{"id":47962,"date":"2026-05-06T16:02:19","date_gmt":"2026-05-06T09:02:19","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47962"},"modified":"2026-05-29T16:03:01","modified_gmt":"2026-05-29T09:03:01","slug":"phat-hien-lo-hong-nghiem-trong-trong-weaver-e-cology-cho-phep-thuc-thi-ma-tu-xa","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/phat-hien-lo-hong-nghiem-trong-trong-weaver-e-cology-cho-phep-thuc-thi-ma-tu-xa\/","title":{"rendered":"Ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Weaver E-cology, cho ph\u00e9p th\u1ef1c thi m\u00e3 t\u1eeb xa"},"content":{"rendered":"<div><b>M\u1ed9t l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong n\u1ec1n t\u1ea3ng Weaver E-cology \u0111ang \u0111\u1eb7t ra nguy c\u01a1 nghi\u00eam tr\u1ecdng \u0111\u1ed1i v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng doanh nghi\u1ec7p. V\u1ea5n \u0111\u1ec1 n\u1eb1m \u1edf m\u1ed9t API g\u1ee1 l\u1ed7i b\u1ecb l\u1ed9, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khai th\u00e1c \u0111\u1ec3 th\u1ef1c thi l\u1ec7nh tr\u00e1i ph\u00e9p v\u00e0 ti\u1ebfn t\u1edbi ki\u1ec3m so\u00e1t to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng t\u1eeb xa.<\/b><br \/>\n\u200b<\/div>\n<div>\n<div class=\"bbImageWrapper  js-lbImage\" title=\"Weaver.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/weaver-png.18958\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img loading=\"lazy\" decoding=\"async\" class=\"bbImage\" title=\"Weaver.png\" src=\"https:\/\/whitehat.vn\/attachments\/weaver-png.18958\/\" alt=\"Weaver.png\" width=\"700\" height=\"390\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<\/div>\n<div>\nL\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c \u0111\u1ecbnh danh CVE-2026-22679, \u0111\u1ea1t m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng CVSS 9.8, \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c phi\u00ean b\u1ea3n Weaver E-cology 10.0 tr\u01b0\u1edbc ng\u00e0y 12\/03\/2026. Theo c\u01a1 s\u1edf d\u1eef li\u1ec7u l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt qu\u1ed1c gia M\u1ef9 (NVD), l\u1ed7 h\u1ed5ng n\u1eb1m \u1edf endpoint: \/papi\/esearch\/data\/devops\/dubboApi\/debug\/method. \u0110\u00e2y v\u1ed1n l\u00e0 m\u1ed9t t\u00ednh n\u0103ng g\u1ee1 l\u1ed7i b\u1ecb l\u1ed9 l\u1ecdt ra ngo\u00e0i m\u00e0 kh\u00f4ng c\u00f3 c\u01a1 ch\u1ebf ki\u1ec3m so\u00e1t quy\u1ec1n truy c\u1eadp ph\u00f9 h\u1ee3p. Khi b\u1ecb khai th\u00e1c, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 g\u1eedi c\u00e1c y\u00eau c\u1ea7u HTTP POSTv\u1edbi c\u00e1c tham s\u1ed1 interfaceName v\u00e0 methodName do ch\u00fang ki\u1ec3m so\u00e1t, t\u1eeb \u0111\u00f3 k\u00edch ho\u1ea1t c\u00e1c h\u00e0m n\u1ed9i b\u1ed9 v\u00e0 d\u1eabn \u0111\u1ebfn th\u1ef1c thi m\u00e3 t\u00f9y \u00fd tr\u00ean h\u1ec7 th\u1ed1ng.<\/p>\n<p>C\u00e1c d\u1ea5u hi\u1ec7u khai th\u00e1c th\u1ef1c t\u1ebf \u0111\u00e3 xu\u1ea5t hi\u1ec7n ch\u1ec9 trong th\u1eddi gian ng\u1eafn sau khi b\u1ea3n v\u00e1 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh. Shadowserver ghi nh\u1eadn ho\u1ea1t \u0111\u1ed9ng li\u00ean quan t\u1eeb ng\u00e0y 31\/03\/2026, trong khi QiAnXin t\u1eebng c\u1ea3nh b\u00e1o t\u1eeb ng\u00e0y 17\/03\/2026 v\u00e0 x\u00e1c nh\u1eadn c\u00f3 th\u1ec3 t\u00e1i hi\u1ec7n l\u1ed7 h\u1ed5ng, d\u00f9 kh\u00f4ng c\u00f4ng b\u1ed1 chi ti\u1ebft k\u1ef9 thu\u1eadt.<\/p>\n<p>Ph\u00e2n t\u00edch t\u1eeb Vega Research cho th\u1ea5y ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c c\u00f3 th\u1ec3 \u0111\u00e3 b\u1eaft \u0111\u1ea7u s\u1edbm h\u01a1n, v\u1edbi b\u1eb1ng ch\u1ee9ng \u0111\u1ea7u ti\u00ean t\u1eeb ng\u00e0y 17\/03\/2026. \u0110i\u1ec1u n\u00e0y \u0111\u1ed3ng ngh\u0129a vi\u1ec7c khai th\u00e1c di\u1ec5n ra g\u1ea7n nh\u01b0 ngay sau khi b\u1ea3n v\u00e1 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh.<\/p>\n<p>Chu\u1ed7i t\u1ea5n c\u00f4ng k\u00e9o d\u00e0i kho\u1ea3ng m\u1ed9t tu\u1ea7n, v\u1edbi nhi\u1ec1u b\u01b0\u1edbc th\u1eed nghi\u1ec7m li\u00ean ti\u1ebfp. Ch\u00fang ti\u1ebfn h\u00e0nh x\u00e1c minh kh\u1ea3 n\u0103ng th\u1ef1c thi m\u00e3 t\u1eeb xa, th\u1ef1c hi\u1ec7n ba l\u1ea7n tri\u1ec3n khai payload nh\u01b0ng kh\u00f4ng th\u00e0nh c\u00f4ng, sau \u0111\u00f3 chuy\u1ec3n sang h\u01b0\u1edbng c\u00e0i \u0111\u1eb7t file MSI song v\u1eabn th\u1ea5t b\u1ea1i. \u0110\u1ed3ng th\u1eddi, nhi\u1ec1u n\u1ed7 l\u1ef1c t\u1ea3i PowerShell t\u1eeb h\u1ea1 t\u1ea7ng \u0111i\u1ec1u khi\u1ec3n b\u00ean ngo\u00e0i c\u0169ng \u0111\u01b0\u1ee3c ghi nh\u1eadn.<\/p>\n<p>\u0110\u00e1ng ch\u00fa \u00fd, file MSI \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng mang t\u00ean \u201cfanwei0324.msi\u201d, \u0111\u01b0\u1ee3c \u0111\u1eb7t theo c\u00e1ch phi\u00ean \u00e2m ti\u1ebfng Trung c\u1ee7a Weaver nh\u1eb1m che gi\u1ea5u m\u1ee5c ti\u00eau th\u1ef1c s\u1ef1. Trong su\u1ed1t chi\u1ebfn d\u1ecbch, ch\u00fang c\u0169ng th\u1ef1c thi c\u00e1c l\u1ec7nh th\u0103m d\u00f2 h\u1ec7 th\u1ed1ng nh\u01b0 whoami, ipconfig v\u00e0 tasklist \u0111\u1ec3 thu th\u1eadp th\u00f4ng tin m\u00f4i tr\u01b0\u1eddng.<\/p>\n<p>H\u00e3ng khuy\u1ebfn ngh\u1ecb t\u1ed5 ch\u1ee9c \u0111ang s\u1eed d\u1ee5ng Weaver E-cology c\u1ea7n c\u1eadp nh\u1eadt ngay l\u00ean phi\u00ean b\u1ea3n \u0111\u00e3 v\u00e1 \u0111\u1ec3 gi\u1ea3m thi\u1ec3u nguy c\u01a1 b\u1ecb khai th\u00e1c.<br \/>\n\u200b<\/p><\/div>\n<div style=\"text-align: right;\"><b><i>Theo The Hacker News<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong n\u1ec1n t\u1ea3ng Weaver E-cology \u0111ang \u0111\u1eb7t ra nguy c\u01a1 nghi\u00eam tr\u1ecdng \u0111\u1ed1i v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng doanh nghi\u1ec7p. V\u1ea5n \u0111\u1ec1 n\u1eb1m \u1edf m\u1ed9t API g\u1ee1 l\u1ed7i b\u1ecb l\u1ed9, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khai th\u00e1c \u0111\u1ec3 th\u1ef1c thi l\u1ec7nh tr\u00e1i [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":47963,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47962","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47962"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47962\/revisions"}],"predecessor-version":[{"id":47964,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47962\/revisions\/47964"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47963"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}