-2/3至2/9 Known Exploited Vulnerabilities Catalog(KEV)週報

內容說明


CISA於2/3至2/9在Known Exploited Vulnerabilities Catalog(KEV)中發布11個已遭駭客利用之漏洞。

 

影響平台


Trimble｜Cityworks
Sophos｜XG Firewall
Sophos｜CyberoamOS
Microsoft    Office｜Outlook
Audinate｜Dante Discovery
7-Zip｜7-Zip
Linux｜Kernel
Paessler｜PTRG Network Monitor
Microsoft｜NET Framework
Apache｜OFBiz

 

處置建議

 
修補說明請參考以下官方連結：

Trimble｜Cityworks
https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0

Sophos｜XG Firewall
https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal

Sophos｜CyberoamOS
https://support.sophos.com/support/s/article/KBA-000007526

Microsoft    Office｜Outlook
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413

 Audinate｜Dante Discovery
https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/

7-Zip｜7-Zip
https://www.7-zip.org/history.txt

Linux｜Kernel
https://lore.kernel.org/linux-cve-announce/2024120232-CVE-2024-53104-d781@gregkh/

Paessler｜PTRG Network Monitor
https://www.paessler.com/prtg/history/prtg-18#18.2.41.1652
https://www.paessler.com/prtg/history/prtg-18#18.2.39

Microsoft｜NET Framework
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059

Apache｜OFBiz
https://ofbiz.apache.org/security.html

 

CVE編號


CVE-2018-19410
CVE-2018-9276
CVE-2020-15069
CVE-2020-29574
CVE-2022-23748
CVE-2024-21413
CVE-2024-29059
CVE-2024-45195
CVE-2024-53104
CVE-2025-0411
CVE-2025-0994

 

參考資料


1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2018-19410 
3. https://nvd.nist.gov/vuln/detail/CVE-2018-9276 
4. https://nvd.nist.gov/vuln/detail/CVE-2020-15069 
5. https://nvd.nist.gov/vuln/detail/CVE-2020-29574 
6. https://nvd.nist.gov/vuln/detail/CVE-2022-23748 
7. https://nvd.nist.gov/vuln/detail/CVE-2024-21413 
8. https://nvd.nist.gov/vuln/detail/CVE-2024-29059 
9. https://nvd.nist.gov/vuln/detail/CVE-2024-45195 
10. https://nvd.nist.gov/vuln/detail/CVE-2024-53104 
11. https://nvd.nist.gov/vuln/detail/CVE-2025-0411 
12. https://nvd.nist.gov/vuln/detail/CVE-2025-0994 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/447ce45f-ba81-42a9-9619-fe6d05005125/
發布日期：11/02/2025