逾8萬臺Palo Alto Networks防火牆曝露於危急漏洞CVE-2024-3400
· 2024-04-19

研究人員警告,全球有8.2萬臺防火牆曝露於CVSS風險評分滿分的漏洞CVE-2024-3400,值得留意的是臺灣也有1,344臺,以曝險設備或系統的數量而言,全球排名第14

再者,也有研究人員公布漏洞細節及攻擊手法。資安業者watchTowr公布漏洞細節,並指出一旦GlobalProtect啟用遙測功能,攻擊者的有效酬載就能注入特定的cookie數值,並將其串連成一段字串,最終當作Shell命令執行;另一家資安業者TrustedSec,則是發現攻擊者實際漏洞利用攻擊的手法。

值得留意的是,這項漏洞並非存在於防火牆作業系統PAN-OS核心,而是涉及GlobalProtect的SSL VPN功能,由於近期與SSL VPN相關的漏洞及攻擊事故頻傳,使得這樣的弱點後續發展,有待持續觀察。

Popular articles
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
British gambling levy rates confirmed for each vertical
Regulation
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Home
Game
Cooperation
Find
My