{"id":831,"date":"2023-03-16T10:20:40","date_gmt":"2023-03-16T10:20:40","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/otkrivene-su-dvije-zero-day-ranjivosti-azurirajte-svoje-sustave\/"},"modified":"2026-11-04T08:47:32","modified_gmt":"2026-11-04T08:47:32","slug":"otkrivene-su-dvije-zero-day-ranjivosti-azurirajte-svoje-sustave","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/otkrivene-su-dvije-zero-day-ranjivosti-azurirajte-svoje-sustave\/","title":{"rendered":"Otkrivene su dvije zero-day ranjivosti. A\u017eurirajte svoje sustave!"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Microsoft je objavio zakrpe za o\u017eujak, a me\u0111u ranjivostima se nalaze \u010dak dvije zero-day i devet kriti\u010dnih ranjivosti koje se aktivno iskori\u0161tavaju.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pretplatite se na na\u0161 besplatni servis <strong><a href=\"https:\/\/cve.cert.hr\/\">CERT CVE<\/a> <\/strong>i prvi primajte obavijesti o novim ranjivostima.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Eskalacija privilegija u Microsoft Outlooku (<a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2023-23397\">CVE-2023-23397<\/a>)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CVSS \u2013 <strong>9,8<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Omogu\u0107uje akterima da slanjem posebno izra\u0111ene e-poruke pove\u017eu ciljani ure\u0111aj s udaljenim URL-om i preuzmu Net-NTLMv2 <em>hash<\/em> Windows ra\u010duna. Nakon \u0161to napada\u010d do\u0111e u posjed \u017ertvinog <em>hasha<\/em>, mo\u017ee ga iskoristiti za spajanje na drugu uslugu pomo\u0107u njihovog ra\u010duna.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Specifi\u010dnost je u tome \u0161to se zlonamjerni sadr\u017eaj e-po\u0161te automatski aktivira nakon \u0161to ga Outlook dohvati i obradi. Tj. <strong>do iskori\u0161tavanja ranjivosti mo\u017ee do\u0107i, a da \u017ertva uop\u0107e ne pogleda poruku!<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iskori\u0161tavanje ove ranjivosti otkrio je Ukrajinski CERT, nakon \u0161to je primije\u0107eno da dr\u017eavno sponzorirani akteri iz Rusije koriste ovu ranjivost kako bi ukrali pristup i podatke odre\u0111enih ra\u010duna.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Zaobila\u017eenje sigurnosnih zna\u010dajki Windows SmartScreen-a (<a href=\"https:\/\/msrc.microsoft.com\/update-guide\/en-US\/vulnerability\/CVE-2023-24880\">CVE-2023-24880<\/a>)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CVSS \u2013 <strong>5,4<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nakon \u0161to preuzmete datoteku s interneta, windows na nju dodaje tzv. <em>zone identifier<\/em>, a nakon pokretanja datoteke vr\u0161i sigurnosnu provjeru. Ova ranjivost mo\u017ee biti iskori\u0161tena za zaobila\u017eenje Mark-of-the-Web (MotW) za\u0161tite prilikom otvaranja nepouzdanih datoteka preuzetih s interneta, a nastala je prilikom izdavanja jedne zakrpe pro\u0161le godine. Ranjivost zahva\u0107a sve podr\u017eane verzije Windows operativnog sustava.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u0161e od izdanim zakrpama mo\u017eete pro\u010ditati na: <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-march-2023-patch-tuesday-fixes-2-zero-days-83-flaws\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-march-2023-patch-tuesday-fixes-2-zero-days-83-flaws\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Zato, a\u017eurirajte svoje sustave kako ove ranjivosti ne bi bile iskori\u0161tene, a va\u0161i sustavi kompromitirani.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>#SurfajSigurnije<\/strong><\/p>","protected":false},"excerpt":{"rendered":"<p>Microsoft je objavio zakrpe za o\u017eujak, a me\u0111u ranjivostima se nalaze \u010dak dvije zero-day i devet kriti\u010dnih ranjivosti koje se aktivno iskori\u0161tavaju. Pretplatite se na na\u0161 besplatni servis CERT CVE i prvi primajte obavijesti o novim ranjivostima. Eskalacija privilegija u Microsoft Outlooku (CVE-2023-23397) CVSS \u2013 9,8 Omogu\u0107uje akterima da slanjem posebno izra\u0111ene e-poruke pove\u017eu ciljani [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1231,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-831","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=831"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/831\/revisions"}],"predecessor-version":[{"id":1235,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/831\/revisions\/1235"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1231"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=831"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=831"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}