逾8萬臺Palo Alto Networks防火牆曝露於危急漏洞CVE-2024-3400
· 2024-04-19

研究人員警告,全球有8.2萬臺防火牆曝露於CVSS風險評分滿分的漏洞CVE-2024-3400,值得留意的是臺灣也有1,344臺,以曝險設備或系統的數量而言,全球排名第14

再者,也有研究人員公布漏洞細節及攻擊手法。資安業者watchTowr公布漏洞細節,並指出一旦GlobalProtect啟用遙測功能,攻擊者的有效酬載就能注入特定的cookie數值,並將其串連成一段字串,最終當作Shell命令執行;另一家資安業者TrustedSec,則是發現攻擊者實際漏洞利用攻擊的手法。

值得留意的是,這項漏洞並非存在於防火牆作業系統PAN-OS核心,而是涉及GlobalProtect的SSL VPN功能,由於近期與SSL VPN相關的漏洞及攻擊事故頻傳,使得這樣的弱點後續發展,有待持續觀察。

熱門文章
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
Indiana online casino bill stalls in House committee
Regulation
GGC Awards 2026 Shines in Colombo: Honoring Leaders and Innovators in the iGaming Industry
HUIDU Focus
首頁
遊戲
合作
發現
我的