°ä²¼¹¦·ò£º2024-03-14
½üÈÕ£¬½ð²Ê»ã“ÌìÄ»”°²È«³¢ÊÔÊÒÔÚһϵÁÐ¿í·ºÊ¹ÓõÄÄÚÈÝÖÎÀíϵͳ£¨CMS£©ÖУ¬·¢ÏÖ¶à¸ö0Day¸ßΣ·ì϶£¬Ô̺¬µ«²»ÏÞÓÚÉϺ£**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSÎļþÉÏ´«·ì϶£¨CNVD-2024-03360£©¡¢WB** CMS´æÔÚÎļþÉÏ´«·ì϶£¨CNVD-2024-05823£©¡¢É½¶«**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSϵͳ´æÔÚÎļþÉÏ´«·ì϶(CNVD-2023-71326)
ÄÚÈÝÖÎÀíϵͳ£¨CMS£©Í¨³£ÓÃÓÚÍøÕ¾ºÍÔÚÏßÀûÓõĹ¹½¨¡£³¢ÊÔÊÒ×êÑз¢ÏÖ£¬ÈçÈôºÚ¿Íͨ¹ýÕâЩ¸ßΣ·ì϶ÉÏ´«Ô̺¬¶ñÒâ´úÂëµÄÎļþ£¨Èç¶ñÒâ¾ç±¾¡¢Ä¾Âí¡¢²¡¶¾£©²¢Ö´ÐУ¬²»½öÄܹ»Ê¹²¿Êð¸ÃϵͳµÄ·þÎñÆ÷ÏÝÈë̱»¾¡¢·ÛËéÖ÷ÌâÎļþ¡¢»ñȡδ¾ÊÚȨµÄ½Ó¼ûȨÏÞ£¬ÉõÖÁÄܹ»¼Óº¦Óû§ÒþÖÔ¡£
ÉÏÊöÉϺ£**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSϵͳ£¬ÊǹúÄÚÓû§×î¶àµÄPHPÀàCMSϵͳ¡£Æ¾¾Ý×ʲú²â»æÏµÍ³quake·¢ÏÖ£¬ÆäÈ«ÇòÓÐ1040¶àÍò¸öʹÓüͼ£¬ÆäÖÐÖйú¾ÍÓг¬¹ý247Íò¸öʹÓüͼ¡£ÈôÊǺڿÍÀûÓÃÕâ¸öÎļþÉÏ´«·ì϶£¬²»½öÄܹ¥ÏÂÕâ¸öϵͳ×ÔÉí£¬»¹½«¼ä½ÓÓ°Ï쵽ȫ¹úÉϰÙÍò¸öʹÓôËϵͳµÄÍøÕ¾£¬´øÀ´ÑϳÁµÄºó¹û¡£
½ð²Ê»ã“ÌìÄ»”°²È«³¢ÊÔסլһ¹¦·ò·¢ÏÖ²¢Éϱ¨¹ú¶ÈÐÅÏ¢°²È«·ì϶¹²ÏíÆ½Ì¨£¨China National Vulnerability Database£¬¼ò³ÆCNVD£©£¬²¢»ñµÃCNVD 0day·ì϶¼òÖ±ÈÏ¡£
½ð²Ê»ãµÄ·À»ðǽÒѾÉý¼¶´Ë·ì϶¿â£¬²É°ì½ð²Ê»ã·À»ðǽµÄ¿Í»§¶¼×Ô¶¯ÊµÏÖ¶ÔÕâЩ·ì϶µÄÔ¤·À¡£
“ÌìÄ»”°²È«³¢ÊÔÊÒ´ÓÊôÓÚ½ð²Ê»ãÍøÂ簲ȫ²úÆ·ÊÂÒµ²¿£¬×¨Ò»ÓÚ°²È«Íþв¼à²â·ÖÎöÓë×êÑУ¬¹¥·ÀÆ¥µÐ¼¼Êõ×êÑС£×êÑÐÖ¸±êÔ̺¬ Botnet¡¢½©Ä¾Èä·ÖÎö£¬APT ¸ß¼¶Íþв¡¢ÀÕË÷¡¢ÍÚ¿ó£¬WEB Óëϵͳ·ì϶·ÖÎö¡£
2023Äê9Ô£¬½ð²Ê»ã±»¹ú¶ÈÐÅÏ¢°²È«·ì϶¹²ÏíÆ½Ì¨£¨¼ò³ÆCNVD£©ÊÚÓè“2022Äê¶È·ì϶´ëÖù¤×÷͹Æð¹±Ï×µ¥Ôª”³ÆºÅ£¬ÒÔÔÞÃÀ½ð²Ê»ãÔÚÐÅÏ¢°²È«·ì϶´ëÖù¤×÷·½ÃæµÄ͹Æð¹±Ïס£½ð²Ê»ãÒÑÂ½Ðø¶àÄê»ñ´Ë³ÆºÅ¡£

·À²¡¶¾£¨AV£©×êÑУº½ð²Ê»ã“ÌìÄ»”°²È«³¢ÊÔÊÒÓëºÍ¹úÄÚ±í°²È«³§É̺ÍÍŶӽáºÏ³ÉÁ¢°²È«´´Ð³¢ÊÔÊÒ£¬²ú³öµÄZϵÁзÀ»ðǽAVÌØµãÊýÁ¿´ïµ½1000W+£¬°²È«¼ì²âÕýÈ·¶È´ïµ½99.97%¡£
Íþвµý±¨£¨TI£©×êÑУº½ð²Ê»ã“ÌìÄ»”°²È«³¢ÊÔÊÒÓëÌÚѶ°²È«Ç¿Ç¿½áºÏ£¬»ùÓںϹæ¼ì²â³¡¾°½øÐд´Ð£¬Í»ÆÆ¼ì²â×è¶ÏÑÓ³¤¡¢¼ì²â»úÄܵͺ;«×¼¶ÈÎÊÌ⣬Èð²È«²»³öȦ£¬·çÏÕ²»±íÒç¡£

ÈëÇÖ·ÀÓù£¨IPS£©×êÑУº½ð²Ê»ã“ÌìÄ»”°²È«³¢ÊÔÊÒ²ú³öµÄIPSÌØµã¿â¹²¼Æ13000+Ìõ¡¢90+·ÖÀ࣬¸²¸ÇÍÚ¿ó¡¢ÀÕË÷µÈÈȵ㹥»÷£¬Î¬³ÖÿÖܸüУ¬²»ÐÝÌáÉý°²È«·À»¤ÄÜÁ¦¡£
ÔÚÕâÈÕÒæ¸´ÔÓµÄÍøÂçÊÀ½ç£¬½ð²Ê»ã°²È«£¬»ùÓÚ³¡¾°µÄ×Ô¶¯»¯ÔËÓª£¬ÓëÄúһ·¹¹½¨¸ü¸ßЧ¡¢¸ü°²È«µÄÍøÂç»·¾³£¬±£»¤ÄúµÄÊý×Ö×ʲú¡£
