-12/02至12/08 Known Exploited Vulnerabilities Catalog(KEV)週報

內容說明：

CISA於12/02至12/08在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

影響平台：

CyberPersons｜CyberPanel
Zyxel｜Multiple Firewalls
ProjectSend｜ProjectSend
North Grid｜Proself

 

處置建議：

修補說明請參考以下官方連結：
CyberPersons｜CyberPanel
https://cyberpanel.net/KnowledgeBase/home/change-logs/
Zyxel｜Multiple Firewalls
https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-21-2024
ProjectSend｜ProjectSend
https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744
North Grid｜Proself
https://www.proself.jp/information/153/


 

CVE編號：

CVE-2023-45727
CVE-2024-11667
CVE-2024-11680
CVE-2024-51378

 

參考資料：

 

  1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  2. https://nvd.nist.gov/vuln/detail/CVE-2024-51378
  3. https://nvd.nist.gov/vuln/detail/CVE-2024-11667
  4. https://nvd.nist.gov/vuln/detail/CVE-2024-11680
  5. https://nvd.nist.gov/vuln/detail/CVE-2023-45727

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/information_security_information_sharing_1589/
發布日期：11/12/2024