{"metadata": {"vulnerability": "CVE-2024-40893", "count": 18, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-04-12T03:46:00Z", "date_only": false, "value": "2024-04-12T03:46:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-40893", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-04-12T19:04:00Z", "date_only": false, "value": "2024-04-12T19:04:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-40893", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-07-11T17:35:29.595Z", "date_only": false, "value": "2024-07-11T17:35:29.595Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-40893", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-24T04:00:00Z", "date_only": false, "value": "2024-07-24T04:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-40893", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2024-08-12T17:30:00Z", "date_only": false, "value": "2024-08-12T17:30:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-40893", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2024-08-12T18:49:51.384Z", "date_only": false, "value": "2024-08-12T18:49:51.384Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-40893", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-12T19:15:16Z", "date_only": false, "value": "2024-08-12T19:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F5W2-XH59-W5P8", "record": "GHSA-F5W2-XH59-W5P8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-12T19:15:16.643Z", "date_only": false, "value": "2024-08-12T19:15:16.643", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40893", "record": "FKIE_CVE-2024-40893", "field": "published"}, {"timestamp": "2024-08-12T21:31:34Z", "date_only": false, "value": "2024-08-12T21:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F5W2-XH59-W5P8", "record": "GHSA-F5W2-XH59-W5P8", "field": "published"}, {"timestamp": "2024-08-12T21:51:12Z", "date_only": false, "value": "2024-08-12T21:51:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2887", "record": "CVE-2024-40893", "field": "creation_timestamp", "uuid": "7692ffb5-70d8-4e21-9c27-b78df80e714a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40893 - Firewalla Box Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40893 \nPublished : Aug. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software   \nversions before 1.979. A physically close   \nattacker that is authenticated to the Bluetooth Low-Energy (BTLE) interface can use the network configuration service to inject commands in various configuration parameters including\u00a0networkConfig.Interface.Phy.Eth0.Extra.PingTestIP,\u00a0networkConfig.Interface.Phy.Eth0.Extra.DNSTestDomain, and\u00a0networkConfig.Interface.Phy.Eth0.Gateway6. Additionally, because the configuration can be synced to the Firewalla cloud, the attacker may be able to persist access even after hardware resets and firmware re-flashes. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2887"}, {"timestamp": "2024-08-14T13:25:43.056Z", "date_only": false, "value": "2024-08-14T13:25:43.056042Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-40893", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-14T13:25:43.056Z", "date_only": false, "value": "2024-08-14T13:25:43.056042Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40893", "record": "FKIE_CVE-2024-40893", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-14T13:26:40.904Z", "date_only": false, "value": "2024-08-14T13:26:40.904Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-40893", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-21T17:13:39.202Z", "date_only": false, "value": "2024-08-21T17:13:39.202Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-40893", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-21T17:13:39.202Z", "date_only": false, "value": "2024-08-21T17:13:39.202Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-40893", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-21T17:39:46Z", "date_only": false, "value": "2024-08-21T17:39:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8323", "record": "CVE-2024-40893", "field": "creation_timestamp", "uuid": "7a95103c-1f64-4aa3-8880-844cbea87500", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893\nURL\uff1ahttps://github.com/xen0bit/fwbt\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8323"}, {"timestamp": "2024-08-21T18:31:27Z", "date_only": false, "value": "2024-08-21T18:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F5W2-XH59-W5P8", "record": "GHSA-F5W2-XH59-W5P8", "field": "modified"}, {"timestamp": "2026-06-17T07:46:48.457Z", "date_only": false, "value": "2026-06-17T07:46:48.457", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40893", "record": "FKIE_CVE-2024-40893", "field": "lastModified"}]}