{"metadata": {"vulnerability": "cve-2024-40891", "count": 125, "kinds": {"milestone": 4, "sighting": 100, "kev": 11, "other": 10}}, "data": [{"timestamp": "2024-07-11T17:35:29.595Z", "date_only": false, "value": "2024-07-11T17:35:29.595Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-40891", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-28T21:13:33.388Z", "date_only": false, "value": "2025-01-28T21:13:33.388009Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lgtep3hmh22o", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7b23319a-3d89-460e-9fba-55fa31a1e599", "url": "https://bsky.app/profile/greynoise.bsky.social/post/3lgtep3hmh22o"}, {"timestamp": "2025-01-28T21:19:14.495Z", "date_only": false, "value": "2025-01-28T21:19:14.495171Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/iagox86/statuses/113908066147897929", "record": "cve-2024-40891", "field": "creation_timestamp", "uuid": "ab9dd464-7305-4273-8e94-2f983f4f7cc0", "url": "https://infosec.exchange/users/iagox86/statuses/113908066147897929"}, {"timestamp": "2025-01-28T21:28:59.358Z", "date_only": false, "value": "2025-01-28T21:28:59.358384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgtfi6arhdz2", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "e2996369-c519-4767-8e16-3d6a2ab91c8e", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgtfi6arhdz2"}, {"timestamp": "2025-01-28T22:27:29.178Z", "date_only": false, "value": "2025-01-28T22:27:29.178172Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lgtiteaoks2h", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "79a8ccfe-b2bf-4d12-819f-735d97749395", "url": "https://bsky.app/profile/bluecyber.bsky.social/post/3lgtiteaoks2h"}, {"timestamp": "2025-01-29T04:11:00Z", "date_only": false, "value": "2025-01-29T04:11:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "fd8a5444-a29e-4f58-b5c9-bc68578dc4a7", "url": "https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html"}, {"timestamp": "2025-01-29T05:58:54Z", "date_only": false, "value": "2025-01-29T05:58:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/222", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "d1dd3fc7-f7f7-4526-b6a6-4a4d86ae23b0", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability\nLink: https://thehackernews.com/2025/01/zyxel-cpe-devices-face-active.html", "url": "https://t.me/DarkWebInformer_News/222"}, {"timestamp": "2025-01-29T06:00:04.976Z", "date_only": false, "value": "2025-01-29T06:00:04.976203Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lguc4oreva2c", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "d779951e-81fe-49d5-9f70-2ce4dc9a3e40", "url": "https://bsky.app/profile/techit.bsky.social/post/3lguc4oreva2c"}, {"timestamp": "2025-01-29T06:03:50.574Z", "date_only": false, "value": "2025-01-29T06:03:50.574176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lgucdg5kq222", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "2096f181-a7af-4f97-be95-329664190aae", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lgucdg5kq222"}, {"timestamp": "2025-01-29T06:17:59.419Z", "date_only": false, "value": "2025-01-29T06:17:59.419989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgud4pcsc22n", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "33adeee8-17f5-4e14-875a-dba45339d355", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgud4pcsc22n"}, {"timestamp": "2025-01-29T06:18:16.584Z", "date_only": false, "value": "2025-01-29T06:18:16.584899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgud57plki2u", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "739bcc05-b4c4-4478-b285-2fdaa5ec9a41", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgud57plki2u"}, {"timestamp": "2025-01-29T07:00:23Z", "date_only": false, "value": "2025-01-29T07:00:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/82355", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "6820edcf-ae37-4b26-bc0d-1986cb2c9aa4", "content": "\ud83d\udd8b\ufe0f Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability \ud83d\udd8b\ufe0f\n\nCybersecurity researchers are warning that a critical zeroday vulnerability impacting Zyxel CPE Series devices is seeing active exploitation attempts in the wild. \"Attackers can leverage this vulnerability to execute arbitrary commands on affected devices, leading to complete system compromise, data exfiltration, or network infiltration,\" GreyNoise researcher Glenn Thorpe said in an alert.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/82355"}, {"timestamp": "2025-01-29T07:05:00Z", "date_only": false, "value": "2025-01-29T07:05:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/230040", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "c88cb2ff-6ffb-44fc-bfb6-e32699437afd", "content": "Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability\nhttps://ift.tt/6CRPdso", "url": "https://t.me/ctinow/230040"}, {"timestamp": "2025-01-29T08:05:26.252Z", "date_only": false, "value": "2025-01-29T08:05:26.252492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lguj4tvui22y", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "721d88a7-1733-4389-86f9-d75b0ab12966", "url": "https://bsky.app/profile/hackingne.ws/post/3lguj4tvui22y"}, {"timestamp": "2025-01-29T08:10:48Z", "date_only": false, "value": "2025-01-29T08:10:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/X-QcZf3r5Nrj8dBDoXtidH59fhhiZehMWWHqC5YjcO01Mg", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "18c50f72-fe24-4ca6-90d6-a914e16d91a4"}, {"timestamp": "2025-01-29T09:03:10Z", "date_only": false, "value": "2025-01-29T09:03:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/mcGM8AewISElfprQwnZqY8KSdNHl5ynmKcrEjRoDS1n57Aw", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "e3d315ed-7306-42fe-a094-e8be4aa362f7"}, {"timestamp": "2025-01-29T09:03:13Z", "date_only": false, "value": "2025-01-29T09:03:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/7678", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "f18ef214-a5c8-440c-bf29-3cf69b40655a", "content": "Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability \u2013 thehackernews.com\n\nWed, 29 Jan 2025 13:11:00", "url": "https://t.me/MalaysiaHacktivistz/7678"}, {"timestamp": "2025-01-29T10:46:16Z", "date_only": false, "value": "2025-01-29T10:46:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/2197", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "147535bc-c9a3-4993-ac24-8227cee50453", "content": "\u26a1Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2197"}, {"timestamp": "2025-01-29T11:50:05Z", "date_only": false, "value": "2025-01-29T11:50:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6669", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "f2af93b5-eead-4ec2-86d8-6427dffac311", "content": "\u041f\u043e \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441\u0435\u0433\u043e\u0434\u043d\u044f VMware Avi Load Balancer \u0438 Zyxel CPE.\n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u043c\u043e \u043f\u0435\u0440\u0432\u043e\u0439 Broadcom \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 VMware Avi Load Balancer, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nCVE-2025-22217 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 8,6 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0414\u0430\u043d\u0438\u044d\u043b\u043e\u043c \u041a\u0443\u043a\u0443\u0447\u043a\u0430 \u0438 \u041c\u0430\u0442\u0435\u0443\u0448\u043e\u043c \u0414\u0430\u0440\u0434\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Avi Load Balancer 30.1.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.1.2-2p2), 30.1.2 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.1.2-2p2), 30.2.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.2.1-2p5) \u0438 30.2.2 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 30.2.2-2p2)\n\nBroadcom \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0435\u0440\u0441\u0438\u0438 22.x \u0438 21.x \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-22217.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u044e 30.1.1, \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 30.1.2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0410 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE, \u0443\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\nGreyNoise \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u0432 \u0441\u0435\u0442\u044c.\n\nCVE-2024-40891 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043d\u0435 \u0431\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n\n\u041e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 VulnCheck \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f GreyNoise \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0430\u0442\u0430\u043a \u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u0432 \u0441\u0435\u0442\u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435\u00a01500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\nCVE-2024-40891 \u043e\u0447\u0435\u043d\u044c \u0441\u0445\u043e\u0436\u0430 \u0441 CVE-2024-40890, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 Telnet, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u043d\u0430 HTTP.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431.\n\nVulnCheck \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439.\n\n\u0412 Zyxel \u043f\u043e\u043a\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Zyxel CPE \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438.", "url": "https://t.me/true_secator/6669"}, {"timestamp": "2025-01-29T12:14:50.917Z", "date_only": false, "value": "2025-01-29T12:14:50.917999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/Zero-Trust.activitypub.awakari.com.ap.brid.gy/post/3lguwxbqz5vo2", "record": "cve-2024-40891", "field": "creation_timestamp", "uuid": "d2e5c22d-d436-4371-9592-74fa26304ad9", "url": "https://bsky.app/profile/Zero-Trust.activitypub.awakari.com.ap.brid.gy/post/3lguwxbqz5vo2"}, {"timestamp": "2025-01-29T12:44:09.122Z", "date_only": false, "value": "2025-01-29T12:44:09.122642Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113911703057934783", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "9ebad70d-dfe1-46f1-b819-719bc15d2c9c", "url": "https://infosec.exchange/users/jbhall56/statuses/113911703057934783"}, {"timestamp": "2025-01-29T12:44:26.434Z", "date_only": false, "value": "2025-01-29T12:44:26.434032Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lguypoz66c2a", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "01592010-67c5-4939-87a2-4ea240988006", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3lguypoz66c2a"}, {"timestamp": "2025-01-29T13:03:20Z", "date_only": false, "value": "2025-01-29T13:03:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/MIS0Kxh_Ug2nf-85sm64OY2fqBxNuZmsFwd6HQ2k5KRHQMA", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7eca1721-9ca2-4484-938b-7487787b49a9"}, {"timestamp": "2025-01-29T13:03:23Z", "date_only": false, "value": "2025-01-29T13:03:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/1532", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "8778eb57-9bad-4369-ad3e-919fda730934", "content": "Zyxel CPE Zero-Day (CVE-2024-40891) Exploited in the Wild \u2013 gbhackers.com\n\nWed, 29 Jan 2025 17:30:53", "url": "https://t.me/MalaysiaHacktivistz/1532"}, {"timestamp": "2025-01-29T13:03:23Z", "date_only": false, "value": "2025-01-29T13:03:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/7696", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7d8e7efa-a598-49c0-892c-3702ba455537", "content": "Zyxel CPE Zero-Day (CVE-2024-40891) Exploited in the Wild \u2013 gbhackers.com\n\nWed, 29 Jan 2025 17:30:53", "url": "https://t.me/MalaysiaHacktivistz/7696"}, {"timestamp": "2025-01-29T14:42:38.255Z", "date_only": false, "value": "2025-01-29T14:42:38.255627Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lgv7d3anki2k", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "c2a28509-0a46-48af-bc9a-3e544c9c51c1", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3lgv7d3anki2k"}, {"timestamp": "2025-01-29T14:44:28.113Z", "date_only": false, "value": "2025-01-29T14:44:28.113554Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/113912176163030592", "record": "cve-2024-40891", "field": "creation_timestamp", "uuid": "a376ae8f-7498-4dbb-bc1b-f5d1ef518bba", "url": "https://infosec.exchange/users/threatcodex/statuses/113912176163030592"}, {"timestamp": "2025-01-29T15:11:00.193Z", "date_only": false, "value": "2025-01-29T15:11:00.193627Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgvavjm32z2t", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "b1897c13-850a-433d-b3f9-256670b70e58", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lgvavjm32z2t"}, {"timestamp": "2025-01-29T15:39:04.157Z", "date_only": false, "value": "2025-01-29T15:39:04.157236Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgvchyusrb2g", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "239c7e12-e19f-4a71-ad30-33e6ca7d1fe8", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lgvchyusrb2g"}, {"timestamp": "2025-01-29T15:54:00Z", "date_only": false, "value": "2025-01-29T15:54:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/21451", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "15bbb55d-bdba-4d19-bc06-3d2522572801", "content": "\u200aHackers exploit critical unpatched flaw in Zyxel CPE devices\n\nHackers are exploiting a critical command injection vulnerability in Zyxel CPE Series devices that is currently tracked as CVE-2024-40891 and remains unpatched since last July. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-unpatched-flaw-in-zyxel-cpe-devices/", "url": "https://t.me/BleepingComputer/21451"}, {"timestamp": "2025-01-29T16:27:34.766Z", "date_only": false, "value": "2025-01-29T16:27:34.766973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lgvf6nio2k2q", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "3f2eeaa0-f93d-4216-8887-59c52f9079a1", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3lgvf6nio2k2q"}, {"timestamp": "2025-01-29T16:40:28.354Z", "date_only": false, "value": "2025-01-29T16:40:28.354003Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113912632267283246", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "edcd967d-e685-47b7-b3cd-63499743b733", "url": "https://infosec.exchange/users/screaminggoat/statuses/113912632267283246"}, {"timestamp": "2025-01-29T16:44:44.923Z", "date_only": false, "value": "2025-01-29T16:44:44.923265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ntkramer.bsky.social/post/3lgvg5gw5ds2y", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "558815c3-d0ee-4b0c-aa27-7faadf8aca4c", "url": "https://bsky.app/profile/ntkramer.bsky.social/post/3lgvg5gw5ds2y"}, {"timestamp": "2025-01-29T17:06:42.618Z", "date_only": false, "value": "2025-01-29T17:06:42.618091Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgvhdxa2dsa2", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "42488de1-2cdf-42a1-a0b4-1526361c93e6", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lgvhdxa2dsa2"}, {"timestamp": "2025-01-29T17:07:30.275Z", "date_only": false, "value": "2025-01-29T17:07:30.275771Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lgvhg52ba224", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "54d7332b-95f5-478a-b0a7-a6a2c4c306ed", "url": "https://bsky.app/profile/greynoise.bsky.social/post/3lgvhg52ba224"}, {"timestamp": "2025-01-29T18:54:26Z", "date_only": false, "value": "2025-01-29T18:54:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/endpoint-security/unpatched-zyxel-cpe-zero-day-cyberattackers", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "f4a30e6f-229f-4713-beba-550f4649aa9c", "url": "https://www.darkreading.com/endpoint-security/unpatched-zyxel-cpe-zero-day-cyberattackers"}, {"timestamp": "2025-01-29T19:00:09.932Z", "date_only": false, "value": "2025-01-29T19:00:09.932843Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lgvnplpjdf23", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "f700ae75-86bd-4b1f-9264-e9a96f3afa43", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lgvnplpjdf23"}, {"timestamp": "2025-01-29T19:17:43.929Z", "date_only": false, "value": "2025-01-29T19:17:43.929405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rxerium.com/post/3lgvooz45zv2w", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "792b4b39-5740-43ae-a197-c32686885737", "url": "https://bsky.app/profile/rxerium.com/post/3lgvooz45zv2w"}, {"timestamp": "2025-01-29T20:38:17.141Z", "date_only": false, "value": "2025-01-29T20:38:17.141154Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lgvt725em32u", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "a90b511c-63b6-437a-9d96-748140a483ae", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lgvt725em32u"}, {"timestamp": "2025-01-29T20:40:47.675Z", "date_only": false, "value": "2025-01-29T20:40:47.675140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lgvtdjjzzj2j", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "2148f518-8121-4d8f-bafd-0191ea556736", "url": "https://bsky.app/profile/ninjaowl.ai/post/3lgvtdjjzzj2j"}, {"timestamp": "2025-01-29T20:40:48.360Z", "date_only": false, "value": "2025-01-29T20:40:48.360689Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lgvtdkcxq62p", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "ac485e78-b755-41bc-abba-7248b95497c5", "url": "https://bsky.app/profile/potato.software/post/3lgvtdkcxq62p"}, {"timestamp": "2025-01-29T20:57:54.309Z", "date_only": false, "value": "2025-01-29T20:57:54.309315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lgvuc43ecb2m", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "1a9f5785-6c34-4773-b306-d75771958354", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3lgvuc43ecb2m"}, {"timestamp": "2025-01-29T21:02:04.299Z", "date_only": false, "value": "2025-01-29T21:02:04.299342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujju3ov2c", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "65f4f7ad-45eb-4822-a4a6-8679fa2ddf18", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgvujju3ov2c"}, {"timestamp": "2025-01-29T21:33:19.873Z", "date_only": false, "value": "2025-01-29T21:33:19.873263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgvwbgx4zj27", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "ab0e7687-45ae-478b-b1ad-4620b9a64282", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgvwbgx4zj27"}, {"timestamp": "2025-01-29T21:49:02.572Z", "date_only": false, "value": "2025-01-29T21:49:02.572915Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgvx5kaop525", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7d298faf-e22c-451b-a4a6-9c2ba4f8911e", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgvx5kaop525"}, {"timestamp": "2025-01-29T21:54:41.119Z", "date_only": false, "value": "2025-01-29T21:54:41.119894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lgvxhl2q6s2d", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "dbdaa67d-df7d-4e05-ac93-8c83e06d0e8e", "url": "https://bsky.app/profile/youranonriots.bsky.social/post/3lgvxhl2q6s2d"}, {"timestamp": "2025-01-30T03:17:58.236Z", "date_only": false, "value": "2025-01-30T03:17:58.236953Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwjjpoups2n", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7bbf8ee7-b521-4c5b-8b28-b55ccef1cab9", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwjjpoups2n"}, {"timestamp": "2025-01-30T05:30:38.729Z", "date_only": false, "value": "2025-01-30T05:30:38.729044Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgwqwxrqjk2b", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "50a738dd-fd54-4b4f-8e6f-d4e9c48b30e1", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgwqwxrqjk2b"}, {"timestamp": "2025-01-30T06:55:02.179Z", "date_only": false, "value": "2025-01-30T06:55:02.179340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwvnuox622n", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "a8003da5-4d9c-4303-b176-0843e8d757e4", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwvnuox622n"}, {"timestamp": "2025-01-30T11:34:55Z", "date_only": false, "value": "2025-01-30T11:34:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/17026", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "8db6eff6-9490-4e14-ac87-13985c64e6c6", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zyxel CPE, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE (CVE-2024-40891) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 \u043b\u0435\u0442\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0435\u0439. \u041a\u0430\u043a \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b GreyNoise, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b.\n\nhttps://xakep.ru/2025/01/30/zyxel-cpe-0day/", "url": "https://t.me/xakep_ru/17026"}, {"timestamp": "2025-01-30T13:08:18.464Z", "date_only": false, "value": "2025-01-30T13:08:18.464143Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgxkjdluqk2n", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "9591a571-effc-4e8e-a3ee-bab289362d0c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgxkjdluqk2n"}, {"timestamp": "2025-01-30T15:29:57.049Z", "date_only": false, "value": "2025-01-30T15:29:57.049829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgxsgmkges2n", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "96ea577a-dd6e-4de2-88a4-b5186d1e9865", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgxsgmkges2n"}, {"timestamp": "2025-01-30T18:36:02.347Z", "date_only": false, "value": "2025-01-30T18:36:02.347764Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3lgy4tb3vys23", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "3b246206-a218-4e9a-a5d0-d0de728010ea", "url": "https://bsky.app/profile/xc0py.bsky.social/post/3lgy4tb3vys23"}, {"timestamp": "2025-01-31T01:05:45Z", "date_only": false, "value": "2025-01-31T01:05:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/24675", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "9efd2078-b01f-4ca9-a34b-624491f16ee7", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zyxel CPE, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430 \ud83e\udd37\u200d\u2642\ufe0f\n\n\u25aa\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Zyxel CPE (CVE-2024-40891) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 \u043b\u0435\u0442\u043e\u043c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0435\u0439.\n\n\u25aa\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b.\n\n\u25aa\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0443\u0436\u0435\u0431\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 supervisor \u0438 zyuser.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/24675"}, {"timestamp": "2025-02-01T14:24:42Z", "date_only": false, "value": "2025-02-01T14:24:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/xlDRfjzJLOTAukT6-_25nKAEiX60faAgGw3e698OSKdSSQk", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "db894124-966d-4e00-8948-1b01daceae5c"}, {"timestamp": "2025-02-04T10:02:48.018Z", "date_only": false, "value": "2025-02-04T10:02:48.018Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-40891", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-04T10:07:00.553Z", "date_only": false, "value": "2025-02-04T10:07:00.553721Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113945059007016791", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "a5e6c610-ef41-4d7f-b37f-3bac42c879fd", "url": "https://infosec.exchange/users/cve/statuses/113945059007016791"}, {"timestamp": "2025-02-04T10:07:26.641Z", "date_only": false, "value": "2025-02-04T10:07:26.641Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zyxel", "record": "cve-2024-40891", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-04T10:15:08Z", "date_only": false, "value": "2025-02-04T10:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PM4H-579G-CGQQ", "record": "GHSA-PM4H-579G-CGQQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-04T10:15:08.920Z", "date_only": false, "value": "2025-02-04T10:15:08.920", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40891", "record": "FKIE_CVE-2024-40891", "field": "published"}, {"timestamp": "2025-02-04T10:15:41.909Z", "date_only": false, "value": "2025-02-04T10:15:41.909472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt7c7plq2w", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "64be4bcd-fa17-4815-a5af-ff32450d1917", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdt7c7plq2w"}, {"timestamp": "2025-02-04T10:48:12.823Z", "date_only": false, "value": "2025-02-04T10:48:12.823184Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113945220952180854", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "d1d8c468-690a-489f-ab0c-8302b3601e9c", "url": "https://mastodon.social/users/CyberSignaler/statuses/113945220952180854"}, {"timestamp": "2025-02-04T11:58:04.620Z", "date_only": false, "value": "2025-02-04T11:58:04.620555Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdywehlaf2g", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "c09edb28-6951-41cf-97a1-8b8c3d90194e", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdywehlaf2g"}, {"timestamp": "2025-02-04T12:12:58Z", "date_only": false, "value": "2025-02-04T12:12:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17177", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "19084a04-0c3d-43c8-ad4a-32cd7ef93e3f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40891 - Zyxel Legacy DSL CPE Zyxel VMG4325-B10A Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40891 \nPublished : Feb. 4, 2025, 10:15 a.m. | 47\u00a0minutes ago \nDescription : **UNSUPPORTED WHEN ASSIGNED**  \nA post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version\u00a01.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands\u00a0on an affected device via Telnet. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17177"}, {"timestamp": "2025-02-04T12:30:59Z", "date_only": false, "value": "2025-02-04T12:30:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PM4H-579G-CGQQ", "record": "GHSA-PM4H-579G-CGQQ", "field": "published"}, {"timestamp": "2025-02-04T16:20:25.589Z", "date_only": false, "value": "2025-02-04T16:20:25.589523Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113946527318610149", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "badead98-caf2-4f9f-9319-f440c9a3f445", "url": "https://infosec.exchange/users/screaminggoat/statuses/113946527318610149"}, {"timestamp": "2025-02-04T22:05:47.192Z", "date_only": false, "value": "2025-02-04T22:05:47.192076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhf2uzvjnw2s", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "636a3cf4-4204-4df5-9710-79a7317e7581", "url": "https://bsky.app/profile/hackingne.ws/post/3lhf2uzvjnw2s"}, {"timestamp": "2025-02-05T07:11:34.615Z", "date_only": false, "value": "2025-02-05T07:11:34.615124Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lhfzevldgs2x", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "06a78a46-267e-44fa-874a-dcb183526f1b", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lhfzevldgs2x"}, {"timestamp": "2025-02-05T07:14:14.454Z", "date_only": false, "value": "2025-02-05T07:14:14.454673Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lhfzjn2ygs2x", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "d53a5667-d631-4d19-af95-5ba67d7ec8ca", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lhfzjn2ygs2x"}, {"timestamp": "2025-02-05T11:18:37Z", "date_only": false, "value": "2025-02-05T11:18:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5320", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "813129cc-35ec-41c2-a99e-156fdf35c2ed", "content": "\u200b\u26a1\ufe0f\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b Zyxel \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u0431\u043e\u043c\u0431\u0443 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\ud83d\udcac Zyxel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 CPE, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 . \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b VulnCheck \u0432 \u0438\u044e\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e . \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0410\u043d\u0430\u043b\u0438\u0437 FOFA \u0438 Censys \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\nCVE-2024-40891 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ifconfig, ping, tftp) \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\nCVE-2025-0890 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, admin:1234, zyuser:1234, supervisor:zyad1234), \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u0423\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c supervisor \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0430 zyuser \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2024-40891 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nVulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043c\u043e\u0434\u0435\u043b\u0438 VMG4325-B10A \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u043e\u0439. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0430\u0432\u043d\u043e \u0441\u043d\u044f\u0442\u044b \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u043d\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0438 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 Zyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u044f\u0434\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VMG1312-B10A, VMG3312-B10A, VMG4380-B10A \u0438 \u0434\u0440\u0443\u0433\u0438\u0435. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0438 \u0443\u0436\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0441\u0442\u0438 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 VulnCheck, Zyxel \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2024-40890 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8)\u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043d\u0430 CVE-2024-40891. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0442\u0447\u0435\u0442\u0430 Zyxel \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0442 VulnCheck \u0435\u0449\u0435 \u0432 \u0438\u044e\u043b\u0435, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5320"}, {"timestamp": "2025-02-05T17:37:19.822Z", "date_only": false, "value": "2025-02-05T17:37:19.822216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lhh4dw23ox25", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "ff757c44-8199-427e-bcbd-301dcadcc601", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lhh4dw23ox25"}, {"timestamp": "2025-02-05T18:20:27.113Z", "date_only": false, "value": "2025-02-05T18:20:27.113657Z", "kind": "sighting", "label": "Seen", "source": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "d378bd85-e6e7-4a2f-bd5c-eb312eb891b5", "url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025"}, {"timestamp": "2025-02-05T18:26:54.586Z", "date_only": false, "value": "2025-02-05T18:26:54.586561Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/d3075493-7100-4a9c-9b70-41f0581a825c", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "3e4188ef-60f8-456b-969c-afba78e65a01", "url": "https://vulnerability.circl.lu/bundle/d3075493-7100-4a9c-9b70-41f0581a825c"}, {"timestamp": "2025-02-06T01:01:44Z", "date_only": false, "value": "2025-02-06T01:01:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/24764", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "0f9326f1-b973-4a15-9937-8d8fb7064124", "content": "Zyxel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0442\u0430\u0440\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u270b\n\n\u25aa\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Zyxel \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438. \u0415\u0449\u0451 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043e \u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e, \u043e\u0434\u043d\u0430\u043a\u043e \u043b\u0438\u0448\u044c \u043d\u0430\u043a\u0430\u043d\u0443\u043d\u0435 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Zyxel \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u043d\u0435\u0434\u0430\u0432\u043d\u043e\u00bb \u0443\u0437\u043d\u0430\u043b\u0430 \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \ud83d\ude44\n\n\u25aa\ufe0f \u041e\u043d\u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 CVE-2024-40890 \u0438 CVE-2024-40891 \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c\u0438 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u25aa\ufe0f \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u00ab\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b\u00bb. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u043d\u044f\u0442\u044b\u0445 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Zyxel \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442\u0441\u044f, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u0430 Amazon. \u041f\u043e\u0447\u0442\u0438 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u0435\u0439\u0447\u0430\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/24764"}, {"timestamp": "2025-02-06T03:36:15.949Z", "date_only": false, "value": "2025-02-06T03:36:15.949533Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5ss4ods2i", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7b6d7d07-94ac-40ec-8096-241933872ad6", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5ss4ods2i"}, {"timestamp": "2025-02-06T12:17:57.568Z", "date_only": false, "value": "2025-02-06T12:17:57.568921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhj2xqouhs2n", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "86db4621-1e9c-4467-a0b2-0f862dc1367a", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhj2xqouhs2n"}, {"timestamp": "2025-02-06T12:53:05Z", "date_only": false, "value": "2025-02-06T12:53:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2266", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7f06649e-4e3f-4d91-b158-9091c27f55db", "content": "\u26a1Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch!\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2266"}, {"timestamp": "2025-02-07T10:00:26Z", "date_only": false, "value": "2025-02-07T10:00:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1005", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "ce373385-ffe6-40d3-a590-6dbc32e9b879", "content": "\u0627\u0645\u0631\u0648\u0632\u0647 VMware Avi Load Balancer \u0648 Zyxel CPE \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0647\u0633\u062a\u0646\u062f.\n\n\u062f\u0631 \u0631\u0627\u0628\u0637\u0647 \u0628\u0627 \u0645\u0648\u0631\u062f \u0627\u0648\u0644\u060c Broadcom \u0627\u0632 \u06a9\u0634\u0641 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u062c\u062f\u06cc \u062f\u0631 VMware Avi Load Balancer \u062e\u0628\u0631 \u062f\u0627\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u06cc\u0645\u0646 \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.\n\nCVE-2025-22217 \u062f\u0627\u0631\u0627\u06cc \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 8.6 \u0627\u0633\u062a \u0648 \u062a\u0648\u0633\u0637 \u0645\u062d\u0642\u0642\u06cc\u0646 Daniel Kukuczka \u0648 Mateusz Darda \u06a9\u0634\u0641 \u0634\u062f.\n\n \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u067e\u0631\u0633 \u0648 \u062c\u0648\u0647\u0627\u06cc SQL \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0627\u0634\u06a9\u0627\u0644 \u0628\u0631 VMware Avi Load Balancer 30.1.1 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2)\u060c 30.1.2 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2)\u060c 30.2.1 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.2.1-2p5) \u0648 30.2.2-2.2p (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2) \u0648 30.2.2-2.2 (\u0631\u0641\u0639 \u0634\u062f\u0647 \u062f\u0631 30.1.2-2p2) \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc \u06af\u0630\u0627\u0631\u062f.\n\nBroadcom \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0634\u0627\u0631\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc 22.x \u0648 21.x \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 CVE-2025-22217 \u0642\u0631\u0627\u0631 \u0646\u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f.\n\n\u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0646\u0633\u062e\u0647 30.1.1 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u0646\u062f\u060c \u0628\u0627\u06cc\u062f \u0642\u0628\u0644 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 \u0627\u0635\u0644\u0627\u062d\u060c \u0627\u0628\u062a\u062f\u0627 \u0628\u0647 30.1.2 \u06cc\u0627 \u062c\u062f\u06cc\u062f\u062a\u0631 \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f.\n\n\u0647\u06cc\u0686 \u0631\u0627\u0647 \u062d\u0644\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f.\n\n\u0648 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc 0day \u0645\u0647\u0645\u06cc \u06a9\u0647 \u0628\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0633\u0631\u06cc Zyxel CPE \u062a\u0623\u062b\u06cc\u0631 \u0645\u06cc\u200c\u06af\u0630\u0627\u0631\u0646\u062f\u060c \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u0628\u0647 \u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062f\u0631 \u062d\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0647\u0633\u062a\u0646\u062f.\n\nGreyNoise \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0622\u0646 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0628\u0631 \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u06a9\u0627\u0645\u0644 \u0633\u06cc\u0633\u062a\u0645\u060c \u0646\u0634\u062a \u062f\u0627\u062f\u0647 \u0647\u0627 \u06cc\u0627 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0645\u06cc \u0634\u0648\u062f.\n\nCVE-2024-40891 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0637\u0648\u0631 \u0639\u0645\u0648\u0645\u06cc \u0641\u0627\u0634 \u0646\u0634\u062f\u0647 \u06cc\u0627 \u062b\u0627\u0628\u062a \u0646\u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u0648\u062c\u0648\u062f \u0627\u06cc\u0646 \u0628\u0627\u06af \u0628\u0631\u0627\u06cc \u0627\u0648\u0644\u06cc\u0646 \u0628\u0627\u0631 \u062a\u0648\u0633\u0637 VulnCheck \u062f\u0631 \u062c\u0648\u0644\u0627\u06cc 2024 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f.\n\n\u062a\u0644\u0647 \u0645\u062a\u0631\u06cc \u06af\u0631\u06cc \u0646\u0648\u06cc\u0632 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u062a\u0644\u0627\u0634 \u0647\u0627\u06cc \u062d\u0645\u0644\u0647 \u0627\u0632 \u062f\u0647 \u0647\u0627 \u0622\u062f\u0631\u0633 IP \u0633\u0631\u0686\u0634\u0645\u0647 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u06cc\u0634\u062a\u0631 \u0622\u0646\u0647\u0627 \u062f\u0631 \u062a\u0627\u06cc\u0648\u0627\u0646 \u0628\u0648\u062f\u0646\u062f.\n\n\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 Censys\u060c \u0628\u06cc\u0634 \u0627\u0632 1500 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f .\n\nCVE-2024-40891 \u0628\u0633\u06cc\u0627\u0631 \u0634\u0628\u06cc\u0647 \u0628\u0647 CVE-2024-40890 \u0627\u0633\u062a\u060c \u062a\u0641\u0627\u0648\u062a \u0627\u0635\u0644\u06cc \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0648\u0644\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 Telnet \u0648 \u062f\u0648\u0645\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 HTTP \u0627\u0633\u062a.\n\n \u0647\u0631 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062d\u0633\u0627\u0628\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\nVulnCheck \u06af\u0641\u062a \u06a9\u0647 \u062f\u0631 \u062d\u0627\u0644 \u0647\u0645\u06a9\u0627\u0631\u06cc \u0628\u0627 \u0634\u0631\u06a9\u062a \u062a\u0627\u06cc\u0648\u0627\u0646\u06cc \u062f\u0631 \u0631\u0648\u0646\u062f \u0627\u0641\u0634\u0627 \u0627\u0633\u062a.\n\nZyxel \u0647\u0646\u0648\u0632 \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u06cc\u0646 \u0648\u0636\u0639\u06cc\u062a \u0627\u0638\u0647\u0627\u0631 \u0646\u0638\u0631 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc HTTP \u063a\u06cc\u0631\u0645\u0639\u0645\u0648\u0644 \u0628\u0647 \u0631\u0627\u0628\u0637 \u0647\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a Zyxel CPE \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0646\u0646\u062f \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0631\u0627\u0628\u0637 \u0627\u062f\u0627\u0631\u06cc \u0631\u0627 \u0628\u0647 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "url": "https://t.me/ics_cert/1005"}, {"timestamp": "2025-02-07T16:04:47.429Z", "date_only": false, "value": "2025-02-07T16:04:47.429586Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-a910054a-1b1a0442aae5b72f", "record": "cve-2024-40891", "field": "creation_timestamp", "uuid": "f651723b-01cc-446a-9b87-b62f9268161d", "url": "https://poliverso.org/objects/0477a01e-a910054a-1b1a0442aae5b72f"}, {"timestamp": "2025-02-09T07:41:56.243Z", "date_only": false, "value": "2025-02-09T07:41:56.243171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq4wr4ryc2g", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "bff08738-6a3d-4d56-91d3-172498b15ca5", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq4wr4ryc2g"}, {"timestamp": "2025-02-09T07:48:13.207Z", "date_only": false, "value": "2025-02-09T07:48:13.207730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq5c2em2c2g", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "ac11f107-9230-4642-84c1-68da1095d035", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhq5c2em2c2g"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-40891", "field": "timestamps.asserted_at", "uuid": "1606a67b-330c-44dc-b00a-8237c470c2a6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-40891", "field": "timestamps.asserted_at", "uuid": "7882b388-bd2c-475c-8f76-15c3d83df575", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": true, "value": "2025-02-11", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40891", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-40891", "field": "evidence.0.details.added_date", "uuid": "7882b388-bd2c-475c-8f76-15c3d83df575", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": true, "value": "2025-02-11", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-40891", "field": "evidence.0.details.date_added", "uuid": "1606a67b-330c-44dc-b00a-8237c470c2a6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-40891", "field": "timestamps.first_seen_at", "uuid": "1606a67b-330c-44dc-b00a-8237c470c2a6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-40891", "field": "timestamps.first_seen_at", "uuid": "7882b388-bd2c-475c-8f76-15c3d83df575", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-40891", "field": "status.status_updated_at", "uuid": "1606a67b-330c-44dc-b00a-8237c470c2a6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-40891", "field": "status.status_updated_at", "uuid": "7882b388-bd2c-475c-8f76-15c3d83df575", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40891", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-02-11T18:58:59.976Z", "date_only": false, "value": "2025-02-11T18:58:59.976409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohc2i", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "6edb4bf6-dad4-40d6-a3a2-dbf2d203068c", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohc2i"}, {"timestamp": "2025-02-11T18:59:00.988Z", "date_only": false, "value": "2025-02-11T18:59:00.988635Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohd2i", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "0b5b1129-ddbb-48cd-9b91-7289bd641ad9", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lhwdpg4ohd2i"}, {"timestamp": "2025-02-11T19:02:48.530Z", "date_only": false, "value": "2025-02-11T19:02:48.530465Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40891", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-11T19:02:48.530Z", "date_only": false, "value": "2025-02-11T19:02:48.530465Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40891", "record": "FKIE_CVE-2024-40891", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-11T19:18:10.372Z", "date_only": false, "value": "2025-02-11T19:18:10.372660Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3318898", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "2a6e3e9b-dc94-4582-b47e-cf8c18e3729a", "url": "https://feedsin.space/feed/CISAKevBot/items/3318898"}, {"timestamp": "2025-02-11T19:21:24.378Z", "date_only": false, "value": "2025-02-11T19:21:24.378325Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986875105156497", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "45f63655-0428-48fd-aae8-2e9287b4e154", "url": "https://infosec.exchange/users/screaminggoat/statuses/113986875105156497"}, {"timestamp": "2025-02-11T20:13:05.432Z", "date_only": false, "value": "2025-02-11T20:13:05.432110Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhwhtxfoek2f", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "4d899180-f852-4c00-bd5d-f5ab0e778df2", "url": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhwhtxfoek2f"}, {"timestamp": "2025-02-11T21:10:03Z", "date_only": false, "value": "2025-02-11T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "03098c55-9be0-4a4e-86bd-789c526397b2"}, {"timestamp": "2025-02-12T03:07:38Z", "date_only": false, "value": "2025-02-12T03:07:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3984", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "9429004e-1ea3-4d85-9e44-73fafe929d20", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-40891\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-04T10:15:08.920\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025", "url": "https://t.me/DarkWebInformer_CVEAlerts/3984"}, {"timestamp": "2025-02-12T12:24:10.752Z", "date_only": false, "value": "2025-02-12T12:24:10.752112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhy64f2p5c2a", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "4d51b976-c4f4-46d0-ab27-06e6c63fba45", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhy64f2p5c2a"}, {"timestamp": "2025-02-12T21:02:02.815Z", "date_only": false, "value": "2025-02-12T21:02:02.815483Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhz32df7lh23", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "14182645-d175-439d-b42f-e738e33b8fc2", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhz32df7lh23"}, {"timestamp": "2025-02-13T12:26:53.582Z", "date_only": false, "value": "2025-02-13T12:26:53.582683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3li2opy5lts2e", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "d3e955c5-f1ba-4c7a-bb9c-82c5420d9537", "url": "https://bsky.app/profile/cecallihelper.bsky.social/post/3li2opy5lts2e"}, {"timestamp": "2025-02-14T10:04:02Z", "date_only": false, "value": "2025-02-14T10:04:02.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/2Q1nAhJ2hjURJXZX8k02QjzODVKhq6NpRH3E60gePhMbgpmH", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "9c734f4a-95c5-4280-98f2-0476aeb32a24"}, {"timestamp": "2025-02-23T02:11:05Z", "date_only": false, "value": "2025-02-23T02:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "645e91ea-4b3f-4ac8-ab16-ef23c2625630"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": true, "value": "2025-03-04", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-40891", "field": "evidence.0.details.due_date", "uuid": "1606a67b-330c-44dc-b00a-8237c470c2a6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-12T12:53:58.814Z", "date_only": false, "value": "2025-03-12T12:53:58.814344Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk6mo6iclbu2", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "b963722c-8e53-433f-b715-d0ad26091d44", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk6mo6iclbu2"}, {"timestamp": "2025-04-07T00:30:10.311Z", "date_only": false, "value": "2025-04-07T00:30:10.311501Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lm6pfdwlih2k", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "5396e1f2-c7f7-407c-8bee-35f59a481e0b", "url": "https://bsky.app/profile/bolhasec.com/post/3lm6pfdwlih2k"}, {"timestamp": "2025-10-21T22:55:30.272Z", "date_only": false, "value": "2025-10-21T22:55:30.272Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-40891", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:30.272Z", "date_only": false, "value": "2025-10-21T22:55:30.272Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40891", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:12Z", "date_only": false, "value": "2025-10-22T00:33:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PM4H-579G-CGQQ", "record": "GHSA-PM4H-579G-CGQQ", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-40891", "field": "timestamps.recorded_at", "uuid": "1606a67b-330c-44dc-b00a-8237c470c2a6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:14.123Z", "date_only": false, "value": "2026-02-02T12:26:14.123865Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1606a67b-330c-44dc-b00a-8237c470c2a6", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "5188c10a-07fb-413a-83ea-b32397c2447b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1606a67b-330c-44dc-b00a-8237c470c2a6"}, {"timestamp": "2026-06-17T07:46:48.213Z", "date_only": false, "value": "2026-06-17T07:46:48.213", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40891", "record": "FKIE_CVE-2024-40891", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:27.602Z", "date_only": false, "value": "2026-06-19T12:46:27.602094Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/74656e08-8ed3-4942-ae48-e5982eabe64c", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "cc8945af-7836-448f-80b1-3e1585bdb0b2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/74656e08-8ed3-4942-ae48-e5982eabe64c"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-40891", "field": "timestamps.recorded_at", "uuid": "7882b388-bd2c-475c-8f76-15c3d83df575", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:04.822Z", "date_only": false, "value": "2026-06-23T14:06:04.822543Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7882b388-bd2c-475c-8f76-15c3d83df575", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "7d41c833-0181-4541-8bc7-eb35fa0cdfcf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7882b388-bd2c-475c-8f76-15c3d83df575"}, {"timestamp": "2026-07-26T02:01:58.906Z", "date_only": false, "value": "2026-07-26T02:01:58.906054Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3606", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "3cfb07a9-e01d-4534-8630-4a16de0e2f4b", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Zyxel CPE, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442\n\n\u0415\u0449\u0435 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-40891 (BDU:2025-0088), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0438 CPE. \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0443 \u0431\u044b\u043b\u0430 \u0434\u0430\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10 \u0438\u0437 10, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a \u0438 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u00absupervisor\u00bb \u0438\u043b\u0438 \u00abzyuser\u00bb \u043f\u0443\u0442\u0451\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 telnet\u00bb, - \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Censys, \u0432 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Zyxel CPE, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0425\u043e\u0442\u044f \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u0435\u043d\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0442\u044c\u0441\u044f \u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0432\u044f\u0437\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0438\u0448\u0435\u0442 Tadviser.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0442\u0435\u0439 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0424\u0421\u0422\u042d\u041a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0431\u0435\u043b\u044b\u0439\u00bb \u0441\u043f\u0438\u0441\u043e\u043a IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u043e\u0443\u0442\u0435\u0440\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://t.me/bdufstecru/2177 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0424\u0421\u0422\u042d\u041a", "url": "https://t.me/EchelonEyes/3606"}, {"timestamp": "2026-07-28T00:00:51.133Z", "date_only": false, "value": "2026-07-28T00:00:51.133933Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/3606", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "3886dffe-40d6-412a-b994-bad761030203", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Zyxel CPE, \u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435\u0442\n\n\u0415\u0449\u0435 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-40891 (BDU:2025-0088), \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Zyxel \u0441\u0435\u0440\u0438\u0438 CPE. \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0443 \u0431\u044b\u043b\u0430 \u0434\u0430\u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10 \u0438\u0437 10, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0432\u0437\u0438\u0440\u0430\u044f \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0442\u0430\u043a \u0438 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u00absupervisor\u00bb \u0438\u043b\u0438 \u00abzyuser\u00bb \u043f\u0443\u0442\u0451\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 telnet\u00bb, - \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0440\u0435\u0433\u0443\u043b\u044f\u0442\u043e\u0440 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Censys, \u0432 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 1500 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Zyxel CPE, \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0424\u0440\u0430\u043d\u0446\u0438\u0438. \u0425\u043e\u0442\u044f \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u0435\u043d\u0435\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0442\u044c\u0441\u044f \u0443 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0432\u044f\u0437\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0438\u0448\u0435\u0442 Tadviser.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0442\u0435\u0439 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0424\u0421\u0422\u042d\u041a \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0443, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u00ab\u0431\u0435\u043b\u044b\u0439\u00bb \u0441\u043f\u0438\u0441\u043e\u043a IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0440\u043e\u0443\u0442\u0435\u0440\u0443 \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://t.me/bdufstecru/2177 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0424\u0421\u0422\u042d\u041a", "url": "https://t.me/EchelonEyes/3606"}, {"timestamp": "2026-07-29T12:03:04.528Z", "date_only": false, "value": "2026-07-29T12:03:04.528519Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/4046", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "768419a4-b7fa-41ea-8fb0-d4a61e51e456", "content": "\ud83d\udd25 Zyxel \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442: \u043f\u043e\u0440\u0430 \u043c\u0435\u043d\u044f\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0437\u0434\u043d\u043e! \ud83d\ude80\n\n\u041d\u0443 \u0447\u0442\u043e, \u0434\u0440\u0443\u0437\u044c\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f: \u043d\u0435 \u043f\u043e\u0440\u0430 \u043b\u0438 \u0435\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0434\u044b\u0445? \n\n\ud83e\uddd0 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0446\u0435\u043b\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 CPE \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430.\n\n\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c?\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b VulnCheck \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u043d\u0430\u0448\u043b\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438, \u043d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0436\u0430\u0440\u043a\u043e \u0441\u0442\u0430\u043b\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u0438\u0447\u0451\u043c \u043d\u0430 \u0432\u043e\u043b\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043d\u0435 \u0430\u0431\u0441\u0442\u0440\u0430\u043a\u0442\u043d\u044b\u0435 \"\u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\", \u0430 \u0431\u043e\u043b\u0435\u0435 1,5 \u0442\u044b\u0441\u044f\u0447 \u0436\u0438\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 CVE-\u0448\u043d\u0438\u043a\u0438: CVE-2024-40891 \u0438 CVE-2025-0890, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043b\u044e\u0434\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u042d\u0442\u043e \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u0443 \u0432\u0430\u0441 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0434\u0432\u0435\u0440\u044c \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c, \u0430 \u043a\u043b\u044e\u0447\u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.\n\nZyxel \u0433\u043e\u0432\u043e\u0440\u0438\u0442: \"\u041f\u0440\u043e\u0441\u0442\u043e \u043a\u0443\u043f\u0438\u0442\u0435 \u043d\u043e\u0432\u044b\u0435!\"\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442. \u041f\u043e\u0447\u0435\u043c\u0443? \u0412\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0412\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0437\u0430\u043a\u0430\u0442: VMG1312-B10A, VMG1312-B10B, VMG1312-B10E, VMG3312-B10A, VMG3313-B10A, VMG3926-B10B, VMG4325-B10A, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, SBG3300 \u0438 SBG3500.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u2014 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0433\u0440\u0435\u0439\u0434.\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441\u2026\n\n\u0421\u0430\u043c\u044b\u0439 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: Zyxel \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 \u0438\u044e\u043b\u044f \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0442 VulnCheck \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \n\n\ud83e\udd37\u200d\u2642\ufe0f \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u2013 \u043f\u043e\u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0432\u0430\u0448 \u0440\u043e\u0443\u0442\u0435\u0440 \u043f\u043e\u043f\u0430\u0434\u0451\u0442 \u0432 \u0447\u0435\u0439-\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442. \u041b\u0443\u0447\u0448\u0435 \u0432\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u044b\u0439 \u0433\u0430\u0434\u0436\u0435\u0442, \u0447\u0435\u043c \u0441\u0442\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0418\u0411 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/cisoclub/4046"}, {"timestamp": "2026-08-03T16:00:04.840Z", "date_only": false, "value": "2026-08-03T16:00:04.840072Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cisoclub/4046", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "52cee4be-05e3-460f-9c35-bbf77eb332ba", "content": "\ud83d\udd25 Zyxel \u043d\u0430\u043c\u0435\u043a\u0430\u0435\u0442: \u043f\u043e\u0440\u0430 \u043c\u0435\u043d\u044f\u0442\u044c \u0440\u043e\u0443\u0442\u0435\u0440\u044b, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0437\u0434\u043d\u043e! \ud83d\ude80\n\n\u041d\u0443 \u0447\u0442\u043e, \u0434\u0440\u0443\u0437\u044c\u044f, \u0435\u0441\u043b\u0438 \u0432\u0430\u0448 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u0437\u0430\u0434\u0443\u043c\u0430\u0442\u044c\u0441\u044f: \u043d\u0435 \u043f\u043e\u0440\u0430 \u043b\u0438 \u0435\u0433\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0441\u043b\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u043e\u0442\u0434\u044b\u0445? \n\n\ud83e\uddd0 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0446\u0435\u043b\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 CPE \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u2014 \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043d\u0430\u0432\u0441\u0435\u0433\u0434\u0430.\n\n\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c?\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b VulnCheck \u0435\u0449\u0451 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u043d\u0430\u0448\u043b\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0431\u0440\u0435\u0448\u0438, \u043d\u043e \u043f\u043e-\u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0436\u0430\u0440\u043a\u043e \u0441\u0442\u0430\u043b\u043e \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u041f\u0440\u0438\u0447\u0451\u043c \u043d\u0430 \u0432\u043e\u043b\u043d\u0435 \u0440\u0438\u0441\u043a\u0430 \u2014 \u043d\u0435 \u0430\u0431\u0441\u0442\u0440\u0430\u043a\u0442\u043d\u044b\u0435 \"\u043a\u0430\u043a\u0438\u0435-\u0442\u043e \u0442\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\", \u0430 \u0431\u043e\u043b\u0435\u0435 1,5 \u0442\u044b\u0441\u044f\u0447 \u0436\u0438\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 CVE-\u0448\u043d\u0438\u043a\u0438: CVE-2024-40891 \u0438 CVE-2025-0890, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0445\u043e\u0440\u043e\u0448\u0438\u043c \u043b\u044e\u0434\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u042d\u0442\u043e \u043a\u0430\u043a \u0435\u0441\u043b\u0438 \u0431\u044b \u0443 \u0432\u0430\u0441 \u0432 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0434\u0432\u0435\u0440\u044c \u043d\u0435 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u043b\u0430\u0441\u044c, \u0430 \u043a\u043b\u044e\u0447\u0438 \u0440\u0430\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.\n\nZyxel \u0433\u043e\u0432\u043e\u0440\u0438\u0442: \"\u041f\u0440\u043e\u0441\u0442\u043e \u043a\u0443\u043f\u0438\u0442\u0435 \u043d\u043e\u0432\u044b\u0435!\"\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442. \u041f\u043e\u0447\u0435\u043c\u0443? \u0412\u0441\u0451 \u043f\u0440\u043e\u0441\u0442\u043e \u2014 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u043b\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f. \u0412\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u043e\u0434 \u044d\u0442\u043e\u0442 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0437\u0430\u043a\u0430\u0442: VMG1312-B10A, VMG1312-B10B, VMG1312-B10E, VMG3312-B10A, VMG3313-B10A, VMG3926-B10B, VMG4325-B10A, VMG4380-B10A, VMG8324-B10A, VMG8924-B10A, SBG3300 \u0438 SBG3500.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0447\u0442\u043e-\u0442\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0441\u043f\u0438\u0441\u043a\u0430 \u2014 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u043b\u0430\u0442\u044c \u0430\u043f\u0433\u0440\u0435\u0439\u0434.\n\n\u041d\u043e \u0435\u0441\u0442\u044c \u043d\u044e\u0430\u043d\u0441\u2026\n\n\u0421\u0430\u043c\u044b\u0439 \u043f\u0438\u043a\u0430\u043d\u0442\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442: Zyxel \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 \u0438\u044e\u043b\u044f \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0442 VulnCheck \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442, \u043d\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u043d\u0435\u0435. \n\n\ud83e\udd37\u200d\u2642\ufe0f \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u0441 \u0434\u044b\u0440\u044f\u0432\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0441\u0442\u0430\u0440\u044b\u0439 Zyxel \u2013 \u043f\u043e\u0434\u0443\u043c\u0430\u0439\u0442\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438!\n\u041d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0436\u0434\u0430\u0442\u044c, \u043f\u043e\u043a\u0430 \u0432\u0430\u0448 \u0440\u043e\u0443\u0442\u0435\u0440 \u043f\u043e\u043f\u0430\u0434\u0451\u0442 \u0432 \u0447\u0435\u0439-\u0442\u043e \u0431\u043e\u0442\u043d\u0435\u0442. \u041b\u0443\u0447\u0448\u0435 \u0432\u043b\u043e\u0436\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u043e\u0432\u044b\u0439 \u0433\u0430\u0434\u0436\u0435\u0442, \u0447\u0435\u043c \u0441\u0442\u0430\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432. \n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0443\u0442\u0435\u0447\u043a\u0438 \u0438 \u0418\u0411 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/cisoclub/4046"}, {"timestamp": "2026-08-04T13:00:13.602Z", "date_only": false, "value": "2026-08-04T13:00:13.602923Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/240", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "f046016f-562b-4dce-bc19-fd643771bd4c", "content": "\u0420\u0435\u0431\u044f\u0442, \u0432\u044b \u0436\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0435 \u0441\u0432\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE. \u0412\u043e\u0442 \u0438 Zyxel \u0442\u043e\u0436\u0435 \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u043f\u0430\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0447\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0433\u043e \u0441\u043f\u0438\u0445\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u043d\u0443 \u0437\u0430 \u0442\u043e \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0434\u044b\u0440\u044f\u0432\u043e\u0435 \u041f\u041e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0442\u043e\u0438\u0442!\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 CVE \u0432 DSL CPE:\n\n\ud83d\udd34CVE-2024-40890 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f HTTP POST \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\ud83d\udd34CVE-2024-40891 - \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet.\n\ud83d\udd34CVE-2025-0890 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 supervisor:zyad1234 \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 zyuser:1234 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nZyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u044b\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430\u2026 \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0441\u0442\u0430\u0442\u0443\u0441 EOL, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0440\u043e\u0434\u043e\u043c.\n\n#red_team #Zyxel", "url": "https://t.me/purp_sec/240"}, {"timestamp": "2026-08-05T00:00:11.535Z", "date_only": false, "value": "2026-08-05T00:00:11.535897Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/purp_sec/240", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "ccc95ff2-d192-4fb7-95b5-dffa0c54cbf7", "content": "\u0420\u0435\u0431\u044f\u0442, \u0432\u044b \u0436\u0435 \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442\u0435 \u0441\u0432\u043e\u0439 \u0441\u043e\u0444\u0442, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f CVE. \u0412\u043e\u0442 \u0438 Zyxel \u0442\u043e\u0436\u0435 \u0440\u0435\u0448\u0438\u043b\u0430 \u043d\u0435 \u043f\u0430\u0440\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u044d\u0442\u043e\u0442 \u0441\u0447\u0435\u0442. \u0422\u0430\u043a \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0433\u043e \u0441\u043f\u0438\u0445\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u043d\u0443 \u0437\u0430 \u0442\u043e \u0447\u0442\u043e \u0443 \u0432\u0430\u0441 \u0434\u044b\u0440\u044f\u0432\u043e\u0435 \u041f\u041e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0441\u0442\u043e\u0438\u0442!\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u0440\u0435\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 CVE \u0432 DSL CPE:\n\n\ud83d\udd34CVE-2024-40890 - \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f HTTP POST \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\ud83d\udd34CVE-2024-40891 - \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcms_cli.so \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Telnet.\n\ud83d\udd34CVE-2025-0890 - \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 supervisor:zyad1234 \u0438\u043c\u0435\u0435\u0442 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0430 zyuser:1234 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\nZyxel \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u044b\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u043b\u0430\u2026 \u043a\u0443\u043f\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442. \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0441\u0442\u0430\u0442\u0443\u0441 EOL, \u0432\u0441\u0435 \u0435\u0449\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0440\u043e\u0434\u043e\u043c.\n\n#red_team #Zyxel", "url": "https://t.me/purp_sec/240"}, {"timestamp": "2026-08-15T08:00:05.692Z", "date_only": false, "value": "2026-08-15T08:00:05.692005Z", "kind": "sighting", "label": "Seen", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "c62d0ced-ce0d-4b6b-b543-9684a2f05bb4"}, {"timestamp": "2026-08-16T00:00:46.023Z", "date_only": false, "value": "2026-08-16T00:00:46.023058Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/_25z-AXgYGxMQG1-2juRNG_Sr6HyeON-5N9CgA9IG4g7wx0", "record": "CVE-2024-40891", "field": "creation_timestamp", "uuid": "c20bff8a-ac88-431a-8113-d514d2bdc6a4"}]}