風險: 高度風險
類型: 保安軟件及應用設備 - 保安軟件及應用設備
在Aruba產品發現多個漏洞。遠端攻擊者可利用此漏洞，於目標系統觸發遠端執行任意程式碼。
注意：
針對這些漏洞之一的概念驗證碼已被公開。
HPE Aruba Networking
Affected Software Version(s):
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
RISK: High Risk
TYPE: Security software and application - Security Software & Appliance
Multiple vulnerabilities were identified in Aruba Products. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.
Note:
Proof Of Concept Exploit Code is publicly available for one of these vulnerabilities.
HPE Aruba Networking
Affected Software Version(s):
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
風險: 中度風險
類型: 伺服器 - 其他伺服器
於 OpenVPN 發現一個漏洞。遠端攻擊者可利用這個漏洞，於目標系統觸發洩露敏感資料。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
RISK: Medium Risk
TYPE: Servers - Other Servers
A vulnerability was identified in OpenVPN. A remote attacker could exploit this vulnerability to trigger sensitive information disclosure on the targeted system.
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
風險: 中度風險
類型: 操作系統 - 流動裝置及操作系統
於三星產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行程式碼、繞過保安限制、篡改及敏感資料洩露。
有關受影響產品，請參閱以下連結:
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
在安裝軟件之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
RISK: Medium Risk
TYPE: Operating Systems - Mobile & Apps
Multiple vulnerabilities were identified in Samsung Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, data manipulation and sensitive information disclosure on the targeted system.
For affected products, please refer to the link below:
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
Before installation of the software, please visit the vendor website for more details.
https://security.samsungmobile.com/securityUpdate.smsb
https://semiconductor.samsung.com/support/quality-support/product-security-updates/
風險: 中度風險
類型: 伺服器 - 其他伺服器
於 NetApp 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、洩露敏感資料及資料篡改。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities were identified in NetApp Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure and data manipulation on the targeted system.
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
風險: 高度風險
類型: 保安軟件及應用設備 - 保安軟件及應用設備
在 Palo Alto PAN-OS 發現一個漏洞。遠端攻擊者可利用此漏洞，於目標系統觸發阻斷服務狀況。
注意：
防火牆配置必須擁有DNS Security License或Advanced DNS Security License，並且DNS Security logging必須已經啓用，才可能被遠端攻擊者濫用。
CVE-2024-3393漏洞正被廣泛利用。CVE-2024-3393漏洞會使防火墻進入維護模式。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
RISK: High Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability was identified in Palo Alto PAN-OS. A remote attacker can exploit this vulnerability to trigger denial of service condition on the targeted system.
Note:
The firewall configuration must have either a DNS Security License or an Advanced DNS Security License, AND DNS Security logging must be enabled for this issue to be misused by a remote attacker.
CVE-2024-3393 is being exploited in the wild. Exploitation of CVE-2024-3393 will cause the firewall to enter maintenance mode.
Before installation of the software, please visit the vendor web-site for more details.
