{"metadata": {"vulnerability": "CVE-2023-20209", "count": 44, "kinds": {"milestone": 7, "sighting": 18, "kev": 0, "other": 19}}, "data": [{"timestamp": "2022-10-27T18:47:50.367Z", "date_only": false, "value": "2022-10-27T18:47:50.367Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-20209", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-16T15:59:42Z", "date_only": false, "value": "2023-08-16T15:59:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "record": "CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-16T16:00:00Z", "date_only": false, "value": "2023-08-16T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "record": "CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-16T16:00:00Z", "date_only": false, "value": "2023-08-16T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "record": "CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-16T16:00:00Z", "date_only": false, "value": "2023-08-16T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "record": "CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-16T20:59:41.848Z", "date_only": false, "value": "2023-08-16T20:59:41.848Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-20209", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-16T21:15:09Z", "date_only": false, "value": "2023-08-16T21:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FQMX-HQ6J-36X9", "record": "GHSA-FQMX-HQ6J-36X9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-16T21:15:09.650Z", "date_only": false, "value": "2023-08-16T21:15:09.650", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20209", "record": "FKIE_CVE-2023-20209", "field": "published"}, {"timestamp": "2023-08-16T21:15:09.650Z", "date_only": false, "value": "2023-08-16T21:15:09.650", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-20209", "record": "GSD-2023-20209", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-08-16T21:31:05Z", "date_only": false, "value": "2023-08-16T21:31:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FQMX-HQ6J-36X9", "record": "GHSA-FQMX-HQ6J-36X9", "field": "published"}, {"timestamp": "2023-08-16T22:00:00Z", "date_only": false, "value": "2023-08-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2083", "record": "WID-SEC-W-2023-2083", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-16T22:00:00Z", "date_only": false, "value": "2023-08-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2083", "record": "WID-SEC-W-2023-2083", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-16T22:00:00Z", "date_only": false, "value": "2023-08-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2083", "record": "WID-SEC-W-2023-2083", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-16T22:00:00Z", "date_only": false, "value": "2023-08-16T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2083", "record": "WID-SEC-W-2023-2083", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-17T00:36:41Z", "date_only": false, "value": "2023-08-17T00:36:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/68688", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "66b0cd49-7fa9-4134-98b1-aaae1feb042a", "content": "\u203c CVE-2023-20209 \u203c\n\nA vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker with read-write privileges on the application to perform a command injection attack that could result in remote code execution on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to establish a remote shell with root privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/68688"}, {"timestamp": "2023-09-27T20:08:31Z", "date_only": false, "value": "2023-09-27T20:08:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1737", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "2d7afcd4-31be-46aa-9b52-c0b14fec4802", "content": "CVE-2023-20209\nCisco Expressway\nexploit\n\n#cisco", "url": "https://t.me/proxy_bar/1737"}, {"timestamp": "2023-09-28T05:04:24Z", "date_only": false, "value": "2023-09-28T05:04:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "6e387305-f6d1-4e1d-a63c-b5b49d112855"}, {"timestamp": "2023-09-28T12:08:15Z", "date_only": false, "value": "2023-09-28T12:08:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9106", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "fb408718-0ff0-4036-80ef-5166fe55141f", "content": "#exploit\n1. CVE-2023-27121:\nCredential Leak via XSS in Pleasant Password Manager\nhttps://www.mdsec.co.uk/2023/09/the-not-so-pleasant-password-manager\n]-> https://github.com/mdsecactivebreach/PleasantTools\n\n2. CVE-2023-38571:\nmacOS TCC bypass in Music and TV\nhttps://github.com/gergelykalman/CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV\n\n3. CVE-2023-20209:\nCisco Expressway Series/Cisco TelePresence Video Communication Server Command Injection\nhttps://github.com/0x41-Researcher/CVE-2023-20209", "url": "https://t.me/CyberSecurityTechnologies/9106"}, {"timestamp": "2023-09-28T18:37:41Z", "date_only": false, "value": "2023-09-28T18:37:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/4390", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "7b64508f-17ab-4a4b-a623-bcb9b0cf2dbf", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "url": "https://t.me/crackcodes/4390"}, {"timestamp": "2023-09-28T22:51:26Z", "date_only": false, "value": "2023-09-28T22:51:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1388", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "66a0e520-a850-4ed0-ab7c-776ff57b4048", "content": "CVE-2023-20209: Cisco RCE (Auth) \n\nhttps://github.com/0x41-Researcher/CVE-2023-20209\n\n#git #redteam #pentest #exploit", "url": "https://t.me/RalfHackerChannel/1388"}, {"timestamp": "2023-09-29T12:56:46Z", "date_only": false, "value": "2023-09-29T12:56:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3147", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "bbe310cd-c5b3-4bc0-ba9a-aad8e4865c4e", "content": "https://github.com/0x41-Researcher/CVE-2023-20209", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3147"}, {"timestamp": "2023-09-29T21:53:43Z", "date_only": false, "value": "2023-09-29T21:53:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/jokerplstaeen/21210", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "f3e5f18c-2d4e-4e67-bf09-8fef5f36acbd", "content": "CVE-2023-20209\n\nCisco expressway series/cisco telepresence video communication server command injection.\n\nhttps://github.com/0x41-Researcher/CVE-2023-20209\n\n#cve #cybersecurity #infosec", "url": "https://t.me/jokerplstaeen/21210"}, {"timestamp": "2023-10-10T07:12:43Z", "date_only": false, "value": "2023-10-10T07:12:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/4382", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "d379fdf3-4d18-47ee-9047-6c56bca6eb96", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "url": "https://t.me/crackcodes/4382"}, {"timestamp": "2023-10-10T20:32:25Z", "date_only": false, "value": "2023-10-10T20:32:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3213", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "8500e2e8-3a30-4dd4-8f5b-f5e773a8fbff", "content": "Hackers Factory \n\nInstagram-py performs slick brute force attack on Instagram without any type of password limiting\n\nand also resumes your attack in ease.\n\n\u2014DeathSec\n\nhttps://github.com/deathsec/instagram-py\n\nAn open-source self-hosted purple team management web application.\n\nhttps://github.com/CyberCX-STA/PurpleOps?mibextid=Zxz2cZ\n\nJust some lists of Malware Configs\n\nhttps://github.com/Gi7w0rm/MalwareConfigLists\n\na unique vocabulary that is 90% generated with OpenAI ChatGPT.\n\nhttps://github.com/reewardius/bbFuzzing.txt\n\nCVE-2023-20209\n\nhttps://github.com/0x41-Researcher/CVE-2023-20209\n\nOfficial repo for GPTFUZZER : Red Teaming Large Language Models with Auto-Generated Jailbreak Prompts\n\nhttps://github.com/sherdencooper/GPTFuzz\n\nAttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details\n\nhttps://github.com/mrwadams/attackgen\n\nA Proof-Of-Concept for the CVE-2023-43770 vulnerability.\n\nhttps://github.com/s3cb0y/CVE-2023-43770-POC\n\nreverse shell using curl\n\nhttps://github.com/irsl/curlshell\n\nCVE-2023-42820\n\nhttps://github.com/h4m5t/CVE-2023-42820\n\nGoCrack is a management frontend for password cracking tools written in Go\n\nhttps://github.com/mandiant/gocrack\n\nAsk a TGS on behalf of another user without password\n\nhttps://github.com/foxlox/GIUDA\n\nCVE-2023-42442\n\nhttps://github.com/HolyGu/CVE-2023-42442\n\nBypass the Event Trace Windows(ETW) and unhook ntdll.\n\nhttps://github.com/unkvolism/Fuck-Etw\n\nMicrosoft SharePoint Server Elevation of Privilege Vulnerability\n\nhttps://github.com/Chocapikk/CVE-2023-29357\n\nDorks-collections-list/onion.txt at main \u00b7 cipher387/Dorks-collections-list\n\nhttps://github.com/cipher387/Dorks-collections-list/blob/main/onion.txt\n\n#infosec #cybersecurity #hackersfactory\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3213"}, {"timestamp": "2023-12-13T01:20:29.499Z", "date_only": false, "value": "2023-12-13T01:20:29.499749Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20209", "record": "GSD-2023-20209", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-25T16:58:00.269Z", "date_only": false, "value": "2024-01-25T16:58:00.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2023-20209", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-25T17:15:36.170Z", "date_only": false, "value": "2024-01-25T17:15:36.170", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20209", "record": "GSD-2023-20209", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-25T18:30:37Z", "date_only": false, "value": "2024-01-25T18:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FQMX-HQ6J-36X9", "record": "GHSA-FQMX-HQ6J-36X9", "field": "modified"}, {"timestamp": "2024-03-12T15:00:44Z", "date_only": false, "value": "2024-03-12T15:00:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beaverdreamer/105", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "5ab4a673-5ed8-44d4-b335-035f92f4c484", "content": "Cisco Expressway\npost auth RCE\nhttps://github.com/0x41-Researcher/CVE-2023-20209", "url": "https://t.me/beaverdreamer/105"}, {"timestamp": "2024-03-12T15:00:58Z", "date_only": false, "value": "2024-03-12T15:00:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/beaverdreamer/101", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "ec321a79-1790-4086-8cb5-aaca47128b0b", "content": "#cisco\nCisco Expressway \nCVE-2023-20209  (Auth) \n\nhttps://github.com/0x41-Researcher/CVE-2023-20209", "url": "https://t.me/beaverdreamer/101"}, {"timestamp": "2024-04-24T17:42:10Z", "date_only": false, "value": "2024-04-24T17:42:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XU1hmUSewexQ72aTh-3y6Y0lBjmdi-Ky-u-uAAAyQvmUZWU", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "09abc327-a9d2-4884-a3c8-c74fabc48466"}, {"timestamp": "2024-04-24T17:42:11Z", "date_only": false, "value": "2024-04-24T17:42:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/22826", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "470cbee1-8b39-452a-871b-affd4895c0b7", "content": "https://github.com/0x41-Researcher/CVE-2023-20209", "url": "https://t.me/LockBitRaasRansomware/22826"}, {"timestamp": "2024-05-10T23:25:35Z", "date_only": false, "value": "2024-05-10T23:25:35+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "record": "CISCO-SA-EXPRESSWAY-INJECTION-X475EBTQ", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-02T09:05:35.876Z", "date_only": false, "value": "2024-08-02T09:05:35.876Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-20209", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:57:11.877Z", "date_only": false, "value": "2024-08-15T17:57:11.877+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2083", "record": "WID-SEC-W-2023-2083", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:30:20Z", "date_only": false, "value": "2024-08-16T08:30:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1143", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "24229a93-a51e-4078-b333-5dc60ad88500", "content": "#exploit\n1. CVE-2023-27121:\nCredential Leak via XSS in Pleasant Password Manager\nhttps://www.mdsec.co.uk/2023/09/the-not-so-pleasant-password-manager\n]-> https://github.com/mdsecactivebreach/PleasantTools\n\n2. CVE-2023-38571:\nmacOS TCC bypass in Music and TV\nhttps://github.com/gergelykalman/CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV\n\n3. CVE-2023-20209:\nCisco Expressway Series/Cisco TelePresence Video Communication Server Command Injection\nhttps://github.com/0x41-Researcher/CVE-2023-20209", "url": "https://t.me/Rootsec_2/1143"}, {"timestamp": "2024-08-16T08:30:20Z", "date_only": false, "value": "2024-08-16T08:30:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1150", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "bbd12f48-ce76-4cdf-a564-a7100227b270", "content": "https://github.com/0x41-Researcher/CVE-2023-20209\n#github", "url": "https://t.me/Rootsec_2/1150"}, {"timestamp": "2024-12-03T14:25:12.682Z", "date_only": false, "value": "2024-12-03T14:25:12.682012Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20209", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-03T14:25:12.682Z", "date_only": false, "value": "2024-12-03T14:25:12.682012Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20209", "record": "FKIE_CVE-2023-20209", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-12-16T18:23:20.308Z", "date_only": false, "value": "2025-12-16T18:23:20.308Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-20209", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-12-16T18:23:20.308Z", "date_only": false, "value": "2025-12-16T18:23:20.308Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20209", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:29:49.923Z", "date_only": false, "value": "2026-06-17T05:29:49.923", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20209", "record": "FKIE_CVE-2023-20209", "field": "lastModified"}, {"timestamp": "2026-10-28T03:00:11Z", "date_only": false, "value": "2026-10-28T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0hF2E9aVfGvplPzTbP1TR7HraeqVaMSQJzVRlRVjLuuSVLA", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "e43be131-3e68-4873-b417-3e825105d083"}, {"timestamp": "2026-10-28T03:00:11Z", "date_only": false, "value": "2026-10-28T03:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0hF2E9aVfGvplPzTbP1TR7HraeqVaMSQJzVRlRVjLuuSVLA", "record": "CVE-2023-20209", "field": "creation_timestamp", "uuid": "5e27dd3f-0957-4f68-a502-4737af42002a"}]}