內容說明：

CISA於11/4至11/10在Known Exploited Vulnerabilities Catalog(KEV)中發布6個已遭駭客利用之漏洞。

影響平台：

Nostromo｜nhttpd
CyberPersons｜CyberPanel
Android｜Framework
Palo Alto｜Expedition
PTZOptics｜PT30X-SDI/NDI Cameras

處置建議：

修補說明請參考以下官方連結：
Nostromo｜nhttpd
https://www.nazgul.ch/dev/nostromo_cl.txt
CyberPersons｜CyberPanel
https://cyberpanel.net/blog/detials-and-fix-of-recent-security-issue-and-patch-of-cyberpanel
Android｜Framework
https://source.android.com/docs/security/bulletin/2024-11-01
Palo Alto｜Expedition
https://security.paloaltonetworks.com/CVE-2024-5910
PTZOptics｜PT30X-SDI/NDI Cameras
https://ptzoptics.com/firmware-changelog/

CVE編號：

CVE-2019-16278
CVE-2024-5910
CVE-2024-8956
CVE-2024-8957
CVE-2024-43093
CVE-2024-51567

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2019-16278
3. https://nvd.nist.gov/vuln/detail/CVE-2024-5910
4. https://nvd.nist.gov/vuln/detail/CVE-2024-8956
5. https://nvd.nist.gov/vuln/detail/CVE-2024-8957
6. https://nvd.nist.gov/vuln/detail/CVE-2024-43093
7. https://nvd.nist.gov/vuln/detail/CVE-2024-51567

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/information_security_information_sharing_1584/
發布日期：13/11/2024