D-Link已終止支援的NAS設備重大漏洞，傳出已被用於攻擊行動
支付動態 · 2024-11-14
Shadowserver基金會證實，近日研究人員Netsecfish揭露的D-Link網路儲存設備（NAS）命令注入漏洞CVE-2024-10914，已有實際攻擊行動出現，呼籲用戶應避免將設備曝露在網際網路，以免成為駭客下手的目標
一週前研究人員Netsecfish揭露D-Link網路儲存設備（NAS）重大層級的命令注入漏洞CVE-2024-10914，影響DNS-320、DNS-320LW、DNS-325，以及DNS-340L等4款機種，D-Link證實確有此事，並表明這些設備生命週期已經結束（EOL），他們不會提供修補程式。當時研究人員估計全球約有6.1萬臺裝置曝險，很快就會被駭客盯上，如今出現嘗試利用漏洞的情況，但有其他資安機構對於曝險的數量，提出不同的觀察。
11月13日Shadowserver基金會提出警告，他們從12日開始發現有人試圖利用這項漏洞的跡象，呼籲用戶應儘速將這些設備從網路上移除。攻擊者嘗試對/cgi-bin/account_mgr.cgi進行命令注入，想要觸發CVE-2024-10914。
但究竟攻擊規模如何，該基金會並未提及，僅表示他們確認有近1,100臺NAS設備曝險，其中又以英國、匈牙利、法國最多，分別有177臺、73臺、70臺。值得留意的是，臺灣也有27臺設備曝險。
热门文章
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
