-12/16至12/22 Known Exploited Vulnerabilities Catalog(KEV)週報

內容說明：

CISA於12/16至12/22在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

 

影響平台：

BeyondTrust｜Privileged Remote Access (PRA) and Remote Support (RS)
Reolink｜RLC-410W、C1 Pro、C2 Pro、RLC-422W及RLC-511W IP cameras
NUUO｜NVRmini Devices與 NVRmini2 Devices
Cleo｜Harmony、VLTrader及LexiCom
Microsoft｜Windows
Adobe｜ColdFusion

 

處置建議：

修補說明請參考以下官方連結：
BeyondTrust｜Privileged Remote Access (PRA) and Remote Support (RS)
https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 
Reolink｜RLC-410W、C1 Pro、C2 Pro、RLC-422W及RLC-511W IP cameras
https://reolink.com/product-eol/ 
https://reolink.com/download-center/ 
NUUO｜NVRmini Devices
https://nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter%EF%BC%BFNVRmini-2-and-NVRsolo-series.pdf 
Cleo｜Harmony、VLTrader及LexiCom
https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update-CVE-2024-55956 
Microsoft｜Windows
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35250 
Adobe｜ColdFusion
https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html 

 

CVE編號：

CVE-2018-14933
CVE-2019-11001
CVE-2021-40407
CVE-2022-23227
CVE-2024-12356
CVE-2024-20767
CVE-2024-35250
CVE-2024-55956 
 

參考資料：

  1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
  2. https://nvd.nist.gov/vuln/detail/CVE-2024-12356 
  3. https://nvd.nist.gov/vuln/detail/CVE-2021-40407 
  4. https://nvd.nist.gov/vuln/detail/CVE-2019-11001 
  5. https://nvd.nist.gov/vuln/detail/CVE-2022-23227 
  6. https://nvd.nist.gov/vuln/detail/CVE-2018-14933 
  7. https://nvd.nist.gov/vuln/detail/CVE-2024-55956 
  8. https://nvd.nist.gov/vuln/detail/CVE-2024-35250 
  9. https://nvd.nist.gov/vuln/detail/CVE-2024-20767 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/6c31dfd1-83ce-4a93-b0ab-47d077ff2b15/
發布日期：31/12/2024