內容說明

CISA於7/28至8/3在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

 

影響平台

PaperCut｜NG/MF
Cisco｜Identity Services Engine

 

處置建議

 
修補說明請參考以下官方連結：

PaperCut｜NG/MF
https://www.papercut.com/kb/Main/SecurityBulletinJune2023

Cisco｜Identity Services Engine
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6

  

CVE編號

CVE-2023-2533
CVE-2025-20281
CVE-2025-20337

 

參考資料

1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. https://nvd.nist.gov/vuln/detail/CVE-2023-2533
3. https://nvd.nist.gov/vuln/detail/CVE-2025-20281
4. https://nvd.nist.gov/vuln/detail/CVE-2025-20337 

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/012dd9b7-6aae-402a-b0ed-d862cd3c7206/
發布日期：05/08/2025