{"id":120895,"date":"2024-12-08T21:46:03","date_gmt":"2024-12-08T19:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt"},"modified":"2024-12-08T21:46:03","modified_gmt":"2024-12-08T19:46:03","slug":"uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","title":{"rendered":"Zranitelnosti umo\u017e\u0148uj\u00edc\u00ed podvrhnout obrazy a vykonat k\u00f3d na ASU serverech projektu OpenWrt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ve vyv\u00edjen\u00e9m projektu OpenWrt byla v n\u00e1stroji ASU (Attended SysUpgrade) nalezena kritick\u00e1 zranitelnost (CVE-2024-54143), kter\u00e1 umo\u017e\u0148uje kompromitaci sestavovan\u00fdch artefakt\u016f distribuovan\u00fdch prost\u0159ednictv\u00edm slu\u017eby sysupgrade.openwrt.org nebo t\u0159et\u00edch stran ASU server\u016f, a umo\u017e\u0148uje \u00fato\u010dn\u00edk\u016fm instalovat modifikovan\u00e9 obrazy firmwaru na syst\u00e9my u\u017eivatel\u016f, kte\u0159\u00ed pou\u017e\u00edvaj\u00ed pro aktualizaci firmwaru re\u017eim \u201eattended upgrade\u201c prost\u0159ednictv\u00edm webov\u00e9ho rozhran\u00ed selector.openwrt.org nebo p\u0159\u00edkazov\u00e9ho n\u00e1stroje attended.sysupgrade.     <\/p>\n<p>Pro \u00fasp\u011b\u0161n\u00e9 proveden\u00ed \u00fatoku sta\u010d\u00ed \u00fato\u010dn\u00edkovi poslat \u017e\u00e1dost o vytvo\u0159en\u00ed sestavy na server ASU (takov\u00e9 \u017e\u00e1dosti m\u016f\u017ee poslat jak\u00fdkoli u\u017eivatel bez autentizace). Prost\u0159ednictv\u00edm manipulace se speci\u00e1ln\u011b upraven\u00fdm seznamem bal\u00ed\u010dk\u016f m\u016f\u017ee \u00fato\u010dn\u00edk zorganizovat odesl\u00e1n\u00ed d\u0159\u00edve vygenerovan\u00fdch \u0161kodliv\u00fdch obraz\u016f v reakci na legitimn\u00ed \u017e\u00e1dosti o sestavy od jin\u00fdch u\u017eivatel\u016f.        <\/p>\n<p>Slu\u017eba ASU se v OpenWrt pou\u017e\u00edv\u00e1 pro generov\u00e1n\u00ed a instalaci aktualizac\u00ed firmwaru bez ztr\u00e1ty st\u00e1vaj\u00edc\u00edch nastaven\u00ed a nainstalovan\u00fdch bal\u00ed\u010dk\u016f u\u017eivatelem. Prost\u0159ednictv\u00edm webov\u00e9ho rozhran\u00ed nebo n\u00e1stroje p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku u\u017eivatel ode\u0161le \u017e\u00e1dost o vytvo\u0159en\u00ed aktualizovan\u00e9ho obrazu firmwaru a uvede nainstalovan\u00e9 bal\u00ed\u010dky ve sv\u00e9m syst\u00e9mu. Po n\u011bjak\u00e9 dob\u011b server ASU vytvo\u0159\u00ed obraz odpov\u00eddaj\u00edc\u00ed objednan\u00e9mu obsahu, po \u010dem\u017e ho u\u017eivatel st\u00e1hne a nahrad\u00ed na sv\u00e9 za\u0159\u00edzen\u00ed. Nav\u00edc je k dispozici mo\u017enost, kter\u00e1 umo\u017e\u0148uje uchovat st\u00e1vaj\u00edc\u00ed nastaven\u00ed v aktualizovan\u00e9m firmwaru.       <\/p>\n<p>Za zpracov\u00e1n\u00ed \u017e\u00e1dost\u00ed od u\u017eivatel\u016f odpov\u00edd\u00e1 server ASU, kter\u00fd spu\u0161t\u00ed automatickou sestavu obraz\u016f firmwaru pomoc\u00ed n\u00e1stroje ImageBuilder a tak\u00e9 udr\u017euje cache z d\u0159\u00edve p\u0159ipraven\u00fdch sestav. Pokud u\u017eivatel po\u017e\u00e1dal o obraz, kter\u00fd ji\u017e byl d\u0159\u00edve sestaven, <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-newyork\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2797\">serveru<\/a> a kter\u00fd je aktu\u00e1ln\u00ed, syst\u00e9m okam\u017eit\u011b vr\u00e1t\u00ed existuj\u00edc\u00ed obraz z cache bez spu\u0161t\u011bn\u00ed sestavovac\u00edho procesu.    <\/p>\n<p>Chov\u00e1n\u00ed \u00fatoku se stalo mo\u017en\u00fdm d\u00edky dv\u011bma zranitelnostem:  <\/p>\n<ul>\n<li class=\"l\"> Zranitelnost v zpracovateli po\u017eadavk\u016f build_reques.py ze souboru n\u00e1stroj\u016f Imagebuilder umo\u017e\u0148uje vkl\u00e1dat vlastn\u00ed p\u0159\u00edkazy do procesu sestaven\u00ed pomoc\u00ed speci\u00e1ln\u011b vytvo\u0159en\u00fdch n\u00e1zv\u016f bal\u00ed\u010dk\u016f, kter\u00e9 u\u017eivatel zad\u00e1. Zranitelnost je zp\u016fsobena nedostate\u010dnou kontrolou speci\u00e1ln\u00edch znak\u016f v n\u00e1zvech bal\u00ed\u010dk\u016f p\u0159ed jejich pou\u017eit\u00edm jako argument\u016f n\u00e1stroje make. Vy\u0161\u0161\u00ed \u00fato\u010dn\u00edk m\u016f\u017ee vyu\u017e\u00edt t\u00e9to zranitelnosti a na serveru vytvo\u0159it \u0161kodliv\u00e9 obrazy firmwaru, podepsan\u00e9 platn\u00fdm kl\u00ed\u010dem pro sestaven\u00ed.\n<li class=\"l\"> Zranitelnost v knihovn\u011b util.py byla zp\u016fsobena t\u00edm, \u017ee SHA-256 hash pou\u017e\u00edvan\u00e9 pro ov\u011b\u0159ov\u00e1n\u00ed u\u017e p\u0159ipraven\u00fdch obraz\u016f firmwaru byly zkr\u00e1ceny na 12 znak\u016f, co\u017e v\u00fdrazn\u011b sn\u00ed\u017eilo \u00farove\u0148 entropie a umo\u017enilo \u00fato\u010dn\u00edk\u016fm vytv\u00e1\u0159et \u0161kodliv\u00e9 obrazy, jejich\u017e hash se shodoval s legitimn\u00edm obrazem. Ve spojen\u00ed se zranitelnost\u00ed v Imagebuilder by probl\u00e9m s hashi mohl \u00fato\u010dn\u00edk vyu\u017e\u00edt k \u201ezne\u010di\u0161t\u011bn\u00ed\u201c cache ASU serveru a um\u00edst\u011bn\u00ed \u0161kodliv\u00fdch obraz\u016f, kter\u00e9 byly poskytov\u00e1ny na \u017e\u00e1dosti b\u011b\u017en\u00fdch u\u017eivatel\u016f.    <\/ul>\n<p>Zm\u011bna, po kter\u00e9 se stala mo\u017enou \u00fatok, byla provedena 8. \u010dervence. Probl\u00e9m byl vy\u0159e\u0161en 4. prosince. Pro zaji\u0161t\u011bn\u00ed provozu slu\u017eby ASU byly pou\u017eity odd\u011blen\u00e9 <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/\"   title=\"servery\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1974\">servery<\/a>, navz\u00e1jem se nep\u0159ekr\u00fdvaj\u00edc\u00ed s hlavn\u00edmi sestavovac\u00edmi syst\u00e9my projektu, odd\u011blen\u00e9 od OpenWrt Buildbot a nemaj\u00edc\u00ed p\u0159\u00edstup k takov\u00fdm d\u016fv\u011brn\u00fdm zdroj\u016fm, jako jsou SSH kl\u00ed\u010de a certifik\u00e1ty pro vytv\u00e1\u0159en\u00ed digit\u00e1ln\u00edch podpis\u016f.     <\/p>\n<p>Tvrd\u00ed se, \u017ee v\u00fdvoj\u00e1\u0159i OpenWrt nenalezli \u017e\u00e1dn\u00e9 stopy po kompromitaci infrastruktury projektu, ale pro jistotu znovu nainstalovali syst\u00e9my, na kter\u00fdch b\u011b\u017eely zraniteln\u00e9 komponenty. Probl\u00e9m se net\u00fdkal ofici\u00e1ln\u00edch obraz\u016f poskytovan\u00fdch prost\u0159ednictv\u00edm webu downloads.openwrt.org, a p\u0159i anal\u00fdze sestavovac\u00edch protokol\u016f nebyly nalezeny \u017e\u00e1dn\u00e9 stopy po odes\u00edl\u00e1n\u00ed \u0161kodliv\u00fdch po\u017eadavk\u016f. P\u0159itom, jeliko\u017e na serverech ASU b\u011b\u017e\u00ed automatick\u00e9 \u010di\u0161t\u011bn\u00ed sestav star\u0161\u00edch 7 dn\u016f, nebylo mo\u017en\u00e9 prov\u00e9st audit star\u00fdch sestav.       <\/p>\n<p>Pravd\u011bpodobnost vyu\u017eit\u00ed zji\u0161t\u011bn\u00fdch zranitelnost\u00ed v praxi pro \u0161\u00ed\u0159en\u00ed \u0161kodliv\u00fdch obraz\u016f prost\u0159ednictv\u00edm infrastruktury OpenWrt je podle z\u00e1stupc\u016f OpenWrt hodnocena jako bl\u00edzk\u00e1 nule, nicm\u00e9n\u011b u\u017eivatel\u016fm ASU se doporu\u010duje na sv\u00fdch za\u0159\u00edzen\u00edch nahradit obrazy OpenWrt stejnou verz\u00ed.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62371\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &#171;attended upgrade&#187; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120895","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnosti, kter\u00e9 umo\u017e\u0148uj\u00ed podvrhnout obrazy a vykonat k\u00f3d na ASU serverech projektu OpenWrt | ProHoster","description":"V rozv\u00edjen\u00e9m projektu OpenWrt n\u00e1stroje ASU (Attended SysUpgrade) byly odhaleny kritick\u00e9 zranitelnosti (CVE-2024-54143), kter\u00e9 umo\u017e\u0148uj\u00ed kompromitaci stavebn\u00edch artefakt\u016f distribuovan\u00fdch prost\u0159ednictv\u00edm slu\u017eby.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-08T19:46:03+00:00","article:modified_time":"2024-12-08T19:46:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120895","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:04:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:43:20","updated":"2026-02-09 22:04:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=120895"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120895\/revisions"}],"predecessor-version":[{"id":160077,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120895\/revisions\/160077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=120895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=120895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=120895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}