{"metadata": {"vulnerability": "CVE-2021-20170", "count": 25, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 19}}, "data": [{"timestamp": "2020-12-17T00:00:00Z", "date_only": false, "value": "2020-12-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-20170", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-12-30T00:00:00Z", "date_only": false, "value": "2021-12-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_release_date.data.1.date"}, {"timestamp": "2021-12-30T21:31:15Z", "date_only": false, "value": "2021-12-30T21:31:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-20170", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-30T21:31:15Z", "date_only": false, "value": "2021-12-30T21:31:15.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / tenable", "record": "CVE-2021-20170", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-12-30T22:15:00Z", "date_only": false, "value": "2021-12-30T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V2PC-MRC3-9JC5", "record": "GHSA-V2PC-MRC3-9JC5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-12-30T22:15:00Z", "date_only": false, "value": "2021-12-30T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-20170", "record": "GSD-2021-20170", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-12-30T22:15:09.607Z", "date_only": false, "value": "2021-12-30T22:15:09.607000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_release_date.data.3.date"}, {"timestamp": "2021-12-30T22:15:09.607Z", "date_only": false, "value": "2021-12-30T22:15:09.607", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20170", "record": "FKIE_CVE-2021-20170", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-31T00:00:00Z", "date_only": false, "value": "2021-12-31T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_update_date.data.1.date"}, {"timestamp": "2021-12-31T00:00:21Z", "date_only": false, "value": "2021-12-31T00:00:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V2PC-MRC3-9JC5", "record": "GHSA-V2PC-MRC3-9JC5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-12-31T00:34:40Z", "date_only": false, "value": "2021-12-31T00:34:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/34781", "record": "CVE-2021-20170", "field": "creation_timestamp", "uuid": "dc75047a-c2e5-4a68-8500-e3cb8e279a96", "content": "\u203c CVE-2021-20170 \u203c\n\nNetgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password (RAX50w!a4udk). By unzipping the configuration using this password, a user can reconfigure settings not intended to be manipulated, re-zip the configuration, and restore a backup causing these settings to be changed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/34781"}, {"timestamp": "2022-01-03T00:00:00Z", "date_only": true, "value": "2022-01-03", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-02648", "record": "CNVD-2022-02648", "field": "submitTime"}, {"timestamp": "2022-01-11T14:26:00Z", "date_only": false, "value": "2022-01-11T14:26Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-20170", "record": "GSD-2021-20170", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-01-11T14:26:08.810Z", "date_only": false, "value": "2022-01-11T14:26:08.810000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_update_date.data.3.date"}, {"timestamp": "2022-01-12T00:00:00Z", "date_only": false, "value": "2022-01-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-01-12T00:00:00Z", "date_only": true, "value": "2022-01-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-02648", "record": "CNVD-2022-02648", "field": "openTime"}, {"timestamp": "2022-01-12T00:02:08Z", "date_only": false, "value": "2022-01-12T00:02:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V2PC-MRC3-9JC5", "record": "GHSA-V2PC-MRC3-9JC5", "field": "modified"}, {"timestamp": "2023-01-18T00:00:00Z", "date_only": false, "value": "2023-01-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_release_date.data.2.date"}, {"timestamp": "2023-01-18T01:15:00Z", "date_only": false, "value": "2023-01-18T01:15:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-12-13T01:23:12.423Z", "date_only": false, "value": "2023-12-13T01:23:12.423413Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-20170", "record": "GSD-2021-20170", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T11:56:48.043Z", "date_only": false, "value": "2023-12-18T11:56:48.043000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202112-2047", "record": "VAR-202112-2047", "field": "last_update_date"}, {"timestamp": "2024-08-03T17:30:07.477Z", "date_only": false, "value": "2024-08-03T17:30:07.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-20170", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T17:30:07.477Z", "date_only": false, "value": "2024-08-03T17:30:07.477Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-20170", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:33:24.623Z", "date_only": false, "value": "2026-06-17T03:33:24.623", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-20170", "record": "FKIE_CVE-2021-20170", "field": "lastModified"}, {"timestamp": "2026-07-07T11:37:06.987Z", "date_only": false, "value": "2026-07-07T11:37:06.987531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq2jbqx3az22", "record": "CVE-2021-20170", "field": "creation_timestamp", "uuid": "ec297bbe-fd95-4989-a28a-55d2f477b9b7", "content": "\ud83d\udccc CVE-2021-20170 - Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configur... https://www.cyberhub.blog/cves/CVE-2021-20170", "url": "https://bsky.app/profile/cyberhub.blog/post/3mq2jbqx3az22"}], "metrics": {"as_of": "2026-11-02T17:55:51.800Z", "anchors": {"origin": {"timestamp": "2021-12-30T21:31:15Z", "date_only": false, "value": "2021-12-30T21:31:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-20170", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-12-30T21:31:15Z", "date_only": false, "value": "2021-12-30T21:31:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-20170", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 152742276.800349, "hours": 42428.410222319166, "days": 1767.8504259299652, "min_seconds": 152742276.800349, "max_seconds": 152742276.800349, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-12-30T21:31:15Z", "date_only": false, "value": "2021-12-30T21:31:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-20170", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T17:55:51.800Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
