{"metadata": {"vulnerability": "CVE-2023-31446", "count": 46, "kinds": {"milestone": 5, "sighting": 19, "kev": 11, "other": 11}}, "data": [{"timestamp": "2023-04-28T00:00:00Z", "date_only": false, "value": "2023-04-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-31446", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:29.644Z", "date_only": false, "value": "2023-12-13T01:20:29.644218Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-31446", "record": "GSD-2023-31446", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-07T22:09:15Z", "date_only": false, "value": "2024-01-07T22:09:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9743", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "a3d8a2c1-32e1-484a-95ec-4dfa2ee01922", "content": "#exploit\n1. CVE-2023-31446:\nDodge OPTIFY RCE\nhttps://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution\n\n2. CVE-2020-11110:\nGrafana Stored CSS\nhttps://github.com/AVE-Stoik/CVE-2020-11110-Proof-of-Concept/tree/main\n\n3.\u00a0CVE-2023-51467:\nApache Ofbiz Exploit\nhttps://github.com/JaneMandy/CVE-2023-51467-Exploit", "url": "https://t.me/CyberSecurityTechnologies/9743"}, {"timestamp": "2024-01-08T09:16:40Z", "date_only": false, "value": "2024-01-08T09:16:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/164237", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "c8496e8d-c21f-44d8-8916-858f72b32ab5", "content": "https://ift.tt/tSKY2Iu\nCVE-2023-31446 Exploit", "url": "https://t.me/ctinow/164237"}, {"timestamp": "2024-01-10T00:00:00Z", "date_only": false, "value": "2024-01-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-31446", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-10T03:15:43Z", "date_only": false, "value": "2024-01-10T03:15:43Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-89PH-WR9X-HCFC", "record": "GHSA-89PH-WR9X-HCFC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-10T03:15:43.263Z", "date_only": false, "value": "2024-01-10T03:15:43.263", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-31446", "record": "FKIE_CVE-2023-31446", "field": "published"}, {"timestamp": "2024-01-10T03:15:43.263Z", "date_only": false, "value": "2024-01-10T03:15:43.263", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-31446", "record": "GSD-2023-31446", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-10T03:30:25Z", "date_only": false, "value": "2024-01-10T03:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-89PH-WR9X-HCFC", "record": "GHSA-89PH-WR9X-HCFC", "field": "published"}, {"timestamp": "2024-01-10T04:26:20Z", "date_only": false, "value": "2024-01-10T04:26:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/165527", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "548e7f99-0f3b-4036-a7e8-1742b6b9ddc8", "content": "https://ift.tt/C3sDF8O\nCVE-2023-31446", "url": "https://t.me/ctinow/165527"}, {"timestamp": "2024-01-11T16:04:45.672Z", "date_only": false, "value": "2024-01-11T16:04:45.672833Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-31446", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-01-11T16:04:45.672Z", "date_only": false, "value": "2024-01-11T16:04:45.672833Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-31446", "record": "FKIE_CVE-2023-31446", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-01-17T03:30:55Z", "date_only": false, "value": "2024-01-17T03:30:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-89PH-WR9X-HCFC", "record": "GHSA-89PH-WR9X-HCFC", "field": "modified"}, {"timestamp": "2024-01-27T07:07:25Z", "date_only": false, "value": "2024-01-27T07:07:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/174654", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "47e06263-d321-4986-afdb-d55ae4a6bd5d", "content": "https://ift.tt/WCrAeL5\nCVE-2023-31446 | Cassia Gateway XC1000_2.1.1.2303082218/XC2000_2.1.1.2303090947 /bypass/config queueUrl os command injection", "url": "https://t.me/ctinow/174654"}, {"timestamp": "2024-01-29T21:01:36.064Z", "date_only": false, "value": "2024-01-29T21:01:36.064Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-31446", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-29T21:15:08.340Z", "date_only": false, "value": "2024-01-29T21:15:08.340", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-31446", "record": "GSD-2023-31446", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-24T20:58:52Z", "date_only": false, "value": "2024-04-24T20:58:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4817", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "34cb0d05-2673-4079-9b5a-b8a1295a6310", "content": "#ExploitObserverAlert\n\nCVE-2023-31446\n\nDESCRIPTION: Exploit Observer has 10 entries in 5 file formats related to CVE-2023-31446. In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.\n\nFIRST-EPSS: 0.019820000\nNVD-IS: 5.9\nNVD-ES: 3.9\nARPS-PRIORITY: 0.9521352", "url": "https://t.me/arpsyndicate/4817"}, {"timestamp": "2024-08-02T14:53:30.768Z", "date_only": false, "value": "2024-08-02T14:53:30.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-31446", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T09:01:19Z", "date_only": false, "value": "2024-08-16T09:01:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2439", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "f4eaa93a-7683-4467-a85b-5977e32b7126", "content": "#exploit\n1. CVE-2023-31446:\nDodge OPTIFY RCE\nhttps://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution\n\n2. CVE-2020-11110:\nGrafana Stored CSS\nhttps://github.com/AVE-Stoik/CVE-2020-11110-Proof-of-Concept/tree/main\n\n3.\u00a0CVE-2023-51467:\nApache Ofbiz Exploit\nhttps://github.com/JaneMandy/CVE-2023-51467-Exploit", "url": "https://t.me/Rootsec_2/2439"}, {"timestamp": "2024-12-21T16:46:52Z", "date_only": false, "value": "2024-12-21T16:46:52+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-31446", "field": "timestamps.asserted_at", "uuid": "3639f41c-2c58-4d18-b119-eacf609af79a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-21T16:46:52Z", "date_only": false, "value": "2024-12-21T16:46:52+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-31446", "field": "timestamps.first_seen_at", "uuid": "3639f41c-2c58-4d18-b119-eacf609af79a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "f06d462b-d388-4376-a1d0-ae6bcf6c36e7"}, {"timestamp": "2025-06-20T15:36:04.915Z", "date_only": false, "value": "2025-06-20T15:36:04.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-31446", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-20T15:36:04.915Z", "date_only": false, "value": "2025-06-20T15:36:04.915Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-31446", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T15:44:16Z", "date_only": false, "value": "2025-06-20T15:44:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18978", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "5c6603a5-4931-4d81-a621-8a21252b5f32", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31446\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized. This leads to injecting Bash code and executing it with root privileges on device startup.\n\ud83d\udccf Published: 2024-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T15:36:04.915Z\n\ud83d\udd17 References:\n1. https://www.cassianetworks.com\n2. https://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution\n3. https://blog.kscsc.online/cves/202331446/md.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/18978"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-31446", "field": "timestamps.asserted_at", "uuid": "306aa1cb-c62b-42ec-ab15-0deb1f4f8421", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-31446", "field": "evidence.0.details.added_date", "uuid": "306aa1cb-c62b-42ec-ab15-0deb1f4f8421", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "c798e38d-ef83-4fae-a826-92ceb75a8fb4"}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-31446", "field": "timestamps.first_seen_at", "uuid": "306aa1cb-c62b-42ec-ab15-0deb1f4f8421", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-07T00:00:00Z", "date_only": false, "value": "2025-07-07T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-31446", "field": "status.status_updated_at", "uuid": "306aa1cb-c62b-42ec-ab15-0deb1f4f8421", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "a1f42a70-e6d9-4c65-9c44-230c6ec0b7b8"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "c78ad134-86cd-4f11-8b71-09f76fb4ce6e"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "f7b38fe9-41e5-4bcb-bf21-220c732d8796"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "f19d18ee-0e00-490f-b3fd-527efed62e0e"}, {"timestamp": "2026-06-14T00:00:00Z", "date_only": false, "value": "2026-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "9a7bb968-9d4a-42df-9067-ffd0c2b9db97"}, {"timestamp": "2026-06-17T05:56:58.370Z", "date_only": false, "value": "2026-06-17T05:56:58.370", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-31446", "record": "FKIE_CVE-2023-31446", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:02.369Z", "date_only": false, "value": "2026-06-19T12:46:02.369225Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c2540db-7c41-4929-803a-7e939f8793a5", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "632847f9-8993-45c1-bbc2-80f6c85c4c8f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c2540db-7c41-4929-803a-7e939f8793a5"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-31446", "field": "timestamps.recorded_at", "uuid": "306aa1cb-c62b-42ec-ab15-0deb1f4f8421", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:09.515Z", "date_only": false, "value": "2026-06-23T11:12:09.515832Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/306aa1cb-c62b-42ec-ab15-0deb1f4f8421", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "84132d43-e587-4009-aa8c-72f3c20a6f8a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/306aa1cb-c62b-42ec-ab15-0deb1f4f8421"}, {"timestamp": "2026-06-23T14:03:24.934Z", "date_only": false, "value": "2026-06-23T14:03:24.934355Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/130f79fe-831a-409c-91fb-ca567123f8bb", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "397946e3-57ec-4778-9c4d-84351f25b63b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/130f79fe-831a-409c-91fb-ca567123f8bb"}, {"timestamp": "2026-06-30T09:23:16.388Z", "date_only": false, "value": "2026-06-30T09:23:16.388887Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d242fe9-e356-4900-b69b-9f0dc0e91bd3", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "f0b1ef24-0bd0-4b90-8a50-363c5a02237e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d242fe9-e356-4900-b69b-9f0dc0e91bd3"}, {"timestamp": "2026-07-01T05:54:38.923Z", "date_only": false, "value": "2026-07-01T05:54:38.923120Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3639f41c-2c58-4d18-b119-eacf609af79a", "record": "CVE-2023-31446", "field": "creation_timestamp", "uuid": "cf77df7b-482a-4d2f-9bf4-717d7b98989a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3639f41c-2c58-4d18-b119-eacf609af79a"}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-31446", "field": "timestamps.last_seen_at", "uuid": "3639f41c-2c58-4d18-b119-eacf609af79a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": true, "value": "2026-11-03", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-31446", "field": "evidence.0.details.observation_date", "uuid": "3639f41c-2c58-4d18-b119-eacf609af79a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T00:00:00Z", "date_only": false, "value": "2026-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-31446", "field": "status.status_updated_at", "uuid": "3639f41c-2c58-4d18-b119-eacf609af79a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T01:00:01Z", "date_only": false, "value": "2026-11-05T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-31446", "field": "timestamps.recorded_at", "uuid": "3639f41c-2c58-4d18-b119-eacf609af79a", "status": {"status_reason": "confirmed", "exploited": true}}]}