內容說明：

CISA於7/29至8/4在Known Exploited Vulnerabilities Catalog(KEV)中發布4個已遭駭客利用之漏洞。

影響平台：

Acronis｜Cyber Infrastructure (ACI)
ServiceNow｜Utah, Vancouver, and Washington DC Now
VMware｜ESXi

處置建議：

修補說明請參考以下官方連結：
Acronis｜Cyber Infrastructure (ACI)
https://security-advisory.acronis.com/advisories/SEC-6452
ServiceNow｜Utah, Vancouver, and Washington DC Now
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154
VMware｜ESXi
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505

CVE編號：

CVE-2024-4879
CVE-2024-5217
CVE-2024-37085
CVE-2023-45249

參考資料：

https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://nvd.nist.gov/vuln/detail/CVE-2024-4879
https://nvd.nist.gov/vuln/detail/CVE-2024-5217
https://nvd.nist.gov/vuln/detail/CVE-2024-37085
https://nvd.nist.gov/vuln/detail/CVE-2023-45249
https://security-advisory.acronis.com/advisories/SEC-6452
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505

新聞來源：https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alerts/1568/
發布日期：07/08/2024