{"id":47424,"date":"2026-02-27T14:14:21","date_gmt":"2026-02-27T07:14:21","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47424"},"modified":"2026-02-27T14:14:21","modified_gmt":"2026-02-27T07:14:21","slug":"lo-hong-tren-thiet-bi-mang-juniper-nguy-co-chiem-quyen-kiem-soat-ha-tang","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-tren-thiet-bi-mang-juniper-nguy-co-chiem-quyen-kiem-soat-ha-tang\/","title":{"rendered":"L\u1ed7 h\u1ed5ng tr\u00ean thi\u1ebft b\u1ecb m\u1ea1ng Juniper: Nguy c\u01a1 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t h\u1ea1 t\u1ea7ng"},"content":{"rendered":"<div><b>M\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n tr\u00ean d\u00f2ng router hi\u1ec7u n\u0103ng cao PTX Series c\u1ee7a Juniper Networks &#8211; thi\u1ebft b\u1ecb th\u01b0\u1eddng \u0111\u01b0\u1ee3c tri\u1ec3n khai trong h\u1ea1 t\u1ea7ng m\u1ea1ng tr\u1ecdng y\u1ebfu c\u1ee7a nh\u00e0 m\u1ea1ng, trung t\u00e2m d\u1eef li\u1ec7u v\u00e0 h\u1ec7 th\u1ed1ng \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y quy m\u00f4 l\u1edbn.<\/b><br \/>\n\u200b<\/div>\n<div>\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1772161306307.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1772161306307-png.18498\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img loading=\"lazy\" decoding=\"async\" class=\"bbImage\" title=\"1772161306307.png\" src=\"https:\/\/whitehat.vn\/attachments\/1772161306307-png.18498\/\" alt=\"1772161306307.png\" width=\"677\" height=\"433\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p>\u200b<\/p><\/div>\n<div>\nTheo c\u1ea3nh b\u00e1o t\u1eeb Juniper, l\u1ed7 h\u1ed5ng mang m\u00e3 CVE-2026-21902 v\u1edbi \u0111i\u1ec3m CVSS 9,3, t\u1ed3n t\u1ea1i trong h\u1ec7 \u0111i\u1ec1u h\u00e0nh Junos OS Evolved. Nguy\u00ean nh\u00e2n b\u1eaft ngu\u1ed3n t\u1eeb c\u1ea5u h\u00ecnh ph\u00e2n quy\u1ec1n kh\u00f4ng \u0111\u00fang trong m\u00f4-\u0111un On-Box Anomaly Detection, m\u1ed9t c\u01a1 ch\u1ebf k\u1ef9 thu\u1eadt v\u1ed1n ch\u1ec9 ph\u1ee5c v\u1ee5 cho c\u00e1c ti\u1ebfn tr\u00ecnh n\u1ed9i b\u1ed9 c\u1ee7a thi\u1ebft b\u1ecb.<\/p>\n<p>Do l\u1ed7i n\u00e0y, m\u00f4-\u0111un n\u00f3i tr\u00ean c\u00f3 th\u1ec3 b\u1ecb truy c\u1eadp th\u00f4ng qua m\u1ed9t c\u1ed5ng m\u1ea1ng l\u1ed9 ra b\u00ean ngo\u00e0i. \u0110\u00e1ng ch\u00fa \u00fd, d\u1ecbch v\u1ee5 n\u00e0y ch\u1ea1y v\u1edbi quy\u1ec1n cao nh\u1ea5t (root) v\u00e0 \u0111\u01b0\u1ee3c b\u1eadt s\u1eb5n theo m\u1eb7c \u0111\u1ecbnh. N\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 x\u00e2m nh\u1eadp \u0111\u01b0\u1ee3c v\u00e0o c\u00f9ng m\u1ea1ng th\u00ec c\u00f3 th\u1ec3 th\u1ef1c thi m\u00e3 t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c, t\u1eeb \u0111\u00f3 chi\u1ebfm to\u00e0n quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb.<\/p>\n<p>V\u1edbi vai tr\u00f2 l\u00e0 c\u00e1c router n\u1eb1m \u1edf t\u1ea7ng h\u1ea1 t\u1ea7ng quan tr\u1ecdng, vi\u1ec7c b\u1ecb chi\u1ebfm quy\u1ec1n c\u00f3 th\u1ec3 d\u1eabn t\u1edbi nhi\u1ec1u r\u1ee7i ro nghi\u00eam tr\u1ecdng nh\u01b0 nghe l\u00e9n d\u1eef li\u1ec7u, chuy\u1ec3n h\u01b0\u1edbng l\u01b0u l\u01b0\u1ee3ng Internet, c\u00e0i c\u1eafm m\u00e3 \u0111\u1ed9c ho\u1eb7c g\u00e2y gi\u00e1n \u0111o\u1ea1n d\u1ecbch v\u1ee5 tr\u00ean di\u1ec7n r\u1ed9ng.<\/p>\n<p>C\u00e1c phi\u00ean b\u1ea3n Junos OS Evolved tr\u01b0\u1edbc 25.4R1-S1-EVO v\u00e0 25.4R2-EVO tr\u00ean router PTX Series b\u1ecb \u1ea3nh h\u01b0\u1edfng. Juniper cho bi\u1ebft c\u00e1c phi\u00ean b\u1ea3n Junos OS th\u00f4ng th\u01b0\u1eddng, kh\u00f4ng ph\u1ea3i Evolved kh\u00f4ng n\u1eb1m trong di\u1ec7n r\u1ee7i ro. B\u1ea3n v\u00e1 \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh v\u00e0 qu\u1ea3n tr\u1ecb \u0111\u01b0\u1ee3c khuy\u1ebfn c\u00e1o c\u1eadp nh\u1eadt s\u1edbm nh\u1ea5t c\u00f3 th\u1ec3.<\/p>\n<p>Theo c\u00e1c chuy\u00ean gia WhiteHat, l\u1ed7 h\u1ed5ng n\u00e0y c\u00f3 kh\u1ea3 n\u0103ng \u1ea3nh h\u01b0\u1edfng t\u1edbi Vi\u1ec7t Nam do nhi\u1ec1u nh\u00e0 m\u1ea1ng, doanh nghi\u1ec7p l\u1edbn v\u00e0 trung t\u00e2m d\u1eef li\u1ec7u trong n\u01b0\u1edbc \u0111ang s\u1eed d\u1ee5ng thi\u1ebft b\u1ecb Juniper \u1edf t\u1ea7ng h\u1ea1 t\u1ea7ng k\u1ebft n\u1ed1i. Tuy kh\u00f4ng \u1ea3nh h\u01b0\u1edfng tr\u1ef1c ti\u1ebfp t\u1edbi ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n nh\u01b0ng n\u1ebfu b\u1ecb khai th\u00e1c, s\u1ef1 c\u1ed1 c\u00f3 th\u1ec3 t\u00e1c \u0111\u1ed9ng \u0111\u1ebfn to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng m\u1ea1ng v\u00e0 d\u1ecbch v\u1ee5 Internet.<\/p>\n<p>WhiteHat khuy\u1ebfn c\u00e1o c\u00e1c \u0111\u01a1n v\u1ecb v\u1eadn h\u00e0nh:\u200b<\/p><\/div>\n<ul>\n<li data-xf-list-type=\"ul\">\n<div>R\u00e0 so\u00e1t c\u00e1c thi\u1ebft b\u1ecb PTX \u0111ang s\u1eed d\u1ee5ng Junos OS Evolved\u200b<\/div>\n<\/li>\n<li data-xf-list-type=\"ul\">\n<div>\u01afu ti\u00ean c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 ch\u00ednh th\u1ee9c\u200b<\/div>\n<\/li>\n<li data-xf-list-type=\"ul\">\n<div>Trong tr\u01b0\u1eddng h\u1ee3p ch\u01b0a th\u1ec3 v\u00e1, c\u1ea7n gi\u1edbi h\u1ea1n truy c\u1eadp b\u1eb1ng firewall\/ACL ho\u1eb7c v\u00f4 hi\u1ec7u h\u00f3a d\u1ecbch v\u1ee5 b\u1ecb \u1ea3nh h\u01b0\u1edfng\u200b<\/div>\n<\/li>\n<li data-xf-list-type=\"ul\">\n<div>T\u0103ng c\u01b0\u1eddng gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng b\u1ea5t th\u01b0\u1eddng\u200b<\/div>\n<\/li>\n<\/ul>\n<div><b><i>Theo Bleeping Computer<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n tr\u00ean d\u00f2ng router hi\u1ec7u n\u0103ng cao PTX Series c\u1ee7a Juniper Networks &#8211; thi\u1ebft b\u1ecb th\u01b0\u1eddng \u0111\u01b0\u1ee3c tri\u1ec3n khai trong h\u1ea1 t\u1ea7ng m\u1ea1ng tr\u1ecdng y\u1ebfu c\u1ee7a nh\u00e0 m\u1ea1ng, trung t\u00e2m d\u1eef li\u1ec7u v\u00e0 h\u1ec7 th\u1ed1ng \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y quy m\u00f4 l\u1edbn. \u200b \u200b Theo c\u1ea3nh b\u00e1o [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":47425,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47424","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47424"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47424\/revisions"}],"predecessor-version":[{"id":47426,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47424\/revisions\/47426"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47425"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}