{"metadata": {"vulnerability": "cve-2024-40892", "count": 18, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-04-11T15:46:00Z", "date_only": false, "value": "2024-04-11T15:46:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "cve-2024-40892", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2024-04-12T19:04:00Z", "date_only": false, "value": "2024-04-12T19:04:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "cve-2024-40892", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2024-07-11T17:35:29.595Z", "date_only": false, "value": "2024-07-11T17:35:29.595Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-40892", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-24T04:00:00Z", "date_only": false, "value": "2024-07-24T04:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "cve-2024-40892", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2024-08-12T17:30:00Z", "date_only": false, "value": "2024-08-12T17:30:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulnCheck", "record": "cve-2024-40892", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2024-08-12T18:32:02.469Z", "date_only": false, "value": "2024-08-12T18:32:02.469Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-40892", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-12T19:15:16Z", "date_only": false, "value": "2024-08-12T19:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RHJX-JWV4-JJ63", "record": "GHSA-RHJX-JWV4-JJ63", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-12T19:15:16.403Z", "date_only": false, "value": "2024-08-12T19:15:16.403", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40892", "record": "FKIE_CVE-2024-40892", "field": "published"}, {"timestamp": "2024-08-12T19:24:41.447Z", "date_only": false, "value": "2024-08-12T19:24:41.447719Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40892", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-12T19:24:41.447Z", "date_only": false, "value": "2024-08-12T19:24:41.447719Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40892", "record": "FKIE_CVE-2024-40892", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-12T19:26:46.125Z", "date_only": false, "value": "2024-08-12T19:26:46.125Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-40892", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-12T21:31:34Z", "date_only": false, "value": "2024-08-12T21:31:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RHJX-JWV4-JJ63", "record": "GHSA-RHJX-JWV4-JJ63", "field": "published"}, {"timestamp": "2024-08-12T21:51:14Z", "date_only": false, "value": "2024-08-12T21:51:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2888", "record": "CVE-2024-40892", "field": "creation_timestamp", "uuid": "c45fe3ac-dd6b-4f58-8055-87b0065ae160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40892 - Firewalla Box Bl.ForeColor Blow-Over SSH Weak Credential Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40892 \nPublished : Aug. 12, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : A weak credential vulnerability exists in Firewalla Box Software versions before 1.979. This vulnerability allows a physically close attacker to use the license UUID for authentication and provision SSH credentials over the Bluetooth Low-Energy (BTLE) interface. Once an attacker gains access to the LAN, they could log into the SSH interface using the provisioned credentials. The license UUID can be acquired through plain-text Bluetooth sniffing, reading the QR code on the bottom of the device, or brute-forcing the UUID (though this is less likely). \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2888"}, {"timestamp": "2024-08-21T17:13:00.297Z", "date_only": false, "value": "2024-08-21T17:13:00.297Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-40892", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-21T17:13:00.297Z", "date_only": false, "value": "2024-08-21T17:13:00.297Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2024-40892", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-21T17:39:46Z", "date_only": false, "value": "2024-08-21T17:39:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8323", "record": "CVE-2024-40892", "field": "creation_timestamp", "uuid": "bc1ad91d-a192-4f61-96e6-79960be6d5de", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893\nURL\uff1ahttps://github.com/xen0bit/fwbt\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8323"}, {"timestamp": "2024-08-21T18:31:27Z", "date_only": false, "value": "2024-08-21T18:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RHJX-JWV4-JJ63", "record": "GHSA-RHJX-JWV4-JJ63", "field": "modified"}, {"timestamp": "2026-06-17T07:46:48.347Z", "date_only": false, "value": "2026-06-17T07:46:48.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-40892", "record": "FKIE_CVE-2024-40892", "field": "lastModified"}]}