{"id":108679,"date":"2023-05-24T12:48:24","date_gmt":"2023-05-24T10:48:24","guid":{"rendered":"https:\/\/prohoster.info\/?p=108679"},"modified":"2023-05-24T16:23:54","modified_gmt":"2023-05-24T14:23:54","slug":"uyazvimost-v-marshrutizatorah-mikrotik-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-ipv6-ra","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-marshrutizatorah-mikrotik-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-ipv6-ra","title":{"rendered":"Une vuln\u00e9rabilit\u00e9 dans les routeurs MikroTik, entra\u00eenant l'ex\u00e9cution de code lors du traitement de l'IPv6 RA.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dans le syst\u00e8me d'exploitation RouterOS, utilis\u00e9 dans les routeurs MikroTik, une vuln\u00e9rabilit\u00e9 critique (CVE-2023-32154) a \u00e9t\u00e9 identifi\u00e9e, permettant \u00e0 un utilisateur non authentifi\u00e9 d'ex\u00e9cuter du code \u00e0 distance sur l'appareil en envoyant une annonce de routeur IPv6 (RA, Router Advertisement) sp\u00e9cialement con\u00e7ue. <\/p>\n

Le probl\u00e8me est caus\u00e9 par l'absence de v\u00e9rification ad\u00e9quate des donn\u00e9es entrantes lors du traitement des demandes IPv6 RA (Router Advertisement), ce qui a permis d'\u00e9crire des donn\u00e9es au-del\u00e0 de la m\u00e9moire tampon allou\u00e9e et d'ex\u00e9cuter du code avec des privil\u00e8ges root. La vuln\u00e9rabilit\u00e9 se manifeste dans les versions MikroTik RouterOS v6.xx et v7.xx lorsque la r\u00e9ception des messages IPv6 RA est activ\u00e9e ( \u00ab ipv6\/settings\/set accept-router-advertisements=yes \u00bb ou \u00ab ipv6\/settings\/set forward=no accept-router-advertisements=yes-if-forwarding-disabled \u00bb). <\/p>\n

La possibilit\u00e9 d'exploiter cette vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9montr\u00e9e lors de la comp\u00e9tition Pwn2Own \u00e0 Toronto, o\u00f9 les chercheurs ayant identifi\u00e9 le probl\u00e8me ont re\u00e7u une r\u00e9compense de 100 000 $ pour un hack multi-niveaux de l'infrastructure, incluant l'attaque du routeur MikroTik et son utilisation comme tremplin pour attaquer d'autres composants du r\u00e9seau local (par la suite, les attaquants ont pris le contr\u00f4le d'une imprimante Canon, dont la vuln\u00e9rabilit\u00e9 a \u00e9galement \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9e). <\/p>\n

Les informations sur la vuln\u00e9rabilit\u00e9 ont \u00e9t\u00e9 initialement publi\u00e9es avant qu'un correctif ne soit disponible (0-day), mais des mises \u00e0 jour RouterOS 7.9.1, 6.49.8, 6.48.7, 7.10beta8 ont maintenant \u00e9t\u00e9 publi\u00e9es pour rem\u00e9dier \u00e0 la vuln\u00e9rabilit\u00e9. Selon ZDI (Zero Day Initiative), organisateur de Pwn2Own, le fabricant a \u00e9t\u00e9 inform\u00e9 de la vuln\u00e9rabilit\u00e9 le 29 d\u00e9cembre 2022. Les repr\u00e9sentants de MikroTik affirment n'avoir re\u00e7u aucune notification et n'ont appris le probl\u00e8me que le 10 mai, apr\u00e8s l'envoi d'un dernier avertissement sur la divulgation d'informations. De plus, le rapport sur la vuln\u00e9rabilit\u00e9 mentionne que des informations sur la nature du probl\u00e8me ont \u00e9t\u00e9 communiqu\u00e9es \u00e0 un repr\u00e9sentant de MikroTik de mani\u00e8re informelle pendant la comp\u00e9tition Pwn2Own \u00e0 Toronto, mais selon MikroTik, les employ\u00e9s de l'entreprise n'ont particip\u00e9 \u00e0 l'\u00e9v\u00e9nement d'aucune mani\u00e8re.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-32154), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u043d\u043e\u043d\u0441\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 IPv6 (RA, Router Advertisement). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u0438\u0437\u0432\u043d\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u043c \u0437\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 IPv6 RA (Router Advertisement), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108679","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans les routeurs MikroTik, entra\u00eenant l'ex\u00e9cution de code lors du traitement d'IPv6 RA | ProHoster","description":"Dans le syst\u00e8me d'exploitation RouterOS, utilis\u00e9 dans les routeurs MikroTik, une vuln\u00e9rabilit\u00e9 critique (CVE-2023-32154) a \u00e9t\u00e9 identifi\u00e9e, permettant \u00e0 un utilisateur non authentifi\u00e9 d'ex\u00e9cuter du code \u00e0 distance sur l'appareil via.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-marshrutizatorah-mikrotik-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-ipv6-ra","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 IPv6 RA | ProHoster","og:description":"\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-32154), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-marshrutizatorah-mikrotik-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-ipv6-ra","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-24T10:48:24+00:00","article:modified_time":"2023-05-24T14:23:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/108679","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=108679"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/108679\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=108679"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=108679"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=108679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}