{"metadata": {"vulnerability": "CVE-2023-23368", "count": 28, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 18}}, "data": [{"timestamp": "2023-01-11T20:15:53.086Z", "date_only": false, "value": "2023-01-11T20:15:53.086Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-23368", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-03T16:34:24.216Z", "date_only": false, "value": "2023-11-03T16:34:24.216Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-23368", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-03T16:34:24.216Z", "date_only": false, "value": "2023-11-03T16:34:24.216Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / qnap", "record": "CVE-2023-23368", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-03T17:15:00Z", "date_only": false, "value": "2023-11-03T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-23368", "record": "GSD-2023-23368", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-03T17:15:08Z", "date_only": false, "value": "2023-11-03T17:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VCCX-MHX2-8XVF", "record": "GHSA-VCCX-MHX2-8XVF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-03T17:15:08.210Z", "date_only": false, "value": "2023-11-03T17:15:08.210", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-23368", "record": "FKIE_CVE-2023-23368", "field": "published"}, {"timestamp": "2023-11-03T18:30:23Z", "date_only": false, "value": "2023-11-03T18:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VCCX-MHX2-8XVF", "record": "GHSA-VCCX-MHX2-8XVF", "field": "published"}, {"timestamp": "2023-11-03T18:30:23Z", "date_only": false, "value": "2023-11-03T18:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VCCX-MHX2-8XVF", "record": "GHSA-VCCX-MHX2-8XVF", "field": "modified"}, {"timestamp": "2023-11-05T23:00:00Z", "date_only": false, "value": "2023-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2829", "record": "WID-SEC-W-2023-2829", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-05T23:00:00Z", "date_only": false, "value": "2023-11-05T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2829", "record": "WID-SEC-W-2023-2829", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-05T23:00:00Z", "date_only": false, "value": "2023-11-05T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2829", "record": "WID-SEC-W-2023-2829", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-05T23:00:00Z", "date_only": false, "value": "2023-11-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2829", "record": "WID-SEC-W-2023-2829", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-06T00:00:00Z", "date_only": false, "value": "2023-11-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0915", "record": "CERTFR-2023-AVI-0915", "field": "last_revision_date"}, {"timestamp": "2023-11-06T00:00:00Z", "date_only": false, "value": "2023-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0915", "record": "CERTFR-2023-AVI-0915", "field": "initial_release_date"}, {"timestamp": "2023-11-06T00:00:00Z", "date_only": false, "value": "2023-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0915", "record": "CERTFR-2023-AVI-0915", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-06T19:39:37Z", "date_only": false, "value": "2023-11-06T19:39:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/1031", "record": "CVE-2023-23368", "field": "creation_timestamp", "uuid": "b2a939e1-3c15-4103-ba7b-c31e87575007", "content": "QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices\nhttps://thehackernews.com/2023/11/qnap-releases-patch-for-2-critical.html\n\nQNAP has released security updates to address two critical security flaws impacting its operating system that could result in arbitrary code execution.\nTracked as\u00a0CVE-2023-23368\u00a0(CVSS score: 9.8), the vulnerability is described as a command injection bug affecting QTS, QuTS hero, and QuTScloud.\n\"If exploited, the vulnerability could allow remote attackers to execute commands via a network,\" the", "url": "https://t.me/KomunitiSiber/1031"}, {"timestamp": "2023-11-06T21:53:17Z", "date_only": false, "value": "2023-11-06T21:53:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ahykelfM5jaWgf8bjxulRuvue4b5ZrncnSwoWWrqFnDquw", "record": "CVE-2023-23368", "field": "creation_timestamp", "uuid": "607aaebc-68f8-4e48-b5e8-bbbde0043b8c"}, {"timestamp": "2023-11-08T10:06:26Z", "date_only": false, "value": "2023-11-08T10:06:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5059", "record": "CVE-2023-23368", "field": "creation_timestamp", "uuid": "d707a7c1-041f-4df9-be41-9516669c37ac", "content": "QNAP Systems \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 QTS \u0441\u0435\u0442\u0435\u0432\u044b\u0445 NAS \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-23368\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 9,8 \u0438\u0437 10, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a  \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 QTS 5.0.x \u0438 4.5.x, QuTS Hero h5.0.x \u0438 h4.5.x \u0438 QuTScloud c5.0.1.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445:\u00a0QTS 5.0.1.2376, \u0441\u0431\u043e\u0440\u043a\u0430 20230421, 4.5.4.2374, \u0441\u0431\u043e\u0440\u043a\u0430 20230416, QuTS Hero h5.0.1.2376 \u0441\u0431\u043e\u0440\u043a\u0430 20230421, h4.5.4.2374, \u0441\u0431\u043e\u0440\u043a\u0430 20230417 \u0438 QuTScloud c5.0.1.2374 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2023-23369\u00a0\u0438 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u2014 9,0. \u041e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0442\u0435\u043c \u0436\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c, \u0447\u0442\u043e \u0438 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0430\u044f.\n\n\u0421\u0440\u0435\u0434\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 QTS - 5.1.x, 4.3.6, 4.3.4, 4.3.3 \u0438 4.2.x, \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 Multimedia Console 2.1.x \u0438 1.4.x, Media Streaming add-on 500.1.x \u0438 500.0.x.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432: QTS 5.1.0.2399, \u0441\u0431\u043e\u0440\u043a\u0430 20230515, 4.3.6.2441, \u0441\u0431\u043e\u0440\u043a\u0430 20230621, 4.3.4.2451, \u0441\u0431\u043e\u0440\u043a\u0430 20230621, 4.3.3.2420, \u0441\u0431\u043e\u0440\u043a\u0430 20230621, 4.2.6, \u0441\u0431\u043e\u0440\u043a\u0430 20230621, Multimedia Console 2.1.2 (04.05.2023) \u0438 1.4.8 (05.05.2023), Media Streaming add-on 500.1.1.2 (12.06.2023) \u0438 500.0.0.11 (16.06.2023) (\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438).\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP\u00a0\u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c\u00a0\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c ransomware, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438.\n\nDeadbolt \u043d\u0435 \u0434\u0430\u0441\u0442 \u0441\u043e\u0432\u0440\u0430\u0442\u044c.", "url": "https://t.me/true_secator/5059"}, {"timestamp": "2023-11-12T05:03:11Z", "date_only": false, "value": "2023-11-12T05:03:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/19998", "record": "CVE-2023-23368", "field": "creation_timestamp", "uuid": "24336861-8603-448d-a52d-9e792f3dba94", "content": "\u0414\u0432\u0430 \u0431\u0430\u0433\u0430 \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 QNAP \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445\n\nQNAP \u2013 \u043e\u0434\u0438\u043d \u0438\u0437 \u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0443 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449. \u041e\u0431\u044b\u0447\u043d\u043e \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0431\u044a\u0435\u043c\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u043c\u0435\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b QTS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438.\n\n\u25aa\ufe0f  CVE-2023-23368 (9.8 \u0431\u0430\u043b\u043b\u043e\u0432 \u0438\u0437 10) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 QTS: 5.0.x \u0438 4.5.x, QuTS hero h5.0.x \u0438 h4.5.x, \u0430 \u0442\u0430\u043a\u0436\u0435 QuTScloud c5.0.1.\n\n\u25aa\ufe0f  CVE-2023-23369 (9.0 \u0438\u0437 10) \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f QTS \u0432\u0435\u0440\u0441\u0438\u0439 5.1.x, 4.3.6, 4.3.4, 4.3.3 \u0438 4.2.x, \u0430 \u0442\u0430\u043a\u0436\u0435 Multimedia Console 2.1.x \u0438 1.4.x, \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Media Streaming \u0432\u0435\u0440\u0441\u0438\u0439 500.1.x \u0438 500.0.x.\n\n\u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u2013 \u0440\u0435\u0448\u0438\u0442\u044c \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043c\u043e\u0436\u0435\u0442 \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/19998"}, {"timestamp": "2023-11-15T16:28:00Z", "date_only": false, "value": "2023-11-15T16:28Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-23368", "record": "GSD-2023-23368", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:49.469Z", "date_only": false, "value": "2023-12-13T01:20:49.469321Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-23368", "record": "GSD-2023-23368", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T10:28:40.609Z", "date_only": false, "value": "2024-08-02T10:28:40.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-23368", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:01:06.117Z", "date_only": false, "value": "2024-08-15T18:01:06.117+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2829", "record": "WID-SEC-W-2023-2829", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-26T21:50:32.045Z", "date_only": false, "value": "2025-02-26T21:50:32.045796Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-23368", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-26T21:50:32.045Z", "date_only": false, "value": "2025-02-26T21:50:32.045796Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-23368", "record": "FKIE_CVE-2023-23368", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-27T20:34:38.708Z", "date_only": false, "value": "2025-02-27T20:34:38.708Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-23368", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-27T20:34:38.708Z", "date_only": false, "value": "2025-02-27T20:34:38.708Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-23368", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:36:57.377Z", "date_only": false, "value": "2026-06-17T05:36:57.377", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-23368", "record": "FKIE_CVE-2023-23368", "field": "lastModified"}]}