{"id":120895,"date":"2024-12-08T21:46:03","date_gmt":"2024-12-08T19:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt"},"modified":"2024-12-08T21:46:03","modified_gmt":"2024-12-08T19:46:03","slug":"uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","title":{"rendered":"Dob\u00ebsit\u00eb q\u00eb lejojn\u00eb z\u00ebvend\u00ebsimin e imazheve dhe ekzekutimin e kodit n\u00eb serverat ASU t\u00eb projektit OpenWrt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb projektin n\u00eb zhvillim OpenWrt, n\u00eb mjetin ASU (Attended SysUpgrade) jan\u00eb identifikuar dob\u00ebsi kritike (CVE-2024-54143), t\u00eb cilat lejojn\u00eb t\u00eb kompromentohet artefaktet e nd\u00ebrtimit q\u00eb shp\u00ebrndahen p\u00ebrmes sh\u00ebrbimit sysupgrade.openwrt.org ose server\u00ebve t\u00eb tjer\u00eb ASU, duke arritur k\u00ebshtu instalimin e imazheve t\u00eb modifikuara nga sulmuesi n\u00eb sistemet e p\u00ebrdoruesve q\u00eb p\u00ebrdorin modalitetin \"attended upgrade\" p\u00ebrmes nd\u00ebrfaqes web selector.openwrt.org ose mjetit t\u00eb komand\u00ebs attended.sysupgrade.     <\/p>\n<p>P\u00ebr t\u00eb realizuar me sukses nj\u00eb sulm, sulmuesi duhet thjesht t\u00eb d\u00ebrgoj\u00eb nj\u00eb k\u00ebrkes\u00eb p\u00ebr krijimin e nj\u00eb nd\u00ebrtimi n\u00eb serverin ASU (k\u00ebrkesa t\u00eb tilla mund t\u00eb d\u00ebrgohen nga \u00e7do p\u00ebrdorues pa kaluar n\u00ebp\u00ebr autentifikim). Me manipulime t\u00eb listave t\u00eb paketave t\u00eb dizajnuara posa\u00e7\u00ebrisht, sulmuesi mund t\u00eb organizoj\u00eb d\u00ebrgimin e imazheve t\u00eb d\u00ebmshme t\u00eb gjeneruara m\u00eb par\u00eb n\u00eb p\u00ebrgjigje t\u00eb k\u00ebrkesave legjitime p\u00ebr nd\u00ebrtim nga p\u00ebrdorues t\u00eb tjer\u00eb.        <\/p>\n<p>Sh\u00ebrbimi ASU p\u00ebrdoret n\u00eb OpenWrt p\u00ebr t\u00eb krijuar dhe instaluar p\u00ebrdit\u00ebsime t\u00eb firmware pa humbur cil\u00ebsimet dhe paketat e instaluara nga p\u00ebrdoruesi. P\u00ebrmes nd\u00ebrfaqes s\u00eb internetit ose mjeteve t\u00eb komand\u00ebs, p\u00ebrdoruesi d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb p\u00ebr krijimin e nj\u00eb imazhi t\u00eb p\u00ebrdit\u00ebsuar, duke specifikuar paketat e instaluara n\u00eb sistemin e tij. Pas nj\u00eb kohe, serveri ASU krijon nj\u00eb imazh q\u00eb p\u00ebrputhet me p\u00ebrmbajtjen e k\u00ebrkuar, pas t\u00eb cilit p\u00ebrdoruesi e shkarkon dhe e instalon at\u00eb n\u00eb pajisjen e tij. P\u00ebr m\u00eb tep\u00ebr, ofrohet nj\u00eb opsion q\u00eb lejon ruajtjen e cil\u00ebsimeve ekzistuese n\u00eb firmware t\u00eb p\u00ebrdit\u00ebsuar.       <\/p>\n<p>P\u00ebr trajtimin e k\u00ebrkesave nga p\u00ebrdoruesit \u00ebsht\u00eb p\u00ebrgjegj\u00ebs ASU Server, i cili fillon nd\u00ebrtimin automatik t\u00eb imazheve t\u00eb firmware duke p\u00ebrdorur mjetin ImageBuilder, si dhe mb\u00ebshtet nj\u00eb memorie cache t\u00eb nd\u00ebrtimeve t\u00eb p\u00ebrgatitura m\u00eb par\u00eb. N\u00eb rast se p\u00ebrdoruesi k\u00ebrkon nj\u00eb imazh q\u00eb \u00ebsht\u00eb nd\u00ebrtuar m\u00eb par\u00eb dhe q\u00eb ruan relevanc\u00ebn, sistemi e jep menj\u00ebher\u00eb imazhin e disponuesh\u00ebm nga cache pa nisur procesin e nd\u00ebrtimit. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-newyork\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2797\">serveri<\/a> Sjellja e sulmit u b\u00eb e mundur p\u00ebrmes dy vulnerabiliteteve:    <\/p>\n<p>Vulnerabiliteti n\u00eb trajtuesin e k\u00ebrkesave build_reques.py pjes\u00eb e mjetit Imagebuilder, q\u00eb lejon vendosjen e komandave t\u00eb tij n\u00eb procesin e nd\u00ebrtimit p\u00ebrmes d\u00ebrgimit t\u00eb emrave t\u00eb paketave t\u00eb formuluar posa\u00e7\u00ebrisht nga p\u00ebrdoruesi. Ky vulnerabilitet shkaktohet nga mungesa e kontrollit t\u00eb duhur t\u00eb simboleve speciale n\u00eb emrat e paketimeve p\u00ebrpara se t\u00eb p\u00ebrdoren n\u00eb numrin e argumenteve t\u00eb utilit make. Duke shfryt\u00ebzuar k\u00ebt\u00eb vulnerabilitet, sulmuesi mund t\u00eb krijoj\u00eb n\u00eb server imazhe t\u00eb d\u00ebmshme t\u00eb firmware, t\u00eb n\u00ebnshkruara me \u00e7el\u00ebsin e nd\u00ebrtimit t\u00eb sakt\u00eb.  <\/p>\n<ul>\n<li class=\"l\"> Vulnerabiliteti n\u00eb bibliotek\u00ebn util.py, e shkaktuar nga fakti q\u00eb SHA-256 hash-et, t\u00eb p\u00ebrdorura p\u00ebr kontrollin e disponueshm\u00ebris\u00eb n\u00eb cache t\u00eb imazheve t\u00eb firmware t\u00eb gatshme, u pren\u00eb deri n\u00eb 12 simbole, \u00e7ka kishte ulur ndjesh\u00ebm nivelin e entropis\u00eb dhe lejonte q\u00eb n\u00ebp\u00ebrmjet gjetjes s\u00eb kolizionit t\u00eb krijohej nj\u00eb imazh i d\u00ebmsh\u00ebm, hash-i i t\u00eb cilit p\u00ebrputhej me imazhin legjitim. N\u00eb kombinim me vulnerabilitetin n\u00eb Imagebuilder, problemi me hash-at mund t\u00eb p\u00ebrdorej nga sulmuesi p\u00ebr t\u00eb \"ndotur\" cache-in e ASU Server dhe p\u00ebr t\u00eb vendosur imazhe t\u00eb d\u00ebmshme, q\u00eb jepen n\u00eb k\u00ebrkesat nga p\u00ebrdoruesit e zakonsh\u00ebm.\n<li class=\"l\"> Dob\u00ebsia n\u00eb bibliotek\u00ebn util.py, e shkaktuar nga truncimi i hash-eve SHA-256, t\u00eb cilat p\u00ebrdoren p\u00ebr t\u00eb verifikuar pranishm\u00ebrin\u00eb n\u00eb cache t\u00eb imazheve t\u00eb gatshme t\u00eb firmware, n\u00eb 12 karaktere, \u00e7onte n\u00eb nj\u00eb reduktim t\u00eb madh t\u00eb nivelit t\u00eb entropis\u00eb dhe lejonte q\u00eb, p\u00ebrmes gjenerimit t\u00eb kolizionit, t\u00eb formohej nj\u00eb imazh keqdash\u00ebs, i cili kishte hash-in e nj\u00eb imazhi legjitim. N\u00eb kombinim me dob\u00ebsin\u00eb n\u00eb Imagebuilder, problemi me hash-et mund t\u00eb shfryt\u00ebzohej nga sulmuesi p\u00ebr t\u00eb \"ndotur\" cache-in e ASU Server dhe p\u00ebr t\u00eb vendosur imazhe keqdash\u00ebse, t\u00eb cilat ktheheshin n\u00eb k\u00ebrkesat e p\u00ebrdoruesve t\u00eb zakonsh\u00ebm.    <\/ul>\n<p>Sipas informacionit, zhvilluesit e OpenWrt nuk gjet\u00ebn shenja t\u00eb komprometimit t\u00eb infrastruktur\u00ebs s\u00eb projektit, por p\u00ebr siguri, ata rinovuan nga e para sistemet n\u00eb t\u00eb cilat ishin ekzekutuar komponent\u00ebt vulnerabil. Problemi nuk preku imazhet zyrtare, t\u00eb cilat shp\u00ebrndahen p\u00ebrmes sitit downloads.openwrt.org, dhe gjat\u00eb analiz\u00ebs s\u00eb logeve t\u00eb nd\u00ebrtimit nuk u gjet\u00ebn shenja d\u00ebrgimi t\u00eb k\u00ebrkesave t\u00eb d\u00ebmshme. Megjithat\u00eb, p\u00ebr shkak se n\u00eb serverat ASU kryhet nj\u00eb pastrim automatik i nd\u00ebrtimeve m\u00eb t\u00eb vjetra se 7 dit\u00eb, ishte e pamundur t\u00eb kryhej nj\u00eb auditim i nd\u00ebrtimeve t\u00eb vjetra. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"hostingut\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1974\">hostingut<\/a>Probabiliteti i p\u00ebrdorimit t\u00eb vulnerabiliteteve t\u00eb identifikuara n\u00eb praktik\u00eb p\u00ebr shp\u00ebrndarjen e imazheve t\u00eb d\u00ebmshme p\u00ebrmes infrastruktur\u00ebs OpenWrt vler\u00ebsohet nga p\u00ebrfaq\u00ebsuesit e OpenWrt si i af\u00ebrt me zero, megjithat\u00eb p\u00ebrdoruesve t\u00eb ASU u rekomandohet q\u00eb t\u00eb z\u00ebvend\u00ebsojn\u00eb imazhet e firmware OpenWrt n\u00eb pajisjet e tyre me versionin e nj\u00ebjt\u00eb.     <\/p>\n<p>Sipas zhvilluesve t\u00eb OpenWrt, nuk u gjet\u00ebn prova t\u00eb kompromiseve n\u00eb infrastruktur\u00ebn e projektit, por p\u00ebr t\u00eb qen\u00eb t\u00eb sigurt, ata riparuan sistemet ku ishin t\u00eb instaluara komponent\u00ebt e preksh\u00ebm. Problemi nuk epreku imazhin zyrtar, i shp\u00ebrndar\u00eb p\u00ebrmes faqes downloads.openwrt.org, dhe gjat\u00eb analiz\u00ebs s\u00eb log-eve t\u00eb nd\u00ebrtimit nuk u gjet\u00ebn prova t\u00eb d\u00ebrgimit t\u00eb k\u00ebrkesave t\u00eb d\u00ebmshme. N\u00eb k\u00ebt\u00eb kuad\u00ebr, duke qen\u00eb se n\u00eb server\u00ebt e ASU kryhet nj\u00eb pastrim automatik i nd\u00ebrtimeve m\u00eb t\u00eb vjetra se 7 dit\u00eb, ishte e pamundur t\u00eb kryhej nj\u00eb audt ndaj nd\u00ebrtimeve t\u00eb vjetra.       <\/p>\n<p>Probabiliteti i p\u00ebrdorimit t\u00eb vulnerabiliteteve t\u00eb identifikuara n\u00eb praktik\u00eb p\u00ebr t\u00eb shp\u00ebrndar\u00eb imazhe t\u00eb d\u00ebmshme p\u00ebrmes infrastruktur\u00ebs OpenWrt vler\u00ebsohet nga p\u00ebrfaq\u00ebsuesit e OpenWrt si af\u00ebr zeros, megjithat\u00eb p\u00ebrdoruesve t\u00eb ASU u rekomandohet t\u00eb z\u00ebvend\u00ebsojn\u00eb firmware-t OpenWrt n\u00eb pajisjet e tyre me t\u00eb nj\u00ebjtin version.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62371\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &#171;attended upgrade&#187; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120895","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &quot;attended upgrade&quot; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &quot;attended upgrade&quot; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb q\u00eb lejojn\u00eb z\u00ebvend\u00ebsimin e imazheve dhe ekzekutimin e kodit n\u00eb server\u00ebt ASU t\u00eb projektit OpenWrt | ProHoster","description":"N\u00eb projektin n\u00eb zhvillim OpenWrt, n\u00eb mjetin ASU (Attended SysUpgrade) jan\u00eb identifikuar dob\u00ebsi kritike (CVE-2024-54143), t\u00eb cilat lejojn\u00eb kompromitimin e artefakteve t\u00eb nd\u00ebrtimit, t\u00eb shp\u00ebrndara p\u00ebrmes sh\u00ebrbimit sysupgrade.openwrt.org ose server\u00ebve tjer\u00eb ASU, dhe arritjen e instalimit t\u00eb imazheve t\u00eb firmware t\u00eb modifikuara nga sulmuesit n\u00eb sistemet e p\u00ebrdoruesve q\u00eb p\u00ebrdorin modalitetin \"attended upgrade\" p\u00ebr p\u00ebrdit\u00ebsimin e firmware-ve p\u00ebrmes nd\u00ebrfaqes web selector.openwrt.org ose mjeteve t\u00eb linj\u00ebs s\u00eb komand\u00ebs attended.sysupgrade. P\u00ebr t\u00eb realizuar me sukses nj\u00eb sulm, sulmuesi ka nevoj\u00eb vet\u00ebm t\u00eb d\u00ebrgoj\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &quot;attended upgrade&quot; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-08T19:46:03+00:00","article:modified_time":"2024-12-08T19:46:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120895","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:04:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:43:20","updated":"2026-02-09 22:04:20"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=120895"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120895\/revisions"}],"predecessor-version":[{"id":160077,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/120895\/revisions\/160077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=120895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=120895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=120895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}