{"metadata": {"vulnerability": "CVE-2023-20107", "count": 27, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 19}}, "data": [{"timestamp": "2022-10-27T00:00:00Z", "date_only": false, "value": "2022-10-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-20107", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2023-20107", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-22T15:49:39Z", "date_only": false, "value": "2023-03-22T15:49:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "record": "CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-03-22T16:00:00Z", "date_only": false, "value": "2023-03-22T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "record": "CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-22T16:00:00Z", "date_only": false, "value": "2023-03-22T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "record": "CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-22T16:00:00Z", "date_only": false, "value": "2023-03-22T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "record": "CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-03-22T23:00:00Z", "date_only": false, "value": "2023-03-22T23:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2023-20107", "record": "GSD-2023-20107", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2023-03-23T00:00:00Z", "date_only": false, "value": "2023-03-23T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-20107", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-23T00:00:00Z", "date_only": false, "value": "2023-03-23T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2023-20107", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-03-23T17:15:00Z", "date_only": false, "value": "2023-03-23T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P33M-2G5R-VX6V", "record": "GHSA-P33M-2G5R-VX6V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-03-23T17:15:00Z", "date_only": false, "value": "2023-03-23T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-20107", "record": "GSD-2023-20107", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-03-23T17:15:15.197Z", "date_only": false, "value": "2023-03-23T17:15:15.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20107", "record": "FKIE_CVE-2023-20107", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-23T18:30:18Z", "date_only": false, "value": "2023-03-23T18:30:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P33M-2G5R-VX6V", "record": "GHSA-P33M-2G5R-VX6V", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-03-23T19:37:06Z", "date_only": false, "value": "2023-03-23T19:37:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/60602", "record": "CVE-2023-20107", "field": "creation_timestamp", "uuid": "78f1f65b-0cde-48ae-9eca-57fc4ff4c516", "content": "\u203c CVE-2023-20107 \u203c\n\nA vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco ASA 5506-X, ASA 5508-X, and ASA 5516-X Firewalls could allow an unauthenticated, remote attacker to cause a cryptographic collision, enabling the attacker to discover the private key of an affected device. This vulnerability is due to insufficient entropy in the DRBG for the affected hardware platforms when generating cryptographic keys. An attacker could exploit this vulnerability by generating a large number of cryptographic keys on an affected device and looking for collisions with target devices. A successful exploit could allow the attacker to impersonate an affected target device or to decrypt traffic secured by an affected key that is sent to or from an affected target device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/60602"}, {"timestamp": "2023-03-28T00:00:00Z", "date_only": false, "value": "2023-03-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0266", "record": "CERTFR-2023-AVI-0266", "field": "revisions.0.revision_date"}, {"timestamp": "2023-04-05T14:26:00Z", "date_only": false, "value": "2023-04-05T14:26Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-20107", "record": "GSD-2023-20107", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-04-05T15:30:24Z", "date_only": false, "value": "2023-04-05T15:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P33M-2G5R-VX6V", "record": "GHSA-P33M-2G5R-VX6V", "field": "modified"}, {"timestamp": "2023-12-13T01:20:29.206Z", "date_only": false, "value": "2023-12-13T01:20:29.206210Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-20107", "record": "GSD-2023-20107", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-10T23:23:04Z", "date_only": false, "value": "2024-05-10T23:23:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "record": "CISCO-SA-ASA5500X-ENTROPY-6V9BHVYP", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-02T08:57:35.883Z", "date_only": false, "value": "2024-08-02T08:57:35.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-20107", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-28T16:24:36.112Z", "date_only": false, "value": "2024-10-28T16:24:36.112775Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20107", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-28T16:24:36.112Z", "date_only": false, "value": "2024-10-28T16:24:36.112775Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20107", "record": "FKIE_CVE-2023-20107", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-28T16:31:56.892Z", "date_only": false, "value": "2024-10-28T16:31:56.892Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-20107", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-28T16:31:56.892Z", "date_only": false, "value": "2024-10-28T16:31:56.892Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-20107", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-25T16:24:10Z", "date_only": false, "value": "2024-12-25T16:24:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8484", "record": "CVE-2023-20107", "field": "creation_timestamp", "uuid": "6494b936-eab5-486a-aedf-0a177e607f50", "content": "#Threat_Research\n\"Randomness of random in Cisco ASA (CVE-2023-20107)\", 2023.\n\n]-> Slides (.pdf)", "url": "https://t.me/CyberSecurityTechnologies/8484", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-11T19:37:30.880Z", "date_only": false, "value": "2026-08-11T19:37:30.880", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-20107", "record": "FKIE_CVE-2023-20107", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:19.793Z", "date_only": false, "value": "2026-09-01T17:00:19.793330Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6953", "record": "CVE-2023-20107", "field": "creation_timestamp", "uuid": "03d00d52-3b27-4c5c-8351-0366c57f0e07", "content": "Threat Research\n\"Randomness of random in Cisco ASA (CVE-2023-20107)\", 2023.\nSlides:\nhttps://www.sstic.org/media/SSTIC2023/SSTIC-actes/randomness_of_random_in_cisco_asa/SSTIC2023-Slides-randomness_of_random_in_cisco_asa-ebalard_benadjila.pdf\n\nexploit\n1. CVE-2023-20887:\nVMWare vRealize Network Insight Pre-Authenticated RCE\nhttps://github.com/sinsinology/CVE-2023-20887\n https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887\n\n2. CVE-2023-27997:\nFortiOS SSL-VPN buffer overflow vulnerability\nhttps://github.com/hheeyywweellccoommee/CVE-2023-27997-POC-FortiOS-SSL-VPN-buffer-overflow-vulnerability-ssijz\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.25", "url": "https://t.me/cissp/6953"}], "metrics": {"as_of": "2026-10-28T23:35:08.739Z", "anchors": {"origin": {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2023-20107", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2023-20107", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-12-25T16:24:10Z", "date_only": false, "value": "2024-12-25T16:24:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8484", "record": "CVE-2023-20107", "field": "creation_timestamp", "uuid": "6494b936-eab5-486a-aedf-0a177e607f50", "content": "#Threat_Research\n\"Randomness of random in Cisco ASA (CVE-2023-20107)\", 2023.\n\n]-> Slides (.pdf)", "url": "https://t.me/CyberSecurityTechnologies/8484", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 55700650.0, "hours": 15472.402777777777, "days": 644.683449074074, "min_seconds": 55614250.0, "max_seconds": 55700650.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2023-20107", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-12-25T16:24:10Z", "date_only": false, "value": "2024-12-25T16:24:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8484", "record": "CVE-2023-20107", "field": "creation_timestamp", "uuid": "6494b936-eab5-486a-aedf-0a177e607f50", "content": "#Threat_Research\n\"Randomness of random in Cisco ASA (CVE-2023-20107)\", 2023.\n\n]-> Slides (.pdf)", "url": "https://t.me/CyberSecurityTechnologies/8484", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 113787308.739034, "hours": 31607.585760842776, "days": 1316.9827400351157, "min_seconds": 113700908.739034, "max_seconds": 113787308.739034, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisco", "record": "CVE-2023-20107", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T23:35:08.739Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 58086658.739034, "hours": 16135.182983064999, "days": 672.2992909610416, "min_seconds": 58086658.739034, "max_seconds": 58086658.739034, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-12-25T16:24:10Z", "date_only": false, "value": "2024-12-25T16:24:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8484", "record": "CVE-2023-20107", "field": "creation_timestamp", "uuid": "6494b936-eab5-486a-aedf-0a177e607f50", "content": "#Threat_Research\n\"Randomness of random in Cisco ASA (CVE-2023-20107)\", 2023.\n\n]-> Slides (.pdf)", "url": "https://t.me/CyberSecurityTechnologies/8484", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T23:35:08.739Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}