diff --git a/2023/32xxx/CVE-2023-32657.json b/2023/32xxx/CVE-2023-32657.json
index 7e43460c431..55042ff57c4 100644
--- a/2023/32xxx/CVE-2023-32657.json
+++ b/2023/32xxx/CVE-2023-32657.json
@@ -1,17 +1,121 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2023-32657",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "\n\n\nWeintek Weincloud v0.13.6\n\n \n\ncould allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error message responses.\n\n\n\n\n\n\n\n"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-307 Improper Restriction of Excessive Authentication Attempts",
+                        "cweId": "CWE-307"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Weintek",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Weincloud",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "0",
+                                            "version_value": "0.13.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04",
+                "refsource": "MISC",
+                "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "advisory": "ICSA-23-199-04",
+        "discovery": "EXTERNAL"
+    },
+    "work_around": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p>\u200bAdditional mitigations are recommended to help reduce risk:</p><ul><li>\u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.</li><li>\u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.</li><li>\u200bRegularly change passwords to reduce risks.</li><li>\u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.</li></ul>\n\n<br>"
+                }
+            ],
+            "value": "\n\u200bAdditional mitigations are recommended to help reduce risk:\n\n  *  \u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.\n  *  \u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.\n  *  \u200bRegularly change passwords to reduce risks.\n  *  \u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.\n\n\n\n\n\n"
+        }
+    ],
+    "solution": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p></p>\n\n<p>\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.</p><p><br></p>"
+                }
+            ],
+            "value": "\n\n\n\n\n\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.\n\n\n\n\n"
+        }
+    ],
+    "credits": [
+        {
+            "lang": "en",
+            "value": "\u200bHank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA."
+        }
+    ],
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "LOW",
+                "attackVector": "NETWORK",
+                "availabilityImpact": "NONE",
+                "baseScore": 5.3,
+                "baseSeverity": "MEDIUM",
+                "confidentialityImpact": "LOW",
+                "integrityImpact": "NONE",
+                "privilegesRequired": "NONE",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2023/34xxx/CVE-2023-34330.json b/2023/34xxx/CVE-2023-34330.json
index 9660c8ec5fa..854b619ea4f 100644
--- a/2023/34xxx/CVE-2023-34330.json
+++ b/2023/34xxx/CVE-2023-34330.json
@@ -11,7 +11,7 @@
         "description_data": [
             {
                 "lang": "eng",
-                "value": "\nAMI SPx contains a vulnerability in the BMC where a User may cause a improper control of generation of code by Dynamic Redfish Extension. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.\u00a0"
+                "value": "\nAMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish Extension interface. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.\u00a0"
             }
         ]
     },
@@ -36,14 +36,21 @@
                     "product": {
                         "product_data": [
                             {
-                                "product_name": "MegaRAC_SPx",
+                                "product_name": "MegaRAC_SPx12",
                                 "version": {
                                     "version_data": [
                                         {
                                             "version_affected": "<",
                                             "version_name": "12.0",
                                             "version_value": "12.4"
-                                        },
+                                        }
+                                    ]
+                                }
+                            },
+                            {
+                                "product_name": "MegaRAC_SPx13",
+                                "version": {
+                                    "version_data": [
                                         {
                                             "version_affected": "<",
                                             "version_name": "13.0",
diff --git a/2023/34xxx/CVE-2023-34394.json b/2023/34xxx/CVE-2023-34394.json
index 036dac7c425..01de413b4fe 100644
--- a/2023/34xxx/CVE-2023-34394.json
+++ b/2023/34xxx/CVE-2023-34394.json
@@ -1,17 +1,108 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2023-34394",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "\n\n\n\n\n\n\nIn Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.\n\n\n\n\n\n\n\n\n\n\n\n\n\n"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-23 \u200bRelative Path Traversal",
+                        "cweId": "CWE-23"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Keysight Technologies",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "N6845A Geolocation Server",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "0",
+                                            "version_value": "2.4.2"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02",
+                "refsource": "MISC",
+                "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "advisory": "ICSA-23-199-02",
+        "discovery": "EXTERNAL"
+    },
+    "solution": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p></p>\n\n<p></p>\n\n<span style=\"background-color: rgb(255, 255, 255);\">\u200bKeysight recommends upgrading the N6854A Geolocation server to version </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.keysight.com/us/en/lib/software-detail/computer-software/n6854a-geolocation-server-and-n6841a-rf-sensor-software-sw319.html\">2.4.3</a>."
+                }
+            ],
+            "value": "\n\n\n\n\n\n\n\n\n\u200bKeysight recommends upgrading the N6854A Geolocation server to version  2.4.3 https://www.keysight.com/us/en/lib/software-detail/computer-software/n6854a-geolocation-server-and-n6841a-rf-sensor-software-sw319.html ."
+        }
+    ],
+    "credits": [
+        {
+            "lang": "en",
+            "value": "\u200bSteven Seeley of Source Incite reported these vulnerabilities to CISA."
+        }
+    ],
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "LOW",
+                "attackVector": "LOCAL",
+                "availabilityImpact": "HIGH",
+                "baseScore": 7.8,
+                "baseSeverity": "HIGH",
+                "confidentialityImpact": "HIGH",
+                "integrityImpact": "HIGH",
+                "privilegesRequired": "LOW",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2023/34xxx/CVE-2023-34429.json b/2023/34xxx/CVE-2023-34429.json
index 08c97e8e5f4..7265116bcc3 100644
--- a/2023/34xxx/CVE-2023-34429.json
+++ b/2023/34xxx/CVE-2023-34429.json
@@ -1,17 +1,121 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2023-34429",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "\n\n\nWeintek Weincloud v0.13.6\n\n \n\ncould allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.\n\n\n\n\n\n\n\n\n\n"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-237 Improper Handling of Structural Elements",
+                        "cweId": "CWE-237"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Weintek",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Weincloud",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "0",
+                                            "version_value": "0.13.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04",
+                "refsource": "MISC",
+                "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "advisory": "ICSA-23-199-04",
+        "discovery": "EXTERNAL"
+    },
+    "work_around": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p>Additional mitigations are recommended to help reduce risk:</p><ul><li>\u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.</li><li>\u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.</li><li>\u200bRegularly change passwords to reduce risks.</li><li>\u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.</li></ul>\n\n<br>"
+                }
+            ],
+            "value": "\nAdditional mitigations are recommended to help reduce risk:\n\n  *  \u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.\n  *  \u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.\n  *  \u200bRegularly change passwords to reduce risks.\n  *  \u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.\n\n\n\n\n\n"
+        }
+    ],
+    "solution": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p></p>\n\n<p>\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.</p><p>\u200b</p>"
+                }
+            ],
+            "value": "\n\n\n\n\n\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.\n\n\u200b\n\n"
+        }
+    ],
+    "credits": [
+        {
+            "lang": "en",
+            "value": "\u200bHank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA."
+        }
+    ],
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "LOW",
+                "attackVector": "NETWORK",
+                "availabilityImpact": "HIGH",
+                "baseScore": 7.5,
+                "baseSeverity": "HIGH",
+                "confidentialityImpact": "NONE",
+                "integrityImpact": "NONE",
+                "privilegesRequired": "NONE",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2023/35xxx/CVE-2023-35134.json b/2023/35xxx/CVE-2023-35134.json
index ffc4c8c3642..042eaa7f045 100644
--- a/2023/35xxx/CVE-2023-35134.json
+++ b/2023/35xxx/CVE-2023-35134.json
@@ -1,17 +1,121 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2023-35134",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "\n\n\nWeintek Weincloud v0.13.6\n\n could allow an attacker to reset a password with the corresponding account\u2019s JWT token only.\n\n\n\n"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-640 Weak Password Recovery Mechanism for Forgotten Password",
+                        "cweId": "CWE-640"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Weintek",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Weincloud",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "0",
+                                            "version_value": "0.13.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04",
+                "refsource": "MISC",
+                "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "advisory": "ICSA-23-199-04",
+        "discovery": "EXTERNAL"
+    },
+    "work_around": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p>\u200bAdditional mitigations are recommended to help reduce risk:</p><ul><li>\u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.</li><li>\u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.</li><li>\u200bRegularly change passwords to reduce risks.</li><li>\u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.</li></ul>\n\n<br>"
+                }
+            ],
+            "value": "\n\u200bAdditional mitigations are recommended to help reduce risk:\n\n  *  \u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.\n  *  \u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.\n  *  \u200bRegularly change passwords to reduce risks.\n  *  \u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.\n\n\n\n\n\n"
+        }
+    ],
+    "solution": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p></p>\n\n<p>\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.</p><p><br></p>"
+                }
+            ],
+            "value": "\n\n\n\n\n\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.\n\n\n\n\n"
+        }
+    ],
+    "credits": [
+        {
+            "lang": "en",
+            "value": "\u200bHank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA."
+        }
+    ],
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "HIGH",
+                "attackVector": "NETWORK",
+                "availabilityImpact": "NONE",
+                "baseScore": 7.4,
+                "baseSeverity": "HIGH",
+                "confidentialityImpact": "HIGH",
+                "integrityImpact": "HIGH",
+                "privilegesRequired": "NONE",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2023/36xxx/CVE-2023-36853.json b/2023/36xxx/CVE-2023-36853.json
index 47760d9dfa2..1a32911f036 100644
--- a/2023/36xxx/CVE-2023-36853.json
+++ b/2023/36xxx/CVE-2023-36853.json
@@ -1,17 +1,108 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2023-36853",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "\n\n\n\n\n\u200bIn Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.\n\n\n\n\n\n\n\n\n\n\n\n"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-749 \u200bExposed Dangerous Method or Function",
+                        "cweId": "CWE-749"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Keysight Technologies",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "N6845A Geolocation Server",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "0",
+                                            "version_value": "2.4.2"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02",
+                "refsource": "MISC",
+                "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-02"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "advisory": "ICSA-23-199-02",
+        "discovery": "EXTERNAL"
+    },
+    "solution": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p></p>\n\n<p></p>\n\n<span style=\"background-color: rgb(255, 255, 255);\">\u200bKeysight recommends upgrading the N6854A Geolocation server to version </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://www.keysight.com/us/en/lib/software-detail/computer-software/n6854a-geolocation-server-and-n6841a-rf-sensor-software-sw319.html\">2.4.3</a>."
+                }
+            ],
+            "value": "\n\n\n\n\n\n\n\n\n\u200bKeysight recommends upgrading the N6854A Geolocation server to version  2.4.3 https://www.keysight.com/us/en/lib/software-detail/computer-software/n6854a-geolocation-server-and-n6841a-rf-sensor-software-sw319.html ."
+        }
+    ],
+    "credits": [
+        {
+            "lang": "en",
+            "value": "\u200bSteven Seeley of Source Incite reported these vulnerabilities to CISA."
+        }
+    ],
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "LOW",
+                "attackVector": "LOCAL",
+                "availabilityImpact": "HIGH",
+                "baseScore": 7.8,
+                "baseSeverity": "HIGH",
+                "confidentialityImpact": "HIGH",
+                "integrityImpact": "HIGH",
+                "privilegesRequired": "LOW",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2023/36xxx/CVE-2023-36861.json b/2023/36xxx/CVE-2023-36861.json
new file mode 100644
index 00000000000..f64e888d6e4
--- /dev/null
+++ b/2023/36xxx/CVE-2023-36861.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2023-36861",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2023/37xxx/CVE-2023-37282.json b/2023/37xxx/CVE-2023-37282.json
new file mode 100644
index 00000000000..3739df9cab7
--- /dev/null
+++ b/2023/37xxx/CVE-2023-37282.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2023-37282",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file
diff --git a/2023/37xxx/CVE-2023-37362.json b/2023/37xxx/CVE-2023-37362.json
index f5e19f359e7..f9285b2294c 100644
--- a/2023/37xxx/CVE-2023-37362.json
+++ b/2023/37xxx/CVE-2023-37362.json
@@ -1,17 +1,121 @@
 {
+    "data_version": "4.0",
     "data_type": "CVE",
     "data_format": "MITRE",
-    "data_version": "4.0",
     "CVE_data_meta": {
         "ID": "CVE-2023-37362",
-        "ASSIGNER": "cve@mitre.org",
-        "STATE": "RESERVED"
+        "ASSIGNER": "ics-cert@hq.dhs.gov",
+        "STATE": "PUBLIC"
     },
     "description": {
         "description_data": [
             {
                 "lang": "eng",
-                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+                "value": "\n\n\nWeintek Weincloud v0.13.6\n\n \n\ncould allow an attacker to abuse the registration functionality to login with testing credentials to the official website.\n\n\n\n\n\n"
+            }
+        ]
+    },
+    "problemtype": {
+        "problemtype_data": [
+            {
+                "description": [
+                    {
+                        "lang": "eng",
+                        "value": "CWE-287 Improper Authentication",
+                        "cweId": "CWE-287"
+                    }
+                ]
+            }
+        ]
+    },
+    "affects": {
+        "vendor": {
+            "vendor_data": [
+                {
+                    "vendor_name": "Weintek",
+                    "product": {
+                        "product_data": [
+                            {
+                                "product_name": "Weincloud",
+                                "version": {
+                                    "version_data": [
+                                        {
+                                            "version_affected": "<=",
+                                            "version_name": "0",
+                                            "version_value": "0.13.6"
+                                        }
+                                    ]
+                                }
+                            }
+                        ]
+                    }
+                }
+            ]
+        }
+    },
+    "references": {
+        "reference_data": [
+            {
+                "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04",
+                "refsource": "MISC",
+                "name": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-04"
+            }
+        ]
+    },
+    "generator": {
+        "engine": "Vulnogram 0.1.0-dev"
+    },
+    "source": {
+        "advisory": "ICSA-23-199-04",
+        "discovery": "EXTERNAL"
+    },
+    "work_around": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p>\u200bAdditional mitigations are recommended to help reduce risk:</p><ul><li>\u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.</li><li>\u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.</li><li>\u200bRegularly change passwords to reduce risks.</li><li>\u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.</li></ul>\n\n<br>"
+                }
+            ],
+            "value": "\n\u200bAdditional mitigations are recommended to help reduce risk:\n\n  *  \u200bLog in on trusted computers if possible. Log out after usage on un-trusted ones.\n  *  \u200bOn the HMIs, if the online services are not used, set to offline mode for EasyAccess 2.0 or Dashboard services using system reserved addresses.\n  *  \u200bRegularly change passwords to reduce risks.\n  *  \u200bMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible- only applicable devices and/or systems have access to the internet.\n\n\n\n\n\n"
+        }
+    ],
+    "solution": [
+        {
+            "lang": "en",
+            "supportingMedia": [
+                {
+                    "base64": false,
+                    "type": "text/html",
+                    "value": "\n\n<p></p>\n\n<p>\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.</p><p><br></p>"
+                }
+            ],
+            "value": "\n\n\n\n\n\u200bWeintek has updated their account API to v0.13.8, which has fixed the issue. This fix does not require any action for users.\n\n\n\n\n"
+        }
+    ],
+    "credits": [
+        {
+            "lang": "en",
+            "value": "\u200bHank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA."
+        }
+    ],
+    "impact": {
+        "cvss": [
+            {
+                "attackComplexity": "LOW",
+                "attackVector": "NETWORK",
+                "availabilityImpact": "HIGH",
+                "baseScore": 7.2,
+                "baseSeverity": "HIGH",
+                "confidentialityImpact": "HIGH",
+                "integrityImpact": "HIGH",
+                "privilegesRequired": "HIGH",
+                "scope": "UNCHANGED",
+                "userInteraction": "NONE",
+                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+                "version": "3.1"
             }
         ]
     }
diff --git a/2023/38xxx/CVE-2023-38542.json b/2023/38xxx/CVE-2023-38542.json
new file mode 100644
index 00000000000..e0a4373b0b4
--- /dev/null
+++ b/2023/38xxx/CVE-2023-38542.json
@@ -0,0 +1,18 @@
+{
+    "data_type": "CVE",
+    "data_format": "MITRE",
+    "data_version": "4.0",
+    "CVE_data_meta": {
+        "ID": "CVE-2023-38542",
+        "ASSIGNER": "cve@mitre.org",
+        "STATE": "RESERVED"
+    },
+    "description": {
+        "description_data": [
+            {
+                "lang": "eng",
+                "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
+            }
+        ]
+    }
+}
\ No newline at end of file