{"metadata": {"vulnerability": "CVE-2023-50358", "count": 54, "kinds": {"milestone": 7, "sighting": 17, "kev": 11, "other": 19}}, "data": [{"timestamp": "2023-12-07T08:52:25.583Z", "date_only": false, "value": "2023-12-07T08:52:25.583Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-50358", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:31.241Z", "date_only": false, "value": "2023-12-13T01:20:31.241611Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-50358", "record": "GSD-2023-50358", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-12T23:00:00Z", "date_only": false, "value": "2024-02-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-12T23:00:00Z", "date_only": false, "value": "2024-02-12T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-12T23:00:00Z", "date_only": false, "value": "2024-02-12T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0118", "record": "CERTFR-2024-AVI-0118", "field": "last_revision_date"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0118", "record": "CERTFR-2024-AVI-0118", "field": "initial_release_date"}, {"timestamp": "2024-02-13T00:00:00Z", "date_only": false, "value": "2024-02-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0118", "record": "CERTFR-2024-AVI-0118", "field": "revisions.0.revision_date"}, {"timestamp": "2024-02-13T02:45:22.351Z", "date_only": false, "value": "2024-02-13T02:45:22.351Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-50358", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-02-13T03:15:07Z", "date_only": false, "value": "2024-02-13T03:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-975J-M6J8-QH4V", "record": "GHSA-975J-M6J8-QH4V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-02-13T03:15:07.963Z", "date_only": false, "value": "2024-02-13T03:15:07.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50358", "record": "FKIE_CVE-2023-50358", "field": "published"}, {"timestamp": "2024-02-13T03:15:07.963Z", "date_only": false, "value": "2024-02-13T03:15:07.963", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-50358", "record": "GSD-2023-50358", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-02-13T03:30:21Z", "date_only": false, "value": "2024-02-13T03:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-975J-M6J8-QH4V", "record": "GHSA-975J-M6J8-QH4V", "field": "published"}, {"timestamp": "2024-02-13T04:31:44Z", "date_only": false, "value": "2024-02-13T04:31:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/183591", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "d866c400-6a2c-4cc3-a70b-3327397b1af5", "content": "https://ift.tt/EAWnpPv\nCVE-2023-50358", "url": "https://t.me/ctinow/183591"}, {"timestamp": "2024-02-13T23:00:00Z", "date_only": false, "value": "2024-02-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-02-14T12:16:32Z", "date_only": false, "value": "2024-02-14T12:16:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/184575", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "af2e0ed4-5b71-4bd4-9ccb-5bb9877da849", "content": "https://ift.tt/quJsGH4\nQNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358)", "url": "https://t.me/ctinow/184575"}, {"timestamp": "2024-02-14T12:20:05Z", "date_only": false, "value": "2024-02-14T12:20:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5413", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "4e2ace27-ac64-4b4e-ac03-31df332da264", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Unit 42 \u0438\u0437 Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u043c 0-day \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 NAS \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 QNAP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441 \u043d\u043e\u044f\u0431\u0440\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-50358 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u00a0Quick.cgi \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u041f\u041e QTS \u0438 QuTS Hero, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\u00a0todo=set_timeinfo\u00a0\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432\u00a0\u0444\u0430\u0439\u043b\u0435 fast.cgi\u00a0\u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0SPECIFIC_SERVER\u00a0\u0432 \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438\u00a0/tmp/quick/quick_tmp.conf\u00a0\u0441 \u0438\u043c\u0435\u043d\u0435\u043c \u0437\u0430\u043f\u0438\u0441\u0438\u00a0NTP Address.\n\n\u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u0440\u0435\u0441\u0430 NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u044b\u00a0ntpdate.\n\n\u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u0447\u0442\u0435\u043d\u0438\u044f\u00a0\u0430\u0434\u0440\u0435\u0441\u0430 NTP\u00a0\u0432\u00a0\u0444\u0430\u0439\u043b\u0435 fast_tmp.conf, \u0430 \u0437\u0430\u0442\u0435\u043c \u044d\u0442\u0430 \u0441\u0442\u0440\u043e\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e\u00a0system().\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0SPECIFIC_SERVER\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412\u043f\u0435\u0440\u0432\u044b\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e 7 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 QNAP.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u044b\u044f\u0432\u0438\u043b \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u0447\u0435\u043c 21 \u043d\u043e\u044f\u0431\u0440\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 19 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e QNAP \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u043e \u043d\u043e\u0432\u043e\u0439 0-day. \n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f Palo Alto Networks \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2024 \u0433\u043e\u0434\u0430 289 665 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438\u0437 18 \u0441\u0442\u0440\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 NAS.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c NAS \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c QTS \u0438\u043b\u0438 QuTScloud Hero \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0422\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IoT, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u0435 \u043d\u0438\u0437\u043a\u0443\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u0430\u043a \u044d\u0442\u043e \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u044b QNAP \u0432 \u0445\u043e\u0440\u0434\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0441 ransomware.", "url": "https://t.me/true_secator/5413"}, {"timestamp": "2024-02-15T05:21:43.811Z", "date_only": false, "value": "2024-02-15T05:21:43.811Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / qnap", "record": "CVE-2023-50358", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-15T06:15:45.960Z", "date_only": false, "value": "2024-02-15T06:15:45.960", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-50358", "record": "GSD-2023-50358", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-22T23:00:00Z", "date_only": false, "value": "2024-02-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-02-22T23:00:00Z", "date_only": false, "value": "2024-02-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-03-08T08:16:55Z", "date_only": false, "value": "2024-03-08T08:16:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/203119", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "958e20f7-5f18-44e5-8bda-544c8cbeb267", "content": "https://ift.tt/k9PBRxQ\nCVE-2023-50358 Exploit", "url": "https://t.me/ctinow/203119"}, {"timestamp": "2024-03-08T21:25:01Z", "date_only": false, "value": "2024-03-08T21:25:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6765", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "160e9fb8-8d3d-43b6-accd-edcf75f8aaf0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aExploit CVE-2023-45318-POC  Weston Embedded uC-HTTP git commit 80d4004 ---&gt; RCE\nURL\uff1ahttps://github.com/greandfather/CVE-2023-50358-POC-RCE\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/6765"}, {"timestamp": "2024-05-16T12:09:05Z", "date_only": false, "value": "2024-05-16T12:09:05+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-50358", "field": "timestamps.asserted_at", "uuid": "370798fe-91d3-45d1-980d-b926cd9e2b8d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-16T12:09:05Z", "date_only": false, "value": "2024-05-16T12:09:05+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-50358", "field": "timestamps.first_seen_at", "uuid": "370798fe-91d3-45d1-980d-b926cd9e2b8d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-02T22:16:46.240Z", "date_only": false, "value": "2024-08-02T22:16:46.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-50358", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:05:07.485Z", "date_only": false, "value": "2024-08-15T18:05:07.485+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0353", "record": "WID-SEC-W-2024-0353", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-31T00:00:00Z", "date_only": false, "value": "2024-08-31T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-50358", "field": "timestamps.last_seen_at", "uuid": "370798fe-91d3-45d1-980d-b926cd9e2b8d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-31T00:00:00Z", "date_only": true, "value": "2024-08-31", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-50358", "field": "evidence.0.details.observation_date", "uuid": "370798fe-91d3-45d1-980d-b926cd9e2b8d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-31T00:00:00Z", "date_only": false, "value": "2024-08-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-50358", "field": "status.status_updated_at", "uuid": "370798fe-91d3-45d1-980d-b926cd9e2b8d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-13T18:32:13Z", "date_only": false, "value": "2025-02-13T18:32:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-975J-M6J8-QH4V", "record": "GHSA-975J-M6J8-QH4V", "field": "modified"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "611c1f42-86c2-42c0-9cd4-7ca13eb55a9b"}, {"timestamp": "2025-05-08T19:07:56.548Z", "date_only": false, "value": "2025-05-08T19:07:56.548850Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-50358", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-08T19:07:56.548Z", "date_only": false, "value": "2025-05-08T19:07:56.548850Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50358", "record": "FKIE_CVE-2023-50358", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-09T18:16:31.828Z", "date_only": false, "value": "2025-05-09T18:16:31.828Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-50358", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-09T18:16:31.828Z", "date_only": false, "value": "2025-05-09T18:16:31.828Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-50358", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-09T18:26:26Z", "date_only": false, "value": "2025-05-09T18:26:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15812", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "6dd1ee85-86c9-42aa-8ef4-e297d4ed819d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50358\n\ud83d\udd25 CVSS Score: 5.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.5.2645 build 20240116 and later\nQTS 4.5.4.2627 build 20231225 and later\nQTS 4.3.6.2665 build 20240131 and later\nQTS 4.3.4.2675 build 20240131 and later\nQTS 4.3.3.2644 build 20240131 and later\nQTS 4.2.6 build 20240131 and later\nQuTS hero h5.1.5.2647 build 20240118 and later\nQuTS hero h4.5.4.2626 build 20231225 and later\nQuTScloud c5.1.5.2651 and later\n\ud83d\udccf Published: 2024-02-13T02:45:22.351Z\n\ud83d\udccf Modified: 2025-05-09T18:16:31.828Z\n\ud83d\udd17 References:\n1. https://www.qnap.com/en/security-advisory/qsa-23-57\n2. https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/\n3. https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213941-1032", "url": "https://t.me/DarkWebInformer_CVEAlerts/15812"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-50358", "field": "timestamps.asserted_at", "uuid": "12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-50358", "field": "evidence.0.details.added_date", "uuid": "12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "a775017e-8835-4b14-91ab-695e2baef600"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-50358", "field": "timestamps.first_seen_at", "uuid": "12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-50358", "field": "status.status_updated_at", "uuid": "12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T06:39:31.960Z", "date_only": false, "value": "2026-06-17T06:39:31.960", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50358", "record": "FKIE_CVE-2023-50358", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-50358", "field": "timestamps.recorded_at", "uuid": "12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:43.824Z", "date_only": false, "value": "2026-06-19T12:42:43.824288Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "a41d4db6-81a4-4e36-92de-e0eac26e728e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/12d37ba7-a1d9-4d66-a5e6-cbc2aa2cded8"}, {"timestamp": "2026-06-19T12:45:50.142Z", "date_only": false, "value": "2026-06-19T12:45:50.142097Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15a4ae43-9ad0-4fe7-a666-b423a588a40a", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "85b2df82-3f47-4f67-b85c-636ab5804e41", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/15a4ae43-9ad0-4fe7-a666-b423a588a40a"}, {"timestamp": "2026-06-23T14:03:16.381Z", "date_only": false, "value": "2026-06-23T14:03:16.381773Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/94b74466-2e7c-41c8-a331-2a273a2581ad", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "bcb71b8f-cf06-4611-9f46-c625c125f2e3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/94b74466-2e7c-41c8-a331-2a273a2581ad"}, {"timestamp": "2026-06-30T10:22:29.111Z", "date_only": false, "value": "2026-06-30T10:22:29.111456Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98fa9144-4a06-4b85-8589-42a2f78b0187", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "359f0000-29ee-4f4d-9185-9afea830b396", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98fa9144-4a06-4b85-8589-42a2f78b0187"}, {"timestamp": "2026-07-01T07:17:57.382Z", "date_only": false, "value": "2026-07-01T07:17:57.382977Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/370798fe-91d3-45d1-980d-b926cd9e2b8d", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "8eff5f5b-0598-4bc1-8a65-d24438ad733f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/370798fe-91d3-45d1-980d-b926cd9e2b8d"}, {"timestamp": "2026-07-01T12:47:07Z", "date_only": false, "value": "2026-07-01T12:47:07+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-50358", "field": "timestamps.recorded_at", "uuid": "370798fe-91d3-45d1-980d-b926cd9e2b8d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-06T11:00:13.333Z", "date_only": false, "value": "2026-07-06T11:00:13.333788Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/170", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "92901fd5-f84a-4376-83aa-9bc3e2c8f06e", "url": "https://t.me/ZerodayAlert/170"}, {"timestamp": "2026-07-07T00:00:21.421Z", "date_only": false, "value": "2026-07-07T00:00:21.421678Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/170", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "ced209de-cdf9-499b-9c15-86e9bf8d5788", "url": "https://t.me/ZerodayAlert/170"}, {"timestamp": "2026-07-12T02:00:05.609Z", "date_only": false, "value": "2026-07-12T02:00:05.609894Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/170", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "36d0301d-c7bc-40cd-a2a7-9fb317bd9c1a", "url": "https://t.me/ZerodayAlert/170"}, {"timestamp": "2026-07-13T00:00:54.413Z", "date_only": false, "value": "2026-07-13T00:00:54.413671Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/170", "record": "CVE-2023-50358", "field": "creation_timestamp", "uuid": "43a2a3d9-ea4d-437e-8d85-4cfaf26115d4", "url": "https://t.me/ZerodayAlert/170"}]}
