ÐÂÏʳö¯£¡×ðÁú¿Ê±Ðû²¼¡¶2022ÄêÍøÂç¿Õ¼äÇå¾²Îó²îÆÊÎöÑо¿±¨¸æ¡·
×÷ÎªÍøÂçÇå¾²ÁìÓòµÄÏòµ¼Õߣ¬×ðÁú¿Ê±Ò»Ö±ÖÂÁ¦ÓÚÍÆ¶¯ÍøÂçÇå¾²ÊÖÒÕµÄÉú³¤ºÍÓ¦Ó㬲¢Í¨¹ýÒ»Ö±µÄ̽Ë÷ºÍʵ¼ùΪ¿Í»§Ìṩȫ·½Î»µÄÍøÂçÇå¾²·þÎñ¡£ÎªÁ˸üºÃµØÏàÊ¶ÍøÂç¿Õ¼äÇå¾²Îó²îµÄÉú³¤Ç÷ÊÆ£¬²¢½ÓÄÉÊʵ±µÄ²½·¥Ó¦¶ÔÎó²îÍþв£¬ÌØÐû²¼¡¶2022ÄêÍøÂç¿Õ¼äÇå¾²Îó²îÆÊÎöÑо¿±¨¸æ¡·£¬ÔÚÕâ·Ý±¨¸æÖУ¬ÎÒÃǽ«Í¨¹ýÏÖʵ°¸ÀýºÍÊý¾ÝÆÊÎö£¬Îª¿í´ó¿Í»§ºÍ¶ÁÕßÌṩÓмÛÖµµÄÐÅÏ¢¡£
¾ÝCNVD¹ûÕæÊý¾ÝÏÔʾ£¬2021Äê¹²Åû¶Îó²î26558ö£¬2022Äê¹²Åû¶Îó²î23900ö£¬Í¬±È½µµÍ10%¡£Õâ¿ÉÄÜÅú×¢£¬ÔÚÒÑÍùÒ»ÄêÀÇå¾²ÔËάְԱÔöÇ¿Á˶ÔϵͳÇå¾²µÄ¹ÜÀí£¬½µµÍÁËÎó²îÊýÄ¿¡£ÆäÖУ¬µÍΣÎó²îÕ¼11.13%£¬ÖÐΣÎó²îÕ¼53.82%£¬¸ßΣÎó²îÕ¼35.05%¡£Ïà¹ØÓÚµÍΣÎó²î£¬ÖÐΣºÍ¸ßΣÎó²îËùÕ¼±ÈÖØÆ«¸ß£¬ÕâÐèÒªÇå¾²ÔËάְԱÌá¸ßСÐÄ£¬ÔöÇ¿¶ÔÖиßΣÎó²îµÄ¿ØÖÆ¡£
±¨¸æ´Ó¡¸2022Äê¶ÈÎó²îÇ÷ÊÆ¸Å¿ö¡¹¡¢¡¸2022Äê¶È¸ßΣÎó²îÔ¤¾¯ÇéÐθÅÊö¡¹¡¢¡¸2022Äê¶È×ܽἰչÍû¡¹Èý´ó²¿·Ö£¬Ì½ÌÖÎó²îÍþвµÄÏÖ×´¼°Éú³¤Ç÷ÊÆ£¬Îª¿í´óÆóÊÂÒµ¿Í»§¡¢Çå¾²ÔËάְԱµÈÓ¦¶ÔÎó²îÍþвÌṩָµ¼¡£
2022Äê¶ÈÎó²îÇ÷ÊÆ¸Å¿ö
1¡¢CNVDÎó²î¿âÇå¾²Îó²î¸Å¿ö
Îó²îµÄͳ¼ÆÓëÆÀÅÐÊÇÆÀ¹ÀÍøÂçÇå¾²ÇéÐεÄÒ»¸öÖ÷ÒªÖ¸±ê£¬×ðÁú¿Ê±°¢¶û·¨ÊµÑéÊҲο¼CNVDÎó²îÊý¾Ý¿âÊý¾Ý£¬´Ó¡¸Îó²îÍþвƷ¼¶Í³¼Æ¡¹¡¢¡¸Îó²îʹÓù¥»÷λÖÃͳ¼Æ¡¹¡¢¡¸Îó²îÓ°Ï칤¾ßÀàÐÍͳ¼Æ¡¹¡¢¡¸Îó²î±¬·¢Ôµ¹ÊÔÓÉͳ¼Æ¡¹¡¢¡¸Îó²îÒý·¢Íþвͳ¼Æ¡¹¡¢¡¸Îó²îÔöÌíÇ÷ÊÆ¡¹£¬¶Ô 2022 ÄêÅû¶µÄÎó²î¾ÙÐÐÁËÈ«·½Î»µÄͳ¼ÆÆÊÎö¡£







Êý¾ÝȪԴ£ºCNVD
2¡¢CVEÎó²î¿âÇå¾²Îó²î¸Å¿ö
ͨ¹ý¶ÔCVEÔÚ2022ÄêÐû²¼µÄÎó²î°´CVSSÆÀ·ÖÆé᫾ÙÐÐÅÅÐò£¬×ðÁú¿Ê±É¸Ñ¡ÁËCVSS»ù±¾ÆÀ·Ö×î¸ßµÄǰ100¸öÎó²î¾ÙÐÐͳ¼ÆÆÊÎö¡£´Ë´Îͳ¼ÆÆÊÎöÖ÷Òª´Ó ¡¸Îó²îËùÓ°Ïì³§ÉÌ¡¹¡¢¡¸Ó°ÏìÆ½Ì¨¡¹¡¢¡¸¹¥»÷;¾¶¡¹¡¢¡¸Åû¶ʱ¼ä¡¹¡¢¡¸Îó²îÀàÐÍ¡¹ÒÔ¼°¡¸POC¹ûÕæÇéÐΡ¹µÈ6¸ö·½ÃæÕö¿ª£¬²¢Ñ¡È¡ÕûÀíÁËCWE TOP 25ÅÅÃû¡£






Êý¾ÝȪԴ£ºCVE
ƾ֤ MITRE¶Ô ¹ú¼ÒÎó²îÊý¾Ý¿âÖÐ37000Ïî¹ûÕæ¿ÉÓõÄÊý¾Ýµ÷ÑУ¬ÆÊÎöµÃ³öµÄCWE TOP 25ÅÅÃûÈçÏ£º

Êý¾ÝȪԴ£ºCWE
2022Äê¶È¸ßΣÎó²îÔ¤¾¯ÇéÐθÅÊö
2022Ä꣬×ðÁú¿Ê±°¢¶û·¨ÊµÑéÊÒ¹²¼à²â·¢Ã÷ÖÖÖÖÎó²îÐÅÏ¢45627Ìõ£¬¾ÓÉÎó²î¼à²âϵͳ×Ô¶¯ÖÇÄÜɸѡºóÁô´æ¸ßΣÎó²îÐÅÏ¢ 365Ìõ£¬½øÒ»²½¾È˹¤ÑÐÅкóÐû²¼¸ßΣÎó²îΣº¦ÌáÐÑͨ¸æ 62Ìõ¡£Í³¼ÆÐ§¹ûÏÔʾ£¬ÓÉÎó²îÒý·¢µÄÇå¾²ÍþÐ²Éæ¼°ÖÚ¶à³§É̵ÄÈí¼þ²úÆ·£¬Ö÷Á÷²Ù×÷ϵͳÊÇÎó²î¸ß·¢²úÆ·¡£2022ÄêÕë¶ÔMicrosoft³§ÉÌÎó²îÔ¤¾¯´ÎÊý´ï15´Î£¬ÆäÖÐWindowsϵͳµÄÎó²îÕ¼´ó´ó¶¼¡£OpenSSL¡¢VMwareµÈÒªº¦»ù´¡ÉèÊ©Îó²îÒ²ÊÇÊܹØ×¢¶È½Ï¸ßµÄÆ«Ïò¡£
2022ÄêÔ¤¾¯µÄÎó²îÖУ¬´úÂëÖ´ÐÐÀàÎó²îÕ¼±È×î¸ß£¬µÖ´ï71%¡£ÕâÒ»ÀàÎó²îÒ²ÊǸ߼¶¿ÉÒ»Á¬ÐÔ¹¥»÷µÄÖ÷ҪƫÏòºÍ¹¥»÷ÎäÆ÷£¬¹¥»÷ÕßʹÓÃÕâÀàÎó²î¿ÉÒÔÔ¶³ÌÖ´ÐÐí§Òâ´úÂë»òÕßÖ¸ÁÓÐЩÎó²îÉõÖÁÎÞÐèÓû§½»»¥¼´¿ÉµÖ´ïÔ¶³Ì´úÂëÖ´ÐеÄЧ¹û£¬¶ÔÄ¿µÄÍøÂçºÍÐÅϢϵͳÔì³ÉÑÏÖØÓ°Ïì¡£´Ë´Îͳ¼ÆÆÊÎöÖ÷Òª´Ó¡¸Îó²îÔ¤¾¯³§ÉÌÇéÐΡ¹¡¢¡¸Îó²îÍþвÇéÐΡ¹2¸ö·½ÃæÕö¿ª¡£

Êý¾ÝȪԴ£º×ðÁú¿Ê±Äê¶ÈÎó²îÔ¤¾¯
Äê¶ÈTOP10¸ßΣÎó²î

2022Äê¶È×ܽἰչÍû
2022ÄêÍøÂç¿Õ¼äÇå¾²Îó²îÆÊÎöÑо¿±¨¸æÏÔʾ£¬CNVDÅû¶µÄÎó²îÊýÄ¿·ºÆðϽµÇ÷ÊÆ£¬¿É¼ûÊÖÒÕÉú³¤¡¢Ïà¹ØÕþ²ß¹æÔòµÄÍêÉÆºÍÇå¾²»úÖÆµÄ½¨ÉèÔÚÎó²îÖÎÀí·½ÃæÊ©Õ¹ÁËÖ÷Òª×÷Óá£Îó²îÒÀÈ»¼¯ÖÐÔڹŰ峧É̵Ä×°±¸ºÍ²úÆ·ÖУ¬Ô¶³Ì´úÂëÖ´ÐÐÎó²î¡¢SQL×¢ÈëÎó²î¡¢ÏÂÁî×¢ÈëÎó²îÊÇÄ¿½ñÍøÂçÇå¾²ÐÎÊÆ×îΪÑÏËàµÄÍþв£¬WindowsϵͳÎó²îºÍÔ¶³Ì´úÂëÖ´ÐÐÎó²î×î¶à£¬OpenSSLºÍVMwareÒ²·ºÆðÆäÖУ¬ÈκÎÒ»ÀàÎó²î¶¼ÓпÉÄÜÔì³ÉÈ䳿²¡¶¾Èö²¥ÊÂÎñ»òÕßÀÕË÷ÊÂÎñµÄ±¬·¢£¬Óû§Ó¦ÔöÇ¿Çå¾²·À»¤²½·¥¡£
¹ØÓÚÈÔÈ»±£´æµÄÖÖÖÖÎó²îÊÂÎñ£¬½¨ÒéÆóÒµ¡¢×éÖ¯ÔöÇ¿Çå¾²ÊÖÒÕÑо¿ºÍͶÈ룬½¨ÉèÍêÉÆµÄÇå¾²·À»¤ÏµÍ³£» °´ÆÚ¿ªÕ¹Çå¾²Åàѵ£¬ÌáÉýÖ°Ô±Çå¾²Òâʶ£» ·ÖÀà´¦Öóͷ£Çå¾²Îó²î£¬ÊµÊ±Í×ÉÆ´¦Öóͷ£ÄÚ²¿Çå¾²Òþ»¼£»ÍêÉÆÎó²î¹ÜÀí²½·¥£¬¾ß±¸ÇåÎú¡¢ÏµÍ³»¯µÄÎó²î¹ÜÀí˼Ð÷¡£Í¨¹ýÒÔÉϲ½·¥Äܹ»ÓÐÓ÷¢Ã÷ºÍ¹£ÈûÎó²î£¬²¢ïÔÌÒòÍøÂç¿Õ¼äÇå¾²Îó²îµ¼ÖµÄÖÖÖÖÍþв¡£
Ëæ×ÅÈí¼þÖØÆ¯ºóµÄÒ»Á¬×߸ߣ¬ÒÔ¼°ÆóÒµºÍ¿ª·¢Õß¶ÔÇå¾²µÄÖØÊÓˮƽÔöÌí£¬×îÖÕµÄÎó²îÊýÄ¿¿ÉÄ᷺ܻÆðϽµÇ÷ÊÆ¡£È»¶øWindows¡¢Linux¡¢MacµÈÖ÷Á÷²Ù×÷ϵͳµÄÎó²îÊýÄ¿¿ÉÄܲ»»á½µµÍ£¬ÓÈÆäÊÇMicrosoft Exchange ServerºÍä¯ÀÀÆ÷µÄÎó²îÊýÄ¿»áÓÐËùÔöÌí£¬APIÇå¾²½«Ò»Á¬³ÉÎªÍøÂç¿Õ¼äÇå¾²µÄÒ»´óÍþв¡£¹¥»÷Õß¿ÉÄÜ»áʹÓÃÈ˹¤ÖÇÄÜºÍÆä·ÖÖ§»úеѧϰÊÖÒÕÀ´·¢Ã÷²¢Ê¹ÓÃÎó²î£¬²¢ÇÒ»áÔ½·¢¹Ø×¢ÔÆÇéÐÎÎó²îʹÓúÍÎïÁªÍø×°±¸È±ÏÝÍÚ¾ò¡£ÎªÁ˱£»¤¹ú¼ÒÐÅÏ¢»ù´¡ÉèÊ©²»ÊܶñÒâ¹¥»÷£¬Õþ¸®ºÍî¿Ïµ»ú¹¹¿ÉÄÜ»á³ǫ̈¸üÑÏ¿áµÄÈí¼þÇå¾²¹æÔò¡£Òò´Ë¿Í»§Ó¦ÔöÇ¿¹¥»÷Ãæ¹ÜÀí£¬ÊµÊ±·¢Ã÷ºÍÐÞ¸´Îó²î£¬²¢×öºÃÍþв¼ì²âºÍÏìÓ¦£¬ÒÔ±ãÔÚ¹¥»÷ÕߵóÑ֮ǰʵʱ½ÓÄÉÓ¦¶Ô²½·¥×èÖ¹¹¥»÷Íþв¡£
¶àÄêÀ´£¬×ðÁú¿Ê±Æð¾¢Ê©Õ¹×ÔÉíÔÚ¼à²âÔ¤¾¯ÓëÓ¦¼±·þÎñÁìÓòµÄÓÅÊÆ£¬ÖÜÈ«ÕÆÎÕÎó²î¶¯Ì¬£¬¼á³ÖÇå¾²Îó²î¹ÜÀíÊÖÒÕ̽Ë÷Óëʵ¼ù¡£Í¨¹ý¶àά¶ÈÊý¾ÝÊÕÂÞÆÊÎö¡¢Ãô¸ÐÐÅϢʵʱԤ¾¯£¬Ò»Á¬ÉîÈëÐÅÏ¢Çå¾²ÁìÓòµÄ¼à²âÓëÓ¦¼±ÊÂÇ飬ʵʱ¼à²âÍøÂç¿Õ¼äµÄÎó²î¶¯Ì¬£¬Ìṩ¿ìËٵļà²âÓëÔ¤¾¯·þÎñ¡£×ðÁú¿Ê±»¹Ò»Ö±Ç¿»¯ÔƶËÇ鱨Èںϡ¢Çå¾²·À»¤×°±¸Áª¶¯¡¢ÔÆÇéÐÎϵÄIT×ʲúÇå¾²¹ÜÀíµÈÄÜÁ¦£¬½«ÔÆÉÏÄÜÁ¦¸³ÄÜÍâµØ£¬ÍŽáÔÆ¶Ë7¡Á24СʱÔÚÏßÑÐÅУ¬×ÊÖúÖÖÖÖ¿Í»§¹¹½¨º¸Ç¼ì²â·¢Ã÷¡¢ÆÊÎöÑÐÅС¢Ç鱨Ԥ¾¯¡¢ÏìÓ¦´¦Öóͷ£¡¢Ò»Á¬¼à¿ØµÄÍêÕû×ʲúÇå¾²¹ÜÀíϵͳ£¬ÖúÁ¦¿Í»§µÄÊý×Ö»¯×ªÐÍÉú³¤Ô½·¢Çå¾²¸ßЧ£¬ÎªÊý×Ö¾¼Ã¸ßÖÊÁ¿Éú³¤±£¼Ý»¤º½¡£
TOPSEC
×÷ΪÖйúÏȽøµÄÍøÂçÇå¾²¡¢´óÊý¾ÝÓëÔÆ·þÎñÌṩÉÌ£¬×ðÁú¿Ê±Ê¼ÖÕÒÔº´ÎÀ¹ú¼ÒÍøÂç¿Õ¼äÇ徲Ϊ¼ºÈΣ¬Á¢ÒìÓâÔ½£¬Ò»Á¬Îª¿Í»§¹¹½¨Ô½·¢ÍêÉÆµÄÍøÂçÇå¾²·ÀÓùÄÜÁ¦£¬Îª¹ú¼ÒÍøÂçÇå¾²ÕûÌåÄÜÁ¦½¨Éè·þÎñ£¬ÎªÊµÑéÍøÂçÇ¿¹úÕ½ÂÔТ˳ÆóÒµÁ¦Á¿¡£
- Òªº¦´Ê±êÇ©£º
- ×ðÁú¿Ê± 2022ÄêÍøÂç¿Õ¼äÇå¾²Îó²îÆÊÎöÑо¿±¨¸æ ÍøÂç¿Õ¼äÇå¾²Îó²î Îó²îÍþв