內容說明：

CISA於9/2至9/8在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

影響平台：

受影響廠商與產品名稱如下：
DrayTek｜VigorConnect
Kingsoft｜WPS Office

處置建議：

DrayTek｜VigorConnect
https://www.draytek.com/about/security-advisory/vigorconnect-software-security-vulnerability

Kingsoft｜WPS Office
目前修補方式尚未確認，建議按照供應商說明（如果有）應用緩解措施，若無緩解措施則建議停用該產品。

CVE編號：

CVE-2021-20123
CVE-2021-20124
CVE-2024-7262

參考資料：

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://www.draytek.com/about/security-advisory/vigorconnect-software-security-vulnerability
3. https://nvd.nist.gov/vuln/detail/CVE-2021-20123
4. https://nvd.nist.gov/vuln/detail/CVE-2021-20124
5. https://nvd.nist.gov/vuln/detail/CVE-2024-7262

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/1575/
發布日期：25/09/2024