{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 vulnerabilidades exploradas remotamente no TCP\/IP da Treck","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Na pilha TCP\/IP propriet\u00e1ria Treck<\/a><\/noindex> identificado<\/a><\/noindex> 19 vulnerabilidades<\/a><\/noindex>, exploradas atrav\u00e9s do envio de pacotes especialmente formatados. As vulnerabilidades foram atribu\u00eddas ao codinome Ripple20<\/a><\/noindex>. Algumas vulnerabilidades tamb\u00e9m se manifestam na pilha TCP\/IP KASAGO da Zuken Elmic (Elmic Systems), que tem ra\u00edzes comuns com a Treck. A pilha Treck \u00e9 utilizada em muitos dispositivos industriais, m\u00e9dicos, de comunica\u00e7\u00e3o, embarcados e de consumo (desde l\u00e2mpadas inteligentes at\u00e9 impressoras e fontes de alimenta\u00e7\u00e3o ininterruptas), bem como em equipamentos de energia, transporte, avia\u00e7\u00e3o, com\u00e9rcio e extra\u00e7\u00e3o de petr\u00f3leo. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Entre os alvos not\u00e1veis para ataques que utilizam a pilha TCP\/IP Treck, podem ser mencionadas as impressoras de rede HP e chips da Intel. Problemas na pilha TCP\/IP Treck foram a causa das recentes vulnerabilidades remotas<\/a><\/noindex> nos subsistemas Intel AMT e ISM, exploradas atrav\u00e9s do envio de pacotes de rede. A exist\u00eancia das vulnerabilidades foi confirmada pelos fabricantes Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation e Schneider Electric. Al\u00e9m disso,
\n66 fabricantes<\/a><\/noindex>, cujos produtos utilizam a pilha TCP\/IP Treck, ainda n\u00e3o reagiram aos problemas. 5 fabricantes, incluindo a AMD, alegaram que seus produtos n\u00e3o s\u00e3o afetados por essas vulnerabilidades.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Os problemas foram encontrados na implementa\u00e7\u00e3o dos protocolos IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 e ARP, e foram causados pelo manuseio incorreto de par\u00e2metros com tamanho de dados (uso de um campo de tamanho sem verificar o tamanho real dos dados), erros na valida\u00e7\u00e3o de entrada, dupla libera\u00e7\u00e3o de mem\u00f3ria, leitura fora do buffer, estouros de inteiros, controle de acesso inadequado e problemas no manuseio de strings com delimitadores nulos. <\/p>\n

Os dois problemas mais cr\u00edticos (CVE-2020-11896, CVE-2020-11897), que receberam um n\u00edvel CVSS de 10, permitem a execu\u00e7\u00e3o de c\u00f3digo em dispositivos atrav\u00e9s do envio de pacotes IPv4\/UDP ou IPv6 formatados de maneira espec\u00edfica. O primeiro problema cr\u00edtico se manifesta em dispositivos com suporte a t\u00faneis IPv4, enquanto o segundo afeta vers\u00f5es lan\u00e7adas antes de 04\/06\/2009 com suporte a IPv6. Outra vulnerabilidade cr\u00edtica (CVSS 9) est\u00e1 presente no resolvedor DNS (CVE-2020-11901) e permite a execu\u00e7\u00e3o de c\u00f3digo atrav\u00e9s do envio de uma solicita\u00e7\u00e3o DNS especificamente formatada (o problema foi utilizado para demonstrar a explora\u00e7\u00e3o do UPS Schneider Electric APC e se manifesta em dispositivos com suporte a DNS).<\/p>\n

Outras vulnerabilidades CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 permitem, atrav\u00e9s do envio de pacotes especialmente formatados IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 ou IPv6, acessar o conte\u00fado das \u00e1reas de mem\u00f3ria do sistema. Os demais problemas podem resultar em nega\u00e7\u00e3o de servi\u00e7o ou vazamento de dados residuais de buffers do sistema.<\/p>\n

A maioria das vulnerabilidades foi corrigida na vers\u00e3o Treck 6.0.1.67 (o problema CVE-2020-11897 foi corrigido na 5.0.1.35, CVE-2020-11900 na 6.0.1.41, CVE-2020-11903 na 6.0.1.28, CVE-2020-11908 na 4.7.1.27). Como a prepara\u00e7\u00e3o de atualiza\u00e7\u00f5es de firmware para dispositivos espec\u00edficos pode levar tempo ou ser imposs\u00edvel (o stack Treck \u00e9 fornecido h\u00e1 mais de 20 anos, muitos dispositivos est\u00e3o sem suporte ou s\u00e3o dif\u00edceis de atualizar), recomenda-se que os administradores isolem os dispositivos problem\u00e1ticos e configurem em sistemas de inspe\u00e7\u00e3o de pacotes, firewalls ou roteadores a normaliza\u00e7\u00e3o ou bloqueio de pacotes fragmentados, bloqueiem t\u00faneis IP (IPv6-in-IPv4 e IP-in-IP), bloqueiem o \"source routing\", ativem a inspe\u00e7\u00e3o de op\u00e7\u00f5es incorretas em pacotes TCP, bloqueiem mensagens de controle ICMP n\u00e3o utilizadas (MTU Update e Address Mask), pro\u00edbam multicast IPv6 e redirecionem consultas DNS para um servidor DNS recursivo seguro.<\/p>\n


\n
\r\n \"Por\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 vulnerabilidades explor\u00e1veis remotamente no stack TCP\/IP Treck | ProHoster","description":"Foi identificado no stack propriet\u00e1rio de TCP\/IP Treck","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}