{"metadata": {"vulnerability": "cve-2023-0862", "count": 32, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 25}}, "data": [{"timestamp": "2023-02-16T00:00:00Z", "date_only": false, "value": "2023-02-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-02-16T09:00:00Z", "date_only": false, "value": "2023-02-16T09:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / ONEKEY", "record": "cve-2023-0862", "field": "containers.cna.datePublic"}, {"timestamp": "2023-02-16T09:01:36.192Z", "date_only": false, "value": "2023-02-16T09:01:36.192Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-0862", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-02-16T09:07:09.930Z", "date_only": false, "value": "2023-02-16T09:07:09.930Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-0862", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-02-16T10:15:00Z", "date_only": false, "value": "2023-02-16T10:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HP6Q-H54G-HCWW", "record": "GHSA-HP6Q-H54G-HCWW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-02-16T10:15:00Z", "date_only": false, "value": "2023-02-16T10:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-0862", "record": "GSD-2023-0862", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-02-16T10:15:11.983Z", "date_only": false, "value": "2023-02-16T10:15:11.983000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_release_date.data.4.date"}, {"timestamp": "2023-02-16T10:15:11.983Z", "date_only": false, "value": "2023-02-16T10:15:11.983", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0862", "record": "FKIE_CVE-2023-0862", "field": "published"}, {"timestamp": "2023-02-16T12:30:22Z", "date_only": false, "value": "2023-02-16T12:30:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HP6Q-H54G-HCWW", "record": "GHSA-HP6Q-H54G-HCWW", "field": "published"}, {"timestamp": "2023-02-16T12:37:16Z", "date_only": false, "value": "2023-02-16T12:37:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/58308", "record": "CVE-2023-0862", "field": "creation_timestamp", "uuid": "ee69c42f-3c36-4220-8c97-07777096de99", "content": "\u203c CVE-2023-0862 \u203c\n\nThe NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web root directory, authenticated users could gain remote command execution with elevated privileges. This issue affects NSRW: from 4.3.0.0 before 4.3.0.119, from 4.4.0.0 before 4.4.0.118, from 4.6.0.0 before 4.6.0.105, from 4.7.0.0 before 4.7.0.103. The issue affects NSRW packaged by Phoenix Contact routers: from 4.6.72.0 before 4.6.72.101, from 4.6.73.0 before 4.6.73.101.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/58308"}, {"timestamp": "2023-02-21T08:24:22.762Z", "date_only": false, "value": "2023-02-21T08:24:22.762Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ONEKEY", "record": "cve-2023-0862", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-24T00:00:00Z", "date_only": false, "value": "2023-02-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-02-24T18:30:26Z", "date_only": false, "value": "2023-02-24T18:30:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HP6Q-H54G-HCWW", "record": "GHSA-HP6Q-H54G-HCWW", "field": "modified"}, {"timestamp": "2023-02-27T00:00:00Z", "date_only": false, "value": "2023-02-27T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-03-07T07:00:00Z", "date_only": false, "value": "2023-03-07T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2022-053", "record": "VDE-2022-053", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-03-07T07:00:00Z", "date_only": false, "value": "2023-03-07T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2022-053", "record": "VDE-2022-053", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-23T00:39:04Z", "date_only": false, "value": "2023-10-23T00:39:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/72746", "record": "CVE-2023-0862", "field": "creation_timestamp", "uuid": "0c53c0d5-fe21-4770-9a32-0c9a260493ad", "content": "\u203c CVE-2023-46306 \u203c\n\nThe web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 executes an OS command constructed with unsanitized user input: shell metacharacters in the /admin/gnssAutoAlign.php device_id parameter. This occurs because another thread can be started before the trap that triggers the cleanup function. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. NOTE: this is different from CVE-2023-0861 and CVE-2023-0862, which were fixed in version 4.6.0.105.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/72746"}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_release_date.data.2.date"}, {"timestamp": "2023-10-26T03:55:00Z", "date_only": false, "value": "2023-10-26T03:55:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-11-02T15:47:00Z", "date_only": false, "value": "2023-11-02T15:47Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-0862", "record": "GSD-2023-0862", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-07T04:01:44.163Z", "date_only": false, "value": "2023-11-07T04:01:44.163000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "sources_update_date.data.4.date"}, {"timestamp": "2023-12-13T01:20:22.707Z", "date_only": false, "value": "2023-12-13T01:20:22.707355Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-0862", "record": "GSD-2023-0862", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T05:24:34.659Z", "date_only": false, "value": "2024-08-02T05:24:34.659Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-0862", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-14T15:05:53.571Z", "date_only": false, "value": "2024-08-14T15:05:53.571000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202302-1451", "record": "VAR-202302-1451", "field": "last_update_date"}, {"timestamp": "2025-03-18T14:50:33.476Z", "date_only": false, "value": "2025-03-18T14:50:33.476944Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-0862", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-18T14:50:33.476Z", "date_only": false, "value": "2025-03-18T14:50:33.476944Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0862", "record": "FKIE_CVE-2023-0862", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-18T14:50:42.840Z", "date_only": false, "value": "2025-03-18T14:50:42.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-0862", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-18T14:50:42.840Z", "date_only": false, "value": "2025-03-18T14:50:42.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-0862", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-09T08:02:23.390Z", "date_only": false, "value": "2025-04-09T08:02:23.390Z", "kind": "other", "label": "Document generated", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2022-053", "record": "VDE-2022-053", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-14T13:00:15Z", "date_only": false, "value": "2025-05-14T13:00:15.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2022-053", "record": "VDE-2022-053", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-14T13:00:15Z", "date_only": false, "value": "2025-05-14T13:00:15.000Z", "kind": "other", "label": "Updated", "source": "csaf_phoenixcontactgmbhcokg \u00b7 VDE-2022-053", "record": "VDE-2022-053", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T05:26:30.410Z", "date_only": false, "value": "2026-06-17T05:26:30.410", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-0862", "record": "FKIE_CVE-2023-0862", "field": "lastModified"}]}