逾8萬臺Fortinet設備曝露於今年2月公告的RCE漏洞
支付動態 · 2024-10-16

上週美國網路安全暨基礎設施安全局(CISA)證實CVE-2024-23113已被用於實際攻擊,要求聯邦機構著手處理,但近期有資安機構表示,全球很可能還有約8.7萬臺Fortinet設備尚未修補漏洞

10月9日美國網路安全暨基礎設施安全局(CISA)提出警告,今年2月Fortinet修補的重大漏洞CVE-2024-23113已出現實際攻擊行動,要求聯邦機構限期修補,這樣的情況Fortinet也在11日證實,他們得知有外部調查發現漏洞遭到利用的情況。然而,如今有資安研究機構提出警告,仍有不少設備尚未套用更新而曝險。

Shadowserver基金會指出,他們在10月12日發現有87,390個IP位址的Fortinet設備疑似曝露於該漏洞風險,其中數量最多的是美國,約有1.4萬臺,日本、印度居次,分別約有5,100、4,800臺。我們查詢該基金會14日偵測到的資料,臺灣有3,823臺設備曝險。

由於這項漏洞影響範圍涉及Fortinet多項解決方案,涵蓋網路防火牆作業系統FortiOS、網頁安全閘道FortiProxy、特權存取管理系統FortiPAM、交換器集中管理平臺FortiSwitch Manager、應用程式防火牆FortiWeb,這意味著駭客可能會在不同類型的資安系統嘗試利用漏洞。

Popular articles
Kazakhstan plans to penalise online casino promotions
Regulation
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
GGC Awards 2026 Shines in Colombo: Honoring Leaders and Innovators in the iGaming Industry
HUIDU Focus
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
Indiana online casino bill stalls in House committee
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
British gambling levy rates confirmed for each vertical
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Home
Game
Cooperation
Find
My