{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 vulnerabilitete t\u00eb eksploatueshme n\u00eb TCP\/IP stakun VxWorks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit e siguris\u00eb nga kompania Armis zbuluan<\/a><\/noindex> informata p\u00ebr 11 vulnerabilitete<\/a><\/noindex> (PDF<\/a><\/noindex>) n\u00eb TCP\/IP stek\u00ebn IPnet, e cila p\u00ebrdoret n\u00eb sistemin operativ VxWorks. Problemeve u \u00ebsht\u00eb caktuar emri kod \u00abURGENT\/11\u00bb. Vulnerabilitetet mund t\u00eb shfryt\u00ebzohen nga distanca p\u00ebrmes d\u00ebrgimit t\u00eb paketeve t\u00eb reja rrjet\u00ebrore, duke p\u00ebrfshir\u00eb p\u00ebr disa probleme, \u00ebsht\u00eb e mundur t\u00eb kryhen sulme duke u aksesuar p\u00ebrmes firewalle-ve dhe NAT (p\u00ebr shembull, n\u00ebse sulmuesi kontrollon serverin DNS, t\u00eb cilit i drejtohet pajisja e vulnerab\u00ebl brenda rrjetit).<\/p>\n

\"11<\/a><\/noindex><\/center><\/p>\n

Gjasht\u00eb probleme mund t\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit t\u00eb nj\u00eb sulmuesi gjat\u00eb p\u00ebrpunimit t\u00eb opsioneve t\u00eb pasakta IP ose TCP n\u00eb pako, si dhe gjat\u00eb analiz\u00ebs s\u00eb paketeve DHCP. Pes\u00eb probleme jan\u00eb m\u00eb pak t\u00eb rrezikshme dhe mund t\u00eb rezultojn\u00eb n\u00eb rrjedhje informacioni ose sulme DoS. Zbulimi i informacionit p\u00ebr vulnerabilitetet \u00ebsht\u00eb koordinuar me kompanin\u00eb Wind River \u2014 n\u00eb versionin e fundit t\u00eb VxWorks 7 SR0620, i publikuar jav\u00ebn e kaluar, problemet jan\u00eb tashm\u00eb zgjidhur.<\/p>\n

Duke \u00e7do dob\u00ebsi preku pjes\u00eb t\u00eb ndryshme t\u00eb grumbullit t\u00eb rrjetit, problemet mund t\u00eb jen\u00eb specifike p\u00ebr versione t\u00eb caktuara, por \u00ebsht\u00eb e p\u00ebrcaktuar se n\u00eb \u00e7do version t\u00eb VxWorks q\u00eb nga 6.5 paraqitet t\u00eb pakt\u00ebn nj\u00eb dob\u00ebsi q\u00eb lejon ekzekutimin e kodit nga larg. P\u00ebrve\u00e7 k\u00ebsaj, p\u00ebr secilin variant t\u00eb VxWorks k\u00ebrkohet krijimi i nj\u00eb eksploiti t\u00eb ve\u00e7ant\u00eb. Sipas vler\u00ebsimit t\u00eb kompanis\u00eb Armis, problemi prek rreth 200 milion pajisjesh, p\u00ebrfshir\u00eb pajisje industriale dhe mjek\u00ebsore, router-a, telefona VOIP, firewall-e, printera dhe pajisje t\u00eb ndryshme t\u00eb internetit t\u00eb gj\u00ebrave. <\/p>\n

Kompania Wind River beson<\/a><\/noindex>, se kjo shif\u00ebr \u00ebsht\u00eb e tepruar dhe problemi prek vet\u00ebm nj\u00eb num\u00ebr relativisht t\u00eb vog\u00ebl t\u00eb pajisjeve jo kritike, t\u00eb cilat zakonisht jan\u00eb t\u00eb kufizuara n\u00eb rrjetin e brendsh\u00ebm korporativ. Grumbulli i rrjetit IPnet \u00ebsht\u00eb ofruar vet\u00ebm n\u00eb disa editime t\u00eb VxWorks, p\u00ebrfshir\u00eb l\u00ebshimet q\u00eb nuk mb\u00ebshteten m\u00eb (para 6.5). N\u00eb pajisjet e bazuara n\u00eb platformat VxWorks 653 dhe VxWorks Cert Edition, t\u00eb p\u00ebrdorura n\u00eb fushat me r\u00ebnd\u00ebsi kritike (robot\u00eb industrial\u00eb, elektronik\u00eb automobilash dhe aviacioni), problemet nuk shfaqen.<\/p>\n

P\u00ebrfaq\u00ebsuesit e Armis besojn\u00eb se p\u00ebr shkak t\u00eb kompleksitetit t\u00eb azhurnimit t\u00eb pajisjeve t\u00eb ndjeshme ndaj cenimeve, nuk p\u00ebrjashtohet shfaqja e virus\u00ebve q\u00eb godasin rrjetet lokale dhe n\u00eb mas\u00eb sulmojn\u00eb kategorit\u00eb m\u00eb t\u00eb njohura t\u00eb pajisjeve vulnerab\u00ebl. P\u00ebr shembull, disa pajisje, si\u00e7 jan\u00eb ato mjek\u00ebsore dhe industriale, k\u00ebrkojn\u00eb p\u00ebr azhurnimin e firmware-s\u00eb nj\u00eb proces t\u00eb ri t\u00eb certifikimit dhe testimit t\u00eb gjat\u00eb, gj\u00eb q\u00eb e v\u00ebshtir\u00ebson azhurnimin e tyre.<\/p>\n

Wind River beson<\/a><\/noindex>, se n\u00eb k\u00ebto raste rreziku i kompromitimit mund t\u00eb zvog\u00eblohet duke p\u00ebrfshir\u00eb mjetet ekzistuese t\u00eb siguris\u00eb, si\u00e7 jan\u00eb stekat e paekzekutueshme, mbrojtja nga mbushja e stekave, kufizimi i thirrjeve sistemore dhe izolimi i proceseve. Mbrojtja mund t\u00eb sigurohet gjithashtu p\u00ebrmes shtimit t\u00eb n\u00ebnshkrimeve q\u00eb bllokojn\u00eb sulmet n\u00eb firewall-at dhe sistemet e parandalimit t\u00eb nd\u00ebrhyrjeve, si dhe duke kufizuar qasjen n\u00eb rrjet n\u00eb pajisje vet\u00ebm nga perimetri i brendsh\u00ebm i siguris\u00eb.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «URGENT\/11». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 vulnerabilitete t\u00eb shfryt\u00ebzueshme n\u00eb distanc\u00eb n\u00eb stek\u00ebn TCP\/IP t\u00eb VxWorks | ProHoster","description":"Ekspert\u00ebt e siguris\u00eb nga kompania Armis zbuluan informacione p\u00ebr 11 vulnerabilitete (PDF) n\u00eb stek\u00ebn TCP\/IP IPnet, e cila p\u00ebrdoret n\u00eb sistemin operativ VxWorks. Problemeve iu \u00ebsht\u00eb dh\u00ebn\u00eb emri i koduar \"URGENT\/11\". Vulnerabilitetet mund t\u00eb shfryt\u00ebzohen n\u00eb distanc\u00eb p\u00ebrmes d\u00ebrgimit t\u00eb pakot t\u00eb rrjetit t\u00eb formuara posa\u00e7\u00ebrisht, duke p\u00ebrfshir\u00eb disa problematika q\u00eb mund t\u00eb shkaktojn\u00eb sulme kur qasja b\u00ebhet p\u00ebrmes firewall-eve dhe NAT (p\u00ebr shembull, n\u00ebse sulmuesi).","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f "URGENT\/11". \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}