Untitled attachment

Notices where this attachment appears

1. Embed this notice
   cR0w 🦃 (cr0w@infosec.exchange)'s status on Tuesday, 04-Nov-2025 22:38:29 JST cR0w 🦃

   First of all, LMFAO.

   By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections.

   Second, it's been a while since I've noticed @hdm and @todb on a new CVE.

   https://www.cve.org/CVERecord?id=CVE-2025-35021