{"metadata": {"vulnerability": "cve-2024-12802", "count": 44, "kinds": {"milestone": 7, "sighting": 22, "kev": 0, "other": 15}}, "data": [{"timestamp": "2024-12-19T16:22:43.405Z", "date_only": false, "value": "2024-12-19T16:22:43.405Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-12802", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0013", "record": "CERTFR-2025-AVI-0013", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-07T12:38:58.150Z", "date_only": false, "value": "2025-01-07T12:38:58.150623Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "d4bdf883-052e-4917-a609-aaf4ee124223", "url": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0"}, {"timestamp": "2025-01-07T21:51:45.470Z", "date_only": false, "value": "2025-01-07T21:51:45.470434Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "a2540be5-9676-4d28-aae2-0ae423a1d0dd", "url": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0021", "record": "WID-SEC-W-2025-0021", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0021", "record": "WID-SEC-W-2025-0021", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0021", "record": "WID-SEC-W-2025-0021", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0021", "record": "WID-SEC-W-2025-0021", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0013", "record": "CERTFR-2025-AVI-0013", "field": "last_revision_date"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0013", "record": "CERTFR-2025-AVI-0013", "field": "initial_release_date"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0013", "record": "CERTFR-2025-AVI-0013", "field": "revisions.0.revision_date"}, {"timestamp": "2025-01-08T07:16:00Z", "date_only": false, "value": "2025-01-08T07:16:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / sonicwall", "record": "cve-2024-12802", "field": "containers.cna.datePublic"}, {"timestamp": "2025-01-08T12:07:18.101Z", "date_only": false, "value": "2025-01-08T12:07:18.101+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0021", "record": "WID-SEC-W-2025-0021", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-09T09:08:26.012Z", "date_only": false, "value": "2025-01-09T09:08:26.012Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-12802", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-09T09:08:26.012Z", "date_only": false, "value": "2025-01-09T09:08:26.012Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sonicwall", "record": "cve-2024-12802", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T09:09:36.829Z", "date_only": false, "value": "2025-01-09T09:09:36.829548Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113797613241927061", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "98dce4fb-708d-4c4c-ad8b-a2e9cbd4738d", "url": "https://infosec.exchange/users/cve/statuses/113797613241927061"}, {"timestamp": "2025-01-09T09:14:14Z", "date_only": false, "value": "2025-01-09T09:14:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/923", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "ffc042a1-e535-4d06-9d8c-1df5e1d57451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12802\n\ud83d\udd39 Description: SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.\n\ud83d\udccf Published: 2025-01-09T09:08:26.012Z\n\ud83d\udccf Modified: 2025-01-09T09:08:26.012Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001", "url": "https://t.me/DarkWebInformer_CVEAlerts/923"}, {"timestamp": "2025-01-09T09:15:06Z", "date_only": false, "value": "2025-01-09T09:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FF32-CMVQ-X6C5", "record": "GHSA-FF32-CMVQ-X6C5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-09T09:15:06.587Z", "date_only": false, "value": "2025-01-09T09:15:06.587", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12802", "record": "FKIE_CVE-2024-12802", "field": "published"}, {"timestamp": "2025-01-09T09:15:20.074Z", "date_only": false, "value": "2025-01-09T09:15:20.074680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpg5lmk2i", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "37c5efd3-8692-43f0-bb46-0c3014838379", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpg5lmk2i"}, {"timestamp": "2025-01-09T09:31:43Z", "date_only": false, "value": "2025-01-09T09:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FF32-CMVQ-X6C5", "record": "GHSA-FF32-CMVQ-X6C5", "field": "published"}, {"timestamp": "2025-01-09T11:04:23Z", "date_only": false, "value": "2025-01-09T11:04:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14824", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "3f9ec7c3-d21e-449f-a484-631e35deae74", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12802 - SonicWALL SSL-VPN Active Directory MFA Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12802 \nPublished : Jan. 9, 2025, 9:15 a.m. | 41\u00a0minutes ago \nDescription : SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14824"}, {"timestamp": "2025-01-09T15:31:51Z", "date_only": false, "value": "2025-01-09T15:31:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FF32-CMVQ-X6C5", "record": "GHSA-FF32-CMVQ-X6C5", "field": "modified"}, {"timestamp": "2025-01-09T15:48:44.873Z", "date_only": false, "value": "2025-01-09T15:48:44.873757Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182687696299", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "0627bb19-0cd1-41b3-bf8c-d7c0ebf350fd", "url": "https://mastodon.social/users/CyberSignaler/statuses/113799182687696299"}, {"timestamp": "2025-01-13T18:39:10.538Z", "date_only": false, "value": "2025-01-13T18:39:10.538395Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "745da44c-4861-4d5f-96a0-f9a5c282d78c", "url": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311"}, {"timestamp": "2026-05-20T21:00:00Z", "date_only": false, "value": "2026-05-20T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1882", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "5adac0e9-4974-4037-bbe7-fe2ea2868084", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1882"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-12802", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12802", "record": "FKIE_CVE-2024-12802", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-21T01:00:28.633Z", "date_only": false, "value": "2026-05-21T01:00:28.633155Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmd7s2zztm2y", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "c628b491-0d4c-4df6-a515-8f5f09673ea3", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmd7s2zztm2y"}, {"timestamp": "2026-05-21T15:18:46.803Z", "date_only": false, "value": "2026-05-21T15:18:46.803247Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/116025545744531578/statuses/116612467967333188", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "11affdd2-8ed2-4d7b-a014-28abe18b62e5", "url": "https://infosec.exchange/ap/users/116025545744531578/statuses/116612467967333188"}, {"timestamp": "2026-05-21T15:33:40Z", "date_only": false, "value": "2026-05-21T15:33:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8229", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "bbca3119-429f-4fa8-b410-3ffb27c2441c", "url": "https://t.me/true_secator/8229"}, {"timestamp": "2026-05-21T15:45:42Z", "date_only": false, "value": "2026-05-21T15:45:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/6375", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "6eee12bf-988f-4776-9d09-a98f087a4542", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u0445\u043e\u0434\u044f\u0442 MFA \u0432 VPN SonicWall \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0431\u0440\u0443\u0442\u0438\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0438 \u043e\u0431\u043e\u0448\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (MFA) \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall Gen6 SSL-VPN, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043e\u0442 30 \u0434\u043e 60 \u043c\u0438\u043d\u0443\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0435\u0442\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0432\u044b\u0439\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c CVE-2024-12802, SonicWall \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Gen6 \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0440\u0443\u0447\u043d\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 LDAP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 MFA.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ReliaQuest \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e \u043c\u0430\u0440\u0442 \u0438 \u0441 \u0443\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u044d\u0442\u043e \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2024-12802, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u043d\u0438\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0448\u0430\u0433\u0438 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b.\n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gen7 \u0438 Gen8 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12802.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 ReliaQuest, \u0447\u0442\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443 \u0432 \u0434\u043e\u043c\u0435\u043d, \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u043f\u043e\u043b\u0447\u0430\u0441\u0430. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 RDP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u0449\u0438\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043c\u0430\u044f\u043a Cobalt Strike \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u0430 BYOVD. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0443.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u043c\u0443 \u0432\u0445\u043e\u0434\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 (\u0438\u043d\u043e\u0433\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0440\u043e\u043b\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430, \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u0440\u0443\u0433\u0438\u043c \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443\u00a0\u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Akira \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall SSL VPN\u00a0\u0438 \u0441\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (MFA) \u0432 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0435 \u0431\u044b\u043b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d.\n\n\u0423\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f CVE-2024-12802 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c MFA \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0432\u0445\u043e\u0434\u0430 UPN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 MFA.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall 6-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0437\u0430 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2024-12802 \u00ab\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445\u00bb.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ReliaQuest, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043f\u043e\u0442\u043e\u043a MFA, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e MFA \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0431\u043e\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0438\u0433\u043d\u0430\u043b sess=\u201dCLI\u201d \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 VPN, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\u041a \u0434\u0440\u0443\u0433\u0438\u043c \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0433\u043d\u0430\u043b\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439 238 \u0438 1080, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0445\u043e\u0434\u044b \u0432 VPN \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 VPS/VPN-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SSL-VPN \u0448\u0435\u0441\u0442\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0430\u0441\u044c 16 \u0430\u043f\u0440\u0435\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438 \u043e\u043d\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.", "url": "https://t.me/S_E_Reborn/6375"}, {"timestamp": "2026-05-21T16:49:18.351Z", "date_only": false, "value": "2026-05-21T16:49:18.351182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/captechgroup.com/post/3mmeusqje5z26", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "5e0263ed-0fad-4886-8852-4c53830f2bc9", "url": "https://bsky.app/profile/captechgroup.com/post/3mmeusqje5z26"}, {"timestamp": "2026-05-21T21:32:22.978Z", "date_only": false, "value": "2026-05-21T21:32:22.978646Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmfejdsqzr2p", "record": "cve-2024-12802", "field": "creation_timestamp", "uuid": "dbe8ce3c-0252-41b8-9ed7-1de101176d7c", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmfejdsqzr2p"}, {"timestamp": "2026-05-22T03:55:48.198Z", "date_only": false, "value": "2026-05-22T03:55:48.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-12802", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-22T03:55:48.198Z", "date_only": false, "value": "2026-05-22T03:55:48.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-12802", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-22T10:40:01.122Z", "date_only": false, "value": "2026-05-22T10:40:01.122561Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-896a-1032-57cb-57c549377543", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "76fd2acf-dd24-473e-b82c-7e35ff5b3cee", "url": "https://poliverso.org/objects/0477a01e-896a-1032-57cb-57c549377543"}, {"timestamp": "2026-05-22T10:40:02.317Z", "date_only": false, "value": "2026-05-22T10:40:02.317047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmgqnd2vlv62", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "652d21d2-89a0-4168-b858-3368ef480e5b", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmgqnd2vlv62"}, {"timestamp": "2026-05-22T11:23:53.314Z", "date_only": false, "value": "2026-05-22T11:23:53.314613Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116617971811232706", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "6257f441-baf8-4317-a257-168583b950fe", "url": "https://infosec.exchange/users/jbhall56/statuses/116617971811232706"}, {"timestamp": "2026-05-22T11:24:14.770Z", "date_only": false, "value": "2026-05-22T11:24:14.770509Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mmgt426wtc27", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "aef5dbbf-df85-4d0d-afd9-622fd3ee2294", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mmgt426wtc27"}, {"timestamp": "2026-05-25T11:00:03.784Z", "date_only": false, "value": "2026-05-25T11:00:03.784403Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mmod5w6fya2d", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "2abf4df6-cc79-4829-9abf-aaae8fb51e15", "url": "https://bsky.app/profile/diesec.bsky.social/post/3mmod5w6fya2d"}, {"timestamp": "2026-06-17T07:00:31.590Z", "date_only": false, "value": "2026-06-17T07:00:31.590", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12802", "record": "FKIE_CVE-2024-12802", "field": "lastModified"}, {"timestamp": "2026-07-25T15:00:06.927Z", "date_only": false, "value": "2026-07-25T15:00:06.927946Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/707", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "8ec6f4ad-ebc4-4e0f-93e4-fc74b907223f", "url": "https://t.me/ZerodayAlert/707"}, {"timestamp": "2026-07-26T00:00:37.746Z", "date_only": false, "value": "2026-07-26T00:00:37.746660Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/707", "record": "CVE-2024-12802", "field": "creation_timestamp", "uuid": "3fdbdbc3-336b-4784-80cc-f9c2e73f929f", "url": "https://t.me/ZerodayAlert/707"}]}