內容說明

CISA於7/14至7/20在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

 

影響平台

Microsoft｜SharePoint
Fortinet｜FortiWeb
Wing FTP Server｜Wing FTP Server

 

處置建議

 
修補說明請參考以下官方連結：

Microsoft｜SharePoint
https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770
https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770

Fortinet｜FortiWeb
https://fortiguard.fortinet.com/psirt/FG-IR-25-151

Wing FTP Server｜Wing FTP Server
https://www.wftpserver.com/serverhistory.htm

  

CVE編號

CVE-2025-25257
CVE-2025-47812
CVE-2025-53770

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2025-25257
3. https://nvd.nist.gov/vuln/detail/CVE-2025-47812
4. https://nvd.nist.gov/vuln/detail/CVE-2025-53770

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/af59f4ee-5d02-460f-a663-b86574008cac/
發布日期：21/07/2025