{"id":1883,"date":"2021-09-25T20:53:24","date_gmt":"2021-09-25T11:53:24","guid":{"rendered":"https:\/\/csirt.ninja\/?p=1883"},"modified":"2021-09-26T13:47:57","modified_gmt":"2021-09-26T04:47:57","slug":"%e3%83%a9%e3%83%b3%e3%82%b5%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e6%94%bb%e6%92%83%e8%80%85%e3%81%8c%e5%88%a9%e7%94%a8%e3%81%99%e3%82%8b%e8%84%86%e5%bc%b1%e6%80%a7%e3%83%aa%e3%82%b9%e3%83%88%e3%83%a1","status":"publish","type":"post","link":"https:\/\/csirt.ninja\/?p=1883","title":{"rendered":"\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u5229\u7528\u3059\u308b\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u30e1\u30e2"},"content":{"rendered":"

\u25a0\u6982\u8981<\/h3>\n

2021\u5e7409\u670812\u65e5\u3001Recorded Future\u306eCSIRT\u30e1\u30f3\u30d0\u30fc\u3067\u3042\u308bAllan Liska\u6c0f\u304cTwitter\u4e0a\u3067\u547c\u3073\u304b\u3051\u3092\u884c\u3044\u307e\u3057\u305f<\/a>\u3002<\/p>\n

\u305d\u306e\u547c\u3073\u304b\u3051\u306f\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u653b\u6483\u8005\u304c\u521d\u671f\u30a2\u30af\u30bb\u30b9\u3092\u7372\u5f97\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u8106\u5f31\u6027\u306e\u30ea\u30b9\u30c8\u3092\u4f5c\u6210\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3001\u3044\u304f\u3064\u304b\u306e\u30d9\u30f3\u30c0\u30fc\u3084\u88fd\u54c1\u540d\u3068\u3068\u3082\u306bCVE\u756a\u53f7\u304c\u5217\u6319\u3055\u308c\u305f\u30ea\u30b9\u30c8\u306e\u753b\u50cf\u304c\u6dfb\u4ed8\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u306e\u30ea\u30b9\u30c8\u306b\u63b2\u8f09\u3055\u308c\u3066\u3044\u306a\u3044\u3082\u306e\u304c\u3042\u308b\u304b\u3068\u3044\u3046\u3082\u306e\u3067\u3057\u305f\u3002\u3053\u308c\u306b\u5bfe\u3057\u3066\u3001\u69d8\u3005\u306a\u30ec\u30b9\u30dd\u30f3\u30b9\u304c\u3042\u308a\u3001\u30ea\u30b9\u30c8\u306f\u62e1\u5145(\u521d\u671f\u30a2\u30af\u30bb\u30b9\u7372\u5f97\u306b\u5229\u7528\u3055\u308c\u308b\u8106\u5f31\u6027\u4ee5\u5916\u3082\u542b\u3080)\u3055\u308c\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u3067\u3042\u308b\u3001Pancak3\u6c0f\u304c\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u56f3\u3092\u4f5c\u6210<\/a>\u3057\u307e\u3057\u305f\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u3053\u308c\u3089\u306e\u6d41\u308c\u3092\u898b\u3066\u3044\u3066\u3001\u975e\u5e38\u306b\u3088\u3044\u53d6\u308a\u7d44\u307f\u3060\u3068\u601d\u3044\u3001\u79c1\u3082\u5fae\u529b\u306a\u304c\u3089\u8ca2\u732e\u3057\u305f\u3044\u3068\u8003\u3048\u307e\u3057\u305f\u3002
\npancak3\u6c0f\u304c\u4f5c\u6210\u3055\u308c\u305f\u56f3\u3060\u3051\u3067\u306f\u3001\u500b\u5225\u306e\u8106\u5f31\u6027\u60c5\u5831\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3084\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u77e5\u308b\u3053\u3068\u304c\u76f4\u63a5\u7684\u306b\u306f\u3067\u304d\u306a\u3044\u305f\u3081\u3001\u305d\u308c\u305e\u308c\u3092\u4e00\u89a7\u8868\u306b\u307e\u3068\u3081\u305f\u3082\u306e\u3092\u4f5c\u6210\u3057\u307e\u3057\u305f\u306e\u3067\u5171\u6709\u3044\u305f\u3057\u307e\u3059\u3002<\/p>\n

 <\/p>\n

\u25a0\u4e00\u89a7\u8868<\/h3>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\u30d9\u30f3\u30c0\u30fc\u3001\u88fd\u54c1\u540d<\/td>\nCVE\u756a\u53f7<\/td>\n\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b7\u30b9\u30c6\u30e0<\/td>\n\u53c2\u8003\u30ea\u30f3\u30af<\/td>\n<\/tr>\n
Pulse Secure VPN<\/td>\nCVE-2019-11510<\/td>\n\n
    \n
  • Pulse\u00a0Connect\u00a0Secure 8.1R15.1\u00a0\u672a\u6e80<\/li>\n
  • Pulse\u00a0Connect\u00a0Secure 8.2R12.1\u00a0\u672a\u6e80\u306e\u00a08.2<\/li>\n
  • Pulse\u00a0Connect\u00a0Secure 8.3R7.1\u00a0\u672a\u6e80\u306e\u00a08.3<\/li>\n
  • Pulse\u00a0Connect\u00a0Secure 9.0R3.4\u00a0\u672a\u6e80\u306e\u00a09.0<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2019-11539<\/td>\n\n
    \n
  • Pulse\u00a0Connect\u00a0Secure 9.0R3.4\u00a0\u672a\u6e80\u306e\u00a09.0RX<\/li>\n
  • Pulse\u00a0Connect\u00a0Secure 8.3R7.1\u00a0\u672a\u6e80\u306e\u00a08.3RX<\/li>\n
  • Pulse\u00a0Connect\u00a0Secure 8.2R12.1\u00a0\u672a\u6e80\u306e\u00a08.2RX<\/li>\n
  • Pulse\u00a0Connect\u00a0Secure 8.1R15.1\u00a0\u672a\u6e80\u306e8.1RX<\/li>\n
  • Pulse\u00a0Policy\u00a0Secure 9.0R3.2\u00a0\u672a\u6e80\u306e\u00a09.0RX<\/li>\n
  • Pulse\u00a0Policy\u00a0Secure 5.4R7.1\u00a0\u672a\u6e80\u306e\u00a05.4RX<\/li>\n
  • Pulse\u00a0Policy\u00a0Secure 5.3R12.1\u00a0\u672a\u6e80\u306e\u00a05.3RX<\/li>\n
  • Pulse\u00a0Policy\u00a0Secure 5.2R12.1\u00a0\u672a\u6e80\u306e\u00a05.2RX<\/li>\n
  • Pulse\u00a0Policy\u00a0Secure 5.1R15.1\u00a0\u672a\u6e80\u306e\u00a05.1RX<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-8243<\/td>\n\n
    \n
  • Pulse\u00a0Connect\u00a0Secure 9.1R8.2\u00a0\u672a\u6e80<\/li>\n
  • Pulse\u00a0Policy\u00a0Secure<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-8260<\/td>\n\n
    \n
  • Pulse\u00a0Secure\u00a0Desktop\u00a0Client 9.1R9\u00a0\u672a\u6e80<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-22893<\/td>\n\n
    \n
  • Pulse\u00a0Connect\u00a0Secure (PCS)\u00a0version\u00a09.0R3\u00a0\u304a\u3088\u3073\u305d\u308c\u4ee5\u964d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Citrix<\/td>\nCVE-2019-11634<\/td>\n\n
    \n
  • Citrix Receiver 4.9.6001\u672a\u6e80<\/li>\n
  • Citrix\u00a0Workspace 1904\u00a0\u672a\u6e80<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2019-19781<\/td>\n\n
    \n
  • CitrixADC\u304a\u3088\u3073CitrixGateway\u30d0\u30fc\u30b8\u30e7\u30f313.0\u306e13.0.47.24 \u4ee5\u524d<\/li>\n
  • NetScalerADC\u304a\u3088\u3073NetScalerGateway\u30d0\u30fc\u30b8\u30e7\u30f312.1\u306e12.1.55.18 \u4ee5\u524d<\/li>\n
  • NetScalerADC\u304a\u3088\u3073NetScalerGateway\u30d0\u30fc\u30b8\u30e7\u30f312.0\u306e12.0.63.13 \u4ee5\u524d<\/li>\n
  • NetScalerADC\u304a\u3088\u3073NetScalerGateway\u30d0\u30fc\u30b8\u30e7\u30f311.1\u306e11.1.63.15 \u4ee5\u524d<\/li>\n
  • NetScalerADC\u304a\u3088\u3073NetScalerGateway\u30d0\u30fc\u30b8\u30e7\u30f310.5\u306e10.5.70.12 \u4ee5\u524d<\/li>\n
  • CitrixSD-WAN WANOP\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30e2\u30c7\u30eb4000-WO\u30014100-WO\u30015000-WO\u3001\u304a\u3088\u30735100-WO\u306e10.2.6b\u304a\u3088\u307311.0.3b\u3000\u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-8195<\/td>\n\n
    \n
  • Citrix\u00a0Gateway\u00a0Plug-in\u00a0for\u00a0Linux<\/li>\n
  • Citrix\u00a0Application\u00a0Delivery\u00a0Controller\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2<\/li>\n
  • Citrix\u00a0Gateway\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2<\/li>\n
  • Citrix\u00a0SDWAN\u00a0WAN-OP<\/li>\n
  • NetScaler\u00a0Gateway\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-8196<\/td>\n\n
    \n
  • Citrix\u00a0Application\u00a0Delivery\u00a0Controller\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2<\/li>\n
  • Citrix\u00a0Gateway\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2<\/li>\n
  • Citrix\u00a0SDWAN\u00a0WAN-OP<\/li>\n
  • NetScaler\u00a0Gateway\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Fortinet<\/td>\nCVE-2018-13379<\/td>\n\n
    \n
  • FortiOS 6.0.0\u00a0\u304b\u3089\u00a06.0.4<\/li>\n
  • FortiOS 5.6.3\u00a0\u304b\u3089\u00a05.6.7<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2019-5591<\/td>\n\n
    \n
  • FortiOS 6.2.0 \u304a\u3088\u3073\u305d\u308c\u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-12812<\/td>\n\n
    \n
  • FortiOS 6.4.0<\/li>\n
  • FortiOS 6.2.0\u00a0\u304b\u3089\u00a06.2.3<\/li>\n
  • FortiOS 6.0.9\u00a0\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

SonicWall<\/td>\nCVE-2019-7481<\/td>\n\n
    \n
  • SMA100\u00a0\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a2 9.0.0.3\u00a0\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-5135<\/td>\n\n
    \n
  • SonicOS6.5.4.6-79n \u4ee5\u524d<\/li>\n
  • SonicOS6.5.1.11-4n \u4ee5\u524d<\/li>\n
  • SonicOS6.0.5.3-93o \u4ee5\u524d<\/li>\n
  • SonicOSv6.5.4.4-44v-21-794 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-20016<\/td>\n\u30d5\u30a1\u30fc\u30e0\u30a6\u30a7\u30a210\u7cfb\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u7a3c\u50cd\u3059\u308b\u4ee5\u4e0b\u306e\u88fd\u54c1<\/p>\n
    \n
  • SMA 200, SMA 210, SMA 400, SMA 410<\/li>\n
  • SMA 500v (Azure, AWS, ESXi, HyperV)<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

F5<\/td>\nCVE-2020-5902<\/td>\nBIG-IP (LTM, AAM, Advanced WAF, AFM, Analytics, APM, ASM, DDHD, DNS, FPS, GTM, Link Controller, PEM, SSLO, CGNAT)\u306e\u4ee5\u4e0b\u306e\u30d0\u30fc\u30b8\u30e7\u30f3<\/p>\n
    \n
  • \u30d6\u30e9\u30f3\u30c1 15\u306e15.1.0\u304a\u3088\u307315.0.0\u304b\u308915.0.1<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 14\u306e14.1.0\u304b\u308914.1.2<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 13\u306e13.1.0\u304b\u308913.1.3<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 12\u306e12.1.0\u304b\u308912.1.5<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 11\u306e11.6.1\u304b\u308911.6.5<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-22986<\/td>\nBIG-IP(LTM, AAM, Advanced WAF, AFM, Analytics, APM, ASM, DDHD, DNS, FPS, GTM, Link Controller, PEM, SSLO)\u306e\u4ee5\u4e0b\u306e\u30d0\u30fc\u30b8\u30e7\u30f3<\/p>\n
    \n
  • \u30d6\u30e9\u30f3\u30c1 16\u306e16.0.0\u304b\u308916.0.1<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 15\u306e15.1.0\u304b\u308915.1.2<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 14\u306e14.1.0\u304b\u308914.1.3<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 13\u306e13.1.0\u304b\u308913.1.3<\/li>\n
  • \u30d6\u30e9\u30f3\u30c1 12\u306e12.1.0\u304b\u308912.1.5<\/li>\n<\/ul>\n

    BIG-IQ Centralized Management<\/p>\n

      \n
    • \u30d6\u30e9\u30f3\u30c1 7\u306e7.1.0\u304a\u3088\u30737.0.0<\/li>\n
    • \u30d6\u30e9\u30f3\u30c1 6\u306e6.0.0.\u304b\u30896.1.0<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Palo Alto<\/td>\nCVE-2019-1579<\/td>\n\n
    \n
  • PAN-OS 7.1.18\u00a0\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d<\/li>\n
  • PAN-OS 8.0.11\u00a0\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d<\/li>\n
  • PAN-OS 8.1.2\u00a0\u304a\u3088\u3073\u305d\u308c\u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-2021<\/td>\n\n
    \n
  • PAN-OS 9.1\u00a0\u4ee5\u4e0a\u00a09.1.3\u00a0\u672a\u6e80<\/li>\n
  • PAN-OS 9.0\u00a0\u4ee5\u4e0a\u00a09.0.9\u00a0\u672a\u6e80<\/li>\n
  • PAN-OS 8.1\u00a0\u4ee5\u4e0a\u00a08.1.15\u00a0\u672a\u6e80<\/li>\n
  • PAN-OS 8.0<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

QNAP<\/td>\nCVE-2020-36198<\/td>\n\n
    \n
  • QTS 4.4.x: Malware Remover 4.5.4.0 \u4ee5\u4e0a 4.6.1.0 \u672a\u6e80<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-28799<\/td>\n\n
    \n
  • QTS 4.5.2: Hybrid Backup Sync 3 16.0.0415 \u672a\u6e80<\/li>\n
  • QTS 4.3.6: Hybrid Backup Sync 3 3.0.210412 \u672a\u6e80<\/li>\n
  • QTS 4.3.3\u304a\u3088\u30734.3.4: Hybrid Backup Sync 3 3.0.210411 \u672a\u6e80<\/li>\n
  • QuTS hero h4.5.1: Hybrid Backup Sync 3 16.0.0419 \u672a\u6e80<\/li>\n
  • QuTScloud c4.5.1\u304b\u3089c4.5.4: Hybrid Backup Sync 3 16.0.0419 \u672a\u6e80<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Sophos<\/td>\nCVE-2020-12271<\/td>\n\n
    \n
  • SFOS 17.0<\/li>\n
  • SFOS 17.1<\/li>\n
  • SFOS 17.5<\/li>\n
  • SFOS 2020\/04\/25\u00a0\u3088\u308a\u524d\u306e\u00a018.0<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Microsoft Windows<\/td>\nCVE-2019-0708<\/td>\n\n
    \n
  • Microsoft\u00a0Windows\u00a07 for\u00a032-bit\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a07 for\u00a0x64-based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a032-bit\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a032-bit\u00a0Systems\u00a0SP2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0Itanium-Based\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0x64-based\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0x64-based\u00a0Systems\u00a0SP2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0Itanium-Based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2020-1472<\/td>\n\n
    \n
  • Microsoft\u00a0Windows\u00a0Server version\u00a01903\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server version\u00a01909\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server version\u00a02004\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 (Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 R2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 R2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02016<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02016 (Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02019<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02019 (Server\u00a0Core\u00a0installation)<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-31166<\/td>\n\n
    \n
  • Microsoft\u00a0Windows\u00a010 Version\u00a02004\u00a0for\u00a032-bit\u00a0Systems<\/li>\n
  • Microsoft\u00a0Windows\u00a010 Version\u00a02004\u00a0for\u00a0ARM64-based\u00a0Systems<\/li>\n
  • Microsoft\u00a0Windows\u00a010 Version\u00a02004\u00a0for\u00a0x64-based\u00a0Systems<\/li>\n
  • Microsoft\u00a0Windows\u00a010 Version\u00a020H2\u00a0for\u00a032-bit\u00a0Systems<\/li>\n
  • Microsoft\u00a0Windows\u00a010 Version\u00a020H2\u00a0for\u00a0ARM64-based\u00a0Systems<\/li>\n
  • Microsoft\u00a0Windows\u00a010 Version\u00a020H2\u00a0for\u00a0x64-based\u00a0Systems<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server version\u00a02004\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server version\u00a020H2\u00a0(Server\u00a0Core\u00a0Installation)<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-36942<\/td>\n\n
    \n
  • Microsoft\u00a0Windows\u00a0Server version\u00a02004\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server version\u00a020H2\u00a0(Server\u00a0Core\u00a0Installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a032-bit\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a032-bit\u00a0Systems\u00a0SP2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0x64-based\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0x64-based\u00a0Systems\u00a0SP2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 (Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 R2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 R2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02016<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02016 (Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02019<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02019 (Server\u00a0Core\u00a0installation)<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

\u00a0Microsoft Exchange<\/td>\nCVE-2021-26855<\/td>\n\n
    \n
  • Microsoft\u00a0Exchange\u00a0Server 2013\u00a0Cumulative\u00a0Update\u00a021<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2013\u00a0Cumulative\u00a0Update\u00a022<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2013\u00a0Cumulative\u00a0Update\u00a023<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a010<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a011<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a012<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a013<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a014<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a015<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a016<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a017<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a018<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a019<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a08<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a09<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a01<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a02<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a03<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a04<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a05<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a06<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a07<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a08<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-31207<\/td>\n\n
    \n
  • Microsoft\u00a0Exchange\u00a0Server 2013\u00a0Cumulative\u00a0Update\u00a023<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a019<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a020<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a08<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a09<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-34473<\/td>\n\n
    \n
  • Microsoft\u00a0Exchange\u00a0Server 2013\u00a0Cumulative\u00a0Update\u00a023<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a019<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a020<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a08<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a09<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-34523<\/td>\n\n
    \n
  • Microsoft\u00a0Exchange\u00a0Server 2013\u00a0Cumulative\u00a0Update\u00a023<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a019<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2016\u00a0Cumulative\u00a0Update\u00a020<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a08<\/li>\n
  • Microsoft\u00a0Exchange\u00a0Server 2019\u00a0Cumulative\u00a0Update\u00a09<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Microsoft Office<\/td>\nCVE-2017-0199<\/td>\n\n
    \n
  • Microsoft\u00a0Office 2007\u00a0SP3<\/li>\n
  • Microsoft\u00a0Office 2010\u00a0SP2\u00a0(32-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2010\u00a0SP2\u00a0(64-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2013\u00a0SP1\u00a0(32-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2013\u00a0SP1\u00a0(64-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2016\u00a0(32-bit\u00a0edition)<\/li>\n
  • Microsoft\u00a0Office 2016\u00a0(64-bit\u00a0edition)<\/li>\n
  • Microsoft\u00a0Windows\u00a07 for\u00a032-bit\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a07 for\u00a0x64-based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0Itanium-Based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 R2\u00a0for\u00a0x64-based\u00a0Systems\u00a0SP1\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a032-bit\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a032-bit\u00a0Systems\u00a0SP2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0Itanium-Based\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0x64-based\u00a0Systems\u00a0SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02008 for\u00a0x64-based\u00a0Systems\u00a0SP2\u00a0(Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012<\/li>\n
  • Microsoft\u00a0Windows\u00a0Server\u00a02012 (Server\u00a0Core\u00a0installation)<\/li>\n
  • Microsoft\u00a0Windows\u00a0Vista SP2<\/li>\n
  • Microsoft\u00a0Windows\u00a0Vista x64\u00a0Edition\u00a0SP2<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2017-11882<\/td>\n\n
    \n
  • Microsoft\u00a0Office 2007\u00a0Service\u00a0Pack\u00a03<\/li>\n
  • Microsoft\u00a0Office 2010\u00a0Service\u00a0Pack\u00a02\u00a0(32-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2013\u00a0Service\u00a0Pack\u00a01\u00a0(32-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2013\u00a0Service\u00a0Pack\u00a01\u00a0(64-bit\u00a0editions)<\/li>\n
  • Microsoft\u00a0Office 2016\u00a0(32-bit\u00a0edition)<\/li>\n
  • Microsoft\u00a0Office 2016\u00a0(64-bit\u00a0edition)<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-40444<\/td>\n\n
    \n
  • Windows 10<\/li>\n
  • Windows 8.1<\/li>\n
  • Windows RT 8.1<\/li>\n
  • Windows 7<\/li>\n
  • Windows Server<\/li>\n
  • Windows Server 2022<\/li>\n
  • Windows Server 2019<\/li>\n
  • Windows Server 2016<\/li>\n
  • Windows Server 2012 R2<\/li>\n
  • Windows Server 2012<\/li>\n
  • Windows Server 2008 R2<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Microsoft Azure<\/td>\nCVE-2021-38647<\/td>\n\n
    \n
  • OMI-1.6.8-1\u672a\u6e80<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Microsoft SharePoint<\/td>\nCVE-2019-0604<\/td>\n\n
    \n
  • Microsoft\u00a0SharePoint\u00a0Enterprise\u00a0Server 2016<\/li>\n
  • Microsoft\u00a0SharePoint\u00a0Foundation 2013\u00a0SP1<\/li>\n
  • Microsoft\u00a0SharePoint\u00a0Server 2010\u00a0SP2<\/li>\n
  • Microsoft\u00a0SharePoint\u00a0Server 2019<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

vmware vCenter<\/td>\nCVE-2021-21985<\/td>\n\n
    \n
  • vCenter Server 7.0\u7cfb 7.0 U2b \u4ee5\u524d<\/li>\n
  • vCenter Server 6.7\u7cfb 6.7 U3n \u4ee5\u524d<\/li>\n
  • vCenter Server 6.5\u7cfb 6.5 U3p \u4ee5\u524d<\/li>\n
  • Cloud Foundation (vCenter Server) 4\u7cfb 4.2.1 \u4ee5\u524d<\/li>\n
  • Cloud Foundation (vCenter Server) 3\u7cfb 3.10.2.1 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Accellion FTA<\/td>\nCVE-2021-27101<\/td>\n\n
    \n
  • Accellion\u00a0FTA 9_12_370 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-27102<\/td>\n\n
    \n
  • Accellion FTA 9_12_411 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-27103<\/td>\n\n
    \n
  • Accellion FTA 9_12_411 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

CVE-2021-27104<\/td>\n\n
    \n
  • Accellion FTA 9_12_370 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

FileZen<\/td>\nCVE-2021-20655<\/td>\n\n
    \n
  • FileZen V3.0.0 \u304b\u3089 V4.2.7<\/li>\n
  • FileZen V5.0.0 \u304b\u3089 V5.0.2<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/a><\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Atlassian<\/td>\nCVE-2021-26084<\/td>\n\n
    \n
  • Confluence 6.13.23\u672a\u6e80<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n

Zoho Corp.<\/p>\n

ManageEngine ADSelfServicePlus<\/td>\n

CVE-2021-40539<\/td>\n\n
    \n
  • ManageEngine ADSelfServicePlus\u00a0 \u30d3\u30eb\u30c96113 \u4ee5\u524d<\/li>\n<\/ul>\n<\/td>\n
JVNDB<\/p>\n

NVDB<\/a><\/p>\n

Vendor<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

\n

 <\/p>\n

\u25a0\u66f4\u65b0\u5c65\u6b74<\/h3>\n

\u30fb2021\u5e7409\u670825\u65e5 \u521d\u7248\u516c\u958b<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

\u25a0\u6982\u8981 2021\u5e7409\u670812\u65e5\u3001Recorded Future\u306eCSIRT\u30e1\u30f3\u30d0\u30fc\u3067\u3042\u308bAllan Liska\u6c0f\u304cTwitter\u4e0a\u3067\u547c\u3073\u304b\u3051\u3092\u884c\u3044\u307e\u3057\u305f\u3002 \u305d\u306e\u547c\u3073\u304b\u3051\u306f\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u653b\u6483\u8005\u304c\u521d\u671f\u30a2\u30af\u30bb\u30b9\u3092\u7372\u5f97\u3059\u308b\u305f\u3081 […]<\/p>\n","protected":false},"author":1,"featured_media":1899,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,21],"tags":[],"views":16118,"_links":{"self":[{"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/posts\/1883"}],"collection":[{"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/csirt.ninja\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1883"}],"version-history":[{"count":17,"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/posts\/1883\/revisions"}],"predecessor-version":[{"id":1902,"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/posts\/1883\/revisions\/1902"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/csirt.ninja\/index.php?rest_route=\/wp\/v2\/media\/1899"}],"wp:attachment":[{"href":"https:\/\/csirt.ninja\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1883"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/csirt.ninja\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1883"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/csirt.ninja\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1883"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}