【資安漏洞預警】CISA新增2個已知遭駭客利用之漏洞至KEV目錄(2025/08/18-2025/08/24)

【行政公告】

公告單位	圖資處數位服務組
訊息類別	行政公告行政公告	公告對象	全體
公告主題	【資安漏洞預警】CISA新增2個已知遭駭客利用之漏洞至KEV目錄(2025/08/18-2025/08/24) [Security Vulnerability Alert] CISA has added two known vulnerabilities to the KEV catalog (August 18, 2025 - August 24, 2025)
公告內容	轉發台灣電腦網路危機處理暨協調中心 TWCERTCC-200-202508-00000013 1.【CVE-2025-54948】Trend Micro Apex One OS Command Injection Vulnerability (CVSS v3.1: 9.4) 【是否遭勒索軟體利用:未知】 Trend Micro Apex One本地部署版本存在作業系統指令注入漏洞，未經身分鑑別之遠端攻擊者可於管理主控台上傳惡意程式碼並達成遠端執行任意程式碼。【影響平台】請參考官方所列的影響版本 https://success.trendmicro.com/en-US/solution/KA-0020652 2.【CVE-2025-43300】Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (CVSS v3.1: 8.8) 【是否遭勒索軟體利用:未知】 Apple iOS、iPadOS和macOS的Image I/O架構中存在越界寫入漏洞。【影響平台】 ● iPad OS 17.7.10(不含)之前的版本 ● iPad OS 18.0至18.6.2(不含)的版本 ● iOS 18.6.2(不含)之前的版本 ● macOS 13.0.0至13.7.8(不含)的版本 ● macOS 14.0至14.7.8(不含)的版本 ● macOS 15.0至15.6.1(不含)的版本 [影響平台] 詳細內容於內容說明欄之影響平台 [建議措施] 1.【CVE-2025-54948】官方已針對漏洞釋出修復更新，請更新至相關版本 https://success.trendmicro.com/en-US/solution/KA-0020652 2.【CVE-2025-43300】官方已針對漏洞釋出修復更新，請更新至相關版本 https://support.apple.com/en-us/124925 https://support.apple.com/en-us/124926 https://support.apple.com/en-us/124927 https://support.apple.com/en-us/124928 https://support.apple.com/en-us/124929 Forwarded by Taiwan Computer Network Crisis Response and Coordination Center (TWCERTCC-200-202508-00000013) 1. [CVE-2025-54948] Trend Micro Apex One OS Command Injection Vulnerability (CVSS v3.1: 9.4) [Exploited by ransomware: Unknown] Trend Micro Apex One on-premises versions contain an operating system command injection vulnerability. An unauthenticated remote attacker can upload malicious code to the management console and remotely execute arbitrary code. [Affected Platforms] Please refer to the official list of affected versions. https://success.trendmicro.com/en-US/solution/KA-0020652 2. [CVE-2025-43300] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability (CVSS v3.1: 8.8) [Exploited by Ransomware: Unknown] An out-of-bounds write vulnerability exists in the Image I/O architecture of Apple iOS, iPadOS, and macOS. [Affected Platforms] ● iPad OS versions prior to (excluding) ● iPad OS versions 18.0 to 18.6.2 (excluding) ● iOS versions prior to (excluding) ● macOS versions 13.0.0 to 13.7.8 (excluding) ● macOS versions 14.0 to 14.7.8 (excluding) ● macOS versions 15.0 to 15.6.1 (excluding) [Affected Platforms] For details, see the affected platforms section in the content description. [Recommended Actions] 1. [CVE-2025-54948] A fix has been released for this vulnerability. Please update to the relevant version. https://success.trendmicro.com/en-US/solution/KA-0020652 2. [CVE-2025-43300] A fix has been released for this vulnerability. Please update to the relevant version. https://support.apple.com/en-us/124925 https://support.apple.com/en-us/124926 https://support.apple.com/en-us/124927 https://support.apple.com/en-us/124928 https://support.apple.com/en-us/124929
相關訊息
公告時間	2025/8/26 至 2026/2/26	點閱次數	29