{"metadata": {"vulnerability": "cve-2023-4280", "count": 20, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2023-08-09T19:24:29.697Z", "date_only": false, "value": "2023-08-09T19:24:29.697Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:27.216Z", "date_only": false, "value": "2023-12-13T01:20:27.216080Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-4280", "record": "GSD-2023-4280", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-02T16:52:06.959Z", "date_only": false, "value": "2024-01-02T16:52:06.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-02T17:15:09Z", "date_only": false, "value": "2024-01-02T17:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3RWQ-PXMH-PW55", "record": "GHSA-3RWQ-PXMH-PW55", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-01-02T17:15:09.520Z", "date_only": false, "value": "2024-01-02T17:15:09.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4280", "record": "FKIE_CVE-2023-4280", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-02T17:15:09.520Z", "date_only": false, "value": "2024-01-02T17:15:09.520", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-4280", "record": "GSD-2023-4280", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-01-02T18:26:57Z", "date_only": false, "value": "2024-01-02T18:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/161943", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "f0a8fe59-12c1-4875-abb8-153bda1d1e70", "content": "https://ift.tt/Sn2Zyxt\nCVE-2023-4280", "url": "https://t.me/ctinow/161943"}, {"timestamp": "2024-01-02T18:30:20Z", "date_only": false, "value": "2024-01-02T18:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3RWQ-PXMH-PW55", "record": "GHSA-3RWQ-PXMH-PW55", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-02T18:30:20Z", "date_only": false, "value": "2024-01-02T18:30:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3RWQ-PXMH-PW55", "record": "GHSA-3RWQ-PXMH-PW55", "field": "modified", "linked_record": true}, {"timestamp": "2024-01-03T01:35:59Z", "date_only": false, "value": "2024-01-03T01:35:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/74185", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "772e8ff1-332e-4655-94ba-766e58326010", "content": "\u203c\ufe0fCVE-2023-4280\u203c\ufe0f\n\nAn unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74185"}, {"timestamp": "2024-01-09T16:51:14.477Z", "date_only": false, "value": "2024-01-09T16:51:14.477", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-4280", "record": "GSD-2023-4280", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-01-23T07:52:00Z", "date_only": false, "value": "2024-01-23T07:52:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/171754", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "d911a1ed-d5d7-475e-a9f7-c9ab7a729ed9", "content": "https://ift.tt/zdj7fHM\nCVE-2023-4280 | Silabs Gecko SDK up to 4.3.x TrustZone out-of-bounds write", "url": "https://t.me/ctinow/171754"}, {"timestamp": "2024-01-30T16:48:35.396Z", "date_only": false, "value": "2024-01-30T16:48:35.396290Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4280", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-30T16:48:35.396Z", "date_only": false, "value": "2024-01-30T16:48:35.396290Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4280", "record": "FKIE_CVE-2023-4280", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-08-02T07:24:04.329Z", "date_only": false, "value": "2024-08-02T07:24:04.329Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-4280", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-25T15:55:11.799Z", "date_only": false, "value": "2024-09-25T15:55:11.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Silabs", "record": "cve-2023-4280", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-13T19:03:26.975Z", "date_only": false, "value": "2025-06-13T19:03:26.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-13T19:03:26.975Z", "date_only": false, "value": "2025-06-13T19:03:26.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-4280", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-13T19:35:03Z", "date_only": false, "value": "2025-06-13T19:35:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18332", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "1e8ab2f6-b7c5-4423-93a8-349d888bb789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4280\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.\n\ud83d\udccf Published: 2024-01-02T16:52:06.959Z\n\ud83d\udccf Modified: 2025-06-13T19:03:26.975Z\n\ud83d\udd17 References:\n1. https://github.com/SiliconLabs/gecko_sdk\n2. https://community.silabs.com/069Vm0000004NinIAE", "url": "https://t.me/DarkWebInformer_CVEAlerts/18332", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T06:37:28.120Z", "date_only": false, "value": "2026-06-17T06:37:28.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-4280", "record": "FKIE_CVE-2023-4280", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-09T18:40:39.387Z", "anchors": {"origin": {"timestamp": "2024-01-02T16:52:06.959Z", "date_only": false, "value": "2024-01-02T16:52:06.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-02T16:52:06.959Z", "date_only": false, "value": "2024-01-02T16:52:06.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-06-13T19:35:03Z", "date_only": false, "value": "2025-06-13T19:35:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18332", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "1e8ab2f6-b7c5-4423-93a8-349d888bb789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4280\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.\n\ud83d\udccf Published: 2024-01-02T16:52:06.959Z\n\ud83d\udccf Modified: 2025-06-13T19:03:26.975Z\n\ud83d\udd17 References:\n1. https://github.com/SiliconLabs/gecko_sdk\n2. https://community.silabs.com/069Vm0000004NinIAE", "url": "https://t.me/DarkWebInformer_CVEAlerts/18332", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 45628976.041, "hours": 12674.715566944446, "days": 528.1131486226852, "min_seconds": 45628976.041, "max_seconds": 45628976.041, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-02T16:52:06.959Z", "date_only": false, "value": "2024-01-02T16:52:06.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-06-13T19:35:03Z", "date_only": false, "value": "2025-06-13T19:35:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18332", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "1e8ab2f6-b7c5-4423-93a8-349d888bb789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4280\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.\n\ud83d\udccf Published: 2024-01-02T16:52:06.959Z\n\ud83d\udccf Modified: 2025-06-13T19:03:26.975Z\n\ud83d\udd17 References:\n1. https://github.com/SiliconLabs/gecko_sdk\n2. https://community.silabs.com/069Vm0000004NinIAE", "url": "https://t.me/DarkWebInformer_CVEAlerts/18332", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 90035312.428968, "hours": 25009.809008046665, "days": 1042.0753753352778, "min_seconds": 90035312.428968, "max_seconds": 90035312.428968, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-02T16:52:06.959Z", "date_only": false, "value": "2024-01-02T16:52:06.959Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-4280", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T18:40:39.387Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 44406336.387968, "hours": 12335.09344110222, "days": 513.9622267125925, "min_seconds": 44406336.387968, "max_seconds": 44406336.387968, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-13T19:35:03Z", "date_only": false, "value": "2025-06-13T19:35:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18332", "record": "CVE-2023-4280", "field": "creation_timestamp", "uuid": "1e8ab2f6-b7c5-4423-93a8-349d888bb789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4280\n\ud83d\udd25 CVSS Score: 9.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.\n\ud83d\udccf Published: 2024-01-02T16:52:06.959Z\n\ud83d\udccf Modified: 2025-06-13T19:03:26.975Z\n\ud83d\udd17 References:\n1. https://github.com/SiliconLabs/gecko_sdk\n2. https://community.silabs.com/069Vm0000004NinIAE", "url": "https://t.me/DarkWebInformer_CVEAlerts/18332", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T18:40:39.387Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}