¹«º£²Ê´¬¡¤6600(ÖйúÓÎ)¹Ù·½ÍøÕ¾

µã»÷ÏÂÔØ¡¶ÍòÕ×Ô°ÇøÒÔÌ«²Ê¹âÑо¿±¨¸æ¡·£¬½âËøÍòÕ×Ô°ÇøÍøÂ罨ÉèÖ¸ÄÏ
Á¢¼´ÏÂÔØ
ÎÞ¸Ð×¼Èë ÈËÎïͳ¹Ü Ø­ RG-SAM+5.X ÐÂÒ»´ú¸ßУAIÈÏ֤ƽ̨·¢²¼
Ô¤Ô¼Ö±²¥
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
ºÏ×÷»ï°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ

°²È«Í¨¸æ|ChromeÓÖ±¬Ò»Ã¶ÐÂ0Day©¶´

·¢²¼Ê±¼ä£º2021-04-16

2021Äê4ÔÂ14ÈÕ£¬¹«º£²Ê´¬¡¤6600ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶӼà²âµ½¹úÍâÑо¿Ô±ÔÚ»¥ÁªÍøÉϹ«¿ªÁËÒ»·ÝChromeÔ¶³Ì´úÂëÖ´ÐÐ0day©¶´POC£¬¾­²âÊÔ£¬¹¥»÷Õß¿Éͨ¹ý¹¹ÔìÌØ¶¨WebÒ³ÃæÓÕµ¼Êܺ¦Õß·ÃÎÊ£¬µ¼Ö´Ë©¶´»ñµÃÔ¶³Ì´úÂëÖ´ÐС£

©¶´ÃèÊö

Google ChromeÊÇÓÉGoogle¿ª·¢µÄÃâ·ÑÍøÒ³ä¯ÀÀÆ÷£¬Ðí¶àµÚÈý·½ä¯ÀÀÆ÷ʹÓÃChromiumÄںˡ£¸Ã©¶´ÒѾ­Ó°ÏìÁËChrome×îÐÂÕýʽ°æ£¨90.0.4430.72£©ÒÔ¼°»ùÓÚChromiumÄں˵ÄMicrosoft EdgeÕýʽ°æ£¨89.0.774.77£©¡£ÐèҪ˵Ã÷µÄÊÇ£¬´Ëö©¶´Óë4ÔÂ13ÈÕµÄChrome 0Day©¶´²¢²»ÊÇͬһ¸ö©¶´¡£¼øÓڸ鶴Ŀǰ´¦ÓÚ0Day©¶´×´Ì¬£¬Ç¿ÁÒ½¨Òé¿Í»§¾¡¿ì²ÉÈ¡ÁÙʱ½â¾ö¹«º£²Ê´¬¡¤6600¹ÙÍøÒÔ±ÜÃâÊÜ´Ë©¶´Ó°Ïì¡£

2021Äê4ÔÂ14ÈÕ£¬Chrome×îÐÂÕýʽ°æ£¨89.0.4389.128£©¸üаüÀ¨2¸ö°²È«ÐÞ¸´³ÌÐò:

[1196781] High CVE-2021-21206: Use after free in Blink

[1196683] High CVE-2021-21220: Insufficient validation of untrusted input in V8 for x86_64.

ÆäÖÐCVE-2021-21220Ϊ4ÔÂ13ÈÕ±¬³öµÄChromeÔ¶³Ì´úÂëÖ´ÐЩ¶´¡£

¶øÓÚ4ÔÂ14ÈÕ°øÍí8µã×óÓÒ»¥ÁªÍøÓÖ±¬³öÁ˱¾ÎÄÌá¼°µÄChromeÔ¶³Ì´úÂëÖ´ÐЩ¶´¡£

Ó°Ï췶Χ

Google:Chrome: <=90.0.4430.72

ÍþвµÈ¼¶

¸ßΣ

POC״̬

µ±Ç°Â©¶´POCÒѹ«¿ª

©¶´¸´ÏÖ

1.ÔÚChrome 89.0.4389.128Õýʽ°æ±¾ÖЩ¶´¸´ÏÖ£º

 

 

2.ÔÚChrome 90.0.4430.72Õýʽ°æ±¾ÖЩ¶´¸´ÏÖ£º

 

´¦Öý¨Òé

¼øÓڸ鶴Ŀǰ´¦ÓÚ0Day©¶´×´Ì¬£¬ÎÞÏàÓ¦µÄ©¶´²¹¶¡£¬Óû§²ÉÈ¡ÈçÏÂÁÙʱ½â¾ö¹«º£²Ê´¬¡¤6600¹ÙÍøÒÔ±ÜÃâÊÜ©¶´Ëùµ¼Ö·çÏÕÓ°Ï죺

1. É÷ÖØ´ò¿ªÀ´Ô´²»Ã÷µÄÎļþ»òÍøÒ³Á´½Ó¡£

2. ÔÝʱֹͣʹÓÃV8Ïà¹ØÒýÇæµÄä¯ÀÀÆ÷£¬ÈçChrome¡¢»ùÓÚChromiumÄں˵ÄMicrosoft Edge£¬»»FirefoxµÈä¯ÀÀÆ÷¡£

²úÆ·½â¾ö¹«º£²Ê´¬¡¤6600¹ÙÍø

RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳ

RG-IDPϵÁÐÈëÇÖ¼ì²â·ÀÓùϵͳÊǹ«º£²Ê´¬¡¤6600ÍøÂçÍÆ³öµÄ½«Éî¶ÈÄÚÈݼì²â¡¢°²È«·À»¤¡¢ÉÏÍøÐÐΪ¹ÜÀíµÈ¼¼Êõ½áºÏµÄÈëÇÖ¼ì²â·ÀÓùϵͳÉ豸¡£Í¨¹ý¶ÔÍøÂçÖÐÉî²ã¹¥»÷ÐÐΪ½øÐÐ׼ȷµÄ·ÖÎöÅжϣ¬Ö÷¶¯ÓÐЧµÄ±£»¤ÍøÂ簲ȫ¡£RG—IDPϵͳÈëÇÖ¼ì²â·ÀÓùϵͳÒÑÖ§³Ö¶Ô¸Ã©¶´µÄ¼ì²â¡£

RG-ScanϵÁЩ¶´ÆÀ¹Àϵͳ

¹«º£²Ê´¬¡¤6600RG-Scanͨ¹ý¶Ôϵͳ©¶´¡¢·þÎñºóÃÅ¡¢ÍøÒ³¹ÒÂí¡¢SQL×¢Èë©¶´ÒÔ¼°¿çÕ¾½Å±¾µÈ¹¥»÷ÊֶζàÄêµÄÑо¿»ýÀÛ£¬×ܽá³öÁËÖÇÄÜÖ÷»ú·þÎñ·¢ÏÖ¡¢ÖÇÄÜ»¯ÅÀ³æºÍSQL×¢Èë״̬¼ì²âµÈ¼¼Êõ£¬¿ÉÒÔͨ¹ýÖÇÄܱéÀú¹æÔò¿âºÍ¶àÖÖɨÃèÑ¡Ïî×éºÏµÄÊֶΣ¬ÉîÈë׼ȷµÄ¼ì²â³öϵͳºÍÍøÕ¾ÖдæÔڵĩ¶´ºÍÈõµã¡£

RG-WALL ÏµÁÐÈ«ÐÂÏÂÒ»´ú·À»ðǽ

RG-WALLϵÁÐÈ«ÐÂÏÂÒ»´ú·À»ðǽÔÚ°²È«ÄÜÁ¦ÉÏ£¬²»½öÖ§³ÖNAT¡¢ACL¡¢DDoS·ÀÓùµÈ´«Í³°²È«¹¦ÄÜ£¬Í¬Ê±£¬Ò²Ö§³Ö·á¸»µÄÓ¦Óü¶°²È«¹¦ÄÜ£¬°üÀ¨²¡¶¾²éɱ¡¢ÈëÇÖ¼ì²â¡¢APP¼ì²â¡¢Îļþ¹ýÂË¡¢¶ñÒâURL¹ýÂ˵ȡ£Ìṩ¶àά¶ÈµÄÓ¦Óòã¼à¿ØÓë·ÖÎö£¬°ïÖúÓû§ÕÆÎÕ·çÏÕ£¬¾«×¼Ô¤¾¯¡£Í¬Ê±Ö§³ÖÓëÔÆ°²È«ÖÐÐĵÄÁª¶¯£¬ÌṩÁËÁ¢ÌåÓÐЧµÄδ֪Íþв·À»¤¹«º£²Ê´¬¡¤6600¹ÙÍø¡£

Õë¶Ôchromeä¯ÀÀÆ÷Ô¶³Ì´úÂëÖ´ÐУ¬Ç뼰ʱ¹Ø×¢Ïà¹Ø²úÆ·Éý¼¶°ü¸üÐÂÇé¿ö¡£¼°Ê±Éý¼¶°ü¼ì²âÓë·À»¤Éý¼¶°ü¡£

 

²Î¿¼Á´½Ó

https://twitter.com/frust93717815/status/1382301769577861123

ÍŶӽéÉÜ

¹«º£²Ê´¬¡¤6600ÍøÂçCERT°²È«Ó¦¼±ÏìÓ¦ÍŶÓ£¬¸ú×Ù×îл¥ÁªÍøÍþвʼþ£¬Õë¶Ô×îа²È«Â©¶´£¬APT¹¥»÷ÒÔ¼°½©Ê¬ÍøÂç¼Ò×å×öʵʱ¸ú×ٺͷÖÎö£»Îª²úÆ·¡¢¿Í»§Ìṩʵʱ¡¢ÓÐЧµÄ°²È«·À»¤²ßÂÔÓë½â¾ö¹«º£²Ê´¬¡¤6600¹ÙÍø¡£

¹«º£²Ê´¬¡¤6600“ÍøÂç+°²È«”Ö÷ÕŽ«ÍøÂçÉ豸µÄ°²È«ÄÜÁ¦³ä·Ö·¢»Ó£¬ÍøÂçÉ豸¡¢°²È«É豸Ó밲ȫƽ̨ÖÇÄÜÁª¶¯£¬¸æ±ð°²È«¹Âµº£¬¹¹³ÉÕûÍøÁª¶¯µÄ°²È«±£ÕÏÌåϵ£¬ÊµÏÖ·À»¤¡¢°²È«Ô¤²â¡¢·ÖÎöºÍÏìÓ¦µÈ°²È«ÎÊÌâ×Ô¶¯»¯È«Á÷³Ì±Õ»·¡£

ÈçÄúÐèÒª¹«º£²Ê´¬¡¤6600°²È«£¬ÇëÁôÏÂÄúµÄÁªÏµ·½Ê½

 

¹Ø×¢¹«º£²Ê´¬¡¤6600
¹Ø×¢¹«º£²Ê´¬¡¤6600¹ÙÍøÎ¢ÐÅ
ËæÊ±Á˽⹫˾×îж¯Ì¬

·µ»Ø¶¥²¿

ÊÕÆð
ÎĵµAIÖúÊÖ
ÎĵµÆÀ¼Û
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
Äú¶Ôµ±Ç°Ò³ÃæµÄÂúÒâ¶ÈÈçºÎ£¿
²»Õ¦µÎ
·Ç³£ºÃ
ÄúÂúÒâµÄÔ­ÒòÊÇ£¨¶àÑ¡£©£¿
Äú¶ÔÎĵµÊÇ·ñ»¹ÓÐÆäËüµÄÎÊÌâ»ò½¨Ò飿
Ϊ¾¡¿ì½â¾öÎÊÌ⣬ÇëÄúÁôÏÂÁªÏµ·½Ê½Òﱋȯ¸´
ÓÊÏä
ÊÖ»úºÅ
¸ÐлÄúµÄ·´À¡£¡
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø±Õ×Éѯҳ
ÊÛǰ×Éѯ ÊÛǰ×Éѯ
ÊÛǰ×Éѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
Òâ¼û·´À¡ Òâ¼û·´À¡
Òâ¼û·´À¡
¸ü¶àÁªÏµ·½Ê½
¡¾ÍøÕ¾µØÍ¼¡¿¡¾sitemap¡¿