{"id":36640,"date":"2019-10-31T22:12:50","date_gmt":"2019-10-31T19:12:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks\/"},"modified":"2019-10-31T22:12:50","modified_gmt":"2019-10-31T19:12:50","slug":"11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","title":{"rendered":"11 vulnerabilitete t\u00eb eksploitueshme nga distanca n\u00eb stakun TCP\/IP VxWorks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit e siguris\u00eb nga kompania Armis zbuluan<\/a><\/noindex> informacionin mbi 11 vulnerabilitete<\/a><\/noindex> (PDF<\/a><\/noindex>) n\u00eb TCP\/IP stek\u00ebn IPnet, e cila p\u00ebrdoret n\u00eb sistemin operativ VxWorks. Problemeve u \u00ebsht\u00eb caktuar emri kod i 'URGENT\/11'. Parat\u00eb do t\u00eb mund t\u00eb shfryt\u00ebzoheshin nga distanca duke d\u00ebrguar paketa t\u00eb specializuara rrjeti, duke p\u00ebrfshir\u00eb disa probleme q\u00eb mund t\u00eb p\u00ebrfundojn\u00eb n\u00eb sulme p\u00ebrmes firewall-eve dhe NAT (p.sh., n\u00ebse sulmuesi kontrollon nj\u00eb server DNS t\u00eb cilit i referohet nj\u00eb pajisje e prekshme brenda rrjetit).<\/p>\n

\"11<\/a><\/noindex><\/center><\/p>\n

Gjasht\u00eb probleme mund t\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e kodit nga sulmuesi gjat\u00eb trajtimit t\u00eb opsioneve t\u00eb pap\u00ebrshtatshme IP ose TCP n\u00eb paket\u00eb, si dhe gjat\u00eb analiz\u00ebs s\u00eb paketimeve DHCP. Pes\u00eb probleme jan\u00eb m\u00eb pak t\u00eb rrezikshme dhe mund t\u00eb \u00e7ojn\u00eb n\u00eb rrjedhje informacioni ose sulme DoS. Zbulimi i informacionit mbi k\u00ebto dob\u00ebsi \u00ebsht\u00eb koordinuar me kompanin\u00eb Wind River \u2014 n\u00eb botimin e fundit t\u00eb VxWorks 7 SR0620, q\u00eb u publikua jav\u00ebn e kaluar, problemet tashm\u00eb jan\u00eb zgjidhur.<\/p>\n

Pasi \u00e7do vulnerabilitet prek pjes\u00eb t\u00eb ndryshme t\u00eb stakut rrjetor, problemet mund t\u00eb jen\u00eb specifike p\u00ebr l\u00ebshime t\u00eb caktuara, por pretendohet se n\u00eb \u00e7do version t\u00eb VxWorks q\u00eb nga 6.5 ndodhet t\u00eb pakt\u00ebn nj\u00eb vulnerabilitet q\u00eb mund\u00ebson ekzekutimin e kodit n\u00eb distanc\u00eb. N\u00eb k\u00ebt\u00eb rast, p\u00ebr \u00e7do variant t\u00eb VxWorks \u00ebsht\u00eb e nevojshme t\u00eb krijohet nj\u00eb eksploit t\u00eb ve\u00e7ant\u00eb. Sipas vler\u00ebsimit t\u00eb kompanis\u00eb Armis, problemi prek rreth 200 milion pajisje, p\u00ebrfshir\u00eb pajisje industriale dhe mjek\u00ebsore, routera, telefona VOIP, skajet e rrjetit, printera dhe pajisje t\u00eb ndryshme t\u00eb internetit t\u00eb gj\u00ebrave. <\/p>\n

Kompania Wind River beson<\/a><\/noindex>, se kjo shif\u00ebr \u00ebsht\u00eb e exageruar dhe problemi p\u00ebrfshin vet\u00ebm nj\u00eb num\u00ebr relativisht t\u00eb vog\u00ebl t\u00eb pajisjeve jo kritike, t\u00eb cilat zakonisht jan\u00eb t\u00eb kufizuara n\u00eb nj\u00eb rrjet t\u00eb brendsh\u00ebm t\u00eb korporat\u00ebs. Staku rrjetor IPnet \u00ebsht\u00eb furnizuar vet\u00ebm n\u00eb disa redaksione t\u00eb VxWorks, duke p\u00ebrfshir\u00eb l\u00ebshimet p\u00ebr t\u00eb cilat mb\u00ebshtetja \u00ebsht\u00eb ndalur tashm\u00eb (n\u00ebn 6.5). N\u00eb pajisjet q\u00eb p\u00ebrdorin platforma VxWorks 653 dhe VxWorks Cert Edition, t\u00eb aplikuara n\u00eb fusha kritike (robot\u00eb industrial\u00eb, elektronika automobilistike dhe aviacioni), problemet nuk shfaqen.<\/p>\n

P\u00ebrfaq\u00ebsuesit e Armis besojn\u00eb se p\u00ebr shkak t\u00eb kompleksitetit t\u00eb p\u00ebrdit\u00ebsimit t\u00eb pajisjeve t\u00eb prekura nga dob\u00ebsit\u00eb, nuk p\u00ebrjashtohet shfaqja e wurmave q\u00eb sulmojn\u00eb rrjetet lokale dhe q\u00eb sulmojn\u00eb n\u00eb mas\u00eb kategorit\u00eb m\u00eb t\u00eb njohura t\u00eb pajisjeve t\u00eb prekura. P\u00ebr shembull, disa pajisje, si\u00e7 jan\u00eb pajisjet mjek\u00ebsore dhe ato industriale, k\u00ebrkojn\u00eb nj\u00eb rikualifikim dhe testim t\u00eb gjat\u00eb gjat\u00eb p\u00ebrdit\u00ebsimit t\u00eb firmware-it, duke v\u00ebshtir\u00ebsuar k\u00ebshtu p\u00ebrdit\u00ebsimet e firmware-it t\u00eb tyre.<\/p>\n

Wind River mendojn\u00eb<\/a><\/noindex>, q\u00eb n\u00eb k\u00ebto raste rreziku i komprometimit mund t\u00eb ulet duke p\u00ebrfshir\u00eb mjetet e siguris\u00eb t\u00eb inkorporuara q\u00eb tashm\u00eb ekzistojn\u00eb, si\u00e7 jan\u00eb stack-u i paekzekutuesh\u00ebm, mbrojtja nga mbushja e stack-ut, kufizimi i thirrjeve sistemore dhe izolimi i proceseve. Mbrojtja gjithashtu mund t\u00eb sigurohet p\u00ebrmes shtimit t\u00eb n\u00ebnshkrimeve q\u00eb bllokojn\u00eb sulmet n\u00eb firewalls dhe sistemet e parandalimit t\u00eb hyrjeve, si dhe duke kufizuar qasjen n\u00eb rrjet n\u00eb pajisje vet\u00ebm n\u00ebp\u00ebrmjet perimeterit t\u00eb brendsh\u00ebm t\u00eb siguris\u00eb.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (PDF) \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 IPnet, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 VxWorks. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f «URGENT\/11». \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0447\u0435\u0440\u0435\u0437 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b \u0438 NAT (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27438,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36640","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4711 dob\u00ebsi t\u00eb eksploruara nga distanca n\u00eb stack-un TCP\/IP VxWorks | ProHoster","description":"K\u00ebrkuesit p\u00ebr siguri nga kompania Armis zbuluan informacionin mbi","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4711 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 TCP\/IP \u0441\u0442\u0435\u043a\u0435 VxWorks | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Armis \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/11-udalyonno-ekspluatiruemyh-uyazvimostej-v-tcp-ip-steke-vxworks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:50+00:00","article:modified_time":"2019-10-31T19:12:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36640","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:15:12","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:17:29","updated":"2026-01-22 04:15:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=36640"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36640\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27438"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=36640"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=36640"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=36640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}