瀹夊叏鍐呭弬8鏈?鏃ユ秷鎭紝浜旂溂鑱旂洘鍥藉缃戠粶瀹夊叏鏈烘瀯鏄ㄥぉ鑱斿悎鍙戝竷瀹夊叏鍏憡锛屽叕甯冧簡2022骞存渶甯歌鍒╃敤鐨?2涓紡娲烇紝骞跺缓璁€滃強鏃朵慨琛ラ潰鍚戜簰鑱旂綉鐨勭郴缁熲€濄€侟/p>

杩欎簺缃戠粶瀹夊叏鏈烘瀯闈炲父浜嗚В缇庡浗銆佹境澶у埄浜氥€佸姞鎷垮ぇ銆佹柊瑗垮叞鍜岃嫳鍥藉鍐呯粍缁囧彈鍒扮殑缃戠粶鏀诲嚮銆傚挩璇㈠叕鍛婄О锛屾伓鎰忕綉缁滄敾鍑昏€呭埄鐢ㄨ緝鏃ц蒋浠舵紡娲炵殑棰戠巼楂樹簬鏈€杩戞姭闇茬殑婕忔礊銆侟/p>

姝ゆ鍙戝竷鐨?022骞存渶甯歌鍒╃敤婕忔礊鍒楄〃锛屼笌鍘诲勾鍙戝竷鐨勫垪琛ㄧ被浼笺€傚墠12涓渶甯歌鍒╃敤婕忔礊閲岋紝鏈夎秴杩囦竴鍗婁篃鍑虹幇鍦ㄥ幓骞村彂甯冪殑鍒楄〃锛屾瘮濡侺og4Shell锛圕VE-2021-44228锛夊拰Zoho婕忔礊锛圕VE-2021-40539锛夈€侺og4Shell婕忔礊浜?021骞磋鍙戠幇锛屾嵁淇￠伃鏈濋矞濞佽儊缁勭粐鍒╃敤銆俍oho婕忔礊琚敤鏉ュ绾㈠崄瀛椾細鍙戝姩鏀诲嚮锛屽紩鍙戝獟浣撳箍娉涙姤閬撱€侟/p>

鑻卞浗鍥藉缃戠粶瀹夊叏涓績锛圢CSC锛夎涓猴紝澶ч噺鑰佹紡娲炲湪浠婂勾鍒楄〃涓婂啀娆″嚭鐜帮紝璇存槑鈥滃敖绠″凡鏈夊畨鍏ㄦ洿鏂板彲浠ヤ慨澶嶉潰鍚戜簰鑱旂綉绯荤粺鐨勫凡鎶湶婕忔礊锛岃繖浜涙紡娲炰緷鐒堕伃鍒版伓鎰忕綉缁滄敾鍑昏€呯户缁埄鐢ㄣ€傗€滭/p>

鏃ф紡娲炰粛鍗犲ぇ鍗夵/h3>

鍘诲勾琚埄鐢ㄦ渶澶氱殑婕忔礊鍦?018骞村氨宸茬粡琚姭闇诧紝鍚勫ぇ缁勭粐鏈夊洓骞存椂闂翠慨琛ョ浉鍏宠澶囥€傜劧鑰岋紝杩欎竴婕忔礊浠嶇劧鍙嶅瑙佽缇庡浗缃戠粶瀹夊叏鍜屽熀纭€璁炬柦瀹夊叏灞€銆佽仈閭﹁皟鏌ュ眬鍜岃嫳鍥藉浗瀹剁綉缁滃畨鍏ㄤ腑蹇冪殑鍚勯」鎶ュ憡銆侟/p>

璇ユ紡娲炲奖鍝岶ortinet鐨凷SL VPN浜у搧锛岀紪鍙蜂负CVE-2018-13379銆傝繖涓€闂鏃╁氨涓轰汉鎵€鐭ャ€傝タ鏂瑰浗瀹舵斂搴滄浘璀﹀憡璇达紝APT29绛変笌淇勭綏鏂仈閭﹀澶栨儏鎶ュ眬鏈夊叧鐨勫▉鑳佺粍缁囷紝浠ュ強鍏朵粬鎭舵剰缁勭粐閮藉湪鍒╃敤杩欎釜婕忔礊銆侟/p>

Fortinet鐨勪竴浣嶅彂瑷€浜哄己璋冭鍏徃宸插悜鍏紬鎻愪緵缂撹В鎸囧崡銆備粬琛ㄧず锛氣€淔ortinet鑷村姏浜庡府鍔╃粍缁囧熀浜庨闄╁仛鍑烘槑鏅虹殑鍐崇瓥锛屼粠鑰屽噺杞荤綉缁滈闄┿€傜浉鍏冲喅绛栧寘鎷強鏃舵墦涓婅ˉ涓併€佽繘琛屽叧閿洿鏂般€傗€滭/p>

绱ч殢Fortinet VPN婕忔礊鍏跺悗鐨勶紝鏄竴绯诲垪褰卞搷寰蒋Exchange鏈嶅姟鍣ㄧ殑婕忔礊銆傚畠浠簬2021骞磋鍙戠幇锛岄€氬父绉颁负ProxyShell婕忔礊锛堝寘鎷珻VE-2021-34473銆丆VE-2021-31207銆丆VE-2021-34523锛夈€侟/p>

鑻卞浗鍥藉缃戠粶瀹夊叏涓績琛ㄧず锛氣€滄敾鍑昏€呴€氬父鍦ㄦ紡娲炲叕寮€鎶湶鍚庣殑鍓嶄袱骞村唴锛屽埄鐢ㄨ繖浜涙紡娲炲彇寰楁渶澶ф敹鑾凤紝浠栦滑浼氶拡瀵规€у湴鍒╃敤杩欎簺婕忔礊锛屾渶澶х▼搴﹀湴鎵╁ぇ鏀诲嚮褰卞搷锛岃繖灏变綋鐜颁簡浼佷笟鍙婃椂搴旂敤瀹夊叏鏇存柊鐨勫ソ澶勩€傗€淈/p>

姝ゅ锛孉tlassian婕忔礊锛圕VE-2021-26084锛夌户缁綅灞呭墠浜斿悕銆傝婕忔礊鍏佽閫氳繃浜掕仈缃戣繘琛岃繙绋嬪埄鐢紝鍙互杞绘槗鍦拌姝﹀櫒銆傚洜姝わ紝瀹冪殑涓ラ噸鎬ц瘎鍒嗛珮杈?.8鍒嗭紙婊″垎涓?0鍒嗭級銆侟/p>

娓呭崟鍓?涓紡娲炲潎涓鸿€佹紡娲濣/p>

鏂版紡娲為伃鍒╃敤棰戞鎻愰珮

鍘诲勾鏈€甯歌鍒╃敤鐨勬紡娲炰腑锛岀湡姝ｅ湪鍘诲勾鍙戠幇鐨勬槸褰卞搷VMware浜у搧鐨勪竴瀵规紡娲烇紙CVE-2022-22954銆丆VE-2022-22960锛夈€傚畠浠績浣緾ISA鍦ㄥ幓骞翠簲鏈堝彂甯冪揣鎬ユ寚浠わ紝瑕佹眰鑱旈偊姘戜簨琛屾斂閮ㄩ棬淇ˉ鍙楀奖鍝嶄骇鍝併€侟/p>

褰卞搷F5鍏徃BIG-IP浜у搧鐨勬紡娲炲湪2022骞存渶涓ラ噸婕忔礊鍒楄〃涓帓鍚嶄笉楂樸€傚畠鐨勪弗閲嶆€ц瘎鍒嗕篃楂樿揪9.8鍒嗭紙婊″垎涓?0鍒嗭級銆傝繖涓€婕忔礊淇冧娇CISA鍙戝竷绱ф€ヨ鎶ャ€傛嵁Shodan鏁版嵁鏄剧ず锛岃秴杩?5000涓狟IG-IP浜у搧瀛樺湪浜掕仈缃戞毚闇查棶棰樸€侟/p>

寰蒋鍐嶆鐧讳笂姒滃崟銆傚瀹跺畨鍏ㄥ叕鍙告姤鍛婄О锛學indows绯荤粺涓殑寰蒋鏀寔璇婃柇宸ュ叿婕忔礊锛圕VE-2022-30190锛夎澶氫釜鍥藉鏀寔鐨勫▉鑳佺粍缁囧埄鐢ㄣ€侟/p>

Atlassian鐨勫彟涓€涓紡娲烇紙CVE-2022-26134锛夊嚭鐜板湪鈥?022骞村崄浜屽ぇ琚埄鐢ㄦ紡娲炩€濆垪琛ㄦ湯灏俱€傚畨鍏ㄥ叕鍛婅鍛婄О锛屸€?022骞?鏈堣鍏紑鎶湶涔嬪墠锛屽畠寰堝彲鑳芥渶鍒濊浣滀负闆舵棩婕忔礊鍒╃敤鈥濓紝骞舵寚鍑哄畠涓庢帓鍚嶇鍥涚殑鍙︿竴涓狝tlassian婕忔礊锛圕VE-2021-26084锛夋湁鍏宠仈銆侟/p>

鍙傝€冭祫鏂欙細https://therecord.media/fortinet-vpn-tops-cisa-list-of-bugs

澹版槑锛氭湰鏂囨潵鑷畨鍏ㄥ唴鍙傦紝鐗堟潈褰掍綔鑰呮墍鏈夈€傛枃绔犲唴瀹逛粎浠ｈ〃浣滆€呯嫭绔嬭鐐癸紝涓嶄唬琛ㄦ矁閫欳A绔嬪満锛岃浆杞界洰鐨勫湪浜庝紶閫掓洿澶氫俊鎭€傚鏈変镜鏉冿紝璇疯仈绯诲垹闄ゃ€侟/p> ]]> /article/threat/11.html/feed 0