Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://infosec.exchange/users/cR0w/statuses/115491604192939686">cR0w 🦃 (cr0w@infosec.exchange)'s status on Tuesday, 04-Nov-2025 22:38:29 JST</a><a href="https://infosec.exchange/@cR0w" title="cr0w@infosec.exchange"><img src="https://gnusocial.jp/avatar/161036-48-20251105044636.webp" width="48" height="48" alt="cR0w 🦃" style="position: absolute; left: 0; top: 0;">cR0w 🦃</a><div><ul><li><li><a href="https://gnusocial.jp/user/29830" title="todb@infosec.exchange">Tod Beardsley</a></li></ul></div></section><article><p>First of all, LMFAO.</p><p>By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections.</p><p>Second, it's been a while since I've noticed <a href="https://infosec.exchange/@hdm">@hdm</a> and <a href="https://infosec.exchange/@todb">@todb</a> on a new CVE. </p><p><a href="https://www.cve.org/CVERecord?id=CVE-2025-35021" rel="nofollow">https://www.cve.org/CVERecord?id=CVE-2025-35021</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/5830245#notice-11448802">In conversation</a><time datetime="2025-11-04T22:38:29+09:00" title="Tuesday, 04-Nov-2025 22:38:29 JST">about a day ago</time> <span>from <span><a href="https://infosec.exchange/@cR0w/115491604192939686" rel="external" title="Sent from infosec.exchange via ActivityPub">infosec.exchange</a></span></span><a href="https://infosec.exchange/@cR0w/115491604192939686">permalink</a><h4>Attachments</h4><ol><li><label><a rel="external" href="https://gnusocial.jp/attachment/5418034">Untitled attachment</a></label><br></li><li><article><header><div>No result found on File_thumbnail lookup.</div><h5><a href="https://www.cve.org/CVERecord?id=CVE-2025-35021">https://www.cve.org/CVERecord?id=CVE-2025-35021</a></h5><div></div></header><div></div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
cR0w 🦃 (cr0w@infosec.exchange)'s status on Tuesday, 04-Nov-2025 22:38:29 JSTcR0w 🦃
- HD Moore
- Tod Beardsley
First of all, LMFAO.
By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connections.
Second, it's been a while since I've noticed @hdm and @todb on a new CVE.
https://www.cve.org/CVERecord?id=CVE-2025-35021
In conversationabout a day ago from infosec.exchangepermalink
Attachments
1. Untitled attachment
2. No result found on File_thumbnail lookup.
  https://www.cve.org/CVERecord?id=CVE-2025-35021

Public

Embed Notice

HTML Code

Corresponding Notice