內容說明：

CISA於11/18至11/24在Known Exploited Vulnerabilities Catalog(KEV)中發布7個已遭駭客利用之漏洞。

影響平台：

Oracle｜Agile Product Lifecycle Management (PLM)
Apple｜Multiple Products
VMware｜vCenter Server
Palo Alto Networks｜PAN-OS

處置建議：

Oracle｜Agile Product Lifecycle Management (PLM)
https://www.oracle.com/security-alerts/alert-cve-2024-21287.html
Apple｜Multiple Products
https://support.apple.com/en-us/121752
https://support.apple.com/en-us/121753
https://support.apple.com/en-us/121754
https://support.apple.com/en-us/121755
https://support.apple.com/en-us/121756
VMware｜vCenter Server
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968
Palo Alto Networks｜PAN-OS
https://security.paloaltonetworks.com/CVE-2024-9474
https://security.paloaltonetworks.com/CVE-2024-0012

CVE編號：

CVE-2024-0012
CVE-2024-9474
CVE-2024-21287
CVE-2024-38812
CVE-2024-38813
CVE-2024-44308
CVE-2024-44309

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2024-21287
3. https://nvd.nist.gov/vuln/detail/CVE-2024-44309
4. https://nvd.nist.gov/vuln/detail/CVE-2024-44308
5. https://nvd.nist.gov/vuln/detail/CVE-2024-38813
6. https://nvd.nist.gov/vuln/detail/CVE-2024-38812
7. https://nvd.nist.gov/vuln/detail/CVE-2024-9474
8. https://nvd.nist.gov/vuln/detail/CVE-2024-0012

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/information_security_information_sharing_1587/
發布日期：27/11/2024