?? ????? ??????? ?????? ???? ???? ????? ????? ????? ?????? ? ????? ??????? ?????? ????? (CISA) ??? ?????? ?? ??? ?????? ??? ??? ?? ??????????? ????? ?? ?? ???? ?????? ???? ?? ??????????? ???? ?? ????? ?????????????? ?????? ??? ([?]KEV) ???? ???[?].
??? ????????????? ?? ???????? CVE-2023-33009 ? CVE-2023-33010 ?????? ???????[?]? ?????????????? ????? ???? ????? ?? ????????? ?? ????? ????? ???? ???? ?? ???? ?? ????? ????? ????? ????? (DoS) ? ????? ?? ?? ??? ??? ????.
????????? ???? ???? ???????? ?????? ???? ????? ?? ?? ?? ???? ????? ??. ???? ?????????? ??? ????????? ???? ????????:
- ATP (versions ZLD V4.32 to V5.36 Patch 1, patched in ZLD V5.36 Patch 2)
- USG FLEX (versions ZLD V4.50 to V5.36 Patch 1, patched in ZLD V5.36 Patch 2)
- USG FLEX50(W) / USG20(W)-VPN (versions ZLD V4.25 to V5.36 Patch 1, patched in ZLD V5.36 Patch 2)
- VPN (versions ZLD V4.30 to V5.36 Patch 1, patched in ZLD V5.36 Patch 2), and
- ZyWALL/USG (versions ZLD V4.25 to V4.73 Patch 1, patched in ZLD V4.73 Patch 2)
????????? ????? ???? ????? ???????? ???? ??? ????? ??? ??? ?? ?? ?? ???? ??????? ?? ??? ????? ?? ??????????? Zyxel ([4]CVE-2023-28771) ?? ??? ???? ???? ?? ??? ??????? ?????????? ???? ?? ??? ?? Mirai ???? ??????????? ???? ????? ???[?].
????????? ???? ?????? ???????? ????? (FCEB) ???????? ?????????????? ??????????? ?? ?? ?? ???? ???? ????? ???? ?? ???????? ??? ?? ?? ????? ??????? ??????? ???? ????.
Zyxel? ?? ?????????? ?????[?] ?? ???? ????? ????? ??? ?????? ?? ??????? ???????? ?? ????????? HTTP/HTTPS ?? ?? ???? WAN ??????? ????? ??? ????? «??????» ???????? ???? ? ?? ???? ??? ???????? ???????? UDP 500 ? ???? ?? ??????? ????.
??? ????? ?????? ????? ???? ??????? ?? ??? ???? ??????? ?? ??? ?? ????????? ??? GS1900 (CVE-2022-45853) [?] ? ??????? ???? ??? ?? ??? LTE ? NR (CVE-2023-27989) [?] ?? ????? ???? ??? ?? ???????? ???? ?? ?????? ?????? ? DoS ???.
?????
[?] https://www.cisa.gov/known-exploited-vulnerabilities-catalog
[?] https://www.cisa.gov/news-events/alerts/2023/06/05/cisa-adds-two-known-exploited-vulnerabilities-catalog
[?] https://thehackernews.com/2023/05/zyxel-issues-critical-security-patches.html
[?] https://apa.aut.ac.ir/?p=9625
[?] https://thehackernews.com/2023/06/active-mirai-botnet-variant-exploiting.html
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxels-guidance-for-the-recent-attacks-on-the-zywall-devices
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-privilege-escalation-vulnerability-in-gs1900-series-switches
[?] https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-buffer-overflow-vulnerability-in-4g-lte-and-5g-nr-outdoor-routers
[?] https://thehackernews.com/2023/06/zyxel-firewalls-under-attack-urgent.html
??????? : ???? ??????
???? : ???? ???? ??????? ????? ???? ????
