{"vulnerability": "CVE-2024-12398", "sightings": [{"uuid": "fcb05d93-638a-43ba-8dc2-ab307004fb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomasfcjn2z", "content": "", "creation_timestamp": "2025-01-14T06:20:10.760643Z"}, {"uuid": "d5f90565-1477-405d-9340-c3c854013638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113825391866727615", "content": "", "creation_timestamp": "2025-01-14T06:54:04.861134Z"}, {"uuid": "cf8798ef-f44d-4f61-bac0-8a76a40a101e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-617e1e9a-420e913529f35003", "content": "", "creation_timestamp": "2025-01-14T09:40:31.532009Z"}, {"uuid": "f481cb11-ce39-4f80-bad6-e04ac0d7be97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfprosiad22e", "content": "", "creation_timestamp": "2025-01-14T17:30:09.071610Z"}, {"uuid": "08631ffe-1e80-4276-b725-7789e219addf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12398", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfoup7rlvs2z", "content": "", "creation_timestamp": "2025-01-14T08:51:24.557486Z"}, {"uuid": "41c08419-2d3f-4b93-8bd7-caef01aac827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp3mxmz7i2b", "content": "", "creation_timestamp": "2025-01-14T10:55:24.273030Z"}, {"uuid": "aeb88127-5ecb-4a3b-8926-3a8b7b41f100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lt7ovy2b", "content": "", "creation_timestamp": "2025-01-14T02:15:47.755954Z"}, {"uuid": "e797a0f3-0a6b-4235-895e-23cf6bf404e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828366476462278", "content": "", "creation_timestamp": "2025-01-14T19:30:36.501195Z"}, {"uuid": "b80459d5-5e4f-4642-8492-b3fb4f7effe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113824425156536007", "content": "", "creation_timestamp": "2025-01-14T02:48:14.297106Z"}, {"uuid": "de3d162b-8839-4501-97ad-091bc03d2c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfpfwnm5as2r", "content": "", "creation_timestamp": "2025-01-14T13:59:47.846330Z"}, {"uuid": "6fb41fd3-58b0-4294-8a69-3a770746f5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lfofmhqvik2l", "content": "", "creation_timestamp": "2025-01-14T04:21:28.105043Z"}, {"uuid": "c7079397-07ce-4477-8feb-4247b5071b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoheay5zu2r", "content": "", "creation_timestamp": "2025-01-14T04:52:37.591915Z"}, {"uuid": "976cc788-2ce8-41a5-b9f1-844a092afd55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfohebl7sk2u", "content": "", "creation_timestamp": "2025-01-14T04:52:39.324321Z"}, {"uuid": "53f98bfa-6d94-48a5-b752-96edf91358d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfpuy563s224", "content": "", "creation_timestamp": "2025-01-14T18:29:04.018600Z"}, {"uuid": "e2042388-fc87-49ff-a8c0-bb6896ec62b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgbvhkoohc2g", "content": "", "creation_timestamp": "2025-01-21T22:25:51.396564Z"}, {"uuid": "c1174d9a-a451-49fa-b406-09b720996e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgbvixwdnk2g", "content": "", "creation_timestamp": "2025-01-21T22:26:22.963819Z"}, {"uuid": "fc872c47-a09e-49a0-82eb-374e312a3415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530", "content": "", "creation_timestamp": "2025-04-22T06:11:45.959891Z"}, {"uuid": "0672adae-2f1b-423e-b881-e7e7680cff3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12398\n\ud83d\udd39 Description: An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and\u00a0WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.\n\ud83d\udccf Published: 2025-01-14T01:39:04.348Z\n\ud83d\udccf Modified: 2025-01-14T01:39:04.348Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-and-security-router-devices-01-14-2025", "creation_timestamp": "2025-01-14T02:08:29.000000Z"}, {"uuid": "ee6b03e7-3145-4707-838b-9576fcaefbda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/cvedetector/15228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12398 - Zyxel WBE Web Management Interface Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12398 \nPublished : Jan. 14, 2025, 2:15 a.m. | 36\u00a0minutes ago \nDescription : An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and\u00a0WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T03:57:35.000000Z"}, {"uuid": "550fa387-fdf8-4aac-a377-41f87ed4f652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/purp_sec/151", "content": "\ud83d\udee1 Zyxel \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12398 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 8,8\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Zyxel. \u0412 \u0438\u0445 \u0447\u0438\u0441\u043b\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a NWA50AX, NWA55AXE, WAC500 \u0438 WAX610D. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0422\u0430\u043a \u0447\u0442\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n#blue_team #Zyxel", "creation_timestamp": "2026-08-04T13:00:17.036200Z"}, {"uuid": "25e6d6fa-dec2-4af6-af14-1fee06d93f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/purp_sec/151", "content": "\ud83d\udee1 Zyxel \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12398 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 8,8\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Zyxel. \u0412 \u0438\u0445 \u0447\u0438\u0441\u043b\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a NWA50AX, NWA55AXE, WAC500 \u0438 WAX610D. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0422\u0430\u043a \u0447\u0442\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n#blue_team #Zyxel", "creation_timestamp": "2026-08-05T00:00:06.885799Z"}]}