{"vulnerability": "cve-2023-2401", "sightings": [{"uuid": "cd05b485-7a41-4fb2-a7ce-6cdb55516a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24012", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182868046920", "content": "", "creation_timestamp": "2025-01-09T15:48:48.167273Z"}, {"uuid": "67c366bf-7b6b-4911-a766-b9739ad1938c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24010", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182734304070", "content": "", "creation_timestamp": "2025-01-09T15:48:47.568838Z"}, {"uuid": "bdbca632-e419-48bd-b104-2c74783c94de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24011", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182800435761", "content": "", "creation_timestamp": "2025-01-09T15:48:48.501221Z"}, {"uuid": "89e5d582-2d26-48fa-888e-9d803412b33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24010", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798913106504782", "content": "", "creation_timestamp": "2025-01-09T14:40:11.151549Z"}, {"uuid": "f89c6e55-170f-4675-988b-961bfec874d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24011", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798913121113388", "content": "", "creation_timestamp": "2025-01-09T14:40:11.384741Z"}, {"uuid": "1f93aecc-0038-4bfb-bcd3-44693c7696a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24012", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798913135212465", "content": "", "creation_timestamp": "2025-01-09T14:40:11.722769Z"}, {"uuid": "7667557f-9e15-4c21-9033-02cdcda92406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24010", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcxtqtlio25", "content": "", "creation_timestamp": "2025-01-09T15:15:40.228368Z"}, {"uuid": "b30d4eb2-e90a-4e24-82aa-9591efd1f956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24011", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcxttiiq42i", "content": "", "creation_timestamp": "2025-01-09T15:15:42.916963Z"}, {"uuid": "de51a7a6-1494-435a-9b34-a886f6182d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24012", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcxtvv5xw25", "content": "", "creation_timestamp": "2025-01-09T15:15:45.613502Z"}, {"uuid": "b73f4ffe-4bc9-4a51-96c9-22f70e4f06c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4lf4632i", "content": "", "creation_timestamp": "2025-01-09T15:38:30.321896Z"}, {"uuid": "0b3a0682-d43d-48b3-8e69-506d2adc8114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24011", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4mlo4o25", "content": "", "creation_timestamp": "2025-01-09T15:38:34.173318Z"}, {"uuid": "1ec63f6f-7361-4aba-9d69-e179d2efa5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4mqkad2u", "content": "", "creation_timestamp": "2025-01-09T15:38:34.825812Z"}, {"uuid": "9a1302eb-d66f-4bad-af07-9ed322db34ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4mxhtb2r", "content": "", "creation_timestamp": "2025-01-09T15:38:35.983541Z"}, {"uuid": "7ac5d40e-3b81-4b35-b0e9-d838a3b8cdc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24014", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/253", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-24014\n\ud83d\udd39 Description: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are \nvulnerable to heap-based buffer overflow, which could allow an attacker \nto execute arbitrary code.\n\n\n\ud83d\udccf Published: 2023-06-07T20:50:29.115Z\n\ud83d\udccf Modified: 2025-01-06T21:02:16.776Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-23-157-01", "creation_timestamp": "2025-01-06T21:38:17.000000Z"}, {"uuid": "f979e327-90f5-444e-b3ae-773740a507c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24012", "type": "seen", "source": "https://t.me/cvedetector/14852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-24012 - \"ThreatX DDS PKCS7 Signature Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2023-24012 \nPublished : Jan. 9, 2025, 3:15 p.m. | 39\u00a0minutes ago \nDescription : An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate\u2019s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T16:55:43.000000Z"}, {"uuid": "2454509e-edc1-47ad-bc49-4492f7e8e185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24011", "type": "seen", "source": "https://t.me/cvedetector/14851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-24011 - Siemens Industrial Automation ROS 2 DDS PKCS7 Certificate Validation_chain Execution Bypass\", \n  \"Content\": \"CVE ID : CVE-2023-24011 \nPublished : Jan. 9, 2025, 3:15 p.m. | 39\u00a0minutes ago \nDescription : An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate\u2019s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T16:55:42.000000Z"}, {"uuid": "2e55a155-4282-459c-bf3d-6ae2b50fa10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24010", "type": "seen", "source": "https://t.me/cvedetector/14850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-24010 - BDEX DDS Certificate Signature Verification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-24010 \nPublished : Jan. 9, 2025, 3:15 p.m. | 39\u00a0minutes ago \nDescription : An attacker can arbitrarily craft malicious DDS Participants (or ROS 2 Nodes) with valid certificates to compromise and get full control of the attacked secure DDS databus system by exploiting vulnerable attributes in the configuration of PKCS#7 certificate\u2019s validation. This is caused by a non-compliant implementation of permission document verification used by some DDS vendors. Specifically, an improper use of the OpenSSL PKCS7_verify function used to validate S/MIME signatures. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T16:55:41.000000Z"}, {"uuid": "f65bdee2-fdc9-4988-8d82-210ee9dfe78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-24016", "type": "seen", "source": "https://t.me/cibsecurity/68303", "content": "\u203c CVE-2023-24016 \u203c\n\nUncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T07:29:45.000000Z"}]}