{"id":46261,"date":"2025-05-12T17:43:39","date_gmt":"2025-05-12T10:43:39","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46261"},"modified":"2025-06-10T17:44:26","modified_gmt":"2025-06-10T10:44:26","slug":"lo-hong-zero-click-nghiem-trong-trong-windows-deployment-services-cho-phep-danh-sap-he-thong-tu-xa","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-zero-click-nghiem-trong-trong-windows-deployment-services-cho-phep-danh-sap-he-thong-tu-xa\/","title":{"rendered":"L\u1ed7 h\u1ed5ng Zero-Click nghi\u00eam tr\u1ecdng trong Windows Deployment Services cho ph\u00e9p \u0111\u00e1nh s\u1eadp h\u1ec7 th\u1ed1ng t\u1eeb xa"},"content":{"rendered":"<p class=\"mt-3 excerpt\">M\u1ed9t l\u1ed7 h\u1ed5ng m\u1edbi \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong Windows Deployment Services (WDS) c\u1ee7a Microsoft. L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng l\u00e0m s\u1eadp m\u00e1y ch\u1ee7 t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n t\u01b0\u01a1ng t\u00e1c ho\u1eb7c x\u00e1c th\u1ef1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng (Zero Click).<\/p>\n<div id=\"relatedPost\" class=\"mt-3 mb-3\">\n<div class=\"\">\n<ul class=\"ms-2\">\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Windows v\u1eabn t\u1ed3n t\u1ea1i m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt trong 8 n\u0103m qua\">Windows v\u1eabn t\u1ed3n t\u1ea1i m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt trong 8 n\u0103m qua<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng zero-day trong Windows l\u00e0m r\u00f2 r\u1ec9 th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng\">Ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng zero-day trong Windows l\u00e0m r\u00f2 r\u1ec9 th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Gi\u00e1n \u0111i\u1ec7p m\u1ea1ng Iran khai th\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt m\u1edbi tr\u00ean Windows kernel\">Gi\u00e1n \u0111i\u1ec7p m\u1ea1ng Iran khai th\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt m\u1edbi tr\u00ean Windows kernel<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<article id=\"content\" class=\"content gradient\"><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/4bf4e944-4fe4-4ac4-8ebe-e3866d90ee7e\/1_13(2).jpg\" \/><\/p>\n<p>L\u1ed7 h\u1ed5ng nh\u1eafm v\u00e0o d\u1ecbch v\u1ee5 TFTP d\u1ef1a tr\u00ean UDP trong WDS, th\u1eadm ch\u00ed n\u00f3 c\u00f3 th\u1ec3 cho ph\u00e9p nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng d\u00f9 kh\u00f4ng c\u00f3 k\u1ef9 n\u0103ng cao v\u1eabn c\u00f3 th\u1ec3 l\u00e0m t\u00ea li\u1ec7t c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng tri\u1ec3n khai\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/microsoft-han-che-cac-nha-cung-cap-bao-mat-truy-cap-vao-nhan-he-dieu-hanh\">h\u1ec7 \u0111i\u1ec1u h\u00e0nh<\/a>\u00a0c\u1ee7a doanh nghi\u1ec7p ch\u1ec9 trong v\u00e0i ph\u00fat. \u0110\u00e1ng ch\u00fa \u00fd l\u00e0 cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y l\u1ee3i d\u1ee5ng l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng gi\u1ea3 m\u1ea1o, ch\u01b0a \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c, khi\u1ebfn n\u00f3 tr\u1edf n\u00ean b\u00ed m\u1eadt v\u00e0 kh\u00f3 ph\u00f2ng th\u1ee7 b\u1eb1ng c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t b\u1ea3o m\u1eadt truy\u1ec1n th\u1ed1ng.<\/p>\n<p>L\u1ed7 h\u1ed5ng n\u00e0y kh\u00f4ng y\u00eau c\u1ea7u x\u00e1c th\u1ef1c ho\u1eb7c t\u01b0\u01a1ng t\u00e1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, n\u00f3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng l\u00e0m c\u1ea1n ki\u1ec7t b\u1ed9 nh\u1edb h\u1ec7 th\u1ed1ng t\u1eeb xa b\u1eb1ng c\u00e1ch khai th\u00e1c \u0111i\u1ec3m y\u1ebfu trong thi\u1ebft k\u1ebf v\u1ec1 c\u00e1ch WDS x\u1eed l\u00fd c\u00e1c phi\u00ean TFTP d\u1ef1a tr\u00ean UDP tr\u00ean c\u1ed5ng 69.<\/p>\n<p>Nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt Zhiniang Peng \u0111\u00e3 gi\u1ea3i th\u00edch trong b\u00e0i ph\u00e2n t\u00edch c\u1ee7a m\u00ecnh r\u1eb1ng: \u201cV\u1ea5n \u0111\u1ec1 c\u1ed1t l\u00f5i l\u00e0 EndpointSessionMapEntry kh\u00f4ng \u00e1p \u0111\u1eb7t gi\u1edbi h\u1ea1n v\u1ec1 s\u1ed1 l\u01b0\u1ee3ng phi\u00ean. Do \u0111\u00f3, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u00e0m gi\u1ea3 \u0111\u1ecba ch\u1ec9 IP v\u00e0 s\u1ed1 c\u1ed5ng c\u1ee7a m\u00e1y kh\u00e1ch, li\u00ean t\u1ee5c t\u1ea1o ra c\u00e1c phi\u00ean m\u1edbi cho \u0111\u1ebfn khi t\u00e0i nguy\u00ean h\u1ec7 th\u1ed1ng c\u1ea1n ki\u1ec7t\u201d.<\/p>\n<p>H\u00e0m \u201cwdstftp!CClientContext::OnConnectionRequest\u201d qu\u1ea3n l\u00fd quy tr\u00ecnh n\u00e0y, nh\u01b0 \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb trong \u0111o\u1ea1n m\u00e3 sau:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/992c5de1-1821-478e-9232-f06a1392498c\/2(2235).png\" \/><\/p>\n<p>Do m\u00e1y ch\u1ee7 UDP kh\u00f4ng th\u1ec3 x\u00e1c minh ngu\u1ed3n g\u1ed1c c\u1ee7a g\u00f3i tin n\u00ean k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 gi\u1ea3 m\u1ea1o c\u00e1c g\u00f3i tin c\u00f3 \u0111\u1ecba ch\u1ec9 ngu\u1ed3n v\u00e0 c\u1ed5ng ng\u1eabu nhi\u00ean, bu\u1ed9c m\u00e1y ch\u1ee7 ph\u1ea3i ph\u00e2n b\u1ed5 qu\u00e1 nhi\u1ec1u b\u1ed9 nh\u1edb \u0111\u1ec3 x\u1eed l\u00fd m\u1ed9t c\u00e1ch kh\u00f4ng gi\u1edbi h\u1ea1n.<\/p>\n<p>Trong m\u00f4i tr\u01b0\u1eddng th\u1eed nghi\u1ec7m ch\u1ea1y\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/windows-van-ton-tai-mot-lo-hong-bao-mat-trong-8-nam-qua\">Windows<\/a>\u00a0Server Insider Preview v\u1edbi 8GB RAM, nh\u00e0 nghi\u00ean c\u1ee9u Peng \u0111\u00e3 ch\u1ee9ng minh r\u1eb1ng b\u1eb1ng c\u00e1ch li\u00ean t\u1ee5c g\u1eedi c\u00e1c g\u00f3i UDP gi\u1ea3 m\u1ea1o \u0111\u1ebfn c\u1ed5ng 69, m\u1ee9c ti\u00eau th\u1ee5 b\u1ed9 nh\u1edb c\u00f3 th\u1ec3 t\u0103ng nhanh l\u00ean \u0111\u1ebfn 15GB ch\u1ec9 trong v\u00f2ng 7 ph\u00fat, khi\u1ebfn to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng b\u1ecb s\u1eadp.<\/p>\n<p>K\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng n\u00e0y c\u1ef1c k\u1ef3 d\u1ec5 th\u1ef1c hi\u1ec7n, ch\u1ec9 c\u1ea7n vi\u1ebft m\u00e3 l\u1ec7nh c\u01a1 b\u1ea3n tr\u00ean Linux \u0111\u1ec3 t\u1ea1o ra c\u00e1c g\u00f3i tin gi\u1ea3 m\u1ea1o. B\u00ean c\u1ea1nh \u0111\u00f3, Peng c\u0169ng l\u01b0u \u00fd r\u1eb1ng &#8220;Vi\u1ec7c s\u1eed d\u1ee5ng \u0111a lu\u1ed3ng c\u00f3 th\u1ec3 \u0111\u1ea9y nhanh \u0111\u00e1ng k\u1ec3 cu\u1ed9c t\u1ea5n c\u00f4ng&#8221;.<\/p>\n<p><a href=\"https:\/\/antoanthongtin.vn\/tin\/chrome-khac-phuc-rui-ro-bao-mat-trong-lich-su-trinh-duyet-da-ton-tai-20-nam\">L\u1ed7 h\u1ed5ng<\/a>\u00a0n\u00e0y g\u00e2y ra m\u1ed1i \u0111e d\u1ecda \u0111\u00e1ng k\u1ec3 cho c\u00e1c t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng WDS \u0111\u1ec3 tri\u1ec3n khai h\u1ec7 \u0111i\u1ec1u h\u00e0nh d\u1ef1a tr\u00ean m\u1ea1ng v\u00ec n\u00f3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng ph\u00e1 v\u1ee1 ho\u00e0n to\u00e0n c\u00e1c d\u1ecbch v\u1ee5 kh\u1edfi \u0111\u1ed9ng PXE m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 x\u00e1c th\u1ef1c ho\u1eb7c y\u00eau c\u1ea7u quy\u1ec1n truy c\u1eadp \u0111\u1eb7c quy\u1ec1n n\u00e0o.<\/p>\n<p>Windows Deployment Services \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i trong c\u00e1c m\u1ea1ng c\u00f4ng ty, trung t\u00e2m d\u1eef li\u1ec7u v\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c gi\u00e1o d\u1ee5c \u0111\u1ec3 tri\u1ec3n khai h\u1ec7 \u0111i\u1ec1u h\u00e0nh, \u0111i\u1ec1u n\u00e0y khi\u1ebfn l\u1ed7 h\u1ed5ng tr\u1edf n\u00ean \u0111\u1eb7c bi\u1ec7t \u0111\u00e1ng lo ng\u1ea1i \u0111\u1ed1i v\u1edbi c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean.<\/p>\n<p>L\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt n\u00e0y xu\u1ea5t hi\u1ec7n sau c\u00e1c l\u1ed7 h\u1ed5ng li\u00ean quan \u0111\u1ebfn WDS tr\u01b0\u1edbc \u0111\u00e2y, bao g\u1ed3m l\u1ed7 h\u1ed5ng\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/fortinet-phat-hanh-ban-va-cho-lo-hong-thuc-thi-ma-tu-xa\">th\u1ef1c thi m\u00e3 t\u1eeb xa<\/a>\u00a0(CVE-2019-0603) \u0111\u00e3 \u0111\u01b0\u1ee3c v\u00e1 v\u00e0o th\u00e1ng 3\/2019.<\/p>\n<p>Hi\u1ec7n t\u1ea1i, ch\u01b0a c\u00f3 chi\u1ebfn l\u01b0\u1ee3c cho c\u00e1c t\u1ed5 ch\u1ee9c s\u1eed d\u1ee5ng WDS ngo\u00e0i vi\u1ec7c c\u00e2n nh\u1eafc c\u00e1c gi\u1ea3i ph\u00e1p tri\u1ec3n khai thay th\u1ebf ho\u1eb7c tri\u1ec3n khai l\u1ecdc m\u1ea1ng nghi\u00eam ng\u1eb7t \u0111\u1ec3 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp v\u00e0o c\u1ed5ng 69.<\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t l\u1ed7 h\u1ed5ng m\u1edbi \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong Windows Deployment Services (WDS) c\u1ee7a Microsoft. L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng l\u00e0m s\u1eadp m\u00e1y ch\u1ee7 t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n t\u01b0\u01a1ng t\u00e1c ho\u1eb7c x\u00e1c th\u1ef1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng (Zero Click). Windows v\u1eabn t\u1ed3n t\u1ea1i m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt trong 8 n\u0103m qua [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46262,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-46261","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46261"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46261\/revisions"}],"predecessor-version":[{"id":46263,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46261\/revisions\/46263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46262"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}