Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to CVE-2023-32645.

CVE-2024-9643 identifies a critical security vulnerability in the Four-Faith F3x36 router running firmware version 2.0.0. The root cause is the presence of hard-coded credentials within the administrative web server component, classified under CWE-489 (Active Debug Code) and CWE-798 (Use of Hard-coded Credentials). These credentials allow an attacker to bypass authentication mechanisms entirely by crafting specific HTTP requests to the device's management interface. This bypass grants full administrative privileges, enabling attackers to manipulate router configurations, intercept or redirect network traffic, deploy further malware, or disrupt network availability. The vulnerability is remotely exploitable without any authentication or user interaction, as reflected by the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N). The critical CVSS score of 9.8 highlights the severe impact on confidentiality, integrity, and availability. While no public exploits are currently known, the similarity to a previous vulnerability (CVE-2023-32645) indicates that exploitation techniques may be easily adapted or developed. The lack of available patches or firmware updates from Four-Faith at the time of publication increases the urgency for organizations to implement compensating controls. This vulnerability is particularly concerning for environments where Four-Faith routers are deployed in industrial control systems, critical infrastructure, or enterprise networks, as attackers gaining administrative access could cause significant operational and security damage.

Detailed information about CVE-2024-9643: CWE-489 Active Debug Code in Four-Faith F3x36 affecting Four-Faith F3x36. Get real-time updates, technical details, an

CVE-2024-9643: CWE-489 Active Debug Code in Four-Faith F3x36 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-9643: CWE-489 Active Debug Code in Four-Faith F3x36

Threats Tagged 'cve-2024-9643'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-9643'

Lead Pen Test Professional