內容說明

CISA於02/17至02/23在Known Exploited Vulnerabilities Catalog(KEV)中發布5個已遭駭客利用之漏洞。

 

影響平台

Microsoft｜Power Pages
Palo Alto Networks｜PAN-OS
Craft CMS｜Craft CMS
Palo Alto Networks｜PAN-OS
SonicWall｜SonicOS

 

處置建議

 
修補說明請參考以下官方連結：

Microsoft｜Power Pages
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24989

Palo Alto Networks｜PAN-OS
https://security.paloaltonetworks.com/CVE-2025-0111

Craft CMS｜Craft CMS
https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x

Palo Alto Networks｜PAN-OS
https://security.paloaltonetworks.com/CVE-2025-0108

SonicWall｜SonicOS
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003


 

CVE編號

CVE-2024-53704
CVE-2025-0108
CVE-2025-0111
CVE-2025-23209
CVE-2025-24989

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2024-53704 
3. https://nvd.nist.gov/vuln/detail/CVE-2025-0108 
4. https://nvd.nist.gov/vuln/detail/CVE-2025-0111 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/6ae61a08-bedc-4c4b-9c8f-43c28b06d59c/
發布日期：26/02/2025