{"metadata": {"vulnerability": "cve-2017-6334", "count": 73, "kinds": {"milestone": 4, "sighting": 22, "kev": 17, "other": 30}}, "data": [{"timestamp": "2010-07-07T00:00:00Z", "date_only": false, "value": "2010-07-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.3.date"}, {"timestamp": "2017-02-25T00:00:00Z", "date_only": false, "value": "2017-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/41459", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "5b9a14e5-99d3-4975-960e-d12c25a7a802", "url": "https://www.exploit-db.com/exploits/41459"}, {"timestamp": "2017-02-26T00:00:00Z", "date_only": false, "value": "2017-02-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_release_date.data.4.date"}, {"timestamp": "2017-02-26T00:00:00Z", "date_only": false, "value": "2017-02-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2017-6334", "field": "cveMetadata.dateReserved"}, {"timestamp": "2017-02-27T00:00:00Z", "date_only": false, "value": "2017-02-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_release_date.data.7.date"}, {"timestamp": "2017-03-01T00:00:00Z", "date_only": true, "value": "2017-03-01", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2017-02591", "record": "CNVD-2017-02591", "field": "submitTime"}, {"timestamp": "2017-03-05T00:00:00Z", "date_only": false, "value": "2017-03-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "cve-2017-6334", "field": "containers.cna.datePublic"}, {"timestamp": "2017-03-06T00:00:00Z", "date_only": false, "value": "2017-03-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_release_date.data.1.date"}, {"timestamp": "2017-03-06T02:00:00Z", "date_only": false, "value": "2017-03-06T02:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2017-6334", "field": "cveMetadata.datePublished"}, {"timestamp": "2017-03-06T02:59:00Z", "date_only": false, "value": "2017-03-06T02:59:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FMCR-2Q62-C3M5", "record": "GHSA-FMCR-2Q62-C3M5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2017-03-06T02:59:00Z", "date_only": false, "value": "2017-03-06T02:59Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2017-6334", "record": "GSD-2017-6334", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2017-03-06T02:59:00.433Z", "date_only": false, "value": "2017-03-06T02:59:00.433000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_release_date.data.6.date"}, {"timestamp": "2017-03-06T02:59:00.433Z", "date_only": false, "value": "2017-03-06T02:59:00.433", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-6334", "record": "FKIE_CVE-2017-6334", "field": "published"}, {"timestamp": "2017-03-07T01:08:00Z", "date_only": false, "value": "2017-03-07T01:08:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.4.date"}, {"timestamp": "2017-03-10T00:00:00Z", "date_only": false, "value": "2017-03-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.0.date"}, {"timestamp": "2017-03-10T00:00:00Z", "date_only": true, "value": "2017-03-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2017-02591", "record": "CNVD-2017-02591", "field": "openTime"}, {"timestamp": "2017-03-29T00:00:00Z", "date_only": false, "value": "2017-03-29T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.5.date"}, {"timestamp": "2017-06-26T00:00:00Z", "date_only": false, "value": "2017-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://www.exploit-db.com/exploits/42257", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "741edaf6-df46-465d-b9d5-ebf395e08d90", "url": "https://www.exploit-db.com/exploits/42257"}, {"timestamp": "2017-08-31T09:57:01Z", "date_only": false, "value": "2017-08-31T09:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2017-6334", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-05-24T15:44:33Z", "date_only": false, "value": "2018-05-24T15:44:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "3d25c3b4-85dd-4582-87f4-6b3766acafa4"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dnslookup_cmd_exec.rb", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "214f26d3-37a8-4bc1-a82c-49108245f12f", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dnslookup_cmd_exec.rb"}, {"timestamp": "2019-10-03T00:00:00Z", "date_only": false, "value": "2019-10-03T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.1.date"}, {"timestamp": "2019-10-03T00:03:00Z", "date_only": false, "value": "2019-10-03T00:03Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2017-6334", "record": "GSD-2017-6334", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2019-10-03T00:03:26.223Z", "date_only": false, "value": "2019-10-03T00:03:26.223000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.6.date"}, {"timestamp": "2019-10-23T00:00:00Z", "date_only": false, "value": "2019-10-23T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "sources_update_date.data.7.date"}, {"timestamp": "2020-01-08T13:22:45Z", "date_only": false, "value": "2020-01-08T13:22:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5e15d698-a3b4-40fd-86e7-15cc02de0b81", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "8deb573a-2b85-4b2c-900f-13adb2d1e36d"}, {"timestamp": "2020-10-09T14:13:50Z", "date_only": false, "value": "2020-10-09T14:13:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b6fb39e0-8665-41f9-bc21-88d7f1945ec4", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "5ec55a29-b6b2-4926-823b-a3402bfa1482"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2017-6334", "field": "timestamps.asserted_at", "uuid": "36af45e3-130f-4576-9e11-3599be69c631", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2017-6334", "field": "timestamps.asserted_at", "uuid": "3a96ed3b-48af-4274-a606-c65d5843588f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-6334", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2017-6334", "record": "GSD-2017-6334", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2017-6334", "field": "evidence.0.details.added_date", "uuid": "3a96ed3b-48af-4274-a606-c65d5843588f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": true, "value": "2022-03-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2017-6334", "field": "evidence.0.details.date_added", "uuid": "36af45e3-130f-4576-9e11-3599be69c631", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2017-6334", "field": "timestamps.first_seen_at", "uuid": "36af45e3-130f-4576-9e11-3599be69c631", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2017-6334", "field": "timestamps.first_seen_at", "uuid": "3a96ed3b-48af-4274-a606-c65d5843588f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2017-6334", "field": "status.status_updated_at", "uuid": "36af45e3-130f-4576-9e11-3599be69c631", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2017-6334", "field": "status.status_updated_at", "uuid": "3a96ed3b-48af-4274-a606-c65d5843588f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2017-6334", "field": "evidence.0.details.due_date", "uuid": "36af45e3-130f-4576-9e11-3599be69c631", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-04-15T00:00:00Z", "date_only": true, "value": "2022-04-15", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2017-6334", "record": "GSD-2017-6334", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-13T01:46:30Z", "date_only": false, "value": "2022-05-13T01:46:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FMCR-2Q62-C3M5", "record": "GHSA-FMCR-2Q62-C3M5", "field": "published"}, {"timestamp": "2023-03-04T00:00:00Z", "date_only": true, "value": "2023-03-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2017-6334", "field": "evidence.0.details.observation_date", "uuid": "19565a9e-5447-4a3a-ae3f-ae2b0c861653", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:03Z", "date_only": false, "value": "2023-06-14T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "a052102d-626d-4f9f-be43-4fc66386be5b"}, {"timestamp": "2023-12-04T15:47:16Z", "date_only": false, "value": "2023-12-04T15:47:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1242", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "c184ff0a-5c11-4c80-8d63-251a0046e47f", "content": "#ExploitObserverAlert\n\nCVE-2017-6334\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2017-6334. dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.\n\nFIRST-EPSS: 0.962270000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1242"}, {"timestamp": "2023-12-13T01:21:09.471Z", "date_only": false, "value": "2023-12-13T01:21:09.471406Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2017-6334", "record": "GSD-2017-6334", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-26T22:55:24.331Z", "date_only": false, "value": "2023-12-26T22:55:24.331000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201703-1017", "record": "VAR-201703-1017", "field": "last_update_date"}, {"timestamp": "2024-08-05T15:25:49.088Z", "date_only": false, "value": "2024-08-05T15:25:49.088Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2017-6334", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-21T18:33:29Z", "date_only": false, "value": "2024-10-21T18:33:29+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2017-6334", "field": "timestamps.asserted_at", "uuid": "19565a9e-5447-4a3a-ae3f-ae2b0c861653", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-21T18:33:29Z", "date_only": false, "value": "2024-10-21T18:33:29+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2017-6334", "field": "timestamps.first_seen_at", "uuid": "19565a9e-5447-4a3a-ae3f-ae2b0c861653", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-21T18:33:29Z", "date_only": false, "value": "2024-10-21T18:33:29+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2017-6334", "field": "timestamps.last_seen_at", "uuid": "19565a9e-5447-4a3a-ae3f-ae2b0c861653", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-21T18:33:29Z", "date_only": false, "value": "2024-10-21T18:33:29+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2017-6334", "field": "status.status_updated_at", "uuid": "19565a9e-5447-4a3a-ae3f-ae2b0c861653", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-24T20:29:05.842Z", "date_only": false, "value": "2024-12-24T20:29:05.842646Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971422", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "27cb85a2-9144-473b-b7ee-56ddc343973d", "url": "https://feedsin.space/feed/CISAKevBot/items/2971422"}, {"timestamp": "2025-01-03T00:00:00Z", "date_only": false, "value": "2025-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-03)", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "651655c2-ab4e-4d72-bca9-7657a96e5daf"}, {"timestamp": "2025-02-04T20:45:52.912Z", "date_only": false, "value": "2025-02-04T20:45:52.912924Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-6334", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T20:45:52.912Z", "date_only": false, "value": "2025-02-04T20:45:52.912924Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-6334", "record": "FKIE_CVE-2017-6334", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-06T03:13:43Z", "date_only": false, "value": "2025-02-06T03:13:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "7e661803-dd53-4d64-a726-66192cff771d"}, {"timestamp": "2025-02-23T02:10:15Z", "date_only": false, "value": "2025-02-23T02:10:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "ec9f79cf-501c-4f13-a2a3-03643317d915"}, {"timestamp": "2025-02-23T04:09:58Z", "date_only": false, "value": "2025-02-23T04:09:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "e4ff7207-b6e0-46b7-a7a5-83b4960adec9"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": false, "value": "2025-08-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-10)", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "4e64c8cb-3f7a-46fc-a85e-43cf223032f8"}, {"timestamp": "2025-10-22T00:31:18Z", "date_only": false, "value": "2025-10-22T00:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FMCR-2Q62-C3M5", "record": "GHSA-FMCR-2Q62-C3M5", "field": "modified"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": false, "value": "2025-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-15)", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "7262f2b0-aff8-4c69-b2e0-0b34bd8e9eae"}, {"timestamp": "2026-01-12T22:19:45.395Z", "date_only": false, "value": "2026-01-12T22:19:45.395Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2017-6334", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-12T22:19:45.395Z", "date_only": false, "value": "2026-01-12T22:19:45.395Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2017-6334", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2017-6334", "field": "timestamps.recorded_at", "uuid": "36af45e3-130f-4576-9e11-3599be69c631", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:03.047Z", "date_only": false, "value": "2026-02-02T12:28:03.047864Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36af45e3-130f-4576-9e11-3599be69c631", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "cfeb567c-6bcf-4a4c-a65e-a06df57b0a88", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36af45e3-130f-4576-9e11-3599be69c631"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "48c03ca0-150e-4cc0-b017-bb8557f68dc1"}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": false, "value": "2026-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-06)", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "c8032136-f34a-4015-af2f-8231f18e42d8"}, {"timestamp": "2026-06-17T01:22:10.303Z", "date_only": false, "value": "2026-06-17T01:22:10.303", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2017-6334", "record": "FKIE_CVE-2017-6334", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:27.793Z", "date_only": false, "value": "2026-06-19T12:47:27.793384Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7137a4a9-235b-458d-9d48-f3103f4bb0d2", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "6944eabd-5702-4096-83d2-619a885072f7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7137a4a9-235b-458d-9d48-f3103f4bb0d2"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2017-6334", "field": "timestamps.recorded_at", "uuid": "3a96ed3b-48af-4274-a606-c65d5843588f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:10.869Z", "date_only": false, "value": "2026-06-23T14:05:10.869675Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a96ed3b-48af-4274-a606-c65d5843588f", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "42296034-bd07-4ad0-92b9-2b3004c89cfd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a96ed3b-48af-4274-a606-c65d5843588f"}, {"timestamp": "2026-06-30T09:42:39.823Z", "date_only": false, "value": "2026-06-30T09:42:39.823220Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19565a9e-5447-4a3a-ae3f-ae2b0c861653", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "9b6f414f-a647-4d10-ba0e-ea1d7f334dd3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19565a9e-5447-4a3a-ae3f-ae2b0c861653"}, {"timestamp": "2026-06-30T15:27:43Z", "date_only": false, "value": "2026-06-30T15:27:43+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2017-6334", "field": "timestamps.recorded_at", "uuid": "19565a9e-5447-4a3a-ae3f-ae2b0c861653", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-01T20:02:09.748Z", "date_only": false, "value": "2026-09-01T20:02:09.748939Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/31088", "record": "CVE-2017-6334", "field": "creation_timestamp", "uuid": "0e038248-279d-4d67-82c6-7ebd8abd0765", "content": "Black Hat Ethical Hacking\nBotenaGo botnet targets millions of IoT devices with 33 exploits\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png BotenaGo botnet targets millions of IoT devices with 33 exploitsPost Views: 141 \nReading Time: 1 Minute\nThe new\u00a0BotenaGo malware botnet has been discovered using over thirty exploits to attack millions of routers and IoT devices.\nBotenaGo was written in Golang (Go), which has been exploding in popularity in recent years, with malware authors loving it for making payloads that are harder to detect and reverse engineer.\n\nIn the case of BotenaGo, only six out of 62 AV engines on VirusTotal flag the sample as malicious, and some identify it as Mirai.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/scan.jpg \n<figcaptionBotenaGo goes primarily unnoticed by AV scanners\nSource: AT&T \nSee Also: Complete Offensive Security and Ethical Hacking Course Targeting millions of devicesBotenaGo incorporates 33 exploits for a variety of routers, modems, and NAS devices, with some notable examples given below:\n\n* CVE-2015-2051, CVE-2020-9377, CVE-2016-11021: D-Link routers\n* CVE-2016-1555, CVE-2017-6077, CVE-2016-6277, CVE-2017-6334: Netgear devices\n* CVE-2019-19824: Realtek SDK based routers\n* CVE-2017-18368, CVE-2020-9054: Zyxel routers and NAS devices\n* CVE-2020-10987: Tenda products\n* CVE-2014-2321: ZTE modems\n* CVE-2020-8958: Guangzhou 1GE ONU\n\nResearchers at AT&T\u00a0who analyzed the new botnet found that it targets millions of devices with functions that exploit the above flaws.\n\nAn example given is the search string for Boa, which is a discontinued open-source web server used in embedded applications and one that still returns nearly two million internet-facing devices on Shodan.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/botenago_shodan.jpg \n<figcaptionShodan search returned 2 million results on Boa\nSource: AT&T \nSee Also: All Windows versions impacted by new LPE zero-day vulnerability Another notable example is the targeting of CVE-2020-10173, a command-injection flaw in Comtrend VR-3033 gateway devices, of which 250,000 are still exploitable.\n\nWhen installed, the malware will listen on two ports (31412 and 19412), where it waits for an IP address to be sent to it. Once one is received, the bot will exploit each vulnerability on that IP address to gain access.\nhttps://www.bleepstatic.com/images/news/u/1220909/Security/mapping.jpg \n<figcaptionBotenaGo mapping attack functions.\nSource: AT&T \nOnce BotenaGo gains access, it will execute remote shell commands to recruit the device into the botnet.\n\nDepending on which device is targeted, the malware uses different links to fetch a matching payload.\n\nAt the time of the analysis, though, there were no payloads on the hosting server, so none could be retrieved for analysis.\nSee Also: Offensive Security Tool: DotDotPwn \u2013 The Directory Traversal Fuzzer Furthermore, the researchers didn\u2019t find an active C2 communication between BotenaGo and an actor-controlled server, so they give three potential explanations on how it operates:\n\n1. BotenaGo is only one part (module) of a multi-stage modular malware attack, and it\u2019s not the one responsible for handling communications.\n2. BotenaGo is a new tool used by Mirai operators on certain machines, a scenario that is backed by common payload dropping links.\n3. The malware isn\u2019t ready to operate yet, and a sample from its early development phase leaked in the wild accidentally.\n\nIn conclusion, the appearance of BotenaGo in the wild is unusual given its incomplete operational status, but its underlying capabilities are leaving no doubt about the int[...]", "url": "https://t.me/hacking_Attack/31088"}]}