{"id":13299,"date":"2019-06-10T18:17:02","date_gmt":"2019-06-10T10:17:02","guid":{"rendered":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/?p=13299"},"modified":"2024-11-05T13:56:33","modified_gmt":"2024-11-05T05:56:33","slug":"%e3%80%90%e6%bc%8f%e6%b4%9e%e9%a0%90%e8%ad%a6%e3%80%91%e4%ba%ac%e6%99%a8%e7%a7%91%e6%8a%80nuuo-inc-%e7%b6%b2%e8%b7%af%e7%9b%a3%e6%8e%a7%e9%8c%84%e5%bd%b1%e7%b3%bb%e7%b5%b1%e5%ad%98%e5%9c%a8%e5%ae%89","status":"publish","type":"post","link":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/archives\/13299","title":{"rendered":"\u3010\u6f0f\u6d1e\u9810\u8b66\u3011\u4eac\u6668\u79d1\u6280(NUUO Inc.)\u7db2\u8def\u76e3\u63a7\u9304\u5f71\u7cfb\u7d71\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e"},"content":{"rendered":"

\u6559\u80b2\u6a5f\u69cbANA\u901a\u5831\u5e73\u53f0<\/h3>\n\n\n\n\n\n\n\n\n\n\n
\u767c\u4f48\u7de8\u865f<\/td>\nTACERT-ANA-2019060601065858<\/td>\n\u767c\u4f48\u6642\u9593<\/td>\n2019-06-06 13:49:00<\/td>\n<\/tr>\n
\u4e8b\u6545\u985e\u578b<\/td>\nANA-\u6f0f\u6d1e\u9810\u8b66<\/td>\n\u767c\u73fe\u6642\u9593<\/td>\n2019-05-31 00:00:00<\/td>\n<\/tr>\n
\u5f71\u97ff\u7b49\u7d1a<\/td>\n\u4e2d<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
[\u4e3b\u65e8\u8aaa\u660e:]<\/p>\n

\u3010\u6f0f\u6d1e\u9810\u8b66\u3011\u4eac\u6668\u79d1\u6280(NUUO Inc.)\u7db2\u8def\u76e3\u63a7\u9304\u5f71\u7cfb\u7d71(Network Video Recorder, NVR)\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e(CVE-2019-9653)\uff0c\u5141\u8a31\u653b\u64ca\u8005\u9060\u7aef\u57f7\u884c\u7cfb\u7d71\u6307\u4ee4\uff0c\u8acb\u5118\u901f\u78ba\u8a8d\u4e26\u9032\u884c\u97cc\u9ad4\u7248\u672c\u5347\u7d1a<\/td>\n<\/tr>\n

[\u5167\u5bb9\u8aaa\u660e:]<\/p>\n

\u8f49\u767c\u570b\u5bb6\u8cc7\u5b89\u8cc7\u8a0a\u5206\u4eab\u8207\u5206\u6790\u4e2d\u5fc3 \u8cc7\u5b89\u8a0a\u606f\u8b66\u8a0a NISAC-ANA-201906-0027\u00a0NUUO NVR\u662f\u4e00\u500b\u4ee5\u5d4c\u5165\u5f0fLinux\u70ba\u57fa\u790e\u7684\u7db2\u8def\u76e3\u63a7\u9304\u5f71\u7cfb\u7d71\uff0c\u53ef\u540c\u6642\u7ba1\u7406\u591a\u500b\u7db2\u8def\u651d\u5f71\u6a5f\uff0c\u4e26\u5c07\u5f71\u50cf\u56de\u50b3\u81f3\u5132\u5b58\u5a92\u9ad4\u6216\u8a2d\u5099\u3002\u672c\u4e2d\u5fc3\u7814\u7a76\u5718\u968a\u767c\u73fe\u591a\u6b3eNUUO NVR\u7522\u54c1\u7cfb\u7d71\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e(CVE-2019-9653)\uff0c\u653b\u64ca\u8005\u53ef\u7e5e\u904e\u8eab\u5206\u9a57\u8b49\u65bc\u76ee\u6a19\u7cfb\u7d71\u4e0a\u57f7\u884c\u4efb\u610f\u7a0b\u5f0f\u78bc\u3002\u7531\u65bcNVR\u7cfb\u7d71\u4e4bhandle_load_config.php\u9801\u9762\u7f3a\u5c11\u9a57\u8b49\u8207\u6aa2\u67e5\u6a5f\u5236\uff0c\u653b\u64ca\u8005\u53ef\u900f\u904e\u767c\u9001\u5ba2\u88fd\u5316\u60e1\u610f\u8acb\u6c42\uff0c\u5229\u7528\u6b64\u6f0f\u6d1e\u4ee5\u7ba1\u7406\u8005\u6b0a\u9650(root)\u9060\u7aef\u57f7\u884c\u7cfb\u7d71\u6307\u4ee4\u3002\u00a0\u6b64\u8a0a\u606f\u50c5\u767c\u9001\u5230\u300c\u5340\u7e23\u5e02\u7db2\u8def\u4e2d\u5fc3\u300d\uff0c\u7169\u8acb\u8cb4\u55ae\u4f4d\u5354\u52a9\u516c\u544a\u6216\u8f49\u767c<\/td>\n<\/tr>\n

[\u5f71\u97ff\u5e73\u53f0:]<\/p>\n

NUUO NVR\u76f8\u95dc\u7522\u54c1\u5176\u97cc\u9ad4\u7248\u672c\u70ba1.7.x \u81f3 3.3.x\u7248\u672c<\/td>\n<\/tr>\n

[\u5efa\u8b70\u63aa\u65bd:]<\/p>\n

\u76ee\u524d\u4eac\u6668\u79d1\u6280\u5b98\u65b9\u5df2\u6709\u8f03\u65b0\u7248\u672c\u7684\u97cc\u9ad4\u91cb\u51fa\uff0c\u5efa\u8b70\u5c07\u97cc\u9ad4\u7248\u672c\u5347\u7d1a\u81f3\u6700\u65b0\u7248\u672c\uff1a<\/p>\n

    \n
  1. \u4f7f\u7528\u5b98\u65b9\u63d0\u4f9b\u4e4b\u65b0\u7248\u672c\u97cc\u9ad4\u9032\u884c\u66f4\u65b0\uff0c\u4e0b\u8f09\u9023\u7d50\uff1ahttps:\/\/www.nuuo.com\/DownloadMainpage.php<\/a><\/li>\n
  2. \u91dd\u5c0d\u7121\u6cd5\u66f4\u65b0\u4e4bNVR\u7cfb\u7d71\uff0c\u8acb\u900f\u904e\u9632\u8b77\u8a2d\u5099\u6216\u7cfb\u7d71\u5167\u90e8\u8a2d\u5b9a\u9650\u5236\u5b58\u53d6\u4f86\u6e90\uff0c\u56b4\u683c\u9650\u5236\u50c5\u7ba1\u7406\u4eba\u54e1\u80fd\u5920\u5b58\u53d6\u7cfb\u7d71\u4e4bhandle_load_config.php\u9801\u9762\uff0c\u4e26\u7981\u6b62\u5c0d\u8a72\u9801\u9762\u767c\u9001\u4efb\u4f55\u7cfb\u7d71\u6307\u4ee4\u8207\u50b3\u5165\u7279\u6b8a\u5b57\u5143\u3002<\/li>\n<\/ol>\n<\/td>\n<\/tr>\n
[\u53c3\u8003\u8cc7\u6599:]<\/p>\n
    \n
  1. https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-9653<\/li>\n
  2. https:\/\/www.nuuo.com\/DownloadMainpage.php<\/a><\/li>\n<\/ol>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

    \u6559\u80b2\u6a5f\u69cbANA\u901a\u5831\u5e73\u53f0 \u767c\u4f48\u7de8\u865f TACERT-ANA-2019060601065858 \u767c\u4f48\u6642\u9593 2019-06-06 13:49:00 \u4e8b\u6545\u985e\u578b ANA-\u6f0f\u6d1e\u9810\u8b66 \u767c\u73fe\u6642\u9593 2019-05-31 00:00:00 \u5f71\u97ff\u7b49\u7d1a \u4e2d [\u4e3b\u65e8\u8aaa\u660e:]<\/p>\n

    \u3010\u6f0f\u6d1e\u9810\u8b66\u3011\u4eac\u6668\u79d1\u6280(NUUO Inc.)\u7db2\u8def\u76e3\u63a7\u9304\u5f71\u7cfb\u7d71(Network Video Recorder, NVR)\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e(CVE-2019-9653)\uff0c\u5141\u8a31\u653b\u64ca\u8005\u9060\u7aef\u57f7\u884c\u7cfb\u7d71\u6307\u4ee4\uff0c\u8acb\u5118\u901f\u78ba\u8a8d\u4e26\u9032\u884c\u97cc\u9ad4\u7248\u672c\u5347\u7d1a [\u5167\u5bb9\u8aaa\u660e:]<\/p>\n

    \u8f49\u767c\u570b\u5bb6\u8cc7\u5b89\u8cc7\u8a0a\u5206\u4eab\u8207\u5206\u6790\u4e2d\u5fc3 \u8cc7\u5b89\u8a0a\u606f\u8b66\u8a0a NISAC-ANA-201906-0027 NUUO NVR\u662f\u4e00\u500b\u4ee5\u5d4c\u5165\u5f0fLinux\u70ba\u57fa\u790e\u7684\u7db2\u8def\u76e3\u63a7\u9304\u5f71\u7cfb\u7d71\uff0c\u53ef\u540c\u6642\u7ba1\u7406\u591a\u500b\u7db2\u8def\u651d\u5f71\u6a5f\uff0c\u4e26\u5c07\u5f71\u50cf\u56de\u50b3\u81f3\u5132\u5b58\u5a92\u9ad4\u6216\u8a2d\u5099\u3002\u672c\u4e2d\u5fc3\u7814\u7a76\u5718\u968a\u767c\u73fe\u591a\u6b3eNUUO NVR\u7522\u54c1\u7cfb\u7d71\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e(CVE-2019-9653)\uff0c\u653b\u64ca\u8005\u53ef\u7e5e\u904e\u8eab\u5206\u9a57\u8b49\u65bc\u76ee\u6a19\u7cfb\u7d71\u4e0a\u57f7\u884c\u4efb\u610f\u7a0b\u5f0f\u78bc\u3002\u7531\u65bcNVR\u7cfb\u7d71\u4e4bhandle_load_config.php\u9801\u9762\u7f3a\u5c11\u9a57\u8b49\u8207\u6aa2\u67e5\u6a5f\u5236\uff0c\u653b\u64ca\u8005\u53ef\u900f\u904e\u767c\u9001\u5ba2\u88fd\u5316\u60e1\u610f\u8acb\u6c42\uff0c\u5229\u7528\u6b64\u6f0f\u6d1e\u4ee5\u7ba1\u7406\u8005\u6b0a\u9650(root)\u9060\u7aef\u57f7\u884c\u7cfb\u7d71\u6307\u4ee4\u3002 \u6b64\u8a0a\u606f\u50c5\u767c\u9001\u5230\u300c\u5340\u7e23\u5e02\u7db2\u8def\u4e2d\u5fc3\u300d\uff0c\u7169\u8acb\u8cb4\u55ae\u4f4d\u5354\u52a9\u516c\u544a\u6216\u8f49\u767c [\u5f71\u97ff\u5e73\u53f0:]<\/p>\n

    NUUO NVR\u76f8\u95dc\u7522\u54c1\u5176\u97cc\u9ad4\u7248\u672c\u70ba1.7.x \u81f3 3.3.x\u7248\u672c [\u5efa\u8b70\u63aa\u65bd:]<\/p>\n

    \u76ee\u524d\u4eac\u6668\u79d1\u6280\u5b98\u65b9\u5df2\u6709\u8f03\u65b0\u7248\u672c\u7684\u97cc\u9ad4\u91cb\u51fa\uff0c\u5efa\u8b70\u5c07\u97cc\u9ad4\u7248\u672c\u5347\u7d1a\u81f3\u6700\u65b0\u7248\u672c\uff1a<\/p>\n

    \u4f7f\u7528\u5b98\u65b9\u63d0\u4f9b\u4e4b\u65b0\u7248\u672c\u97cc\u9ad4\u9032\u884c\u66f4\u65b0\uff0c\u4e0b\u8f09\u9023\u7d50\uff1ahttps:\/\/www.nuuo.com\/DownloadMainpage.php \u91dd\u5c0d\u7121\u6cd5\u66f4\u65b0\u4e4bNVR\u7cfb\u7d71\uff0c\u8acb\u900f\u904e\u9632\u8b77\u8a2d\u5099\u6216\u7cfb\u7d71\u5167\u90e8\u8a2d\u5b9a\u9650\u5236\u5b58\u53d6\u4f86\u6e90\uff0c\u56b4\u683c\u9650\u5236\u50c5\u7ba1\u7406\u4eba\u54e1\u80fd\u5920\u5b58\u53d6\u7cfb\u7d71\u4e4bhandle_load_config.php\u9801\u9762\uff0c\u4e26\u7981\u6b62\u5c0d\u8a72\u9801\u9762\u767c\u9001\u4efb\u4f55\u7cfb\u7d71\u6307\u4ee4\u8207\u50b3\u5165\u7279\u6b8a\u5b57\u5143\u3002 [\u53c3\u8003\u8cc7\u6599:]<\/p>\n

    https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2019-9653 https:\/\/www.nuuo.com\/DownloadMainpage.php […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[],"_links":{"self":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/posts\/13299"}],"collection":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/comments?post=13299"}],"version-history":[{"count":0,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/posts\/13299\/revisions"}],"wp:attachment":[{"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/media?parent=13299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/categories?post=13299"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/webnas.bhes.ntpc.edu.tw\/wordpress\/wp-json\/wp\/v2\/tags?post=13299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}