{"metadata": {"vulnerability": "CVE-2024-12297", "count": 49, "kinds": {"milestone": 8, "sighting": 23, "kev": 0, "other": 18}}, "data": [{"timestamp": "2024-12-06T04:02:40.742Z", "date_only": false, "value": "2024-12-06T04:02:40.742Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-12297", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": true, "value": "2025-01-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0036", "record": "CERTFR-2025-AVI-0036", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0036", "record": "CERTFR-2025-AVI-0036", "field": "revisions.0.revision_date"}, {"timestamp": "2025-01-15T10:00:46.524Z", "date_only": false, "value": "2025-01-15T10:00:46.524Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12297", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-15T10:07:41.158Z", "date_only": false, "value": "2025-01-15T10:07:41.158250Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113831815458773296", "record": "cve-2024-12297", "field": "creation_timestamp", "uuid": "bb4b8099-265e-4c23-a368-2d4c38e6ab7d", "url": "https://infosec.exchange/users/cve/statuses/113831815458773296"}, {"timestamp": "2025-01-15T10:10:52Z", "date_only": false, "value": "2025-01-15T10:10:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1713", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "79db0816-1da3-4528-9aca-d5949b377dc7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12297\n\ud83d\udd39 Description: Moxa\u2019s Ethernet switch EDS-508A Series, running firmware version 3.11 and earlier, is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.\n\ud83d\udccf Published: 2025-01-15T10:00:46.524Z\n\ud83d\udccf Modified: 2025-01-15T10:00:46.524Z\n\ud83d\udd17 References:\n1. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series", "url": "https://t.me/DarkWebInformer_CVEAlerts/1713"}, {"timestamp": "2025-01-15T10:15:07Z", "date_only": false, "value": "2025-01-15T10:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JP78-8MXR-44QR", "record": "GHSA-JP78-8MXR-44QR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-15T10:15:07.237Z", "date_only": false, "value": "2025-01-15T10:15:07.237", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12297", "record": "FKIE_CVE-2024-12297", "field": "published"}, {"timestamp": "2025-01-15T10:15:46.367Z", "date_only": false, "value": "2025-01-15T10:15:46.367437Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjuzda762f", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "c2981ae5-6666-45de-ab4b-a135cdc4e8d2", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjuzda762f"}, {"timestamp": "2025-01-15T10:58:40.262Z", "date_only": false, "value": "2025-01-15T10:58:40.262027Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbojwna2k", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "f8386730-0279-490c-8bb6-ebfe9a873654", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbojwna2k"}, {"timestamp": "2025-01-15T11:45:48Z", "date_only": false, "value": "2025-01-15T11:45:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15417", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "ddaaffa5-49ae-4b0e-a907-be114919f778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12297 - Moxa EDS-508A Series Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12297 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : Moxa\u2019s Ethernet switch EDS-508A Series, running firmware version 3.11 and earlier, is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15417"}, {"timestamp": "2025-01-15T12:30:45Z", "date_only": false, "value": "2025-01-15T12:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JP78-8MXR-44QR", "record": "GHSA-JP78-8MXR-44QR", "field": "published"}, {"timestamp": "2025-01-15T14:49:11.063Z", "date_only": false, "value": "2025-01-15T14:49:11.063174Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12297", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-15T14:49:11.063Z", "date_only": false, "value": "2025-01-15T14:49:11.063174Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12297", "record": "FKIE_CVE-2024-12297", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-15T14:49:22.117Z", "date_only": false, "value": "2025-01-15T14:49:22.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12297", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-19T02:02:35.967Z", "date_only": false, "value": "2025-01-19T02:02:35.967196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lg2q6tiko52u", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "14ea7ab1-ecc1-44b2-b2ed-1e781a0e6c6e", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lg2q6tiko52u"}, {"timestamp": "2025-01-19T04:34:40.788Z", "date_only": false, "value": "2025-01-19T04:34:40.788036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg2yopxuls2v", "record": "cve-2024-12297", "field": "creation_timestamp", "uuid": "756b5d52-b339-4c41-8c66-0186d7c372ad", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg2yopxuls2v"}, {"timestamp": "2025-01-19T23:00:00Z", "date_only": false, "value": "2025-01-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-19T23:00:00Z", "date_only": false, "value": "2025-01-19T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-19T23:00:00Z", "date_only": false, "value": "2025-01-19T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-20T20:10:18.864Z", "date_only": false, "value": "2025-01-20T20:10:18.864726Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/maik.io/post/3lg75gqiy432o", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "49ec8a11-5c7e-4343-a239-0848ddc86b15", "url": "https://bsky.app/profile/maik.io/post/3lg75gqiy432o"}, {"timestamp": "2025-01-21T16:07:29Z", "date_only": false, "value": "2025-01-21T16:07:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/996", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "a7b9eeaa-7d29-46d5-8a25-df568c921e33", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0645\u062c\u0648\u0632 \u0641\u0631\u06cc\u0645\u0648\u0631 \u0628\u0631\u0627\u06cc \u0633\u0648\u0626\u06cc\u0686\u200c\u0647\u0627\u06cc Moxa EDS-508A \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc/\u062a\u0623\u06cc\u06cc\u062f \u0647\u0648\u06cc\u062a \u0645\u0631\u062a\u0628\u0637 \u0627\u0633\u062a.  \n\u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 brute force \u06cc\u0627 \u062d\u0645\u0644\u0647 \u0628\u0631\u062e\u0648\u0631\u062f MD5 \u0628\u0631\u0627\u06cc \u062c\u0639\u0644 \u0647\u0634\u200c\u0647\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n BDU: 2025-00371\n CVE-2024-12297\n\n \u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f  \u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062a\u0631\u0644 \u0646\u0634\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627 \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc (IDS/IPS) \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062a\u0644\u0627\u0634 \u0647\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627.\n\n \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647:\n https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series\n\n\ud83d\udc48 \u0646\u0638\u0631\u0627\u062a \u0648 \u062a\u062c\u0631\u0628\u06cc\u0627\u062a \u0634\u0645\u0627 \u0627\u0631\u0632\u0634\u0645\u0646\u062f \u0627\u0633\u062a - \u0644\u0637\u0641\u0627 \u0622\u0646\u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "url": "https://t.me/ics_cert/996"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": true, "value": "2025-03-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0181", "record": "CERTFR-2025-AVI-0181", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-03-06T00:00:00Z", "date_only": false, "value": "2025-03-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0181", "record": "CERTFR-2025-AVI-0181", "field": "revisions.0.revision_date"}, {"timestamp": "2025-03-06T08:27:52.297Z", "date_only": false, "value": "2025-03-06T08:27:52.297Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-12297", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-06T08:27:52.297Z", "date_only": false, "value": "2025-03-06T08:27:52.297Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Moxa", "record": "CVE-2024-12297", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-06T08:37:17Z", "date_only": false, "value": "2025-03-06T08:37:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6655", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "ebb5f929-b923-4bd8-941d-e644686e92f2", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12297\n\ud83d\udd25 CVSS Score: 9.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Moxa\u2019s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.\n\ud83d\udccf Published: 2025-01-15T10:00:46.524Z\n\ud83d\udccf Modified: 2025-03-06T08:27:52.297Z\n\ud83d\udd17 References:\n1. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series\n2. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches", "url": "https://t.me/DarkWebInformer_CVEAlerts/6655"}, {"timestamp": "2025-03-06T09:31:53Z", "date_only": false, "value": "2025-03-06T09:31:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JP78-8MXR-44QR", "record": "GHSA-JP78-8MXR-44QR", "field": "modified"}, {"timestamp": "2025-03-07T06:36:57.079Z", "date_only": false, "value": "2025-03-07T06:36:57.079567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ljrfgogbyk2a", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "49bbeb3a-e416-49e5-b5dd-f2eff349a6b8", "url": "https://bsky.app/profile/samilaiho.com/post/3ljrfgogbyk2a"}, {"timestamp": "2025-03-08T04:34:09Z", "date_only": false, "value": "2025-03-08T04:34:09.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8ThijABIfi-5nNlQ7kr_WvEtubQLhHXnUTTbU5BQXc6b8iBP", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "60e524e1-de77-4935-adba-b510539768ea"}, {"timestamp": "2025-03-11T05:45:00Z", "date_only": false, "value": "2025-03-11T05:45:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "132e9f26-4259-491f-a77c-38b4d3cd80e5", "url": "https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html"}, {"timestamp": "2025-03-11T07:49:31Z", "date_only": false, "value": "2025-03-11T07:49:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/6468", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "94aeb37e-7f32-46ac-9c96-a71b1c47ff5c", "content": "\u26a0\ufe0f A critical flaw (CVE-2024-12297) in Moxa PT switches could let attackers bypass authentication, with a CVSS score of 9.2/10.\n\nThis could lead to unauthorized access or service disruptions.\n\nProtect your systems now: https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html", "url": "https://t.me/thehackernews/6468"}, {"timestamp": "2025-03-11T07:54:59Z", "date_only": false, "value": "2025-03-11T07:54:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/l3e32rH5Vr1G0LWCEJnjtgeMTZSnq6j1vh42vzGIavOEvA", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "a0dadb9b-e4a9-4511-afdf-d610b7f3c524"}, {"timestamp": "2025-03-11T08:17:14.577Z", "date_only": false, "value": "2025-03-11T08:17:14.577383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lk3mvoirxn25", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "e2632c58-1cac-4467-84f3-ca616e99fba1", "url": "https://bsky.app/profile/nimblenerd.social/post/3lk3mvoirxn25"}, {"timestamp": "2025-03-11T08:28:13Z", "date_only": false, "value": "2025-03-11T08:28:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/claytechsolution/207", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "2c4bf079-213d-493c-8dd8-24deed5929c2", "content": "The Hacker News\nMoxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches\n\nTaiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees.\nThe vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4 score of 9.2 out of a maximum of 10.0.\n\"Multiple Moxa PT switches are vulnerable to an authentication bypass because of flaws in their", "url": "https://t.me/claytechsolution/207"}, {"timestamp": "2025-03-11T12:18:53Z", "date_only": false, "value": "2025-03-11T12:18:53.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pd6Hois9L-Ok_Ydu60EWoBX9NnIXOJfrvpd0U-oT8UhSwA", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "4fecdbe4-0b23-4e5f-a66a-5e3a350d5bb0"}, {"timestamp": "2025-03-11T13:36:07Z", "date_only": false, "value": "2025-03-11T13:36:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6827", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "da520823-e8d1-40eb-9541-3e7b8ce6fb5a", "content": "\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f Moxa \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 PT, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-12297, \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS v4 9,2 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10,0 \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u0435\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0440\u0443\u0442\u0430 \u0438 \u0430\u0442\u0430\u043a \u0441 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0435\u0439 MD5 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0445\u044d\u0448\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: PT-508 (\u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 3.8), PT-510 (\u0432\u0435\u0440\u0441\u0438\u044f 3.8), PT-7528 (\u0432\u0435\u0440\u0441\u0438\u044f 5.0), PT-7728 (\u0432\u0435\u0440\u0441\u0438\u044f 3.9), PT-7828 (\u0432\u0435\u0440\u0441\u0438\u044f 4.0), PT-G503 (\u0432\u0435\u0440\u0441\u0438\u044f 5.3), PT-G510 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5), PT-G7728 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5) \u0438 PT-G7828 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044f\u044f).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u0432\u0448\u0438\u0441\u044c \u0441\u043e \u0441\u043b\u0443\u0436\u0431\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Moxa.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u0440\u0430\u0437\u0438\u043b \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0410\u0440\u0442\u0435\u043c\u0443 \u0422\u0443\u0440\u044b\u0448\u0435\u0432\u0443 \u0438\u0437 \u0420\u0443\u0441\u0430\u0442\u043e\u043c \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0420\u0410\u0421\u0423) \u0437\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438\u043b\u0438 ACL, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044e \u0441\u0435\u0442\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c MFA \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0443 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0435 \u0441\u0435\u0440\u0438\u0438 EDS-508A, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 3.11 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0435\u0449\u0435 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430.", "url": "https://t.me/true_secator/6827"}, {"timestamp": "2025-12-14T23:00:00Z", "date_only": false, "value": "2025-12-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-03T23:00:00Z", "date_only": false, "value": "2026-02-03T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-02-03T23:00:00Z", "date_only": false, "value": "2026-02-03T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0116", "record": "CERTFR-2026-AVI-0116", "field": "last_revision_date"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": true, "value": "2026-02-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0116", "record": "CERTFR-2026-AVI-0116", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-02-04T00:00:00Z", "date_only": false, "value": "2026-02-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0116", "record": "CERTFR-2026-AVI-0116", "field": "revisions.0.revision_date"}, {"timestamp": "2026-02-04T09:40:22.636Z", "date_only": false, "value": "2026-02-04T09:40:22.636+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0127", "record": "WID-SEC-W-2025-0127", "field": "document.tracking.generator.date"}, {"timestamp": "2026-02-04T14:50:13.582Z", "date_only": false, "value": "2026-02-04T14:50:13.582806Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me24qaafrw2h", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "27116d44-58e7-4d24-8da8-5e0ddc2685a7", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3me24qaafrw2h"}, {"timestamp": "2026-02-04T15:40:27Z", "date_only": false, "value": "2026-02-04T15:40:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-085", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "c7673b49-f652-4457-8177-494423c8c1a1", "url": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-085"}, {"timestamp": "2026-06-17T06:59:27.020Z", "date_only": false, "value": "2026-06-17T06:59:27.020", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12297", "record": "FKIE_CVE-2024-12297", "field": "lastModified"}, {"timestamp": "2026-07-20T22:00:05.986Z", "date_only": false, "value": "2026-07-20T22:00:05.986471Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/claytechsolution/205", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "84406ca1-f4d7-4061-a5db-7f4c368314b9", "content": "The Hacker News\nMoxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches\n\nTaiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees.\nThe vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4 score of 9.2 out of a maximum of 10.0.\n\"Multiple Moxa PT switches are vulnerable to an authentication bypass because of flaws in their", "url": "https://t.me/claytechsolution/205"}, {"timestamp": "2026-08-04T13:00:06.664Z", "date_only": false, "value": "2026-08-04T13:00:06.664763Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/363", "record": "CVE-2024-12297", "field": "creation_timestamp", "uuid": "82af9ba2-910d-4bd9-8f16-e570f85406a2", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/363"}]}