{"vulnerability": "cve-2024-45844", "sightings": [{"uuid": "56ecceeb-2b70-4681-bf1b-84996765579d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "8ef3179e-6ae2-42ba-9d27-75d713d75f20", "vulnerability": "CVE-2024-45844", "type": "seen", "source": null, "content": "", "creation_timestamp": "2024-10-18T12:32:56.212376Z"}, {"uuid": "218d9494-5fe7-43bd-931b-e4905c61be15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "seen", "source": "MISP/0b830b9f-a6c9-4a20-90c1-81aba360c517", "content": "", "creation_timestamp": "2024-10-30T09:07:43.000000Z"}, {"uuid": "0f99fe77-5410-46d4-8f2d-7c7edb85cb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/672", "content": "https://offsec.almond.consulting/privilege-escalation-f5-CVE-2024-45844.html\n\nrivilege escalation in F5 BIG-IP\n#\u5206\u6790", "creation_timestamp": "2024-10-31T15:27:17.000000Z"}, {"uuid": "015b16e0-fb3a-4e44-9585-42a695cf7e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3378", "content": "https://offsec.almond.consulting/privilege-escalation-f5-CVE-2024-45844.html\n\nrivilege escalation in F5 BIG-IP\n#\u5206\u6790", "creation_timestamp": "2024-10-31T12:27:03.000000Z"}, {"uuid": "8adb59ba-4a8e-49ed-b7ea-71c64a2144be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11367", "content": "#exploit\n1. CVE-2024-38030:\nWindows Themes Files Spoofing\nhttps://blog.0patch.com/2024/10/we-patched-cve-2024-38030-found-another.html\n\n2. CVE-2024-9533:\nD-Link DIR-605L buffer overflow\nhttps://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formDeviceReboot.md\n\n3. CVE-2024-45844:\nPrivilege escalation in F5 BIG-IP\nhttps://offsec.almond.consulting/privilege-escalation-f5-CVE-2024-45844.html\n]-> An implementation of F5's \"mcp\" protocol, including MitM tooling to sniff traffic while vuln hunting", "creation_timestamp": "2025-01-18T19:05:29.000000Z"}, {"uuid": "b8da6849-2c41-4d85-bb5d-9c544fa0e249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4931", "content": "#exploit\n1. CVE-2024-38030:\nWindows Themes Files Spoofing\nhttps://blog.0patch.com/2024/10/we-patched-cve-2024-38030-found-another.html\n\n2. CVE-2024-9533:\nD-Link DIR-605L buffer overflow\nhttps://github.com/abcdefg-png/IoT-vulnerable/blob/main/D-Link/DIR-605L/formDeviceReboot.md\n\n3. CVE-2024-45844:\nPrivilege escalation in F5 BIG-IP\nhttps://offsec.almond.consulting/privilege-escalation-f5-CVE-2024-45844.html\n]-> An implementation of F5's \"mcp\" protocol, including MitM tooling to sniff traffic while vuln hunting", "creation_timestamp": "2024-10-31T19:21:46.000000Z"}, {"uuid": "9a49201c-7dbb-4620-a563-90febebf51e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45844", "type": "seen", "source": "https://t.me/cvedetector/8089", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45844 - F5 BIG-IP Monitor Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-45844 \nPublished : Oct. 16, 2024, 3:15 p.m. | 41\u00a0minutes ago \nDescription : BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.\u00a0 Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-16T18:03:48.000000Z"}]}