{"metadata": {"vulnerability": "CVE-2023-33009", "count": 63, "kinds": {"milestone": 6, "sighting": 21, "kev": 11, "other": 25}}, "data": [{"timestamp": "2023-05-17T00:00:00Z", "date_only": false, "value": "2023-05-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-33009", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-33009", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-05-24T13:15:09Z", "date_only": false, "value": "2023-05-24T13:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G3F9-6H7X-X69V", "record": "GHSA-G3F9-6H7X-X69V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-05-24T13:15:09.560Z", "date_only": false, "value": "2023-05-24T13:15:09.560000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-05-24T13:15:09.560Z", "date_only": false, "value": "2023-05-24T13:15:09.560", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-33009", "record": "FKIE_CVE-2023-33009", "field": "published"}, {"timestamp": "2023-05-24T13:15:09.560Z", "date_only": false, "value": "2023-05-24T13:15:09.560", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-33009", "record": "GSD-2023-33009", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-05-24T15:30:27Z", "date_only": false, "value": "2023-05-24T15:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G3F9-6H7X-X69V", "record": "GHSA-G3F9-6H7X-X69V", "field": "published"}, {"timestamp": "2023-05-24T16:26:54Z", "date_only": false, "value": "2023-05-24T16:26:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/64677", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "45979b38-ff71-45e3-be52-0de910e58531", "content": "\u203c CVE-2023-33009 \u203c\n\nA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/64677"}, {"timestamp": "2023-05-24T22:00:00Z", "date_only": false, "value": "2023-05-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1299", "record": "WID-SEC-W-2023-1299", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-05-24T22:00:00Z", "date_only": false, "value": "2023-05-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1299", "record": "WID-SEC-W-2023-1299", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-05-24T22:00:00Z", "date_only": false, "value": "2023-05-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1299", "record": "WID-SEC-W-2023-1299", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-05-25T19:04:24Z", "date_only": false, "value": "2023-05-25T19:04:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/o33eMMvV5GbS5_yvZwxR9Wy9Vxsb16o4MXlOt7k80dQpLQ", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "bab7d1e1-abc3-4e96-b7db-e328751151ff"}, {"timestamp": "2023-05-25T19:12:23Z", "date_only": false, "value": "2023-05-25T19:12:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/262", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "842ddd82-76a9-4086-8d6d-ab78e7f56cfc", "content": "Zyxel Issues Critical Security Patches for Firewall and VPN Products\nhttps://thehackernews.com/2023/05/zyxel-issues-critical-security-patches.html\n\nZyxel has released software updates to address two critical security flaws affecting select firewall and VPN products that could be abused by remote attackers to achieve code execution.\nBoth the flaws \u2013\u00a0CVE-2023-33009 and CVE-2023-33010\u00a0\u2013 are\u00a0buffer overflow vulnerabilities\u00a0and are rated 9.8 out of 10 on the CVSS scoring system.\nA brief description of the two issues is below -\n\nCVE-2023-33009\u00a0-", "url": "https://t.me/KomunitiSiber/262"}, {"timestamp": "2023-05-26T18:40:05Z", "date_only": false, "value": "2023-05-26T18:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4429", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "b5a821bf-0c5e-4698-9d06-15b942f68249", "content": "Zyxel \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 firewall \u0438 VPN.\n\n\u041a\u0430\u043a \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c, \u043e\u0431\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0430.\n\n\u0412\u0441\u0435 \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a DoS \u0438 RCE \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u041f\u0440\u0438\u0447\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 Zyxel \u043a\u0430\u043a \u0440\u0430\u0437 \u0442\u0430\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 CVE-2023-33009 \u0438 CVE-2023-33010 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0443 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432 9,8 \u0431\u0430\u043b\u043b\u043e\u0432.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u043c\u0438: ATP \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 ZLD V4.32 \u0434\u043e V5.36, USG FLEX \u043e\u0442 ZLD V4.50 \u0434\u043e V5.36, USG FLEX50 (W) / USG20 (W) - \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 VPN \u0432\u0435\u0440\u0441\u0438\u0439 \u043e\u0442 ZLD V4.25 \u0434\u043e V5.36, VPN \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 ZLD V4.30 \u0434\u043e V5.36 \u0438 ZyWALL / USG \u043e\u0442 ZLD V4.25 \u0434\u043e V4.73.\n\n\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0432\u043e\u0435\u043c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438 \u043c\u0430\u043b\u043e\u0433\u043e \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0440\u0430\u0431\u043e\u0442\u043d\u0438\u043a\u0430\u043c, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0442\u0430\u043a\u0438\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u0435\u043c\u043b\u0435\u043d\u0438\u0439 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0434\u0430\u0431\u044b \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432. \n\n\u0412\u0435\u0434\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Zyxel (CVE-2023-28771), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435,\u00a0\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u043c Mirai DDoS.\u00a0\u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0443\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 PoC \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438.", "url": "https://t.me/true_secator/4429"}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-33009", "field": "timestamps.asserted_at", "uuid": "65cd784e-8442-4452-8646-1048d42b6bf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-33009", "field": "timestamps.asserted_at", "uuid": "38e72cbd-fc31-4051-8543-7721db74fbe9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": true, "value": "2023-06-05", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-33009", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-33009", "field": "evidence.0.details.added_date", "uuid": "38e72cbd-fc31-4051-8543-7721db74fbe9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": true, "value": "2023-06-05", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-33009", "field": "evidence.0.details.date_added", "uuid": "65cd784e-8442-4452-8646-1048d42b6bf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-33009", "field": "timestamps.first_seen_at", "uuid": "65cd784e-8442-4452-8646-1048d42b6bf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-33009", "field": "timestamps.first_seen_at", "uuid": "38e72cbd-fc31-4051-8543-7721db74fbe9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-33009", "field": "status.status_updated_at", "uuid": "65cd784e-8442-4452-8646-1048d42b6bf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-33009", "field": "status.status_updated_at", "uuid": "38e72cbd-fc31-4051-8543-7721db74fbe9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-33009", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-06-05T22:00:00Z", "date_only": false, "value": "2023-06-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1299", "record": "WID-SEC-W-2023-1299", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-06-05T22:00:00Z", "date_only": false, "value": "2023-06-05T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1299", "record": "WID-SEC-W-2023-1299", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-06-06T06:52:33Z", "date_only": false, "value": "2023-06-06T06:52:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/7hx0Eh-1rj7GqCpsGv8vc3vl2LENad0XkZ8Du0V4VFE6pg", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "2f9888d0-b729-4b88-9c0d-02377e547cf7"}, {"timestamp": "2023-06-06T07:25:44Z", "date_only": false, "value": "2023-06-06T07:25:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/314", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "fad1e1f4-628e-4bd2-8b15-95dbe6f2d5d4", "content": "Zyxel Firewalls Under Attack! Urgent Patching Required\nhttps://thehackernews.com/2023/06/zyxel-firewalls-under-attack-urgent.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday\u00a0placed\u00a0two recently disclosed flaws in Zyxel firewalls to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerabilities, tracked as\u00a0CVE-2023-33009 and CVE-2023-33010, are buffer overflow vulnerabilities that could enable an unauthenticated attacker to cause a", "url": "https://t.me/KomunitiSiber/314"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "d8db1ad9-cccc-4636-b5a9-8108c4e0ad03"}, {"timestamp": "2023-06-15T06:17:00.675Z", "date_only": false, "value": "2023-06-15T06:17:00.675Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zyxel", "record": "CVE-2023-33009", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-16T00:00:00Z", "date_only": false, "value": "2023-06-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-06-26T00:00:00Z", "date_only": true, "value": "2023-06-26", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-33009", "field": "evidence.0.details.due_date", "uuid": "65cd784e-8442-4452-8646-1048d42b6bf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-13T18:11:01Z", "date_only": false, "value": "2023-11-13T18:11:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b4a98411-68c8-46bf-aff8-1659046646b3", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "437a1be1-83b5-4df9-8ca1-7cd759ccbc47"}, {"timestamp": "2023-11-15T09:27:54Z", "date_only": false, "value": "2023-11-15T09:27:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11981", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "5f9dbda3-f312-49eb-ab9d-07ef190768cf", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Russia: Sandworm have breached Danish energy sector companies. \nVery nice timeline analysis.\nCVE-2023-28771 + CVE-2023-33009 + CVE-2023-33010\n\nhttps://github.com/blackorbird/APT_REPORT/blob/master/Sandworm/sektorcert-angrebet-mod-dansk-kritisk-infrastruktur-tlp-clear-en.pdf", "url": "https://t.me/cKure/11981"}, {"timestamp": "2023-11-22T23:57:09Z", "date_only": false, "value": "2023-11-22T23:57:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/375", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "7059a4ed-079b-4820-952d-428a193d2ebe", "content": "#ExploitObserverAlert\n\nCVE-2023-33009\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-33009. A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.\n\nFIRST-EPSS: 0.028100000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/375"}, {"timestamp": "2023-11-24T00:00:00Z", "date_only": false, "value": "2023-11-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "sources_release_date.data.1.date"}, {"timestamp": "2023-11-24T08:10:00Z", "date_only": false, "value": "2023-11-24T08:10:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-12-13T01:20:37.330Z", "date_only": false, "value": "2023-12-13T01:20:37.330991Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-33009", "record": "GSD-2023-33009", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-01T15:51:48.877Z", "date_only": false, "value": "2024-04-01T15:51:48.877000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-04-01T15:51:48.877Z", "date_only": false, "value": "2024-04-01T15:51:48.877", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-33009", "record": "GSD-2023-33009", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-03T22:50:49.469Z", "date_only": false, "value": "2024-04-03T22:50:49.469000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202305-2121", "record": "VAR-202305-2121", "field": "last_update_date"}, {"timestamp": "2024-08-02T15:32:46.565Z", "date_only": false, "value": "2024-08-02T15:32:46.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-33009", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:51:24.785Z", "date_only": false, "value": "2024-08-15T17:51:24.785+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1299", "record": "WID-SEC-W-2023-1299", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-24T20:34:33.767Z", "date_only": false, "value": "2024-12-24T20:34:33.767294Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971828", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "cd331c94-0de8-43e7-a0a4-6da456f5cf5c", "url": "https://feedsin.space/feed/CISAKevBot/items/2971828"}, {"timestamp": "2025-02-04T16:14:56.233Z", "date_only": false, "value": "2025-02-04T16:14:56.233928Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-33009", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-04T16:14:56.233Z", "date_only": false, "value": "2025-02-04T16:14:56.233928Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-33009", "record": "FKIE_CVE-2023-33009", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:42Z", "date_only": false, "value": "2025-02-23T02:10:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "d04fbb14-4b86-4dca-9f08-ea98bb2f4994"}, {"timestamp": "2025-07-07T05:16:45Z", "date_only": false, "value": "2025-07-07T05:16:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b4a98411-68c8-46bf-aff8-1659046646b3", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "ccb99fb8-0b54-4f8c-ad11-f8de13436eda"}, {"timestamp": "2025-08-31T03:12:58Z", "date_only": false, "value": "2025-08-31T03:12:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "8191a485-200b-41f5-bdf5-c7c0af7d12fb"}, {"timestamp": "2025-10-21T23:05:47.636Z", "date_only": false, "value": "2025-10-21T23:05:47.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-33009", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:47.636Z", "date_only": false, "value": "2025-10-21T23:05:47.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-33009", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:44Z", "date_only": false, "value": "2025-10-22T00:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G3F9-6H7X-X69V", "record": "GHSA-G3F9-6H7X-X69V", "field": "modified"}, {"timestamp": "2026-02-02T12:26:57.840Z", "date_only": false, "value": "2026-02-02T12:26:57.840831Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d9ec5534-4fa6-4376-bccc-ae093c8406c6", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "73e60b02-31f4-4416-9fa0-b8762607b640", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d9ec5534-4fa6-4376-bccc-ae093c8406c6"}, {"timestamp": "2026-02-02T12:26:57.840Z", "date_only": false, "value": "2026-02-02T12:26:57.840831Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d9ec5534-4fa6-4376-bccc-ae093c8406c6", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "f87f399a-3dd1-4292-ae2a-352af9b23fac", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d9ec5534-4fa6-4376-bccc-ae093c8406c6"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-33009", "field": "timestamps.recorded_at", "uuid": "65cd784e-8442-4452-8646-1048d42b6bf9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T06:00:16.810Z", "date_only": false, "value": "2026-06-17T06:00:16.810", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-33009", "record": "FKIE_CVE-2023-33009", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:53.998Z", "date_only": false, "value": "2026-06-19T12:46:53.998693Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f17a6602-de0f-45be-b9c9-98652a6c7ab0", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "9b0ed098-6a7a-4f40-852c-5750ba8cbd45", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f17a6602-de0f-45be-b9c9-98652a6c7ab0"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-33009", "field": "timestamps.recorded_at", "uuid": "38e72cbd-fc31-4051-8543-7721db74fbe9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:07.255Z", "date_only": false, "value": "2026-06-23T11:14:07.255726Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/38e72cbd-fc31-4051-8543-7721db74fbe9", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "533af536-1250-4ab5-ad36-e08807acb4b3", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/38e72cbd-fc31-4051-8543-7721db74fbe9"}, {"timestamp": "2026-06-23T14:05:41.455Z", "date_only": false, "value": "2026-06-23T14:05:41.455126Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b8742ac-b5c1-40b4-9afa-ee43ea09f960", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "fa296a07-2a91-4ddd-a032-c53671b62cbb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b8742ac-b5c1-40b4-9afa-ee43ea09f960"}, {"timestamp": "2026-09-01T17:00:08.413Z", "date_only": false, "value": "2026-09-01T17:00:08.413059Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/769", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "dc28ffd9-efa0-47cc-8661-f0477ae7ba25", "url": "https://t.me/Hackme_news/769"}, {"timestamp": "2026-09-09T00:00:10.030Z", "date_only": false, "value": "2026-09-09T00:00:10.030610Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/769", "record": "CVE-2023-33009", "field": "creation_timestamp", "uuid": "2f2be887-b88c-46ce-8124-8366b5d71fa7", "url": "https://t.me/Hackme_news/769"}]}