain can enable unauthorized access to sensitive system files.\n\ud83d\udccf Published: 2025-07-01T14:48:40.033Z\n\ud83d\udccf Modified: 2025-07-01T14:48:40.033Z\n\ud83d\udd17 References:\n1. https://www.cnvd.org.cn/flaw/show/CNVD-2021-14544\n2. https://blog.csdn.net/qq_40684306/article/details/115278837\n3. https://www.hikvision.com/en/support/cybersecurity/security-advisory/\n4. https://vulncheck.com/advisories/hikvision-streaming-server-default-creds-file-read", "url": "https://t.me/DarkWebInformer_CVEAlerts/20048"}, {"timestamp": "2025-07-01T15:15:24Z", "date_only": false, "value": "2025-07-01T15:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FXXF-77P3-7RR7", "record": "GHSA-FXXF-77P3-7RR7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-07-01T15:15:24.340Z", "date_only": false, "value": "2025-07-01T15:15:24.340000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-1808", "record": "VAR-202103-1808", "field": "sources_release_date.data.1.date"}, {"timestamp": "2025-07-01T15:15:24.340Z", "date_only": false, "value": "2025-07-01T15:15:24.340", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34058", "record": "FKIE_CVE-2025-34058", "field": "published"}, {"timestamp": "2025-07-01T15:31:09Z", "date_only": false, "value": "2025-07-01T15:31:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FXXF-77P3-7RR7", "record": "GHSA-FXXF-77P3-7RR7", "field": "published"}, {"timestamp": "2025-07-01T15:31:10Z", "date_only": false, "value": "2025-07-01T15:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FXXF-77P3-7RR7", "record": "GHSA-FXXF-77P3-7RR7", "field": "modified"}, {"timestamp": "2025-07-01T18:38:34.613Z", "date_only": false, "value": "2025-07-01T18:38:34.613255Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-34058", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-07-01T18:38:34.613Z", "date_only": false, "value": "2025-07-01T18:38:34.613255Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34058", "record": "FKIE_CVE-2025-34058", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-07-01T18:38:53.665Z", "date_only": false, "value": "2025-07-01T18:38:53.665Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-34058", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-02T21:02:17.020Z", "date_only": false, "value": "2025-07-02T21:02:17.020528Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dpoedk2j", "record": "CVE-2025-34058", "field": "creation_timestamp", "uuid": "4e67cea6-f8a8-4791-be1b-f7d5f24e28bb", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsz4dpoedk2j"}, {"timestamp": "2025-07-03T15:14:12.767Z", "date_only": false, "value": "2025-07-03T15:14:12.767000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202103-1808", "record": "VAR-202103-1808", "field": "sources_update_date.data.1.date"}, {"timestamp": "2025-07-04T23:47:53.171Z", "date_only": false, "value": "2025-07-04T23:47:53.171000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202103-1808", "record": "VAR-202103-1808", "field": "last_update_date"}, {"timestamp": "2026-05-03T00:00:00Z", "date_only": true, "value": "2026-05-03", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-34058", "field": "evidence.0.details.observation_date", "uuid": "4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-03T16:22:57Z", "date_only": false, "value": "2026-05-03T16:22:57+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-34058", "field": "timestamps.asserted_at", "uuid": "4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-03T16:22:57Z", "date_only": false, "value": "2026-05-03T16:22:57+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-34058", "field": "timestamps.first_seen_at", "uuid": "4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-03T16:22:57Z", "date_only": false, "value": "2026-05-03T16:22:57+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-34058", "field": "timestamps.last_seen_at", "uuid": "4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-03T16:22:57Z", "date_only": false, "value": "2026-05-03T16:22:57+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-34058", "field": "status.status_updated_at", "uuid": "4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T09:13:23.850Z", "date_only": false, "value": "2026-06-17T09:13:23.850", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-34058", "record": "FKIE_CVE-2025-34058", "field": "lastModified"}, {"timestamp": "2026-06-23T14:03:58.741Z", "date_only": false, "value": "2026-06-23T14:03:58.741941Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4257908b-f6e9-4f34-ad5d-bda17c70852e", "record": "CVE-2025-34058", "field": "creation_timestamp", "uuid": "7425c549-822c-4535-b88e-b9605acc85ee", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4257908b-f6e9-4f34-ad5d-bda17c70852e"}, {"timestamp": "2026-06-30T09:42:39.906Z", "date_only": false, "value": "2026-06-30T09:42:39.906606Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81cf0ee7-9392-44fe-a343-c3d5f88cfead", "record": "CVE-2025-34058", "field": "creation_timestamp", "uuid": "a023fe4b-ebbe-4dd7-84ee-08d938ca457c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/81cf0ee7-9392-44fe-a343-c3d5f88cfead"}, {"timestamp": "2026-07-01T07:18:43.283Z", "date_only": false, "value": "2026-07-01T07:18:43.283640Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "record": "CVE-2025-34058", "field": "creation_timestamp", "uuid": "20f53844-b00e-479f-bcd4-31b8c5dec0f9", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4b86132c-02fd-4a2f-8f7f-a02b59b5f821"}, {"timestamp": "2026-07-01T11:42:35Z", "date_only": false, "value": "2026-07-01T11:42:35+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-34058", "field": "timestamps.recorded_at", "uuid": "4b86132c-02fd-4a2f-8f7f-a02b59b5f821", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-14T22:25:42.020Z", "date_only": false, "value": "2026-07-14T22:25:42.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-34058", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-14T22:25:42.020Z", "date_only": false, "value": "2026-07-14T22:25:42.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2025-34058", "field": "containers.cna.providerMetadata.dateUpdated"}]}