按 Enter 到主內容區
:::

TWCERT/CC台灣電腦網路危機處理暨協調中心|企業資安通報協處|資安情資分享|漏洞通報|資安聯盟|資安電子報

:::

8/12至8/18 Known Exploited Vulnerabilities Catalog(KEV)週報

發布日期：
字型大小：
  • 發布單位:TWCERT/CC
  • 更新日期:2024-09-05
  • 點閱次數:527
  • 內容說明：

CISA於8/12至8/18在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。

 

  • 影響平台：

受影響廠商與產品名稱如下：
Microsoft｜Windows
Microsoft｜Project
SolarWinds｜Web Help Desk
Jenkins｜Jenkins Command Line Interface(CLI)

 

  • 處置建議：

修補說明請參考以下官方連結：

Microsoft | Windows
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38107
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38178
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213

Microsoft | Project
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189

SolarWinds | Web Help Desk
https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986

Jenkins | Jenkins Command Line Interface (CLI)
https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314
 

 

  • CVE編號：

CVE-2024-23897
CVE-2024-28986
CVE-2024-38106
CVE-2024-38107
CVE-2024-38178
CVE-2024-38189
CVE-2024-38193
CVE-2024-38213

相關連結

  1. https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  2. https://nvd.nist.gov/vuln/detail/CVE-2024-23897
  3. https://nvd.nist.gov/vuln/detail/CVE-2024-28986
  4. https://nvd.nist.gov/vuln/detail/CVE-2024-38106
  5. https://nvd.nist.gov/vuln/detail/CVE-2024-38107
  6. https://nvd.nist.gov/vuln/detail/CVE-2024-38178
  7. https://nvd.nist.gov/vuln/detail/CVE-2024-38189
  8. https://nvd.nist.gov/vuln/detail/CVE-2024-38193
  9. 內容說明： CISA於8/12至8/18在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。 影響平台： 受影響廠商與產品名稱
  10. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38107
  11. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106
  12. 內容說明： CISA於8/12至8/18在Known Exploited Vulnerabilities Catalog(KEV)中發布8個已遭駭客利用之漏洞。 影響平台： 受影響廠商與產品名稱
  13. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189
  14. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193
  15. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213
  16. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213
  17. https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986
  18. https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314
回頁首