انتشار به‌روزرسانی‌های امنیتی برای اصلاح نقص‌های حیاتی در محصولات خود توسط سیسکو و VMware

? VMware ? ????? ??????????????? ?????? ?? ???? ??? ??????? ?????? ??? ?? ??????? ??? ????? ???????? ?? ????????? ???? ????? ???? ???? ????? ?? ?????? ?? ????????? ????????? ???? ??????????? ???? ?????.

???????? ??????????? ??? ????? ????? ?? ???? ???? ????? ????? ???[?] (CVE-2023-20036? ?????? ?/? ?? ????? CVSS)? ?? ?? ????? ???? ?????? ?? ???? ???? ? ??????? ?????????? ????? ??????? ????? ????? ?? ???? ??????[?] ????? ??????.

????? ?? ???????? ?? ?? ?? ????? ???? ????? ??? ???[?]: «?? ??????????? ???? ???????? ?? ????? ????? ??? ?? ??????? ?????? ?? ???????? NT AUTHORITY\SYSTEM ??? ?????????? ???? ?????? ????????? ???? ???.»

??????? ???? ??????? ???? ?????? ?????????? ??????? ???? ?? ??? ????? ?? ?? ???? ????? ?? ???? ??? (CVE-2023-20039? ?????? ?/? ?? ????? CVSS) ?? ?? ????? ???????? ???? ???????? ???? ?????? ??????? ???? ?? ?? ?????????? ???.

??????? ?? ???? ??????[?] ?? ????? ????????????? ? ????? ?? ???? “?????” ?????? ?? ???? ????? ??? ?? ????? ?????? ??????.

?????? ??? ???? ?? ??????? ??? ?? ??????? ????? ???? ????? ??? ??? ????????? ???? Modeling Labs[5] ???? ????? ????? ??? ???. ??? ?????????? ?? ???????? CVE-2023-20154 ?????? ?????? (?????? ?/? ?? ????? CVSS)? ???????? ?? ?? ????? ????????? ? ?? ??? ??? ????? ??? ?? ?? ???????? ??????? ?? ???? ?? ?????? ???? ???.

??? ???? ???????? ???[?]: ???? ??????????? ?? ??? ??????????? ????? ?? ?????????????? ?????? ?????? ???? ???? ?? ?? ???? ????? ???? ????? ????? ????? ???????.

“??? ???? LDAP ?????????? ???????? ??? ???? ?? ?? ?????????? ????? ?? ?? ????? ??? ???? ?? ????????? ????? ???? ??? (????????? ?? ???? ????????? ???? ????? ????? ?????)? ??? ?????????? ??? ??? ????? ???? ???????? ???? ??????????? ???? ????.”

????????? ??????????? ???? ???? ?? ???? ?????? ?? ????? ??????? ????? ?? ??????? ????? ?????? ?? ?????? ???? ?????????? ?? ??? ?? ????? ????? ?? ???? ?????? ?????? ????. ??? ??? ?? ?????? ???? ????? ????? ??[?].

VMware ?????????????? ?? ???? Aria Operations for Logs ????? ??????.

VMware? ?? ???????? ?? ?? ?? ????? ???? ????? ??? ?? ???? ?? ??? ????? deserialization ?? ?? ???????? ????? Aria Operations for Logs (CVE-2023-20864? ?????? ?/? ?? ????? CVSS) ????? ????????? ????? ???.

??? ??????????? ????? ?????????? ???[?]: «?? ???? ???? ? ????? ???? ???? ?? ?????? ???? ?? VMware Aria Operations for Logs ???? ??? ?????? ?? ?????? ?? ???????? ??? ???? ???.»

VMware Aria Operations for Logs 8.12 ??? ?????????? ?? ?? ????? ?? ??? ????? ????? ?? ??? ???? (CVE-2023-20865? ?????? ?/? ?? ????? CVSS) ????? ?????? ?? ???????? ?? ?????? ?? ???????? ?????? ????? ??? ?? ??????? ?????? ?? ???????? ??? ???? ???.

??? ???? ???[?]: «CVE-2023-20864 ?? ????? ????? ??? ? ???? ????? ????? ???. ???? ?? ??? ??? ?? ???? ???? ?????? ??? ????? ??? ?????????? ???? ????.»

??? ????? ??????? ?? ??? ?? ?? ????? VMware ?? ?? ???? ???[??] ?? ?? ????? (CVE-2022-31704 ? CVE-2022-31706? ???????? ?/? ?? ????? CVSS) ????? ?????? ?? ???????? ???? ?? ????? ?? ?? ??? ??? ???.

?? ???? ?? ????? ???????? Cisco ? VMware ????? ??????? ???? ????? ????? ?????? ????? ?????? ?? ??????? ??????? ???? ?? ????? ?????????????? ???? ???? ??????? ??????? ????? ????.

?????

[?] https://developer.cisco.com/docs/Connected-Machines-Reference-Guide/#!industrial-network-director/industrial-network-director

[?] https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/dam/en/us/td/docs/switches/ind/install/b_ind_install.html.xml

[?] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ind-CAeLFk6V

[?] https://www.cisco.com/c/en/us/td/docs/switches/ind/release_notes/1-11-x/b-release-notes-ind-1-11.html

[?] https://developer.cisco.com/modeling-labs/

[?] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cml-auth-bypass-4fUCCeG5

[?] https://developer.cisco.com/docs/modeling-labs/#!cml-release-notes/bug-fixes

[?] https://www.vmware.com/security/advisories/VMSA-2023-0007.html

[?] https://kb.vmware.com/s/article/91831

[??] https://thehackernews.com/2023/01/vmware-releases-patches-for-critical.html

[??] https://thehackernews.com/2023/04/cisco-and-vmware-release-security.html

??????? : ???? ??????
???? : ???? ?????????? ????????

پویش #دو_درجه_کمتر