°ä²¼¹¦·ò£º2024-03-14
½üÈÕ£¬GA»Æ½ð¼×“ÌìÄ»”°²È«³¢ÊÔÊÒÔÚһϵÁÐ¿í·ºÊ¹ÓõÄÄÚÈÝÖÎÀíϵͳ£¨CMS£©ÖУ¬·¢ÏÖ¶à¸ö0Day¸ßΣ·ì϶£¬Ô̺¬µ«²»ÏÞÓÚÉϺ£**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSÎļþÉÏ´«·ì϶£¨CNVD-2024-03360£©¡¢WB** CMS´æÔÚÎļþÉÏ´«·ì϶£¨CNVD-2024-05823£©¡¢É½¶«**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSϵͳ´æÔÚÎļþÉÏ´«·ì϶(CNVD-2023-71326)
ÄÚÈÝÖÎÀíϵͳ£¨CMS£©Í¨³£ÓÃÓÚÍøÕ¾ºÍÔÚÏßÀûÓõĹ¹½¨¡£³¢ÊÔÊÒ×êÑз¢ÏÖ£¬ÈçÈôºÚ¿Íͨ¹ýÕâЩ¸ßΣ·ì϶ÉÏ´«Ô̺¬¶ñÒâ´úÂëµÄÎļþ£¨Èç¶ñÒâ¾ç±¾¡¢Ä¾Âí¡¢²¡¶¾£©²¢Ö´ÐУ¬²»½öÄܹ»Ê¹²¿Êð¸ÃϵͳµÄ·þÎñÆ÷ÏÝÈë̱»¾¡¢·ÛËéÖ÷ÌâÎļþ¡¢»ñȡδ¾ÊÚȨµÄ½Ó¼ûȨÏÞ£¬ÉõÖÁÄܹ»¼Óº¦Óû§ÒþÖÔ¡£
ÉÏÊöÉϺ£**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSϵͳ£¬ÊǹúÄÚÓû§×î¶àµÄPHPÀàCMSϵͳ¡£Æ¾¾Ý×ʲú²â»æÏµÍ³quake·¢ÏÖ£¬ÆäÈ«ÇòÓÐ1040¶àÍò¸öʹÓüͼ£¬ÆäÖÐÖйú¾ÍÓг¬¹ý247Íò¸öʹÓüͼ¡£ÈôÊǺڿÍÀûÓÃÕâ¸öÎļþÉÏ´«·ì϶£¬²»½öÄܹ¥ÏÂÕâ¸öϵͳ×ÔÉí£¬»¹½«¼ä½ÓÓ°Ï쵽ȫ¹úÉϰÙÍò¸öʹÓôËϵͳµÄÍøÕ¾£¬´øÀ´ÑϳÁµÄºó¹û¡£
GA»Æ½ð¼×“ÌìÄ»”°²È«³¢ÊÔסլһ¹¦·ò·¢ÏÖ²¢Éϱ¨¹ú¶ÈÐÅÏ¢°²È«·ì϶¹²ÏíÆ½Ì¨£¨China National Vulnerability Database£¬¼ò³ÆCNVD£©£¬²¢»ñµÃCNVD 0day·ì϶¼òÖ±ÈÏ¡£
GA»Æ½ð¼×µÄ·À»ðǽÒѾÉý¼¶´Ë·ì϶¿â£¬²É°ìGA»Æ½ð¼×·À»ðǽµÄ¿Í»§¶¼×Ô¶¯ÊµÏÖ¶ÔÕâЩ·ì϶µÄÔ¤·À¡£
“ÌìÄ»”°²È«³¢ÊÔÊÒ´ÓÊôÓÚGA»Æ½ð¼×ÍøÂ簲ȫ²úÆ·ÊÂÒµ²¿£¬×¨Ò»ÓÚ°²È«Íþв¼à²â·ÖÎöÓë×êÑУ¬¹¥·ÀÆ¥µÐ¼¼Êõ×êÑС£×êÑÐÖ¸±êÔ̺¬ Botnet¡¢½©Ä¾Èä·ÖÎö£¬APT ¸ß¼¶Íþв¡¢ÀÕË÷¡¢ÍÚ¿ó£¬WEB Óëϵͳ·ì϶·ÖÎö¡£
2023Äê9Ô£¬GA»Æ½ð¼×±»¹ú¶ÈÐÅÏ¢°²È«·ì϶¹²ÏíÆ½Ì¨£¨¼ò³ÆCNVD£©ÊÚÓè“2022Äê¶È·ì϶´ëÖù¤×÷͹Æð¹±Ï×µ¥Ôª”³ÆºÅ£¬ÒÔÔÞÃÀGA»Æ½ð¼×ÔÚÐÅÏ¢°²È«·ì϶´ëÖù¤×÷·½ÃæµÄ͹Æð¹±Ïס£GA»Æ½ð¼×ÒÑÂ½Ðø¶àÄê»ñ´Ë³ÆºÅ¡£

·À²¡¶¾£¨AV£©×êÑУºGA»Æ½ð¼×“ÌìÄ»”°²È«³¢ÊÔÊÒÓëºÍ¹úÄÚ±í°²È«³§É̺ÍÍŶӽáºÏ³ÉÁ¢°²È«´´Ð³¢ÊÔÊÒ£¬²ú³öµÄZϵÁзÀ»ðǽAVÌØµãÊýÁ¿´ïµ½1000W+£¬°²È«¼ì²âÕýÈ·¶È´ïµ½99.97%¡£
Íþвµý±¨£¨TI£©×êÑУºGA»Æ½ð¼×“ÌìÄ»”°²È«³¢ÊÔÊÒÓëÌÚѶ°²È«Ç¿Ç¿½áºÏ£¬»ùÓںϹæ¼ì²â³¡¾°½øÐд´Ð£¬Í»ÆÆ¼ì²â×è¶ÏÑÓ³¤¡¢¼ì²â»úÄܵͺ;«×¼¶ÈÎÊÌ⣬Èð²È«²»³öȦ£¬·çÏÕ²»±íÒç¡£

ÈëÇÖ·ÀÓù£¨IPS£©×êÑУºGA»Æ½ð¼×“ÌìÄ»”°²È«³¢ÊÔÊÒ²ú³öµÄIPSÌØµã¿â¹²¼Æ13000+Ìõ¡¢90+·ÖÀ࣬¸²¸ÇÍÚ¿ó¡¢ÀÕË÷µÈÈȵ㹥»÷£¬Î¬³ÖÿÖܸüУ¬²»ÐÝÌáÉý°²È«·À»¤ÄÜÁ¦¡£
ÔÚÕâÈÕÒæ¸´ÔÓµÄÍøÂçÊÀ½ç£¬GA»Æ½ð¼×°²È«£¬»ùÓÚ³¡¾°µÄ×Ô¶¯»¯ÔËÓª£¬ÓëÄúһ·¹¹½¨¸ü¸ßЧ¡¢¸ü°²È«µÄÍøÂç»·¾³£¬±£»¤ÄúµÄÊý×Ö×ʲú¡£
