Threat operations/Case file
AL
Member accessPublic view · sign in

Vulnerability threat dossier

CVE-2023-45208

Vendor unknownProduct mapping pending

Metadata pending authoritative retrieval.

VTP deterministic threat0.3of 100 · CVSS excluded

VTP analyst assessment

Monitoring — no AI review currently required

AI-assisted analytical recommendationDoes not set factual exploitation state
AI review stateNOT REQUIRED
AI priorityNONE
AI confidenceUnknown
Public exploitation · VTP factUNKNOWN

Assessment

This CVE remains in monitoring. Its metadata and source evidence are available below. A new material report or relevant sensor finding can trigger an AI review.

Why it matters

The available facts and source references are listed below. No AI assessment has been recorded for this dossier.

Evidence

No validated baseline evidence scope is persisted for this CVE.

Uncertainties

First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.

Next watchpoint

Independent primary confirmation of active exploitation would materially change this assessment.

AI baseline history (0)
    Technical severityUNKNOWNCVSS unknown · technical context
    Public exploitationUNKNOWNGlobal public evidence
    Exploit maturityNONE KNOWNReliability not implied
    EPSS0.0172th percentile · prediction
    Evidence confidence0%Strongest independent active claim
    VelocitySTABLEMaterial events only
    First-party telemetryFirst-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.
    Availability: SENSOR_ONLINE_NO_MATCHING_ACTIVITY · Evidence: UNKNOWN
    01

    VTP deterministic assessment

    Why this matters

    1. 01

      EPSS is 0.01; this is predictive context, not exploitation evidence.

    2. 02

      First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.

    02

    Material change ledger

    What changed

    No material changes are recorded for this subject.

    03

    Claim provenance

    Evidence and source independence

    1publications detected
    1underlying evidence chains

    0 primary sources · 0 dependent secondary reports · 1 reports with unresolved independence. Repetition remains visible without multiplying confirmation.

    04

    Event history

    Threat timeline

      05

      Original publications

      Source record

      KrebsOnSecurityPRESSUNKNOWN

      U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

      A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims.

      CVE-2023-45208
      Separate evidence group
      Original
      06

      Technical vulnerability data

      Context, not threat proof

      VTP threat score0.3vtp-threat-v1-public
      Public exploitation0 / 30
      EPSS prediction0.29 / 20
      Exploit availability0 / 15
      Source independence0 / 15
      Intelligence recency0 / 10
      Threat acceleration0 / 10
      CVSS technical severityExcluded
      CVSS
      Unknown · UNKNOWN
      Vector
      Unknown
      CWE
      Unknown
      CPE records
      0
      Deterministic history records
      1
      07

      Raw observations

      First-party sensor records

      First-party sensor telemetry is active; no disclosure-eligible deterministic observation is currently public for this CVE. This does not mean no activity was observed.