ÖÐÎÄ
Ðû²¼Ê±¼ä£º2024-03-14
¿ËÈÕ£¬97¹ú¼Ê“ÌìÄ»”Ç徲ʵÑéÊÒÔÚһϵÁÐÆÕ±éʹÓõÄÄÚÈݹÜÀíϵͳ£¨CMS£©ÖУ¬·¢Ã÷¶à¸ö0Day¸ßΣÎó²î£¬°üÀ¨µ«²»ÏÞÓÚÉϺ£**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSÎļþÉÏ´«Îó²î£¨CNVD-2024-03360£©¡¢WB** CMS±£´æÎļþÉÏ´«Îó²î£¨CNVD-2024-05823£©¡¢É½¶«**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSϵͳ±£´æÎļþÉÏ´«Îó²î(CNVD-2023-71326)
ÄÚÈݹÜÀíϵͳ£¨CMS£©Í¨³£ÓÃÓÚÍøÕ¾ºÍÔÚÏßÓ¦ÓõĹ¹½¨¡£ÊµÑéÊÒÑо¿·¢Ã÷£¬ÈçÈôºÚ¿Íͨ¹ýÕâЩ¸ßΣÎó²îÉÏ´«°üÀ¨¶ñÒâ´úÂëµÄÎļþ£¨Èç¶ñÒâ¾ç±¾¡¢Ä¾Âí¡¢²¡¶¾£©²¢Ö´ÐУ¬²»µ«¿ÉÒÔʹ°²ÅŸÃϵͳµÄ·þÎñÆ÷ÏÝÈë̱»¾¡¢ÆÆËð½¹µãÎļþ¡¢»ñȡδ¾ÊÚȨµÄ»á¼ûȨÏÞ£¬ÉõÖÁ¿ÉÒÔÇÖÕ¼Óû§Òþ˽¡£
ÉÏÊöÉϺ£**ÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾µÄCMSϵͳ£¬ÊǺ£ÄÚÓû§×î¶àµÄPHPÀàCMSϵͳ¡£Æ¾Ö¤×ʲú²â»æÏµÍ³quake·¢Ã÷£¬ÆäÈ«ÇòÓÐ1040¶àÍò¸öʹÓüͼ£¬ÆäÖÐÖйú¾ÍÓÐÁè¼Ý247Íò¸öʹÓüͼ¡£ÈôÊǺڿÍʹÓÃÕâ¸öÎļþÉÏ´«Îó²î£¬²»µ«Äܹ¥ÏÝÕâ¸öϵͳ×ÔÉí£¬»¹½«¼ä½ÓÓ°Ïìµ½ÌìÏÂÉϰÙÍò¸öʹÓôËϵͳµÄÍøÕ¾£¬´øÀ´ÑÏÖØµÄЧ¹û¡£
97¹ú¼Ê“ÌìÄ»”Ç徲ʵÑéÊÒµÚһʱ¼ä·¢Ã÷²¢Éϱ¨¹ú¼ÒÐÅÏ¢Çå¾²Îó²î¹²ÏíÆ½Ì¨£¨China National Vulnerability Database£¬¼ò³ÆCNVD£©£¬²¢»ñµÃCNVD 0dayÎó²î¼òÖ±ÈÏ¡£
97¹ú¼ÊµÄ·À»ðǽÒѾÉý¼¶´ËÎó²î¿â£¬¹ºÖÃ97¹ú¼Ê·À»ðǽµÄ¿Í»§¶¼×Ô¶¯ÊµÏÖ¶ÔÕâЩÎó²îµÄÔ¤·À¡£
“ÌìÄ»”Ç徲ʵÑéÊÒÁ¥ÊôÓÚ97¹ú¼ÊÍøÂçÇå¾²²úÆ·ÊÂÒµ²¿£¬×¨×¢ÓÚÇå¾²Íþв¼à²âÆÊÎöÓëÑо¿£¬¹¥·À¶Ô¿¹ÊÖÒÕÑо¿¡£Ñо¿Ä¿µÄ°üÀ¨ Botnet¡¢½©Ä¾ÈäÆÊÎö£¬APT ¸ß¼¶Íþв¡¢ÀÕË÷¡¢ÍÚ¿ó£¬WEB ÓëϵͳÎó²îÆÊÎö¡£
2023Äê9Ô£¬97¹ú¼Ê±»¹ú¼ÒÐÅÏ¢Çå¾²Îó²î¹²ÏíÆ½Ì¨£¨¼ò³ÆCNVD£©ÊÚÓè“2022Äê¶ÈÎó²î´¦Öóͷ£ÊÂÇéÍ»³öТ˳µ¥Î»”³Æºô£¬ÒÔ±íÑï97¹ú¼ÊÔÚÐÅÏ¢Çå¾²Îó²î´¦Öóͷ£ÊÂÇé·½ÃæµÄÍ»³öТ˳¡£97¹ú¼ÊÒÑÒ»Á¬¶àÄê»ñ´Ë³Æºô¡£

·À²¡¶¾£¨AV£©Ñо¿£º97¹ú¼Ê“ÌìÄ»”Ç徲ʵÑéÊÒÓëºÍº£ÄÚÍâÇå¾²³§É̺ÍÍŶÓÍŽὨÉèÇå¾²Á¢ÒìʵÑéÊÒ£¬²ú³öµÄZϵÁзÀ»ðǽAVÌØÕ÷ÊýÄ¿µÖ´ï1000W+£¬Çå¾²¼ì²â׼ȷ¶ÈµÖ´ï99.97%¡£
ÍþвÇ鱨£¨TI£©Ñо¿£º97¹ú¼Ê“ÌìÄ»”Ç徲ʵÑéÊÒÓëÌÚѶÇ徲ǿǿÍŽᣬ»ùÓںϹæ¼ì²â³¡¾°¾ÙÐÐÁ¢Òì£¬Í»ÆÆ¼ì²â×è¶ÏÑÓ³Ù¡¢¼ì²âÐÔÄܵͺ;«×¼¶ÈÎÊÌ⣬ÈÃÇå¾²²»³öȦ£¬Î£º¦²»¹ýÒç¡£

ÈëÇÖ·ÀÓù£¨IPS£©Ñо¿£º97¹ú¼Ê“ÌìÄ»”Ç徲ʵÑéÊÒ²ú³öµÄIPSÌØÕ÷¿â¹²¼Æ13000+Ìõ¡¢90+·ÖÀ࣬ÁýÕÖÍÚ¿ó¡¢ÀÕË÷µÈÈÈÃŹ¥»÷£¬¼á³ÖÿÖܸüУ¬Ò»Ö±ÌáÉýÇå¾²·À»¤ÄÜÁ¦¡£
ÔÚÕâÈÕÒæÖØ´óµÄÍøÂçÌìÏ£¬97¹ú¼ÊÇå¾²£¬»ùÓÚ³¡¾°µÄ×Ô¶¯»¯ÔËÓª£¬ÓëÄúÒ»Æð¹¹½¨¸ü¸ßЧ¡¢¸üÇå¾²µÄÍøÂçÇéÐΣ¬±£»¤ÄúµÄÊý×Ö×ʲú¡£
