{"id":47571,"date":"2026-03-21T14:47:42","date_gmt":"2026-03-21T07:47:42","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47571"},"modified":"2026-03-31T14:48:42","modified_gmt":"2026-03-31T07:48:42","slug":"lo-hong-trong-screenconnect-co-the-bi-loi-dung-de-chiem-quyen-he-thong","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-trong-screenconnect-co-the-bi-loi-dung-de-chiem-quyen-he-thong\/","title":{"rendered":"L\u1ed7 h\u1ed5ng trong ScreenConnect c\u00f3 th\u1ec3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 chi\u1ebfm quy\u1ec1n h\u1ec7 th\u1ed1ng"},"content":{"rendered":"
H\u00e3ng c\u00f4ng ngh\u1ec7 ConnectWise v\u1eeba ph\u00e1t \u0111i c\u1ea3nh b\u00e1o kh\u1ea9n v\u1ec1 m\u1ed9t l\u1ed7 h\u1ed5ng trong ph\u1ea7n m\u1ec1m \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa ScreenConnect. L\u1ed7 h\u1ed5ng n\u00e0y c\u00f3 th\u1ec3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e1nh c\u1eafp kh\u00f3a m\u00e3 h\u00f3a c\u1ea5p h\u1ec7 th\u1ed1ng v\u00e0 chi\u1ebfm quy\u1ec1n c\u00e1c phi\u00ean l\u00e0m vi\u1ec7c t\u1eeb xa \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/b>
\n\u200b<\/div>\n
\n
\"1773993437269.png\"<\/div>\n<\/div>\n
\n\u0110\u01b0\u1ee3c \u0111\u1ecbnh danh l\u00e0 CVE-2026-3564, l\u1ed7 h\u1ed5ng c\u00f3 \u0111i\u1ec3m s\u1ed1 CVSS 9,0 v\u00e0 \u0111\u00e3 \u0111\u01b0\u1ee3c x\u1ebfp v\u00e0o nh\u00f3m c\u1ea3nh b\u00e1o \u01b0u ti\u00ean cao nh\u1ea5t. V\u1edbi \u0111\u1eb7c th\u00f9 ScreenConnect \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i trong doanh nghi\u1ec7p v\u00e0 c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 CNTT (MSP), nguy c\u01a1 lan r\u1ed9ng c\u1ee7a l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 l\u00e0 \u0111\u1eb7c bi\u1ec7t \u0111\u00e1ng lo ng\u1ea1i.\u200b<\/div>\n
L\u1ed7 h\u1ed5ng xu\u1ea5t ph\u00e1t t\u1eeb sai s\u00f3t trong c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c m\u00e3 h\u00f3a\u200b<\/div>\n
Theo ph\u00e2n t\u00edch k\u1ef9 thu\u1eadt, l\u1ed7 h\u1ed5ng b\u1eaft ngu\u1ed3n t\u1eeb vi\u1ec7c x\u1eed l\u00fd kh\u00f4ng \u0111\u00fang c\u00e1ch c\u00e1c ch\u1eef k\u00fd m\u00e3 h\u00f3a trong h\u1ec7 th\u1ed1ng x\u00e1c th\u1ef1c c\u1ee7a ScreenConnect, thu\u1ed9c nh\u00f3m l\u1ed7i CWE-347 (Improper Verification of Cryptographic Signature).<\/p>\n

Trong c\u00e1c phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng, ph\u1ea7n m\u1ec1m l\u01b0u tr\u1eef c\u00e1c machine key tr\u1ef1c ti\u1ebfp trong file c\u1ea5u h\u00ecnh m\u00e1y ch\u1ee7. \u0110\u00e2y l\u00e0 th\u00f4ng tin c\u1ef1c k\u1ef3 nh\u1ea1y c\u1ea3m, \u0111\u00f3ng vai tr\u00f2 x\u00e1c th\u1ef1c v\u00e0 \u0111\u1ea3m b\u1ea3o t\u00ednh to\u00e0n v\u1eb9n c\u1ee7a c\u00e1c phi\u00ean \u0111\u0103ng nh\u1eadp.<\/p>\n

Khi c\u00e1c kh\u00f3a n\u00e0y kh\u00f4ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 \u0111\u00fang c\u00e1ch, ch\u00fang c\u00f3 th\u1ec3 b\u1ecb tr\u00edch xu\u1ea5t n\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng x\u00e2m nh\u1eadp \u0111\u01b0\u1ee3c v\u00e0o h\u1ec7 th\u1ed1ng m\u00e1y ch\u1ee7 th\u00f4ng qua c\u1ea5u h\u00ecnh sai, khai th\u00e1c l\u1ed7 h\u1ed5ng kh\u00e1c ho\u1eb7c di chuy\u1ec3n ngang trong m\u1ea1ng n\u1ed9i b\u1ed9.\u200b<\/p><\/div>\n

C\u01a1 ch\u1ebf khai th\u00e1c: Gi\u1ea3 m\u1ea1o phi\u00ean l\u00e0m vi\u1ec7c, chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n\u200b<\/div>\n
Sau khi l\u1ea5y \u0111\u01b0\u1ee3c machine key, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng ch\u00fang \u0111\u1ec3 t\u1ea1o c\u00e1c token x\u00e1c th\u1ef1c gi\u1ea3 m\u1ea1o, qua \u0111\u00f3 v\u01b0\u1ee3t qua c\u01a1 ch\u1ebf ki\u1ec3m tra phi\u00ean \u0111\u0103ng nh\u1eadp. \u0110i\u1ec3m nguy hi\u1ec3m n\u1eb1m \u1edf ch\u1ed7 qu\u00e1 tr\u00ecnh n\u00e0y:\u200b<\/div>\n
    \n
  • \n
    Kh\u00f4ng y\u00eau c\u1ea7u t\u00e0i kho\u1ea3n hay m\u1eadt kh\u1ea9u\u200b<\/div>\n<\/li>\n
  • \n
    Kh\u00f4ng c\u1ea7n t\u01b0\u01a1ng t\u00e1c t\u1eeb ph\u00eda ng\u01b0\u1eddi d\u00f9ng\u200b<\/div>\n<\/li>\n
  • \n
    Di\u1ec5n ra ho\u00e0n to\u00e0n \u1edf t\u1ea7ng h\u1ec7 th\u1ed1ng\u200b<\/div>\n<\/li>\n<\/ul>\n
    Khi \u0111\u00f3, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 chi\u1ebfm quy\u1ec1n c\u00e1c phi\u00ean \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa h\u1ee3p ph\u00e1p, truy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o c\u00e1c m\u00e1y t\u00ednh \u0111ang \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd qua ScreenConnect. Trong th\u1ef1c t\u1ebf, \u0111i\u1ec1u n\u00e0y \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c hacker c\u00f3 th\u1ec3:\u200b<\/div>\n
      \n
    • \n
      Theo d\u00f5i to\u00e0n b\u1ed9 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng\u200b<\/div>\n<\/li>\n
    • \n
      Th\u1ef1c thi l\u1ec7nh tr\u00ean h\u1ec7 th\u1ed1ng n\u1ea1n nh\u00e2n\u200b<\/div>\n<\/li>\n
    • \n
      Tri\u1ec3n khai m\u00e3 \u0111\u1ed9c ho\u1eb7c backdoor\u200b<\/div>\n<\/li>\n
    • \n
      M\u1edf r\u1ed9ng t\u1ea5n c\u00f4ng sang c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c trong m\u1ea1ng\u200b<\/div>\n<\/li>\n<\/ul>\n
      M\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m v\u00e0 ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng\u200b<\/div>\n
      M\u1eb7c d\u00f9 l\u1ed7 h\u1ed5ng c\u00f3 \u0111\u1ed9 ph\u1ee9c t\u1ea1p khai th\u00e1c t\u01b0\u01a1ng \u0111\u1ed1i cao nh\u01b0ng vi\u1ec7c kh\u00f4ng y\u00eau c\u1ea7u x\u00e1c th\u1ef1c khi\u1ebfn r\u1ee7i ro th\u1ef1c t\u1ebf t\u0103ng m\u1ea1nh n\u1ebfu h\u1ec7 th\u1ed1ng \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp t\u1eeb tr\u01b0\u1edbc.<\/p>\n

      ScreenConnect l\u00e0 c\u00f4ng c\u1ee5 ph\u1ed5 bi\u1ebfn trong:\u200b<\/p><\/div>\n

        \n
      • \n
        Doanh nghi\u1ec7p\u200b<\/div>\n<\/li>\n
      • \n
        Nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 IT (MSP)\u200b<\/div>\n<\/li>\n
      • \n
        M\u00f4i tr\u01b0\u1eddng qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng t\u1eeb xa\u200b<\/div>\n<\/li>\n<\/ul>\n
        Do \u0111\u00f3, n\u1ebfu b\u1ecb khai th\u00e1c, l\u1ed7 h\u1ed5ng n\u00e0y kh\u00f4ng ch\u1ec9 \u1ea3nh h\u01b0\u1edfng m\u1ed9t m\u00e1y \u0111\u01a1n l\u1ebb m\u00e0 c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn x\u00e2m nh\u1eadp chu\u1ed7i, t\u1eeb m\u1ed9t h\u1ec7 th\u1ed1ng qu\u1ea3n tr\u1ecb lan sang h\u00e0ng lo\u1ea1t kh\u00e1ch h\u00e0ng ph\u00eda sau. \u0110\u00e2y ch\u00ednh l\u00e0 k\u1ecbch b\u1ea3n nguy hi\u1ec3m nh\u1ea5t: m\u1ed9t \u0111i\u1ec3m y\u1ebfu trong h\u1ec7 th\u1ed1ng trung t\u00e2m c\u00f3 th\u1ec3 k\u00e9o theo vi\u1ec7c ki\u1ec3m so\u00e1t to\u00e0n b\u1ed9 h\u1ea1 t\u1ea7ng CNTT c\u1ee7a nhi\u1ec1u t\u1ed5 ch\u1ee9c.\u200b<\/div>\n
        B\u1ea3n v\u00e1 \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh, y\u00eau c\u1ea7u c\u1eadp nh\u1eadt kh\u1ea9n c\u1ea5p\u200b<\/div>\n
        \u0110\u1ec3 kh\u1eafc ph\u1ee5c l\u1ed7 h\u1ed5ng, ConnectWise \u0111\u00e3 ph\u00e1t h\u00e0nh phi\u00ean b\u1ea3n ScreenConnect 26.1 v\u1edbi c\u00e1c thay \u0111\u1ed5i quan tr\u1ecdng trong ki\u1ebfn tr\u00fac b\u1ea3o m\u1eadt. C\u1ee5 th\u1ec3, b\u1ea3n c\u1eadp nh\u1eadt:\u200b<\/div>\n
          \n
        • \n
          Lo\u1ea1i b\u1ecf vi\u1ec7c l\u01b0u tr\u1eef kh\u00f3a m\u00e3 h\u00f3a d\u1ea1ng plaintext trong file c\u1ea5u h\u00ecnh\u200b<\/div>\n<\/li>\n
        • \n
          \u00c1p d\u1ee5ng c\u01a1 ch\u1ebf m\u00e3 h\u00f3a kh\u00f3a v\u00e0 qu\u1ea3n l\u00fd kh\u00f3a \u0111\u1ed9ng\u200b<\/div>\n<\/li>\n
        • \n
          T\u0103ng c\u01b0\u1eddng b\u1ea3o v\u1ec7 quy tr\u00ecnh x\u00e1c th\u1ef1c phi\u00ean\u200b<\/div>\n<\/li>\n<\/ul>\n
          Nh\u1eefng c\u1ea3i ti\u1ebfn n\u00e0y gi\u00fap ng\u0103n ch\u1eb7n vi\u1ec7c tr\u00edch xu\u1ea5t v\u00e0 l\u1ea1m d\u1ee5ng kh\u00f3a ngay c\u1ea3 khi h\u1ec7 th\u1ed1ng b\u1ecb x\u00e2m nh\u1eadp m\u1ed9t ph\u1ea7n.\u200b<\/div>\n
          Khuy\u1ebfn ngh\u1ecb t\u1eeb chuy\u00ean gia an ninh m\u1ea1ng\u200b<\/div>\n
          C\u00e1c chuy\u00ean gia khuy\u1ebfn c\u00e1o t\u1ed5 ch\u1ee9c c\u1ea7n coi \u0111\u00e2y l\u00e0 m\u1ed9t t\u00ecnh hu\u1ed1ng v\u00e1 l\u1ed7i kh\u1ea9n c\u1ea5p, \u0111\u1eb7c bi\u1ec7t v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng tri\u1ec3n khai t\u1ea1i ch\u1ed7 (on-premise). M\u1ed9t s\u1ed1 bi\u1ec7n ph\u00e1p c\u1ea7n th\u1ef1c hi\u1ec7n ngay g\u1ed3m:\u200b<\/div>\n
            \n
          • \n
            C\u1eadp nh\u1eadt ScreenConnect l\u00ean phi\u00ean b\u1ea3n 26.1 n\u1ebfu \u0111ang s\u1eed d\u1ee5ng b\u1ea3n c\u0169\u200b<\/div>\n<\/li>\n
          • \n
            Ki\u1ec3m tra log h\u1ec7 th\u1ed1ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n d\u1ea5u hi\u1ec7u chi\u1ebfm quy\u1ec1n phi\u00ean b\u1ea5t th\u01b0\u1eddng\u200b<\/div>\n<\/li>\n
          • \n
            R\u00e0 so\u00e1t quy\u1ec1n truy c\u1eadp m\u00e1y ch\u1ee7 v\u00e0 h\u1ea1n ch\u1ebf truy c\u1eadp tr\u00e1i ph\u00e9p\u200b<\/div>\n<\/li>\n
          • \n
            Gi\u00e1m s\u00e1t h\u00e0nh vi \u0111\u0103ng nh\u1eadp v\u00e0 ho\u1ea1t \u0111\u1ed9ng \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa b\u1ea5t th\u01b0\u1eddng\u200b<\/div>\n<\/li>\n
          • \n
            Gia h\u1ea1n gi\u1ea5y ph\u00e9p n\u1ebfu c\u1ea7n thi\u1ebft \u0111\u1ec3 c\u00f3 th\u1ec3 c\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng\u200b<\/div>\n<\/li>\n<\/ul>\n
            \u0110\u1ed1i v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng s\u1eed d\u1ee5ng b\u1ea3n cloud, nh\u00e0 cung c\u1ea5p \u0111\u00e3 t\u1ef1 \u0111\u1ed9ng tri\u1ec3n khai b\u1ea3n v\u00e1, tuy nhi\u00ean v\u1eabn c\u1ea7n theo d\u00f5i \u0111\u1ec3 ph\u00e1t hi\u1ec7n d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng.<\/p>\n

            L\u1ed7 h\u1ed5ng CVE-2026-3564 l\u00e0 minh ch\u1ee9ng r\u00f5 r\u00e0ng cho r\u1ee7i ro khi qu\u1ea3n l\u00fd kh\u00f3a m\u00e3 h\u00f3a kh\u00f4ng \u0111\u00fang c\u00e1ch trong c\u00e1c h\u1ec7 th\u1ed1ng \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa. Khi c\u00e1c y\u1ebfu t\u1ed1 x\u00e1c th\u1ef1c c\u1ed1t l\u00f5i b\u1ecb l\u1ed9, to\u00e0n b\u1ed9 c\u01a1 ch\u1ebf b\u1ea3o m\u1eadt c\u00f3 th\u1ec3 b\u1ecb v\u00f4 hi\u1ec7u h\u00f3a ch\u1ec9 trong th\u1eddi gian ng\u1eafn.<\/p>\n

            Trong b\u1ed1i c\u1ea3nh c\u00e1c c\u00f4ng c\u1ee5 qu\u1ea3n tr\u1ecb t\u1eeb xa ng\u00e0y c\u00e0ng tr\u1edf th\u00e0nh \u201cx\u01b0\u01a1ng s\u1ed1ng\u201d c\u1ee7a h\u1ea1 t\u1ea7ng CNTT doanh nghi\u1ec7p, vi\u1ec7c b\u1ea3o v\u1ec7 c\u00e1c th\u00e0nh ph\u1ea7n nh\u01b0 kh\u00f3a m\u00e3 h\u00f3a, phi\u00ean \u0111\u0103ng nh\u1eadp v\u00e0 h\u1ec7 th\u1ed1ng x\u00e1c th\u1ef1c c\u1ea7n \u0111\u01b0\u1ee3c \u0111\u1eb7t \u1edf m\u1ee9c \u01b0u ti\u00ean cao nh\u1ea5t. C\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n ch\u1ee7 \u0111\u1ed9ng c\u1eadp nh\u1eadt b\u1ea3n v\u00e1, ki\u1ec3m tra c\u1ea5u h\u00ecnh v\u00e0 gi\u00e1m s\u00e1t h\u1ec7 th\u1ed1ng li\u00ean t\u1ee5c \u0111\u1ec3 tr\u00e1nh tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau ti\u1ebfp theo trong c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng ng\u00e0y c\u00e0ng tinh vi.\u200b<\/p><\/div>\n

            Theo Cyber Press<\/b><\/i><\/div>\n","protected":false},"excerpt":{"rendered":"

            H\u00e3ng c\u00f4ng ngh\u1ec7 ConnectWise v\u1eeba ph\u00e1t \u0111i c\u1ea3nh b\u00e1o kh\u1ea9n v\u1ec1 m\u1ed9t l\u1ed7 h\u1ed5ng trong ph\u1ea7n m\u1ec1m \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa ScreenConnect. L\u1ed7 h\u1ed5ng n\u00e0y c\u00f3 th\u1ec3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e1nh c\u1eafp kh\u00f3a m\u00e3 h\u00f3a c\u1ea5p h\u1ec7 th\u1ed1ng v\u00e0 chi\u1ebfm quy\u1ec1n c\u00e1c phi\u00ean l\u00e0m vi\u1ec7c t\u1eeb xa \u0111ang ho\u1ea1t \u0111\u1ed9ng. \u200b \u0110\u01b0\u1ee3c \u0111\u1ecbnh […]<\/p>\n","protected":false},"author":20,"featured_media":47572,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[4,24,35],"tags":[],"class_list":["post-47571","post","type-post","status-publish","format-standard","has-post-thumbnail","category-kien-thuc-an-toan-thong-tin","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47571","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47571"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47571\/revisions"}],"predecessor-version":[{"id":47573,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47571\/revisions\/47573"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47572"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47571"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47571"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}