{"metadata": {"vulnerability": "CVE-2023-28770", "count": 44, "kinds": {"milestone": 5, "sighting": 15, "kev": 6, "other": 18}}, "data": [{"timestamp": "2022-02-15T23:00:00Z", "date_only": false, "value": "2022-02-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-02-15T23:00:00Z", "date_only": false, "value": "2022-02-15T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-02-15T23:00:00Z", "date_only": false, "value": "2022-02-15T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-02-17T23:00:00Z", "date_only": false, "value": "2022-02-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-03-23T00:00:00Z", "date_only": false, "value": "2023-03-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-28770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-27T00:00:00Z", "date_only": false, "value": "2023-04-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-28770", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-04-27T09:15:00Z", "date_only": false, "value": "2023-04-27T09:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-28770", "record": "GSD-2023-28770", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-04-27T09:15:09Z", "date_only": false, "value": "2023-04-27T09:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JWCX-M84W-H98G", "record": "GHSA-JWCX-M84W-H98G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-04-27T09:15:09.850Z", "date_only": false, "value": "2023-04-27T09:15:09.850", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28770", "record": "FKIE_CVE-2023-28770", "field": "published"}, {"timestamp": "2023-04-27T12:39:20Z", "date_only": false, "value": "2023-04-27T12:39:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/62965", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "2c6740e3-06a1-48ca-ab69-2f05452e470b", "content": "\u203c CVE-2023-28770 \u203c\n\nThe sensitive information exposure vulnerability in the CGI \u00e2\u20ac\u0153Export_Log\u00e2\u20ac\ufffd and the binary \u00e2\u20ac\u0153zcmd\u00e2\u20ac\ufffd in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could allow a remote unauthenticated attacker to read the system files and to retrieve the password of the supervisor from the encrypted file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/62965"}, {"timestamp": "2023-04-27T22:00:00Z", "date_only": false, "value": "2023-04-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-04-27T22:00:00Z", "date_only": false, "value": "2023-04-27T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-05-10T00:00:00Z", "date_only": false, "value": "2023-05-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zyxel", "record": "CVE-2023-28770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-10T10:06:35Z", "date_only": false, "value": "2023-05-10T10:06:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxel_lfi_unauth_ssh_rce.rb", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "ef354a5e-561e-4a4d-8941-fd6618793170", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zyxel_lfi_unauth_ssh_rce.rb"}, {"timestamp": "2023-05-10T18:15:00Z", "date_only": false, "value": "2023-05-10T18:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-28770", "record": "GSD-2023-28770", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-11T18:05:50Z", "date_only": false, "value": "2023-05-11T18:05:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8278", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "3d7cc3e9-8d5c-41f0-8ced-17eaf1ac11f1", "content": "#exploit\n1. CVE-2023-1667 / CVE-2023-2283:\nDoS/Authentication bypass in libssh\nhttps://securitylab.github.com/advisories/GHSL-2023-032_GHSL-2023-042_libssh\nhttps://securitylab.github.com/advisories/GHSL-2023-085_libssh\n\n2. CVE-2023-28770:\nZyxel (Routers/CPE Devices) Chained RCE\nhttps://packetstormsecurity.com/files/172277/Zyxel-Chained-Remote-Code-Execution.html\n\n3. CVE-2023-25394:\nVideoStream LPE\nhttps://danrevah.github.io/2023/05/03/CVE-2023-25394-VideoStream-LPE", "url": "https://t.me/CyberSecurityTechnologies/8278"}, {"timestamp": "2023-07-06T19:24:19Z", "date_only": false, "value": "2023-07-06T19:24:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JWCX-M84W-H98G", "record": "GHSA-JWCX-M84W-H98G", "field": "published"}, {"timestamp": "2023-10-19T12:30:00Z", "date_only": false, "value": "2023-10-19T12:30:00+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-28770", "field": "timestamps.asserted_at", "uuid": "c18fa008-5221-4826-811b-1d1ea3bf2bc2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-19T12:30:00Z", "date_only": false, "value": "2023-10-19T12:30:00+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-28770", "field": "timestamps.first_seen_at", "uuid": "c18fa008-5221-4826-811b-1d1ea3bf2bc2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:48.255Z", "date_only": false, "value": "2023-12-13T01:20:48.255095Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-28770", "record": "GSD-2023-28770", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T13:51:37.773Z", "date_only": false, "value": "2024-08-02T13:51:37.773Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-28770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:50:04.410Z", "date_only": false, "value": "2024-08-15T17:50:04.410+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1091", "record": "WID-SEC-W-2023-1091", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-03T00:00:00Z", "date_only": false, "value": "2025-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-03)", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "0e861d60-d375-4b25-a6c4-a281f3baa926"}, {"timestamp": "2025-01-06T00:00:00Z", "date_only": false, "value": "2025-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-06)", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "5fc30f71-d4fb-4b49-b3d8-9b9be3a02a64"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "c419cfcc-685f-4172-b09d-c518b8c93ecf"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "fd20a7fc-7eda-48c1-933b-0f68eaa4fb0c"}, {"timestamp": "2025-01-31T18:41:32.377Z", "date_only": false, "value": "2025-01-31T18:41:32.377517Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28770", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-31T18:41:32.377Z", "date_only": false, "value": "2025-01-31T18:41:32.377517Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28770", "record": "FKIE_CVE-2023-28770", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-31T18:42:32.309Z", "date_only": false, "value": "2025-01-31T18:42:32.309Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-28770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-31T18:42:32.309Z", "date_only": false, "value": "2025-01-31T18:42:32.309Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-28770", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-31T21:32:44Z", "date_only": false, "value": "2025-01-31T21:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JWCX-M84W-H98G", "record": "GHSA-JWCX-M84W-H98G", "field": "modified"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "42db49cd-7c87-451f-afb0-ef13e7a1ec08"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "aa4ceda3-5329-4114-b22d-b76b27925b32"}, {"timestamp": "2025-02-23T04:10:53Z", "date_only": false, "value": "2025-02-23T04:10:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "13cb290d-7276-4d60-af8f-ff66a74dfe7f"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "2ee1fe9f-4a1a-4862-b1b4-d00005cbe3d1"}, {"timestamp": "2026-06-17T05:48:44.030Z", "date_only": false, "value": "2026-06-17T05:48:44.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-28770", "record": "FKIE_CVE-2023-28770", "field": "lastModified"}, {"timestamp": "2026-06-23T14:06:13.389Z", "date_only": false, "value": "2026-06-23T14:06:13.389328Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6c8e6cf7-613a-433f-9fe0-30bf5cf87d95", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "9ee6afe5-35bc-4071-8b0c-ec1dee784787", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6c8e6cf7-613a-433f-9fe0-30bf5cf87d95"}, {"timestamp": "2026-06-30T09:23:02.338Z", "date_only": false, "value": "2026-06-30T09:23:02.338637Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d3b28a7-642e-4a31-965e-ce488c242b34", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "96d46340-7406-436c-ab53-64c4566b7d7d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d3b28a7-642e-4a31-965e-ce488c242b34"}, {"timestamp": "2026-07-01T05:54:19.807Z", "date_only": false, "value": "2026-07-01T05:54:19.807588Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c18fa008-5221-4826-811b-1d1ea3bf2bc2", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "90bafe47-6e7d-41db-a71a-c044f1a46ebb", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c18fa008-5221-4826-811b-1d1ea3bf2bc2"}, {"timestamp": "2026-08-03T11:10:43.206Z", "date_only": false, "value": "2026-08-03T11:10:43.206707Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2023-28770", "field": "creation_timestamp", "uuid": "cb61d69d-f487-41c6-b268-e0d122d5dd86"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-28770", "field": "timestamps.last_seen_at", "uuid": "c18fa008-5221-4826-811b-1d1ea3bf2bc2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-28770", "field": "evidence.0.details.observation_date", "uuid": "c18fa008-5221-4826-811b-1d1ea3bf2bc2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-28770", "field": "status.status_updated_at", "uuid": "c18fa008-5221-4826-811b-1d1ea3bf2bc2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T01:00:01Z", "date_only": false, "value": "2026-10-23T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-28770", "field": "timestamps.recorded_at", "uuid": "c18fa008-5221-4826-811b-1d1ea3bf2bc2", "status": {"status_reason": "confirmed", "exploited": true}}]}