Upload
ngoliem
View
222
Download
1
Embed Size (px)
Citation preview
BO THONG TIN VA TRUYEN THONG CVC AN TOAN THONG TIN
S6: j^ ' /^ /CATTT-TDQLGS V/v canh bao nguy ca mat an toan thong
tin tren cac thiet bi phat WiFi
CONG HOA XA H O I CHI) NGHIA VIET NAM D9C l a p - Tu- do - H a n h phuc
Hd Ngi, ngdy 19 thdng 6 nam 2017
Kinh giri:
- Dan vj chuyen trach v6 CNTT cac Bo, ca quan ngang Bo,
ca quan thuoc Chi'nh phu;
- Sa Thong tin va Truyen thong cac tinh, thanh pho true
thupc Trung uang;
- Cac Tap doan kinh te; Tong cong ty nha nuoc; To chuc tai
chi'nh va Ngan hang.
Ngay 15/6/2017, WikiLeaks (to chuc chuyen nghien cuu, phan tich va
cong bo cac tai lieu nhay cam) cong bo tai lieu lien quan den cong cu duac goi
la Cherry Blossom de khai thac 16 hong, chiem quyen dieu khien cac thiet bi
mang khong day (bao gom ca cac bo dinh tuyen va bp phat song Wifi) nham
thuc hien cac hoat dpng giam sat Internet va khai thac, tan cong cac he thong
khac thong qua cac thiet bi mang nay.
Khi thiet bi Wifi bi kiem soat, ke tan cong c6 the thuc hien thu thap thong
tin va gui ve may chu dieu khien hoac c6 the nhan lenh de thuc hien cac hanh
dpng nhu:
- Giam sat luu luang mang de thu thap thong tin: dia chi email, tai khoan
chat, dia chi MAC, VoIP;
- Chuyen huang nguai dung tai trang web dpc hai;
- Chen npi dung dpc hai vao luong du lieu nham tan cong he thong muc
tieu;
-Thiat lap kat noi VPN ...
Cong cu Cherry Blossom c6 the khai thac diem yau tran nhiau dong thiat
bi cua cac hang gom: 3Com, Accton, Aironet/Cisco, Allied Telesyn, Ambit,
A M I T , Apple, Asustek Co, Belkin, Breezecom, Dlink, Gemtek, Linksys,
Orinoco, Zcom ... (Danh sach chi tiat cac thiat bi do WikiLeak cong bo trong
Phu luc kem theo).
1
Cue An loan thong tin de nghi cac co quan, to chuc tang cuang cac bien
phcip bao dam an toan thong tin doi vdi cac thiet bi c6 kha nang bi anh hudng
thuoc pham vi minh quan ly nhu sau:
- Ra soat lai toan bo thiet bi Wifi trong he thong mang, kiem tra va cap
nhat Icn phien ban Firmware mdi nhat cho tat ca cac thiet bj, dac biet la cac thiet
bj CO trong Phu Luc kem theo.
- Kiem soat va giam sat cac chuc nang quan tri tren cac thiet bi nham
ngan chan cac cuoc tan cong mang lai dung cac thiet bi nay.
Khi trien khai cac npi dung neu tren, trong trudng hap can thiet, Quy dan
vj CO the lien he vdi Cue An toan thdng tin, so dien thoai: 04.3943.6684, thu
dien tu [email protected] de dugc phoi hop, hd tra.
Tran trpng./.
Noi nhan: KT. CyC TRlfdNG ^'"^'^ PHO e y e TRirdNG
- Lanii dao Bo (de b/c); - Cue ti irong (de b/c}; - Co' quan do'n vi thuoc Bo; - Lu'ii: VT. TDOLGS.
r 1
Phu luc: Danh sach cac thiet bi c6 the bj anh huong boi cong cu khai thac 16 h6ng Cherry Blossom
(Kem theo Cong van s6 ^jQ/CA TTT-TDQLGS ngdy 19/6/2017)
Ten hang Model Cong Quan tri
3Com 3CRWE454A72 HTTP
3Com 3CRWX120695A 3Com 3CRWX275075A MAP?
Cnm 3CRTRV10075 HTTP j c o m "^PR W F 4 1 1 Qfi
J \ ^ I \ W I 1 7 0 H T T P P r n n r i p t n r v I I I i r , I I u u i icL<ii 1 V
3Com 3 L . K W b 4 j 4 0 / / I 4 T T D
3Com 3CRWE53172 HTTP 3Com 3CRWE554G72T HTTP 3Com 3CRWE554G72T U HTTP 3Com 3CRWE675075 HTTP, SNMP 3Com T P R W F 7 ' ) S n 7 S A I J V - K W E . / Z J O / J A . - U O O IN IVi i
3Com 3CRWE754G72- A HTTP 3Com 3CRWE754G72- B HTTP 3Com 3CRWE825075A- US SNMP, HTTP 3Com 3CRWE875075A- US SNMP, irrTP 3Com 3CRWE91096A HTTP 3Com 3CRWE91096A HTTP
3Com 3CRWE920G73- US HTTP, SNMP, 3ND
3Com 3CRWEASY96A HTTP 3Com 3CRWEASY96A HTTP 3Com 3CRWEASYG73- U HTTP, SNMP. 3ND 3Com 3CRWX440095A 3Com 3CWE820A-US Telnet Accton WA3101 HTTP, SNMP Accton WA4101 HTTP SNMP Accton WA5101 HTTP, SNMP Accton WA5201 HTTP, SNMP Accton WA6101 HTTP, SNMP Accton WA6102 HTTP, SNMP / A C L l O I l W A ^ l n7Y H T T P * s M M P T p l n p l
Aironet/ Cisco Aironet 1310 Outdoor A c c e s s r O I I l l / O l l U g C
Telnet, HTIT, FTP, TFTP. Q M K / I P ( 'r»ncr\ lp n(^r1 oi^ijvi i , c u i i b u j c p u i I
Aironet/ Cisco Aironet 350 Series Wireless Bridge
Telnet, HTTP, FTP, FF l P. SNMP, console port
Aironet/ Cisco 1300 Series Outdoor Access Point/Bridge
Aironet/ Cisco Aironet 1100 Series Access Point
Telnet, HTTP, FTP. TFTP. SNMP. console port
Aironet/ Cisco Aironet 1200 Series a/b/g Access Point
Telnet. HTTP, FTP, TFTP, SNMP, console port
Aironet/ Cisco Aironet 1310 Outdoor Access Point/Bridge
Telnet, HTTP, FTP. TFTP. SNMP. console port
Aironet/ Cisco Aironet 350 Series Telnet, HTTP, FTP, TFTP. SNMP. console port
Aironet/ Cisco Aironet 350 Series AP Telnet. HTTP, FTP. TFTP. SNMP, console port
Aironet/ Cisco Cisco Aironet 1400 Series Wireless Bridge
Telnet, HTTP, FTP. TFTP. SNMP, console port
Aironet/ Cisco Cisco Aironet 1400 Series Wireless Bridge
Telnet- HTTP. FTP. TFTP. SNMP. console port
Allied Telesyn AT-WA1004G HTTP
Allied Telesvn AT-WA7500 i l l T T i l f ^ \ / V i
HTTP, SNMP. Telnet. RS-232
Allied Telesyn AT-WL2411 HTTP, SNMP. Telnet, RS-737 Z - J Z
A l l i p H 'T'p |pc\m
Ambit IN/A H1 I r , 1 einet Ambit N/A HTTP. Telnet Ambit AMIT, Inc WIS418 HTTP. Proprieta ry AMIT, Inc WQS418 HTTP, Proprieta ry /\ivii 1 , inc W U b i Z o n 1 1 1 , 1 roprieid ry A i N i coiiiiiiunicd lions M / A IN/ A
Apple AirPort F.xnress Asustek Co Wi,-1 oUg Proprieta ry Asustek Co WL-300 SNMP. Propneta ry Asustek Co WL-300g Proprieta ry Asustek Co WL-330 HTTP, Proprieta ry Asustek Co WL-330g HTTP. Proprieta ry
Asustek Co WI -500h HTTP, UPnP Internet Gateway Device
Asustek Co WL-500g HTTP, UPnP Internet Gateway Device
Belkin F5D7230-4 HTTP. Proprieta ry Belkin F5D8230-4 HTTP, Proprieta ry Breezecom AP-10 SNMP. RS-232 (telent) Breezecom AP-IOD SNMP, RS-232 (telent) Breezecom BU-DS.ll SNMP Breezecom BU-DS.llD SNMP Breezecom DS.5800 Base Unit SNMP Breezecom RB-DS.ll SNMP Breezecom RB-DS.llD SNMP Breezecom SA-IO SNMP, RS-232 (telent) Breezecom SA-IOD SNMP, RS-232 (telent) Breezecom SA-40 SNMP, RS-232 (telent) Breezecom SA-40D SNMP, RS-232 (telent) Breezecom WB-10 SNMP, RS-232 (telent) Breezecom WB-IOD SNMP, RS-232 (telent) Cameo WLB-2006 2007 HTTP Cameo WLB-2203/2204 HTTP
4
Cameo WLG-2002/2003 HTTP Cameo WLG-2204/2205 HTTP Cameo
D-Link AP Manager or D- View SNMP management module?
D-Link DCS-2100+ HTTP D-Link DCS-3220G HTTP D-Link DCS-5300G HTTP, FTP. IPSurveilan ce D-Link DCS-5300W HTTP. FTP. Telnet D-Link DI-514 HTTP D-Link DI-524 HTTP D-Link DI-624 HTTP D-Link DI-714P+ HTTP, SNMP D-Link Dl-774 HTTP D-Link DI-784 HTTP D-Link DI-824VUP HTTP. SNMP D-Link DP-311P SNMP D-Link DP-311U SNMP D-Link DPG-2000W D-Link DP-G310 SNMP, Telnet D-Link DP-G321 SNMP, Proprieta ry D-Link DSM-320 INMPR D-Link DVC-llOO N/A D-Link DWL-1000AP+ HTTP, AP Manager D-Link DWL-120 N/A D-Link DWL-1700AP SNMP, RS-232 Console
D-Link DWL-1750 SNMP, Telnet, HTTP. RS-232 Console
D-Link DWL-2100AP HTTP, SNMPv3 , AP Manager
D-Link DWL-2200AP SNMPv3 , Telnet, HITP, AP Manager
D-Link DWL-2700AP Telnet, AP Manager SNMPv3
D-Link DWL-7000AP HTTP
D-Link IT T i / \Z7 A r\
DWL-7100AP SNMP, Telnet, HTTP, AP Manager
D-Link DWL-800AP+ HTTP D-Link DWL-810+ HTTP D-Link DWL-G700AP HTTP D-Link DWL-G730AP HTTP D-Link DWL-G800AP HTTP D-Link DWL-G810 HTTP D-Link DWL-G820 HTTP, Telnet Gemtek WADB-IOOG HTTP Gemtek WHAPC-IOOGE I I G HTTP Gemtek WHRTC-IOOGW HI IP Gemtek WX-1500 HTTP, SNMP
Gemtek WX-1590 SNMP
5
Gemtek WX-1600 MXTP Prnnripta rv 1 1 ^ 1 I V L / i i \ b ' i c i I y
Gemtek WX-1688 HTTP, Proprieta ry Gemtek WX-2214 HTTP Gemtek WX-2501 HTTP Gemtek WX-5520A HTTP Gemtek WX-5520G HTTP Gemtek WX-5525G HTTP Gemtek WX-5525R HTTP Gemtek WX-5541 HTTP Gemtek WX-5545 HTTP, Proprieta ry Gemtek WX-5551 Proprieta ry Gemtek WX-5555 HTTP Gemtek WX-5800 HTTP Fipmtpk WX-S801 HTTP G p m t p k WX-S803
VV /\. j o \ j y HTTP 1 1 1 I X
Global Sun CM054RT HTTP Global Sun WL AP 2454 NMO HTTP Olnhnl Sun W l AP 2454 OAO HTTP
i l l 1 1 rilnhnl Siin V J I V V t * 1 k J L l l l
W I AP 2454 O A 3 HTTP i l l 1 1
O l O D a i o U n W/T X/tT 1 1 T i n W L M U Z 4 J 4 I J I U T 4 T T P
Global Sun WL RT 2454 NMO HTTP Global Sun WL RT2554 QAO HTTP Global Sun WL UD 2454 1310 HTTP Hsing Tech N/A Linksys BEFWnS4 HTTP Linksys WAP 11 HTTP Linksys WAP51AB HTTP Linksys WAP54G HTTP Linksys WAP55AG HTTP, SNMP Linksys WCG200 HTTP Linksys WET54G HTTP Linksys WET54GS5 HTTP Linksys W G A l l B Proprieta ry Linksys WGA54G HTTP Linksys W M A l l B Proprieta ry Linksys W M L S l l B N/A Linksys WPG12 Proprieta ry E H l K S y S W r k J j ' + v j Pf*/v r v r i T i t ^1 v\i r l U p i i c l a 1 y
I I t l k C V C W P S l 1 VV r o i 1
HTTP Linksys W l i j j 4 L r U Z H i 1 1 , o i N M r . rroprieta ry Linksys WRE54G HTTP, Proprieta ry Linksys WRT54G HTTP Linksys WRT54GP2 HTTP Linksys WRT54GS HTTP
6
Linksys WRT55AG HTTP
Linksys WRV54G HTTP
Linksys W V C l l B HTTP Linksvs WVC54G HTTP, Proprieta ry Motorola WR850G HTTP. Proprieta ry Orinoco AP-2000 Access Point SNMP, Telnet, HTTP Orinoco AP-2500 Access Point SNMP, Telnet, HTTP
Orinoco AP-4000 Tri-Mode Access Point
SNMP, Telnet, HTTP
Orinoco AP-600 Access Point SNMP, Telnet, HTTP Orinoco Orinoco AP-700 SNMP, Telnet, HTTP Orinoco Tsunami MP.l 1 SNMP, Telnet, HTTP Orinoco Tsunami QuickBridge 11 SNMP, Telnet, HTTP Orinoco Tsunami QuickBridge 20 Proprieta ry Orinoco Tsunami QuickBridge 60 Proprieta ry Planet Tec WAP-1963A HTTP
Planet Tec WAP-4030 HTTP
Planet Tec WRT-413 HTTP, UPnP
Planet Tec WAP-1963 HTTP Planet Tec WAP-1966 HTTP, Proprieta ry Planet Tec WAP-4000 HTTP, Proprieta ry Planet Tec WAP-4050 7
Planet Tec WAP-5000 SNMP Planet Tec WAP-5100 SNMP Planet Tec WL-U356 Proprieta ry Planet Tec WRT-403 HTTP, UPnP
Planet Tec WRT-410 HTTP
RPT Int N/A
Senao 5GHz/2.4GHz Dual Band Wireless Access Point
SNMP, Telnet, HTTP
Senao Aries2 HTTP, Telnet
Senao Dual Band Wireless Access Point
HTTP, Telnet
Senao Long Range Wireless Dongle
HTTP
Senao Long Range Wireless Outdoor Client Bridge
HTTP, SNMP
Senao NL-2511AP PRO PLUS SNMP, Telnet, HTTP Senao NL2511SRP1US SNMP, Telnet, HTTP Senao NL2511SR Plus(A) SNMP, Telnet, HTTP Senao NL-2611AP3 PLUS HTTP Senao NL-3054CB3 PLUS HTTP
Senao Outdoor Long Range Wireless Bridge/AP
HTTP
o C l l a u Outdoor Wireless Access Point/Router
SNMP Telnet HTTP
Senao Outdoor Wireless Bridge SNMP, Telnet, HTTP
7
Senao SL2511SRP1US SNMP, Telnet, HTTP
Senao Wireless l l g Broadband Router HTTP
Senao Wireless Muiii- uiieni HTTP Senao Bridge/ Access Point HTTP
US Robotics USR5420 Propneta ry US Robotics USR5430 HTTP
US Robotics USR5450 HTTP, SNMP. Telnet (over seiral port), Proprieta ry
US Robotics USR8054 HTTP Z-Com XI-2250 Z-Com XG-UOO HTTP, Telnet, Proprieta ry Z-Com XG-2000 SNMP Z-Com XG-3020 H11P, 1 eInet, Proprieta ry 7 P o m Y P . 580 A.CJ-3oU r i 1 1 r , 1 einei. rropneia ry Z-Com XG-580Plus HTTP, Telnet, Proprieta ry Z-CnTTi
Z - C n m t j \ ^ V y •
XG-582 Z-Com XI-1450 Z-Com XI-1500 Z-Com XI-1510
8