• 發布單位:TWCERT/CC
• 更新日期:2025-08-01
• 點閱次數:315

• 內容說明：

CISA於7/14至7/20在Known Exploited Vulnerabilities Catalog(KEV)中發布3個已遭駭客利用之漏洞。

• 影響平台：

Microsoft｜SharePoint

Fortinet｜FortiWeb

Wing FTP Server｜Wing FTP Server

• 處置建議：

修補說明請參考以下官方連結：

Microsoft｜SharePoint

https://www.cisa.gov/news-events/s/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770

https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770

Fortinet｜FortiWeb

https://fortiguard.fortinet.com/psirt/FG-IR-25-151

Wing FTP Server｜Wing FTP Server

https://www.wftpserver.com/serverhistory.htm

• CVE編號：

CVE-2025-25257

CVE-2025-47812

CVE-2025-53770