{"id":46234,"date":"2025-05-21T17:31:11","date_gmt":"2025-05-21T10:31:11","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46234"},"modified":"2025-06-10T17:31:58","modified_gmt":"2025-06-10T10:31:58","slug":"lo-hong-asus-driverhub-cho-phep-cac-trang-web-doc-hai-chay-lenh-voi-quyen-quan-tri-vien","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-asus-driverhub-cho-phep-cac-trang-web-doc-hai-chay-lenh-voi-quyen-quan-tri-vien\/","title":{"rendered":"L\u1ed7 h\u1ed5ng ASUS DriverHub cho ph\u00e9p c\u00e1c trang web \u0111\u1ed9c h\u1ea1i ch\u1ea1y l\u1ec7nh v\u1edbi quy\u1ec1n qu\u1ea3n tr\u1ecb vi\u00ean"},"content":{"rendered":"<p class=\"mt-3 excerpt\">Ti\u1ec7n \u00edch qu\u1ea3n l\u00fd tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n ASUS DriverHub \u0111ang t\u1ed3n t\u1ea1i l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa nghi\u00eam tr\u1ecdng, cho ph\u00e9p c\u00e1c trang web \u0111\u1ed9c h\u1ea1i th\u1ef1c thi l\u1ec7nh tr\u00ean c\u00e1c thi\u1ebft b\u1ecb \u0111\u00e3 c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m.<\/p>\n<div id=\"relatedPost\" class=\"mt-3 mb-3\">\n<div class=\"\">\n<ul class=\"ms-2\">\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"L\u1ed7 h\u1ed5ng Zero-Click nghi\u00eam tr\u1ecdng trong Windows Deployment Services cho ph\u00e9p \u0111\u00e1nh s\u1eadp h\u1ec7 th\u1ed1ng t\u1eeb xa\">L\u1ed7 h\u1ed5ng Zero-Click nghi\u00eam tr\u1ecdng trong Windows Deployment Services cho ph\u00e9p \u0111\u00e1nh s\u1eadp h\u1ec7 th\u1ed1ng t\u1eeb xa<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Webmin cho ph\u00e9p chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa\">Ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Webmin cho ph\u00e9p chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"L\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Commvault c\u00f3 th\u1ec3 d\u1eabn t\u1edbi chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng\">L\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Commvault c\u00f3 th\u1ec3 d\u1eabn t\u1edbi chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<article id=\"content\" class=\"content gradient\"><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/e533da1f-9f9c-41d2-b9e7-fae2e8a5eee5\/3924188_1661869824_Vulnerability_AssessmentArtboard_1.jpg\" \/><\/p>\n<p>L\u1ed7 h\u1ed5ng n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n b\u1edfi m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u an ninh m\u1ea1ng \u0111\u1ed9c l\u1eadp \u0111\u1ebfn t\u1eeb New Zealand t\u00ean l\u00e0 Paul (hay c\u00f2n g\u1ecdi l\u00e0 \u201cMrBruh\u201d), ng\u01b0\u1eddi ph\u00e1t hi\u1ec7n ra r\u1eb1ng ph\u1ea7n m\u1ec1m c\u00f3 kh\u1ea3 n\u0103ng x\u00e1c th\u1ef1c k\u00e9m c\u00e1c l\u1ec7nh \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn d\u1ecbch v\u1ee5 DriverHub background.<\/p>\n<p>\u0110i\u1ec1u n\u00e0y cho ph\u00e9p nh\u00e0 nghi\u00ean c\u1ee9u t\u1ea1o ra chu\u1ed7i khai th\u00e1c s\u1eed d\u1ee5ng c\u00e1c l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c theo d\u00f5i l\u00e0 CVE-2025-3462 v\u00e0 CVE-2025-3463, khi k\u1ebft h\u1ee3p l\u1ea1i, c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn k\u00edch ho\u1ea1t\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/elastic-va-lo-hong-cho-phep-thuc-thi-ma-tu-xa-trong-kibana\">th\u1ef1c thi m\u00e3 t\u1eeb xa<\/a>\u00a0tr\u00ean m\u00e1y t\u00ednh m\u1ee5c ti\u00eau.<\/p>\n<p><strong>V\u1ea5n \u0111\u1ec1 c\u1ee7a DriverHub<\/strong><\/p>\n<p>DriverHub l\u00e0 c\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n c\u1ee7a ASUS, \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t t\u1ef1 \u0111\u1ed9ng khi kh\u1edfi \u0111\u1ed9ng h\u1ec7 th\u1ed1ng l\u1ea7n \u0111\u1ea7u ti\u00ean khi s\u1eed d\u1ee5ng m\u1ed9t s\u1ed1 bo m\u1ea1ch ch\u1ee7 ASUS nh\u1ea5t \u0111\u1ecbnh. Ph\u1ea7n m\u1ec1m n\u00e0y ch\u1ea1y \u1edf ch\u1ebf \u0111\u1ed9 background, t\u1ef1 \u0111\u1ed9ng ph\u00e1t hi\u1ec7n v\u00e0 t\u1ea3i phi\u00ean b\u1ea3n tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n m\u1edbi nh\u1ea5t cho model bo m\u1ea1ch ch\u1ee7 v\u00e0 chipset \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n.<\/p>\n<p>Sau khi c\u00e0i \u0111\u1eb7t, c\u00f4ng c\u1ee5 v\u1eabn ho\u1ea1t \u0111\u1ed9ng v\u00e0 ch\u1ea1y \u1edf ch\u1ebf \u0111\u1ed9 background th\u00f4ng qua d\u1ecbch v\u1ee5 local tr\u00ean c\u1ed5ng 53000, li\u00ean t\u1ee5c ki\u1ec3m tra c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n quan tr\u1ecdng. Trong khi \u0111\u00f3, h\u1ea7u h\u1ebft ng\u01b0\u1eddi d\u00f9ng th\u1eadm ch\u00ed c\u00f2n kh\u00f4ng bi\u1ebft c\u00f3 m\u1ed9t d\u1ecbch v\u1ee5 nh\u01b0 v\u1eady \u0111ang ch\u1ea1y li\u00ean t\u1ee5c tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a h\u1ecd. D\u1ecbch v\u1ee5 \u0111\u00f3 s\u1ebd ki\u1ec3m tra Origin Header c\u1ee7a c\u00e1c HTTP request \u0111\u1ebfn \u0111\u1ec3 t\u1eeb ch\u1ed1i b\u1ea5t k\u1ef3 y\u00eau c\u1ea7u n\u00e0o kh\u00f4ng \u0111\u1ebfn t\u1eeb \u201cdriverhub[.]asus[.]com\u201d.<\/p>\n<p>Tuy nhi\u00ean, vi\u1ec7c ki\u1ec3m tra n\u00e0y \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n kh\u00f4ng hi\u1ec7u qu\u1ea3, v\u00ec b\u1ea5t k\u1ef3 trang web n\u00e0o c\u00f3 chu\u1ed7i \u0111\u00f3 \u0111\u1ec1u \u0111\u01b0\u1ee3c ch\u1ea5p nh\u1eadn, ngay c\u1ea3 khi n\u00f3 kh\u00f4ng kh\u1edbp ch\u00ednh x\u00e1c v\u1edbi c\u1ed5ng th\u00f4ng tin ch\u00ednh th\u1ee9c c\u1ee7a\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/asus-phat-hanh-ban-va-cac-lo-hong-nghiem-trong-trong-bo-dinh-tuyen\">ASUS<\/a>.<\/p>\n<p>V\u1ea5n \u0111\u1ec1 th\u1ee9 hai n\u1eb1m \u1edf \u0111i\u1ec3m cu\u1ed1i UpdateApp, cho ph\u00e9p DriverHub t\u1ea3i xu\u1ed1ng v\u00e0 ch\u1ea1y c\u00e1c t\u1ec7p EXE t\u1eeb URL \u201c[.]asus[.]com\u201d m\u00e0 kh\u00f4ng c\u1ea7n s\u1ef1 x\u00e1c nh\u1eadn c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/8eb50263-3a26-4de6-90d2-16f93a29f858\/bios.png\" \/><\/p>\n<p><em>Thi\u1ebft l\u1eadp BIOS li\u00ean quan \u0111\u1ebfn DriverHub (\u0111\u01b0\u1ee3c b\u1eadt theo m\u1eb7c \u0111\u1ecbnh). Ngu\u1ed3n: MrBruh<\/em><\/p>\n<p><strong>Lu\u1ed3ng t\u1ea5n c\u00f4ng<\/strong><\/p>\n<p>K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 nh\u1eafm v\u00e0o b\u1ea5t k\u1ef3 ng\u01b0\u1eddi d\u00f9ng n\u00e0o c\u00f3 ASUS DriverHub \u0111ang ch\u1ea1y tr\u00ean h\u1ec7 th\u1ed1ng \u0111\u1ec3 \u0111\u00e1nh l\u1eeba n\u1ea1n nh\u00e2n truy c\u1eadp v\u00e0o m\u1ed9t trang web \u0111\u1ed9c h\u1ea1i tr\u00ean\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/chrome-khac-phuc-rui-ro-bao-mat-trong-lich-su-trinh-duyet-da-ton-tai-20-nam\">tr\u00ecnh duy\u1ec7t<\/a>\u00a0c\u1ee7a h\u1ecd. Sau \u0111\u00f3, trang web n\u00e0y s\u1ebd g\u1eedi \u201crequest UpdateApp\u201d \u0111\u1ebfn d\u1ecbch v\u1ee5 local t\u1ea1i \u0111\u1ecba ch\u1ec9 \u201chttp:\/\/127[.]0[.]0[.]1:53000\u201d.<\/p>\n<p>B\u1eb1ng c\u00e1ch gi\u1ea3 m\u1ea1o Origin Header th\u00e0nh m\u1ed9t c\u00e1i g\u00ec \u0111\u00f3 nh\u01b0 \u201cdriverhub[.]asus[.]com[.]mrbruh[.]com\u201d, qu\u00e1 tr\u00ecnh ki\u1ec3m tra x\u00e1c th\u1ef1c y\u1ebfu s\u1ebd b\u1ecb b\u1ecf qua, do \u0111\u00f3 DriverHub ch\u1ea5p nh\u1eadn c\u00e1c l\u1ec7nh. Trong b\u00e1o c\u00e1o c\u1ee7a nh\u00e0 nghi\u00ean c\u1ee9u, c\u00e1c t\u1eadp l\u1ec7nh y\u00eau c\u1ea7u ph\u1ea7n m\u1ec1m t\u1ea3i xu\u1ed1ng tr\u00ecnh c\u00e0i \u0111\u1eb7t AsusSetup[.]exe h\u1ee3p ph\u00e1p do ASUS k\u00fd s\u1ed1, c\u00f9ng v\u1edbi t\u1ec7p [.]ini \u0111\u1ed9c h\u1ea1i v\u00e0 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i [.]exe.<\/p>\n<p>Tr\u00ecnh c\u00e0i \u0111\u1eb7t \u0111\u01b0\u1ee3c ASUS k\u00fd s\u1ed1 s\u1ebd ch\u1ea1y ng\u1ea7m d\u01b0\u1edbi d\u1ea1ng qu\u1ea3n tr\u1ecb vi\u00ean v\u00e0 s\u1eed d\u1ee5ng th\u00f4ng tin c\u1ea5u h\u00ecnh trong t\u1ec7p [.]ini. T\u1ec7p ini n\u00e0y ra l\u1ec7nh tr\u00ecnh c\u00e0i \u0111\u1eb7t tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n ASUS h\u1ee3p l\u1ec7 kh\u1edfi ch\u1ea1y t\u1ec7p th\u1ef1c thi \u0111\u1ed9c h\u1ea1i.<\/p>\n<p><strong>Ph\u1ea3n \u1ee9ng c\u1ee7a ASUS v\u00e0 h\u00e0nh \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng<\/strong><\/p>\n<p>ASUS \u0111\u00e3 nh\u1eadn \u0111\u01b0\u1ee3c b\u00e1o c\u00e1o v\u00e0o ng\u00e0y 8\/4\/2025 v\u00e0 tri\u1ec3n khai b\u1ea3n s\u1eeda l\u1ed7i v\u00e0o ng\u00e0y 18\/4, sau khi x\u00e1c th\u1ef1c v\u1edbi MrBruh v\u00e0o ng\u00e0y h\u00f4m tr\u01b0\u1edbc. G\u00e3 kh\u1ed5ng l\u1ed3 ph\u1ea7n c\u1ee9ng kh\u00f4ng cung c\u1ea5p cho nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea5t k\u1ef3 kho\u1ea3n ti\u1ec1n th\u01b0\u1edfng n\u00e0o cho vi\u1ec7c ti\u1ebft l\u1ed9 c\u1ee7a anh ta. M\u00f4 t\u1ea3 CVE m\u00e0 nh\u00e0 cung c\u1ea5p \u0110\u00e0i Loan \u0111\u00e3 g\u1eedi c\u00f3 ph\u1ea7n h\u1ea1 th\u1ea5p v\u1ea5n \u0111\u1ec1 b\u1eb1ng tuy\u00ean b\u1ed1 sau: \u201cS\u1ef1 c\u1ed1 n\u00e0y ch\u1ec9 gi\u1edbi h\u1ea1n \u1edf bo m\u1ea1ch ch\u1ee7 v\u00e0 kh\u00f4ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn m\u00e1y t\u00ednh x\u00e1ch tay, m\u00e1y t\u00ednh \u0111\u1ec3 b\u00e0n ho\u1eb7c c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i kh\u00e1c\u201d.<\/p>\n<p>\u0110i\u1ec1u n\u00e0y th\u1eadt kh\u00f3 hi\u1ec3u v\u00ec c\u00e1c CVE \u0111\u00e3 \u0111\u1ec1 c\u1eadp \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn m\u00e1y t\u00ednh x\u00e1ch tay v\u00e0 m\u00e1y t\u00ednh \u0111\u1ec3 b\u00e0n c\u00f3 c\u00e0i \u0111\u1eb7t DriverHub. Tuy nhi\u00ean, ASUS \u0111\u00e3 n\u00eau r\u00f5 h\u01a1n trong b\u1ea3n tin b\u1ea3o m\u1eadt c\u1ee7a m\u00ecnh khi khuy\u1ebfn ngh\u1ecb ng\u01b0\u1eddi d\u00f9ng nhanh ch\u00f3ng \u00e1p d\u1ee5ng b\u1ea3n c\u1eadp nh\u1eadt m\u1edbi nh\u1ea5t.<\/p>\n<p>\u201cB\u1ea3n c\u1eadp nh\u1eadt n\u00e0y bao g\u1ed3m c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt quan tr\u1ecdng v\u00e0 ASUS khuy\u1ebfn c\u00e1o ng\u01b0\u1eddi d\u00f9ng c\u1eadp nh\u1eadt c\u00e0i \u0111\u1eb7t ASUS DriverHub l\u00ean phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t. B\u1ea1n c\u00f3 th\u1ec3 truy c\u1eadp B\u1ea3n c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m m\u1edbi nh\u1ea5t b\u1eb1ng c\u00e1ch m\u1edf ASUS DriverHub, sau \u0111\u00f3 nh\u1ea5p v\u00e0o n\u00fat Update Now\u201d, b\u1ea3n tin c\u1ee7a ASUS cho bi\u1ebft.<\/p>\n<p>MrBruh cho bi\u1ebft \u00f4ng \u0111\u00e3 theo d\u00f5i c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt v\u1ec1 t\u00ednh minh b\u1ea1ch c\u1ee7a ch\u1ee9ng th\u01b0 s\u1ed1 v\u00e0 kh\u00f4ng t\u00ecm th\u1ea5y b\u1ea5t k\u1ef3 ch\u1ee9ng ch\u1ec9\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/google-bo-sung-ma-hoa-khang-luong-tu-trong-phien-ban-chrome-116-nham-tang-cuong-bao-mat-tls\">TLS<\/a>\u00a0n\u00e0o kh\u00e1c c\u00f3 ch\u1ee9a chu\u1ed7i \u201cdriverhub[.]asus[.]com\u201d, \u0111i\u1ec1u n\u00e0y cho th\u1ea5y chu\u1ed7i n\u00e0y ch\u01b0a b\u1ecb khai th\u00e1c trong th\u1ef1c t\u1ebf. N\u1ebfu kh\u00f4ng tho\u1ea3i m\u00e1i khi d\u1ecbch v\u1ee5 background t\u1ef1 \u0111\u1ed9ng t\u1ea3i c\u00e1c t\u1ec7p c\u00f3 kh\u1ea3 n\u0103ng g\u00e2y nguy hi\u1ec3m khi truy c\u1eadp c\u00e1c trang web, b\u1ea1n c\u00f3 th\u1ec3 t\u1eaft DriverHub kh\u1ecfi c\u00e0i \u0111\u1eb7t BIOS.<\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Ti\u1ec7n \u00edch qu\u1ea3n l\u00fd tr\u00ecnh \u0111i\u1ec1u khi\u1ec3n ASUS DriverHub \u0111ang t\u1ed3n t\u1ea1i l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa nghi\u00eam tr\u1ecdng, cho ph\u00e9p c\u00e1c trang web \u0111\u1ed9c h\u1ea1i th\u1ef1c thi l\u1ec7nh tr\u00ean c\u00e1c thi\u1ebft b\u1ecb \u0111\u00e3 c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m. L\u1ed7 h\u1ed5ng Zero-Click nghi\u00eam tr\u1ecdng trong Windows Deployment Services cho ph\u00e9p \u0111\u00e1nh s\u1eadp h\u1ec7 th\u1ed1ng [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46235,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[24,35],"tags":[],"class_list":["post-46234","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46234","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46234"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46234\/revisions"}],"predecessor-version":[{"id":46236,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46234\/revisions\/46236"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46235"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}