{"id":120895,"date":"2024-12-08T21:46:03","date_gmt":"2024-12-08T19:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt"},"modified":"2024-12-08T21:46:03","modified_gmt":"2024-12-08T19:46:03","slug":"uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","title":{"rendered":"Vulnera q\u00eb lejojn\u00eb z\u00ebvend\u00ebsimin e imazheve dhe ekzekutimin e kodit n\u00eb server\u00ebt ASU t\u00eb projektit OpenWrt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb projektin e zhvilluar OpenWrt, n\u00eb mjetin ASU (Attended SysUpgrade) jan\u00eb identifikuar vulnerabilitete kritike (CVE-2024-54143), t\u00eb cilat lejojn\u00eb kompromentimin e artefakteve t\u00eb nd\u00ebrtimit, t\u00eb shp\u00ebrndara p\u00ebrmes sh\u00ebrbimit sysupgrade.openwrt.org ose server\u00ebve ASU t\u00eb pal\u00ebve t\u00eb treta, dhe arritjen e instalimit t\u00eb imazheve t\u00eb firmware p\u00ebr t\u00eb cilat ka ndodhur modifikimi nga sulmuesit n\u00eb sistemet e p\u00ebrdoruesve, t\u00eb cil\u00ebt p\u00ebrdorin modalitetin \"attended upgrade\" p\u00ebrmes nd\u00ebrfaqes web selector.openwrt.org ose mjetit t\u00eb linj\u00ebs s\u00eb komand\u00ebs attended.sysupgrade.     <\/p>\n<p>P\u00ebr t\u00eb realizuar me sukses nj\u00eb sulm, mjafton q\u00eb sulmuesi t\u00eb d\u00ebrgoj\u00eb nj\u00eb k\u00ebrkes\u00eb p\u00ebr formimin e nd\u00ebrtimit n\u00eb serverin ASU (k\u00ebrkesa t\u00eb tilla mund t\u00eb d\u00ebrgohen nga \u00e7do p\u00ebrdorues pa kaluar verifikimin). N\u00ebp\u00ebrmjet manipulimeve me nj\u00eb list\u00eb paketash t\u00eb hartuar posa\u00e7\u00ebrisht, sulmuesi mund t\u00eb organizoj\u00eb d\u00ebrgimin e imazheve t\u00eb d\u00ebmshme t\u00eb gjeneruara m\u00eb par\u00eb n\u00eb p\u00ebrgjigje t\u00eb k\u00ebrkesave legjitime t\u00eb nd\u00ebrtimit nga p\u00ebrdorues t\u00eb tjer\u00eb.        <\/p>\n<p>Sh\u00ebrbimi ASU p\u00ebrdoret n\u00eb OpenWrt p\u00ebr t\u00eb formuar dhe instaluar p\u00ebrdit\u00ebsime t\u00eb firmware pa humbur parametrat aktual\u00eb dhe paketat e instaluara nga p\u00ebrdoruesi. P\u00ebrmes nd\u00ebrfaqes web ose mjetit t\u00eb linj\u00ebs s\u00eb komand\u00ebs, p\u00ebrdoruesi d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb p\u00ebr t\u00eb formuar nj\u00eb imazh t\u00eb p\u00ebrdit\u00ebsuar firmware, duke specifikuar paketat e instaluara n\u00eb sistemin e tij. Pas nj\u00eb periudhe kohe, serveri ASU formon imazhin p\u00ebrkat\u00ebs p\u00ebr p\u00ebrmbajtjen e k\u00ebrkuar, pas s\u00eb cil\u00ebs p\u00ebrdoruesi e shkarkon at\u00eb dhe e instalon n\u00eb pajisjen e tij. Po ashtu ofrohet nj\u00eb opsion p\u00ebr t\u00eb ruajtur parametrat aktual\u00eb n\u00eb firmware-n\u00eb e p\u00ebrdit\u00ebsuar.       <\/p>\n<p>Serveri ASU \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr p\u00ebrpunimin e k\u00ebrkesave nga p\u00ebrdoruesit, i cili nis automatikisht nd\u00ebrtimin e imazheve t\u00eb firmware me ndihm\u00ebn e mjeteve ImageBuilder, si dhe mb\u00ebshtet nj\u00eb cache nga nd\u00ebrtimet e p\u00ebrgatitura m\u00eb par\u00eb. N\u00ebse p\u00ebrdoruesi k\u00ebrkon nj\u00eb imazh q\u00eb \u00ebsht\u00eb nd\u00ebrtuar m\u00eb par\u00eb dhe ruan aktualitetin e tij, sistemi menj\u00ebher\u00eb jep imazhin e disponuesh\u00ebm nga cache pa nisur procesin e nd\u00ebrtimit. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-newyork\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2797\">server<\/a> dhe mban aktualitetin, sistemi menj\u00ebher\u00eb ofron imazhin e disponuesh\u00ebm nga cache pa nisur procesin e nd\u00ebrtimit.    <\/p>\n<p>Sipas sjelljes s\u00eb sulmit, kjo u b\u00eb e mundur p\u00ebr shkak t\u00eb dy vulnerabiliteteve:  <\/p>\n<ul>\n<li class=\"l\"> Nj\u00eb vulnerabilitet n\u00eb menaxherin e k\u00ebrkesave build_reques.py nga mjeti Imagebuilder, q\u00eb lejon futjen e komandave t\u00eb veta n\u00eb procesin e nd\u00ebrtimit p\u00ebrmes kalimit t\u00eb emrave t\u00eb paketave t\u00eb formatuara posa\u00e7\u00ebrisht nga p\u00ebrdoruesi. Vulnerabiliteti rezulton nga mungesa e verifikimit t\u00eb duhur t\u00eb karaktereve speciale n\u00eb emrat e paketave para p\u00ebrdorimit t\u00eb tyre si argumente n\u00eb utilitarin make. Duke shfryt\u00ebzuar k\u00ebt\u00eb vulnerabilitet, sulmuesi mund t\u00eb krijoj\u00eb n\u00eb server imazhe t\u00eb d\u00ebmshme t\u00eb firmware-it, t\u00eb n\u00ebnshkruara me \u00e7el\u00ebsin nd\u00ebrtues t\u00eb sakt\u00eb.\n<li class=\"l\"> Vulnerabiliteti n\u00eb bibliotek\u00ebn util.py \u00ebsht\u00eb shkaktuar nga prerja e hash-eve SHA-256, t\u00eb cilat p\u00ebrdoren p\u00ebr verifikimin e pranis\u00eb n\u00eb cache t\u00eb imazheve t\u00eb firmware t\u00eb gatshme, deri n\u00eb 12 karaktere, duke reduktuar ndjesh\u00ebm nivelin e entropis\u00eb dhe duke lejuar formimin e nj\u00eb imazhi keqdash\u00ebs, hash-i i t\u00eb cilit p\u00ebrputhet me imazhin legjitim p\u00ebrmes p\u00ebrzgjedhjes s\u00eb kolizionit. N\u00eb kombinim me vulnerabilitetin n\u00eb Imagebuilder, problemi me hash-et mund t\u00eb p\u00ebrdorej nga sulmuesi p\u00ebr t\u00eb \"ndotur\" cache-n\u00eb e ASU Server dhe p\u00ebr t\u00eb vendosur n\u00eb t\u00eb imazhe keqdash\u00ebse, t\u00eb cilat kthehen n\u00eb k\u00ebrkesat e p\u00ebrdoruesve t\u00eb zakonsh\u00ebm.    <\/ul>\n<p>Ndryshimi, pas t\u00eb cilit u b\u00eb e mundur kryerja e sulmit, u b\u00eb m\u00eb 8 korrik. Problemi u zgjidh m\u00eb 4 dhjetor. P\u00ebr sigurimin e funksionimit t\u00eb sh\u00ebrbimit ASU, u p\u00ebrdor\u00ebn ve\u00e7mas <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"server\u00ebt\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1974\">server\u00ebt<\/a>, sisteme q\u00eb nuk p\u00ebrplasen me sistemet kryesore t\u00eb nd\u00ebrtimit t\u00eb projektit, t\u00eb ndara nga OpenWrt Buildbot dhe pa akses n\u00eb burime t\u00eb tilla konfidenciale si \u00e7el\u00ebsat SSH dhe certifikatat p\u00ebr krijimin e n\u00ebnshkrimeve digjitale.     <\/p>\n<p>Thuhet se zhvilluesit e OpenWrt nuk kan\u00eb gjetur prova t\u00eb komprometimit t\u00eb infrastruktur\u00ebs s\u00eb projektit, por p\u00ebr t'u mbrojtur, ata rib\u00ebr\u00eb nga e para sistemet n\u00eb t\u00eb cilat ekzekutoheshin komponent\u00ebt vulnerabil. Problemi nuk preku imazhet zyrtare q\u00eb shp\u00ebrndahen p\u00ebrmes faqes downloads.openwrt.org, dhe gjat\u00eb analiz\u00ebs s\u00eb logeve t\u00eb nd\u00ebrtimit nuk u gjet\u00ebn prova t\u00eb d\u00ebrgimit t\u00eb k\u00ebrkesave t\u00eb d\u00ebmshme. Megjithat\u00eb, pasi server\u00ebt ASU ekzekutojn\u00eb pastrimin automatike t\u00eb nd\u00ebrtimeve mbi 7 dit\u00eb, kryerja e nj\u00eb auditi t\u00eb nd\u00ebrtimeve t\u00eb vjetra u b\u00eb e pamundur.       <\/p>\n<p>Shkalla e p\u00ebrdorimit t\u00eb vulnerabiliteteve t\u00eb zbuluara n\u00eb praktik\u00eb p\u00ebr shp\u00ebrndarjen e imazheve t\u00eb d\u00ebmshme p\u00ebrmes infrastruktur\u00ebs OpenWrt vler\u00ebsohet nga p\u00ebrfaq\u00ebsuesit e OpenWrt si e af\u00ebrt me zero, megjithat\u00eb p\u00ebrdoruesve t\u00eb ASU iu rekomandohet q\u00eb n\u00eb pajisjet e tyre t\u00eb z\u00ebvend\u00ebsojn\u00eb firmware-t OpenWrt me t\u00eb nj\u00ebjt\u00ebn version.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62371\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &#171;attended upgrade&#187; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120895","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitete q\u00eb lejojn\u00eb z\u00ebvend\u00ebsimin e imazheve dhe ekzekutimin e kodit n\u00eb server\u00ebt ASU t\u00eb projektit OpenWrt | ProHoster","description":"N\u00eb projektin n\u00eb zhvillim OpenWrt, n\u00eb mjetet e ASU (Attended SysUpgrade) jan\u00eb identifikuar vulnerabilitete kritike (CVE-2024-54143), t\u00eb cilat lejojn\u00eb kompromitimin e artefakteve t\u00eb nd\u00ebrtimit, t\u00eb shp\u00ebrndara p\u00ebrmes sh\u00ebrbimit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-08T19:46:03+00:00","article:modified_time":"2024-12-08T19:46:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120895","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:04:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:43:20","updated":"2026-02-09 22:04:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=120895"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120895\/revisions"}],"predecessor-version":[{"id":160077,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120895\/revisions\/160077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=120895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=120895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=120895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}