內容說明

CISA於6/9至6/15在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

影響平台

Web Distributed Authoring and Versioning｜Web Distributed Authoring and Versioning (WebDAV)
Wazuh｜Wazuh Server
Roundcube｜Webmail
Erlang｜Erlang/OTP

 

處置建議

 
修補說明請參考以下官方連結：

Web Distributed Authoring and Versioning｜Web Distributed Authoring and Versioning (WebDAV)
https:/msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-33053

Wazuh｜Wazuh Server
https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh

Roundcube｜Webmail
https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8

Erlang｜Erlang/OTP
https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy

  

CVE編號

CVE-2024-42009
CVE-2025-24016
CVE-2025-32433
CVE-2025-33053

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2024-42009
3. https://nvd.nist.gov/vuln/detail/CVE-2025-24016
4. https://nvd.nist.gov/vuln/detail/CVE-2025-32433
5. https://nvd.nist.gov/vuln/detail/CVE-2025-33053  

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/75175a3c-52c6-430d-94d3-3bf31974e0b1/
發布日期：18/06/2025