兆勤揭露無線路由器重大漏洞,可被用於作業系統層級進行命令注入攻擊
支付動態 · 2024-09-04

本週兆勤科技(Zyxel Networks)針對旗下防火牆、路由器設備發布資安公告,其中最值得留意的是被列為重大層級的CVE-2024-7261,有近30款路由器受到影響

9月3日兆勤科技(Zyxel Networks)發布資安公告,指出旗下部分Wi-Fi路由器設備存在重大層級漏洞CVE-2024-7261,這項漏洞發生的原因,在在於路由器CGI程式,host參數的特殊元素出現處理不當(improper neutralization)的現象,攻擊者有機會藉由發送特製的cookie,在未經身分驗證的情況下執行作業系統命令,CVSS風險評分為9.8。

值得留意的是,受到這項漏洞影響的機種橫跨多種產品線,涵蓋NWA、WAC、WAX、WBE系列機種,以及主打資安的USG Lite 60AX共29款機種,該公司已發布新版韌體予以修補。

附帶一提,兆勤同日也針對ATP、USG Flex系列防火牆設備發布新版韌體,總共修補7個漏洞,其中最危險的是命令注入漏洞CVE-2024-42057 ,CVSS風險評為8.1分。

Popular articles
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Kazakhstan plans to penalise online casino promotions
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Home
Game
Cooperation
Find
My