SolarWinds的IT服務臺系統存在重大漏洞，疑似已出現未經授權的攻擊行動
支付動態 · 2024-10-18
SolarWinds旗下IT服務臺系統Web Help Desk出現重大層級漏洞CVE-2024-28988，若不處理，攻擊者就有機會遠端於受害系統執行任意程式碼，呼籲用戶儘速安裝更新
本週SolarWinds針對旗下的IT服務臺系統Web Help Desk發布資安公告，指出該系統存在重大層級的CVE-2024-28988，這項漏洞涉及Java的去序列化處理，攻擊者有機會遠端執行程式碼（RCE），影響12.8.3 HF2版以前的系統，CVSS風險評為9.8分，該公司推出12.8.3 HF3修補，並呼籲用戶儘速套用。
SolarWind之所以發現這項漏洞，是因為接獲趨勢科技漏洞懸賞專案Zero Day Initiative（ZDI）的通報，研究人員在調查另一項漏洞的過程，發現了CVE-2024-28988。
值得留意的是，ZDI在調查漏洞的過程，觀察到未經授權的攻擊行動，這代表該漏洞可能已被駭客掌握，並實際嘗試利用的現象。
熱門文章
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
British gambling levy rates confirmed for each vertical
Regulation
Indiana online casino bill stalls in House committee
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Kazakhstan plans to penalise online casino promotions
Regulation
