2025年5月8日星期四

三星產品多個漏洞

三星產品多個漏洞

發佈日期: 2025年05月08日

風險: 高度風險

類型: 操作系統 - 流動裝置及操作系統

於三星產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼及洩露敏感資料。

 

注意：

有跡象顯示 CVE-2025-27363 可能受到有限度、目標性的利用。這可能會導致本地程式碼執行，而不需要額外的執行權限。

影響

  • 遠端執行程式碼
  • 阻斷服務
  • 權限提升
  • 資料洩露

受影響之系統或技術

  • Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400
  • 運行 Android Watch 14 的 Galaxy Watch 
  • 運行 Android 13、14、15 的三星產品

有關受影響產品，請參閱以下連結:

https://security.samsungmobile.com/securityUpdate.smsb

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

解決方案

在安裝軟件之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝軟件供應商提供的修補程式：

漏洞識別碼

資料來源

相關連結

於 沒有留言:

Samsung Products Multiple Vulnerabilities

Samsung Products Multiple Vulnerabilities

Release Date: 8 May 2025

RISK: High Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Samsung Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

 

Note:

There are indications that CVE-2025-27363 may be under limited, targeted exploitation. This could lead to local code execution with no additional execution privileges needed.

Impact

  • Remote Code Execution
  • Denial of Service
  • Elevation of Privilege
  • Information Disclosure

System / Technologies affected

  • Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400
  • Galaxy Watch running Android Watch 14
  • Samsung mobile devices running Android 13, 14, 15

For affected products, please refer to the link below:

https://security.samsungmobile.com/securityUpdate.smsb

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Solutions

Before installation of the software, please visit the vendor website for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於 沒有留言:

2025年5月7日星期三

Android 多個漏洞

Android 多個漏洞

發佈日期: 2025年05月07日

風險: 高度風險

類型: 操作系統 - 流動裝置及操作系統

於 Android 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼及洩露敏感資料。

 

注意：

有跡象顯示 CVE-2025-27363 可能受到有限度、目標性的利用。這可能會導致本地程式碼執行，而不需要額外的執行權限。

影響

  • 遠端執行程式碼
  • 阻斷服務
  • 權限提升
  • 資料洩露

受影響之系統或技術

  • 2025-05-05 前的 Android 保安更新級別

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

漏洞識別碼

資料來源

相關連結

於 沒有留言:

Android Multiple Vulnerabilities

Android Multiple Vulnerabilities

Release Date: 7 May 2025

RISK: High Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Android. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

 

Note:

There are indications that CVE-2025-27363 may be under limited, targeted exploitation. This could lead to local code execution with no additional execution privileges needed.

Impact

  • Remote Code Execution
  • Denial of Service
  • Elevation of Privilege
  • Information Disclosure

System / Technologies affected

  • Android security patch level prior to 2025-05-05

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Vulnerability Identifier

Source

Related Link

於 沒有留言:

Google Chrome 阻斷服務漏洞

Google Chrome 阻斷服務漏洞

發佈日期: 2025年05月07日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Google Chrome 發現一個漏洞。遠端攻擊者可利用這個漏洞，於目標系統觸發阻斷服務狀況。

影響

  • 阻斷服務

受影響之系統或技術

  • Google Chrome 136.0.7103.92 (Linux) 之前的版本
  • Google Chrome 136.0.7103.92/.93 (Mac) 之前的版本
  • Google Chrome 136.0.7103.92/.93 (Windows) 之前的版本

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

  • 更新至 136.0.7103.92 (Linux) 或之後版本
  • 更新至 136.0.7103.92/.93 (Mac) 或之後版本
  • 更新至 136.0.7103.92/.93 (Windows) 或之後版本

漏洞識別碼

資料來源

相關連結

於 沒有留言:

Google Chrome Denial of Service Vulnerability

Google Chrome Denial of Service Vulnerability

Release Date: 7 May 2025

RISK: Medium Risk

TYPE: Clients - Browsers

A vulnerability was identified in Google Chrome. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.

Impact

  • Denial of Service

System / Technologies affected

  • Google Chrome prior to 136.0.7103.92 (Linux)
  • Google Chrome prior to 136.0.7103.92/.93 (Mac)
  • Google Chrome prior to 136.0.7103.92/.93 (Windows)

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

  • Update to version 136.0.7103.92 (Linux) or later
  • Update to version 136.0.7103.92/.93 (Mac) or later
  • Update to version 136.0.7103.92/.93 (Windows) or later

Vulnerability Identifier

Source

Related Link

於 沒有留言:

Ubuntu Linux 核心多個漏洞

Ubuntu Linux 核心多個漏洞

發佈日期: 2025年05月07日

風險: 中度風險

類型: 操作系統 - LINUX

於 Ubuntu Linux核心發現多個漏洞。攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況及權限提升。

影響

  • 阻斷服務
  • 權限提升

受影響之系統或技術

  • Ubuntu 18.04 ESM
  • Ubuntu 20.04 ESM
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

漏洞識別碼

資料來源

相關連結

於 沒有留言:

Ubuntu Linux Kernel Multiple Vulnerabilities

Ubuntu Linux Kernel Multiple Vulnerabilities

Release Date: 7 May 2025

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities were identified in Ubuntu Linux Kernel. An attacker could exploit some of these vulnerabilities to trigger denial of service condition and elevation of privilege on the targeted system.

Impact

  • Denial of Service
  • Elevation of Privilege

System / Technologies affected

  • Ubuntu 18.04 ESM
  • Ubuntu 20.04 ESM
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於 沒有留言:

2025年5月6日星期二

SUSE Linux 內核多個漏洞

SUSE Linux 內核多個漏洞

發佈日期: 2025年05月06日

風險: 中度風險

類型: 操作系統 - LINUX

於 SUSE Linux 內核發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、遠端執行程式碼及權限提升。

影響

  • 阻斷服務
  • 遠端執行程式碼
  • 權限提升

受影響之系統或技術

  • openSUSE Leap 15.3
  • openSUSE Leap 15.4
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise High Performance Computing 15 SP3
  • SUSE Linux Enterprise High Performance Computing 15 SP4
  • SUSE Linux Enterprise Live Patching 12-SP5
  • SUSE Linux Enterprise Live Patching 15-SP3
  • SUSE Linux Enterprise Live Patching 15-SP4
  • SUSE Linux Enterprise Micro 5.1
  • SUSE Linux Enterprise Micro 5.2
  • SUSE Linux Enterprise Micro 5.3
  • SUSE Linux Enterprise Micro 5.4
  • SUSE Linux Enterprise Real Time 15 SP4
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server 15 SP3
  • SUSE Linux Enterprise Server 15 SP4
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 15 SP3
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

漏洞識別碼

資料來源

相關連結

於 沒有留言:

SUSE Linux Kernel Multiple Vulnerabilities

SUSE Linux Kernel Multiple Vulnerabilities

Release Date: 6 May 2025

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities were identified in SUSE Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution and elevation of privilege on the targeted system.

Impact

  • Denial of Service
  • Remote Code Execution
  • Elevation of Privilege

System / Technologies affected

  • openSUSE Leap 15.3
  • openSUSE Leap 15.4
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise High Performance Computing 15 SP3
  • SUSE Linux Enterprise High Performance Computing 15 SP4
  • SUSE Linux Enterprise Live Patching 12-SP5
  • SUSE Linux Enterprise Live Patching 15-SP3
  • SUSE Linux Enterprise Live Patching 15-SP4
  • SUSE Linux Enterprise Micro 5.1
  • SUSE Linux Enterprise Micro 5.2
  • SUSE Linux Enterprise Micro 5.3
  • SUSE Linux Enterprise Micro 5.4
  • SUSE Linux Enterprise Real Time 15 SP4
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server 15 SP3
  • SUSE Linux Enterprise Server 15 SP4
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 15 SP3
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於 沒有留言:

2025年5月2日星期五

惡意軟件警報 - 零售商成為 Scattered Spider 黑客組織勒索軟件攻擊的目標

惡意軟件警報 - 零售商成為 Scattered Spider 黑客組織勒索軟件攻擊的目標

發佈日期: 2025年05月02日

類別: 惡意程式

惡意軟件警告

現況及相關趨勢

威脅情報顯示，近日多家知名零售商，包括Marks & Spencer（M&S）、Co-op及Harrods，接連遭受疑似「Scattered Spider」組織相關的勒索軟件攻擊，導致業務運營受到嚴重影響 [1][2]。

 

「Scattered Spider」是一個以社交工程為攻擊核心的威脅組織，其常用的手段包括釣魚攻擊、SIM卡交換、多重認證（MFA）疲勞攻擊，以及冒充IT支援人員進行欺詐。攻擊者會利用上述手段竊取企業內部帳戶憑據，進一步橫向滲透至整個網絡。之前的攻擊中，攻擊者發現並竊取高價值數字資產,包括專有程式碼庫、程式碼簽署憑證和原始程式碼。最終，攻擊者部署了DragonForce勒索軟件，對VMware ESXi主機中的虛擬機進行加密。

 

攻擊者的主要目的是加密企業系統、竊取數據以進行勒索，或威脅公開敏感信息。此前的攻擊導致零售商的非接觸式支付、線上訂單及倉庫操作中斷。這些攻擊對零售行業的影響深遠，還可能導致受害者數據洩露及經濟損失。

 

來源：

[1] "Marks & Spencer confirms a cyberattack as customers face delayed orders" BleepingComputer

[2] "Harrods the next UK retailer targeted in a cyberattack" BleepingComputer

HKCERT 建議使用者：

 

  • 實施防網路釣魚的多重身份驗證,提醒使用者識別社交工程攻擊和網絡釣魚。
  • 使用最小權限存取管制並限制未經授權的存取操作。
  • 維護離線和加密備份。
  • 部署電子郵件過濾工具並實施網絡分段。
  • 定期更新軟件和系統並安裝防毒軟件。
  • 制定完善的事故應變計劃。

 

更多資料, 可以訪問 https://www.hkcert.org/tc/publications/fight-ransomware。

於 沒有留言:

Malware Alert - Retailers Targeted by Ransomware Attacks from Scattered Spider Threat Actor Group

Malware Alert - Retailers Targeted by Ransomware Attacks from Scattered Spider Threat Actor Group

Release Date: 2 May 2025

Type: Malware

Malware Alert

Current Status and Related Trends

Threat intelligence has revealed that several well-known retailers, including Marks & Spencer (M&S), Co-op, and Harrods, have reportedly been hit by ransomware attacks linked to the "Scattered Spider" group, severely impacting their business operations [1][2].

 

"Scattered Spider" is a threat group that primarily uses social engineering tactics. Their common attack methods involve phishing, SIM swapping, multi-factor authentication (MFA) fatigue attacks, and impersonating IT support staff to carry out fraud. The attackers steal internal account credentials of enterprises and then conduct lateral movements across the entire network. In previous attacks, the attackers used to perform discovery and exfiltrate high-value digital assets including proprietary code repositories, code-signing certificates, and source code. Eventually, the attackers deployed the DragonForce ransomware to encrypt virtual machines on VMware ESXi hosts.

 

The attackers' main objectives are to encrypt corporate systems, steal data for ransom, or threaten to disclose sensitive information. The previous attacks caused disruptions to retailers' contactless payments, online orders, and warehouse operations. These attacks have had a profound impact on the retail industry and may also lead to data breaches and financial losses for victims.

 

Source:

[1] "Marks & Spencer confirms a cyberattack as customers face delayed orders" BleepingComputer

[2] "Harrods the next UK retailer targeted in a cyberattack" BleepingComputer

mickmick.net recommends that users should:

 

  • Implement phishing-resistant MFA and educate users on recognizing social engineering and phishing attempts.
  • Enforce least privilege access policies to limit unauthorized access.
  • Maintain offline and encrypted backups.
  • Deploy email filtering tools and implement network segmentation.
  • Update software and system regularly and install anti-virus.
  • Create robust incident response plan.

 

For further information, can browse https://www.hkcert.org/publications/fight-ransomware.

於 沒有留言:

RedHat Linux 核心多個漏洞

RedHat Linux 核心多個漏洞

發佈日期: 2025年05月02日

風險: 中度風險

類型: 操作系統 - LINUX

於 RedHat Linux核心發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發篡改、阻斷服務狀況、遠端執行任意程式碼、洩露敏感資料及繞過保安限制。

 

影響

  • 阻斷服務
  • 資料洩露
  • 繞過保安限制
  • 篡改
  • 遠端執行程式碼

受影響之系統或技術

  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat OpenShift Container Platform 4.14 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.14 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.17 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.17 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.18 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.18 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 8 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 8 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 8 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for Power 4.14 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.14 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.17 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.17 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.18 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 ppc64le

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

漏洞識別碼

資料來源

相關連結

於 沒有留言:

RedHat Linux Kernel Multiple Vulnerabilities

RedHat Linux Kernel Multiple Vulnerabilities

Release Date: 2 May 2025

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities were identified in RedHat Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger data manipulation, denial of service condition, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

 

Impact

  • Denial of Service
  • Information Disclosure
  • Security Restriction Bypass
  • Data Manipulation
  • Remote Code Execution

System / Technologies affected

  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
  • Red Hat OpenShift Container Platform 4.14 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.14 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.17 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.17 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform 4.18 for RHEL 8 x86_64
  • Red Hat OpenShift Container Platform 4.18 for RHEL 9 x86_64
  • Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 8 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 8 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 8 aarch64
  • Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 aarch64
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 8 s390x
  • Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 s390x
  • Red Hat OpenShift Container Platform for Power 4.14 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.14 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.17 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.17 for RHEL 9 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.18 for RHEL 8 ppc64le
  • Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 ppc64le

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於 沒有留言:

SonicWall 產品多個漏洞

SonicWall 產品多個漏洞

發佈日期: 2025年05月02日

風險: 高度風險

類型: 操作系統 - Network

於 SonicWall Products 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼及繞過保安限制。

 

注意:

CVE-2023-44221 已被廣泛利用。此漏洞允許具有管理員權限、經過驗證的攻擊者以「nobody」使用者的身份在 SonicWall SMA100 產品中執行任意程式碼。因此，風險等級評為高度風險。

 

影響

  • 遠端執行程式碼
  • 繞過保安限制

受影響之系統或技術

  • SonicWall SMA 100 系列（SMA 200、SMA 210、SMA 400、SMA 410、SMA 500v) 10.2.1.9-57sv 及更早版本

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

漏洞識別碼

資料來源

相關連結

於 沒有留言:

SonicWall Products Multiple Vulnerabilities

SonicWall Products Multiple Vulnerabilities

Release Date: 2 May 2025

RISK: High Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in SonicWall Products. A remote attacker could exploit these vulnerabilities to trigger remote code execution and security restriction bypass on the targeted system.

 

Note:

CVE-2023-44221 is being exploited in the wild. This vulnerability allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' user in SonicWall SMA100 appliances. Hence, the risk level is rated as High Risk.

 

Impact

  • Remote Code Execution
  • Security Restriction Bypass

System / Technologies affected

  • SonicWall SMA 100 Series (SMA 200, SMA 210, SMA 400, SMA 410, SMA 500v) 10.2.1.9-57sv and earlier versions.

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於 沒有留言:
訂閱： 文章 (Atom)

思科產品多個漏洞

思科產品多個漏洞 於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況，資料篡改及繞過保安限制。 影響 阻斷服務 繞過保安限制 篡改 受影響之系統或技術 Cisco IOS Cisco IOS XE 請參考供應商發佈的連結以了解受影響的版本： https:...