\tgEFA̐Ǝ㐫p܂łɊƂΉׂƂƂ - L[}Ylbg

\tgEFA̐Ǝ㐫p܂łɊƂΉׂƂƂ

\tgEFA̐Ǝ㐫Ή͓BƂ͑̃\tgEFA𗘗pĂASĂKǗłĂƂ͌Ȃ炾BƎ㐫͖̂悤ɔ\ĂAƑ̑ΉǂtĂȂꍇBAU҂͂ǂ̂悤ɓĂ̂낤B

» 2024N1127 0700 J
[Matt KapkoCCybersecurity Dive]
Cybersecurity Dive

@ЂgĂ\tgEFAɐƎiႭj‚ƂAǂ̂悤ɑΉׂȂ̂낤B

@ЂpĂ\tgEFAcĂȂ΂ΉłȂBƎ㐫EHb`ĂȂ΁AJ̔\ɋCtȂBcĂƂĂAɓ삵Ă\tgEFȀꍇAeiX̎܂őΉłȂƂB

Ǝ㐫pOɊƂׂ͉

@x_[甭\ꂽƎ㐫TCo[U҂ɈpOɁA[U[Ƃ͂ǂ̂悤ɑΉׂB

@Veeam SoftwareiVeeamj̗ɉB

@z}V╨}VANEh̃obNAbv⃌vP[VAɗpĂuVeeam Backup and ReplicationvɂƎ㐫‚B

@Veeam2024N94̃ZLeBŁAʐƎ㐫]VXeiCVSSjŁuCVE-2024-40711vƂĎʂĂƎ㐫ɂ‚Ĕ\BXRA9.8BɊƌ̃obNAbv\tgEFAɊ֘AXRA̒Ⴂ5‚̐Ǝ㐫uCVE-2024-40713vuCVE-2024-40710vuCVE-2024-39718vuCVE-2024-40714vuCVE-2024-40712v\i1ji2jB

@CVE-2024-40711Veeam Backup and Replicatioño[W12.1.2.172ƂȑȎSẴo[WɉeBȂAVeeam̓pb`Kp[U[̐lA̐Ǝ㐫ɂe󂯂[U[Ɋւ錾yB

@TCo[ZLeBECtXgN`ZLeBiCISAj2024N1017AuCVE-2024-40711vƎ㐫̃J^Oɒlji3jAułɃTEFAUňpĂvƏqׂB̐Ǝ㐫͈ӂ̂yC[h܂ސMłȂf[^fVACYۂɈpAƍߎ҂ɂF؂ĂȂ[gR[hsɂ‚ȂBVeeam̃\tgEFAƂ̃f[^obNAbvxĂ邱ƂlƁAǂ̂悤ȉe邩邾낤B

@TCo[ZLeBƂcSophos̋БΉ`[X-Opsɏ錤҂́A2024N10CVE-2024-40711pTEFAUȂƂ4ǐՂBX-OpśuTEFAwAkiraxƁwFogẍɊ֘AUϑvƏqׂB܂`[́A2024N1011ɁũP[XɂĂi4jAvfF؂LɂȂĂȂVPÑQ[gEFCgpāAU҂ΏۂɃANZXvƁuXvɓeB

@CVE-2024-40711Ɋ֘AsvOƃTEFAUɂ͋ʂ̎菇‚ĂB‚܂ƍ߂̓ƂĊmĂB[U[ŐƎ㐫Ήi܂Ȃƈe͒ԑ낤B

@̂悤ȏ󋵂̉AVeeamŃR[|[gR~jP[VуO[opubN[VYSnCfBE[ENtgiVjAfBN^[j́A2024N1021Ɏ̂悤ɏqׂB

@uЂ2024N828Veeam Backup and Replication v12.2̃\tgEFAAbvf[gŐƎ㐫CB{Abvf[ǵAe󂯂Veeam̌ڋqSɒړ`ꂽv

@TCo[ZLeBƂcCensysƎ㐫҂́i5jAVeeamCJ2ɑfx𔭂Rapid7N99ɑi6jB̎_ł͂܂pꂽ͊mFĂȂAƎ㐫̌J琔ȓɂ́APoCiTO؁j̕svOIɌJĂ܂BƎ㐫̔\AƎ㐫ƍߎ҂p\tgEFǍJ܂ł̎ԓIȗ]TقƂǂȂƂB

[U[Ƃ̑Ή݂

@Veeam\tgEFAAbvf[gŐƎ㐫CĂA[U[Ƒ̑Ή͐i񂾂̂낤B

@C_1Jȏo߂ɁASophosX-Ops̓TEFA܂ރANeBuȏԂɂsvO̒ǐՂJnB

@Rapid7̃PCgERhiCeWFXfBN^[j́A2024N1021Ɏ̂悤ɏqׂB

@uVeeam̐i͐lCATEFAO[v܂ލU҂̎vȕWIɂȂĂB2024NRapid7CVfgɑΉP[X20ȏオVeeamiɊ֘ÂBi̎ȑOɂjVeeam Backup and Replication̐Ǝ㐫\ꂽJ`1NɈpꂽP[XviRhj

@Censys̃ZLeB҃q}WEéuƎ㐫JĈȍ~AiU҂ɑ΂ājIo܂܂Veeam Backup and ReplicatioñT[oɑ傫ȕῶȂB2024N96ɘIoĂ2833̃CX^X́AN1021_2784ւƔvƏqׂB

@CensysɂƁAIoCX^X͎ɉBɏWĂBp̍یT[rX̃fW^́A2024N1011CVE-2024-40711̐ϋɓIȈpɊւTCo[ZLeB̌x𔭂i7jB

oTFCritical Veeam CVE actively exploited in ransomware attacksiCybersecurity Divej
1FVeeam Security Bulletin (September 2024)iVeeamj
2FCVE-2024-40711 DetailiNISTj
3FKnown Exploited Vulnerabilities Catalog | CISAiCISAj
4FSophos X-OpsiXj
5FUnauthenticated RCE in Veeam Backup & Replication [CVE-2024-40711]iCensysj
6FMultiple Vulnerabilities in Veeam Backup & ReplicationiRAPID7j
7FCritical Veeam Backup & Replication Vulnerability Under Active ExploitationiNHS Englandj

© Industry Dive. All rights reserved.

o^ij

iJ^OZpAȂǁAIT̉ۑɖ𗧂ŽȒPɓł܂B