D-Link已終止支援的NAS設備重大漏洞，傳出已被用於攻擊行動
支付動態 · 2024-11-14
Shadowserver基金會證實，近日研究人員Netsecfish揭露的D-Link網路儲存設備（NAS）命令注入漏洞CVE-2024-10914，已有實際攻擊行動出現，呼籲用戶應避免將設備曝露在網際網路，以免成為駭客下手的目標
一週前研究人員Netsecfish揭露D-Link網路儲存設備（NAS）重大層級的命令注入漏洞CVE-2024-10914，影響DNS-320、DNS-320LW、DNS-325，以及DNS-340L等4款機種，D-Link證實確有此事，並表明這些設備生命週期已經結束（EOL），他們不會提供修補程式。當時研究人員估計全球約有6.1萬臺裝置曝險，很快就會被駭客盯上，如今出現嘗試利用漏洞的情況，但有其他資安機構對於曝險的數量，提出不同的觀察。
11月13日Shadowserver基金會提出警告，他們從12日開始發現有人試圖利用這項漏洞的跡象，呼籲用戶應儘速將這些設備從網路上移除。攻擊者嘗試對/cgi-bin/account_mgr.cgi進行命令注入，想要觸發CVE-2024-10914。
但究竟攻擊規模如何，該基金會並未提及，僅表示他們確認有近1,100臺NAS設備曝險，其中又以英國、匈牙利、法國最多，分別有177臺、73臺、70臺。值得留意的是，臺灣也有27臺設備曝險。
Popular articles
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Indiana online casino bill stalls in House committee
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Kazakhstan plans to penalise online casino promotions
Regulation
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
