兆勤揭露無線路由器重大漏洞,可被用於作業系統層級進行命令注入攻擊
支付動態 · 2024-09-04

本週兆勤科技(Zyxel Networks)針對旗下防火牆、路由器設備發布資安公告,其中最值得留意的是被列為重大層級的CVE-2024-7261,有近30款路由器受到影響

9月3日兆勤科技(Zyxel Networks)發布資安公告,指出旗下部分Wi-Fi路由器設備存在重大層級漏洞CVE-2024-7261,這項漏洞發生的原因,在在於路由器CGI程式,host參數的特殊元素出現處理不當(improper neutralization)的現象,攻擊者有機會藉由發送特製的cookie,在未經身分驗證的情況下執行作業系統命令,CVSS風險評分為9.8。

值得留意的是,受到這項漏洞影響的機種橫跨多種產品線,涵蓋NWA、WAC、WAX、WBE系列機種,以及主打資安的USG Lite 60AX共29款機種,該公司已發布新版韌體予以修補。

附帶一提,兆勤同日也針對ATP、USG Flex系列防火牆設備發布新版韌體,總共修補7個漏洞,其中最危險的是命令注入漏洞CVE-2024-42057 ,CVSS風險評為8.1分。

Popular articles
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Kazakhstan plans to penalise online casino promotions
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Home
Game
Cooperation
Find
My