內容說明

CISA於4/14至4/20在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

 

影響平台

Microsoft｜Windows
Apple｜Multiple Products
SonicWall｜SMA100 Appliances

 

處置建議

 
修補說明請參考以下官方連結：

Microsoft｜Windows
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054

Apple｜Multiple Products
https://support.apple.com/en-us/122282 
https://support.apple.com/en-us/122400 
https://support.apple.com/en-us/122401 
https://support.apple.com/en-us/122402

SonicWall｜SMA100 Appliances
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022  
 
 

CVE編號

CVE-2021-20035
CVE-2025-24054
CVE-2025-31200
CVE-2025-31201

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog 
2. https://nvd.nist.gov/vuln/detail/CVE-2021-20035 
3. https://nvd.nist.gov/vuln/detail/CVE-2025-24054 
4. https://nvd.nist.gov/vuln/detail/CVE-2025-31200 
5. https://nvd.nist.gov/vuln/detail/CVE-2025-31201 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/a410c114-91a4-4905-ab07-fc7eec06ead8/
發布日期：25/04/2025