{"format":"vdr.v1","hash_version":"v1","canonical_form":"canonical-form.v1.md","canonical_form_url":"https://vault.vciy.com/canonical-form.v1.md","verifier_url":"https://vault.vciy.com/verify-vdr-export.mjs","proof_url":"https://vault.vciy.com/proof/30ee0a75-de6b-48de-a9ad-21f444ed73ce/v/1","export_url":"https://vault.vciy.com/proof/30ee0a75-de6b-48de-a9ad-21f444ed73ce/export.json","exported_at":"2026-10-01T11:43:15.389Z","chain_id":"30ee0a75-de6b-48de-a9ad-21f444ed73ce","org_id":"free-2572a02d181b46d0a1941a1e","head_version":1,"versions":[{"prevHash":"0000000000000000000000000000000000000000000000000000000000000000","orgId":"free-2572a02d181b46d0a1941a1e","chainId":"30ee0a75-de6b-48de-a9ad-21f444ed73ce","version":1,"op":"mint","subjectLabel":"CVE-2021-44228","subjectIdentity":"CVE-2021-44228","subjectIdentityKind":"cve","verdict":"mitigated","rationale":"Upgraded log4j-core to 2.17.1 across every service during the December 2021 disclosure window. Kept here as vciy's own worked example: the record and the mitigation date line up, and the evidence below is what the index held at the moment this was recorded.","reviewBy":null,"contextMd":null,"voidReason":null,"actorId":"email:2572a02d181b46d0","actorDisplay":"demo@vciy.com","tsServer":"2026-09-12T00:20:47.247000000Z","evidence":{"kev":{"listed":true,"date_added":"2021-12-10","due_date":"2021-12-24"},"epss":{"score":"0.99999","series_date":"2026-06-15","model_version":"v2026.06.15"},"cwe":"CWE-502 Deserialization of Untrusted Data; CWE-400 Uncontrolled Resource Consumption; CWE-20 Improper Input Validation","cwe_nvd":"CWE-20; CWE-400; CWE-502; CWE-917","severity_nvd":"10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","affected_ranges":["siemens 6bk1602-0aa12-0tp0 firmware < 2.7.0","siemens 6bk1602-0aa22-0tp0 firmware < 2.7.0","siemens 6bk1602-0aa32-0tp0 firmware < 2.7.0","siemens 6bk1602-0aa42-0tp0 firmware < 2.7.0","siemens 6bk1602-0aa52-0tp0 firmware < 2.7.0","apache log4j >= 2.0.1 < 2.3.1","apache log4j >= 2.4.0 < 2.12.2","apache log4j >= 2.13.0 < 2.15.0","apache log4j 2.0","siemens capital < 2019.1","siemens capital 2019.1","siemens comos < 10.4.2","siemens desigo cc advanced reports 3.0","siemens desigo cc advanced reports 4.0","siemens desigo cc advanced reports 4.1","siemens desigo cc advanced reports 4.2","siemens desigo cc advanced reports 5.0","siemens desigo cc advanced reports 5.1","siemens desigo cc info center 5.0","siemens desigo cc info center 5.1"],"affected_ranges_total":20,"fix_version":"2.3.1; 2.12.2; 2.15.0","fact_dates":{"kev":"2026-08-17","cwe":"2026-09-04","cwe_nvd":"2026-09-04","severity_nvd":"2026-09-04","affected_ranges":"2026-09-04","fix_version":"2026-09-04"},"source_dates":{"kev":"2026-09-11","epss":"2026-09-10"}},"evidenceSnapshotId":"sha256:71b6a00f410ff00dcbf38af19432bf646f57dc201dde87b69c5ba3d7e6bd2165","prefillSource":"cve_page","hash":"9ad7752cebd9a6564dc7d4dc486d76ea48ed3b99d6ba3f93149ab6a520496477"}]}