D-Link一款終止支援的無線路由器有重大漏洞，恐被用於RCE攻擊
支付動態 · 2024-09-04
已於4年前停止支援的D-Link無線路由器DIR-846W出現重大層級漏洞，研究人員通報此事並得到D-Link證實，但該公司表明不會處理
8月27日資安研究人員yali-10012透露，D-Link旗下路由器設備DIR-846W存在4個嚴重的RCE漏洞，而且其中3個可在未經身分驗證的情況下利用，9月1日D-Link發布資安公告證實確有此事，但因為這款設備已於2020年終止支援（EOS），他們不會進行修補，呼籲用戶應停止使用。
這些漏洞是：CVE-2024-41622、CVE-2024-44340、CVE-2024-44341，以及CVE-2024-44342，CVSS風險評分介於8.8至9.8，其中，僅有風險較低的CVE-2024-44340，攻擊者必須先通過身分驗證才能利用，其餘能夠在未經身分驗證就能觸發的漏洞，美國國家漏洞資料庫（NVD）皆將其風險評為9.8分。
值得留意的是，已停止支援的D-Link設備漏洞，今年出現數起攻擊行動，4月有研究人員發現NAS設備漏洞CVE-2024-3273，隨後就有嘗試利用的跡象；5月傳出無線路由器DIR-645遭到大規模攻擊，過程中駭客利用已知漏洞CVE-2015-2051。
热门文章
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Kazakhstan plans to penalise online casino promotions
Regulation
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
