兆勤揭露無線路由器重大漏洞,可被用於作業系統層級進行命令注入攻擊
支付動態 · 2024-09-04

本週兆勤科技(Zyxel Networks)針對旗下防火牆、路由器設備發布資安公告,其中最值得留意的是被列為重大層級的CVE-2024-7261,有近30款路由器受到影響

9月3日兆勤科技(Zyxel Networks)發布資安公告,指出旗下部分Wi-Fi路由器設備存在重大層級漏洞CVE-2024-7261,這項漏洞發生的原因,在在於路由器CGI程式,host參數的特殊元素出現處理不當(improper neutralization)的現象,攻擊者有機會藉由發送特製的cookie,在未經身分驗證的情況下執行作業系統命令,CVSS風險評分為9.8。

值得留意的是,受到這項漏洞影響的機種橫跨多種產品線,涵蓋NWA、WAC、WAX、WBE系列機種,以及主打資安的USG Lite 60AX共29款機種,該公司已發布新版韌體予以修補。

附帶一提,兆勤同日也針對ATP、USG Flex系列防火牆設備發布新版韌體,總共修補7個漏洞,其中最危險的是命令注入漏洞CVE-2024-42057 ,CVSS風險評為8.1分。

Popular articles
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Manila delivers: Highlights from SiGMA Asia 2026 
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Indiana online casino bill stalls in House committee
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Home
Game
Cooperation
Find
My