هشدار CSIA در مورد هشت نقص بهره‌برداری‌شده به طور فعال در دستگاه‌های سامسونگ و D-Link

?? ????? ??????? ?????? ????  ???? ????? ????? ????? ?????? ? ????? ??????? ?????? ????? (CISA) ?? ???? ?????? ???? ?? ??????????? ????? ????????? ?? ??? ??? ?? ?? ????? ?????????????? ?????? ??? (KEV) ???? ???? ???.

??? ????? ???? ?? ??? ????? ?? ??? ???????? ?????? ??????? ? ?? ?????????? ??? ?????????? D-Link ????? ?????????. ????? ??? ?????? ?? ??? ???? ????? ???????:

CVE-2021-25394 (?????? ?/? ?? ????? CVSS) – ?????????? race condition ?? ?????????? ???? ????? ???????

CVE-2021-25395 (?????? ?/? ?? ????? CVSS) – ?????????? race condition ?? ?????????? ???? ????? ???????

CVE-2021-25371 (?????? ?/? ?? ????? CVSS) – ?? ?????????? ?????? ?? ?????? DSP ??????????? ?? ?????????? ???? ????? ??????? ?? ????? ??????? ???????????? ?????? ELF ?? ????? ??????.

CVE-2021-25372 (?????? ?/? ?? ????? CVSS) – ????? ?????? ??????? ?????????? ???? ????? ??????? ?? ?????? DSP

CVE-2021-25487 (?????? ?/? ?? ????? CVSS) – ?????????? ?????? ???? ?? ?????? ?????????? ???? ????? ??????? ?? ???? ?? ????? ?? ?????? ??????.

CVE-2021-25489 (?????? ?/? ?? ????? CVSS) – ?????????? ?????????? ????? ??????? ?????????? ?????? ??????? ?? ???? ?? kernel panic ??????.

CVE-2019-17621 (?????? ?/? ?? ????? CVSS) – ?? ?????????? ????? ?? ?? ??? ??? ????? ???? ?? ???? D-Link DIR-859

CVE-2019-20500 (?????? ?/? ?? ????? CVSS) – ?? ?????????? ????? ????? ?????????? ????? ??? ?? D-Link DWL-2600AP

????????? ?? ?????????? D-Link ?? ????? ?????? ?? Palo Alto Networks Unit 42 ?? ??? ????? ?? ???? ????? ????? ????? ?? ?? ??? ?????? Mirai ??? ?? ?? ???????? ?? ????? ?????? ??????? ???? ???? ?????? ??????? ?? ????????? ?? ????? ?? ?? ???? ???? ???? ??? ??????? ???????.

?????????? ???? ???? ???? ?? ????? ?? ??? ?????????? ??????? ?? ??? ??????? ??????? ??????. ??? ????????? ????? ????????? ??? ?????? ???? ???? ?? ???? ???? ?? ??????? ???????????? ?????? ????? ?? ????? ????? ??????? ??????????? ???? ????? ?????.

????????? ??? ?? Google Project Zero ????????? ?? ?????? ?? ?? ?????? ???? ??? ??? ?? ?? ???? ???? ???????? ???? ?? ?? ?????? ??????????? ???? ???????? ??????? ???????? ??? ???.

????????? ??????????? ????? ????????? ???? ?????? ???????? ????? (FCEB) ???????? ?? ?? ????? ???? ??????? ???? ?? ???? ????????? ???????? ??? ?? ????? ??????? ??????? ????? ????.

[?] https://www.cisa.gov/news-events/alerts/2023/06/29/cisa-adds-eight-known-exploited-vulnerabilities-catalog

[?] https://www.cisa.gov/known-exploited-vulnerabilities-catalog

[?] https://unit42.paloaltonetworks.com/mirai-variant-targets-iot-exploits

[?] https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

[?] https://thehackernews.com/2023/07/cisa-flags-8-actively-exploited-flaws.html

??????? :
???? ??????
???? :
????????? ???? ??????? ????? ???? ????

پویش #دو_درجه_کمتر