{"id":85612,"date":"2020-06-17T19:42:36","date_gmt":"2020-06-17T17:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck"},"modified":"2020-06-17T19:42:36","modified_gmt":"2020-06-17T17:42:36","slug":"19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","title":{"rendered":"19 vulnerabilit\u0103\u021bi exploatabile de la distan\u021b\u0103 \u00een stiva TCP\/IP Treck","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen stiva proprietar\u0103 TCP\/IP Treck<\/a><\/noindex> identificate<\/a><\/noindex> 19 vulnerabilit\u0103\u021bi<\/a><\/noindex>, exploatate prin trimiterea unor pachete formate special. Vulnerabilit\u0103\u021bilor le-a fost atribuit codul nume Ripple20<\/a><\/noindex>. Unele dintre vulnerabilit\u0103\u021bi se manifest\u0103 \u0219i \u00een stiva TCP\/IP KASAGO de la Zuken Elmic (Elmic Systems), care are r\u0103d\u0103cini comune cu Treck. Stiva Treck este utilizat\u0103 \u00een multe dispozitive industriale, medicale, de comunica\u021bie, \u00eencorporate \u0219i de consum (de la becuri inteligente la imprimante \u0219i surse de alimentare ne\u00eentreruptibile), precum \u0219i \u00een echipamente de energie, transport, avia\u021bie, comer\u021b \u0219i extrac\u021bie de petrol. <\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Printre \u021bintele notabile pentru atacuri care utilizeaz\u0103 stiva TCP\/IP Treck se num\u0103r\u0103 imprimantele de re\u021bea HP \u0219i cipurile Intel. Problemele din stiva TCP\/IP Treck s-au dovedit a fi cauza recentelor vulnerabilit\u0103\u021bi exploatabile de la distan\u021b\u0103<\/a><\/noindex> \u00een subsistemele Intel AMT \u0219i ISM, exploatate prin trimiterea unui pachet de re\u021bea. Produc\u0103torii Intel, HP, Hewlett Packard Enterprise, Baxter, Caterpillar, Digi, Rockwell Automation \u0219i Schneider Electric au confirmat existen\u021ba vulnerabilit\u0103\u021bilor. \u00cenc\u0103
\n66 de produc\u0103tori<\/a><\/noindex>, a c\u0103ror produse utilizeaz\u0103 stiva TCP\/IP Treck, nu au reac\u021bionat \u00eenc\u0103 la probleme. 5 produc\u0103tori, printre care AMD, au declarat c\u0103 produsele lor nu sunt afectate de aceste probleme.<\/p>\n

\"19<\/a><\/noindex><\/center><\/p>\n

Problemele au fost g\u0103site \u00een implementarea protocoalelor IPv4, IPv6, UDP, DNS, DHCP, TCP, ICMPv4 \u0219i ARP \u0219i sunt cauzate de manipularea incorect\u0103 a parametrilor de dimensiuni (utilizarea c\u00e2mpului de dimensiune f\u0103r\u0103 a verifica dimensiunea efectiv\u0103 a datelor), erori \u00een validarea informa\u021biilor de intrare, eliberarea dubl\u0103 a memoriei, citirea dintr-o zon\u0103 \u00een afara bufferului, dep\u0103\u0219iri de num\u0103r \u00eentreg, controlul incorect al accesului \u0219i probleme \u00een manipularea \u0219irurilor cu separator nul. <\/p>\n

Dou\u0103 probleme critice (CVE-2020-11896, CVE-2020-11897) cu un nivel CVSS de 10 permit executarea de cod pe dispozitiv prin trimiterea unor pachete IPv4\/UDP sau IPv6 aranjate \u00eentr-un anumit mod. Prima problem\u0103 critic\u0103 apare pe dispozitivele care suport\u0103 tuneluri IPv4, iar a doua pe versiunile cu suport IPv6 lansate \u00eenainte de 04.06.2009. O alta vulnerabilitate critic\u0103 (CVSS 9) se g\u0103se\u0219te \u00een rezolvatorul DNS (CVE-2020-11901) \u0219i permite executarea codului prin trimiterea unei solicit\u0103ri DNS special formate (problema a fost utilizat\u0103 pentru a demonstra atacul asupra Schneider Electric APC UPS \u0219i se manifest\u0103 pe dispozitivele care suport\u0103 DNS).<\/p>\n

Alte vulnerabilit\u0103\u021bi CVE-2020-11898, CVE-2020-11899, CVE-2020-11902, CVE-2020-11903, CVE-2020-11905 permit prin trimiterea unor pachete IPv4\/ICMPv4, IPv6OverIPv4, DHCP, DHCPv6 special formate s\u0103 se afle con\u021binutul zonelor de memorie ale sistemului. Celelalte probleme pot duce la o \u00eentrerupere a serviciului sau la scurgerea de date reziduale din buffer-ele sistemului.<\/p>\n

Majoritatea vulnerabilit\u0103\u021bilor au fost remediat\u0103 \u00een lansarea Treck 6.0.1.67 (problema CVE-2020-11897 a fost rezolvat\u0103 \u00een 5.0.1.35, CVE-2020-11900 \u00een 6.0.1.41, CVE-2020-11903 \u00een 6.0.1.28, CVE-2020-11908 \u00een 4.7.1.27). Deoarece preg\u0103tirea actualiz\u0103rilor firmware pentru dispozitivele specifice poate fi \u00eent\u00e2rziat\u0103 sau imposibil\u0103 (stiva Treck este disponibil\u0103 de peste 20 de ani, multe dispozitive au r\u0103mas f\u0103r\u0103 suport sau este dificil s\u0103 le actualiz\u0103m), administratorilor li se recomand\u0103 s\u0103 izoleze dispozitivele problematice \u0219i s\u0103 configureze sistemele de inspec\u021bie a pachetelor, firewall-urile sau routerele pentru a normaliza sau bloca pachetele fragmentate, s\u0103 blocheze tunelurile IP (IPv6-in-IPv4 \u0219i IP-in-IP), s\u0103 blocheze \u201esource routing\u201d, s\u0103 activeze inspec\u021bia op\u021biunilor incorecte \u00een pachetele TCP, s\u0103 blocheze mesajele ICMP de control neutilizate (Actualizare MTU \u0219i Masc\u0103 de adres\u0103), s\u0103 interzic\u0103 multicast IPv6 \u0219i s\u0103 redirec\u021bioneze solicit\u0103rile DNS c\u0103tre un server DNS recursiv protejat.<\/p>\n


\n
\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 19 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Ripple20. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 KASAGO \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Zuken Elmic (Elmic Systems), \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u043e\u0431\u0449\u0438\u0435 \u043a\u043e\u0440\u043d\u0438 c Treck. \u0421\u0442\u0435\u043a Treck \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445, \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445, \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445, \u0432\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438 \u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043e\u0442 \u0443\u043c\u043d\u044b\u0445 \u043b\u0430\u043c\u043f \u0434\u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u043e\u0432 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719 vulnerabilit\u0103\u021bi exploatabile de la distan\u021b\u0103 \u00een stiva TCP\/IP Treck | ProHoster","description":"Au fost identificate","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP-\u0441\u0442\u0435\u043a\u0435 Treck | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u043c TCP\/IP \u0441\u0442\u0435\u043a\u0435 Treck \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/19-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-treck","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-17T17:42:36+00:00","article:modified_time":"2020-06-17T17:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85612","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:55:50","updated":"2022-09-28 01:40:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/85612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=85612"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/85612\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/85613"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=85612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=85612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=85612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}