{"id":71678,"date":"2024-06-13T13:39:00","date_gmt":"2024-06-13T05:39:00","guid":{"rendered":"https:\/\/www.ioiotimes.com\/?p=71678"},"modified":"2024-06-13T12:03:40","modified_gmt":"2024-06-13T04:03:40","slug":"%e9%9d%a9%e6%96%b0%e6%b1%bd%e8%bb%8a%e7%b6%b2%e8%b7%af%e5%ae%89%e5%85%a8%ef%bc%8cvicone%e8%88%87asrg%e8%81%af%e6%89%8b%e6%8f%90%e4%be%9b%e7%84%a1%e8%88%87%e5%80%ab%e6%af%94%e7%9a%84%e6%b1%bd%e8%bb%8a","status":"publish","type":"post","link":"https:\/\/www.ioiotimes.com\/?p=71678","title":{"rendered":"\u9769\u65b0\u6c7d\u8eca\u7db2\u8def\u5b89\u5168\uff0cVicOne\u8207ASRG\u806f\u624b\u63d0\u4f9b\u7121\u8207\u502b\u6bd4\u7684\u6c7d\u8eca\u5a01\u8105\u60c5\u5831\u7db2"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">\u7d50\u5408\u4e26\u512a\u5316CVE\u8cc7\u6599\u5eab\uff0c\u65b9\u4fbf\u6c7d\u8eca\u7522\u696d\u6c7a\u7b56\u8005\u8f15\u9b06\u4f7f\u7528\uff0c\u70ba\u5168\u7403\u6c7d\u8eca\u7522\u696d\u7db2\u8def\u5b89\u5168\u5236\u5b9a\u6a19\u6e96<\/h3>\n\n\n\n<p>\u5168\u7403\u8eca\u7528\u8cc7\u5b89\u9818\u5c0e\u5ee0\u5546 VicOne \u548c\u5c08\u6ce8\u65bc\u63a8\u9032\u6c7d\u8eca\u5b89\u5168\u884c\u696d\u7684\u975e\u71df\u5229\u7d44\u7e54\u6c7d\u8eca\u5b89\u5168\u7814\u7a76\u96c6\u5718 (ASRG)\uff0c\u4eca\u5929\u5728\u6155\u5c3c\u9ed1 BMW \u4e16\u754c\u8209\u884c\u7684 Auto-ISAC \u6b50\u6d32\u7db2\u8def\u5b89\u5168\u5cf0\u6703\u4e0a\uff0c\u5ba3\u5e03\u96d9\u65b9\u5c07\u7dca\u5bc6\u5408\u4f5c\u63d0\u4f9b\u6db5\u84cb\u6700\u5168\u9762\u7684\u6c7d\u8eca\u5a01\u8105\u60c5\u5831\u4ee5\u5354\u52a9\u8eca\u8f1b\u7db2\u8def\u5b89\u5168\u6f0f\u6d1e\u7684\u767c\u73fe\u8207\u4fee\u5fa9\u3002VicOne \u548c ASRG \u5171\u540c\u555f\u52d5\u4e00\u500b\u5c08\u9580\u91dd\u5c0d\u8eca\u5ee0 (OEM)\u3001\u4f9b\u61c9\u5546\u53ca\u6c7d\u8eca\u7522\u696d\u76f8\u95dc\u5ee0\u5546\u7684\u8cc7\u6599\u5eab AutoVulnDB\uff0c\u4ee5\u6b64\u5e6b\u52a9\u4ed6\u5011\u767c\u73fe\u4e26\u4fee\u5fa9\u7db2\u8def\u5b89\u5168\u6f0f\u6d1e\uff0c\u4e26\u78ba\u4fdd\u672a\u4f86\u9023\u7db2\u8eca\u8f1b\u7684\u79fb\u52d5\u5b89\u5168\u3002<\/p>\n\n\n\n<p>VicOne \u548c ASRG \u7684\u65b0\u8cc7\u6599\u5eab\u70ba\u6c7d\u8eca\u7db2\u8def\u5b89\u5168\u8a2d\u5b9a\u4e86\u6a19\u6e96\u3002AutoVulnDB \u88dc\u5145\u4e26\u64f4\u5c55\u4e86\u7f8e\u570b\u570b\u5bb6\u6f0f\u6d1e\u8cc7\u6599\u5eab (National Vulnerability Database, NVD) \u548c\u7f8e\u570b\u901a\u7528\u6f0f\u6d1e\u53ca\u5f31\u9ede\u8cc7\u6599\u5eab (MITRE CVE) \u63d0\u4f9b\u7684\u73fe\u6709\u57fa\u790e\u6846\u67b6\uff0c\u91dd\u5c0d\u6c7d\u8eca\u7522\u696d\u7684\u7279\u6b8a\u6027\uff0c\u9032\u4e00\u6b65\u63d0\u4f9b\u7cfb\u7d71\u4e0a\u4e0b\u6587\u548c\u60c5\u5883\u8cc7\u6599\u3002AutoVulnDB \u78ba\u5b9a\u6bcf\u500b\u6f0f\u6d1e\u7684\u98a8\u96aa\u7d1a\u5225\uff0c\u4f7f\u6c7d\u8eca\u884c\u696d\u6240\u6709\u9818\u57df\u7684\u6c7a\u7b56\u8005\u66f4\u5bb9\u6613\u4f7f\u7528\uff0c\u65b9\u4fbf\u4ed6\u5011\u505a\u51fa\u66f4\u597d\u3001\u66f4\u5feb\u7684\u696d\u52d9\u548c\u958b\u767c\u6c7a\u7b56\uff0c\u4e26\u62b5\u79a6\u751a\u81f3\u9632\u6b62\u7db2\u8def\u653b\u64ca\u3002AutoVulnDB \u8207\u5168\u7403\u6700\u5927\u975e\u9650\u5b9a\u5ee0\u5546 ZDI \u6f0f\u6d1e\u61f8\u8cde\u8a08\u756b\u4e00\u8d77\u63d0\u4f9b\u6700\u5168\u9762\u7684\u6f0f\u6d1e\u60c5\u5831\u8986\u84cb\u3002<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/www.ioiotimes.com\/wordpress\/wp-content\/uploads\/2024\/06\/20240613_NEWS_2-13-1024x576.jpg\" alt=\"\" class=\"wp-image-71679\" title=\"\" srcset=\"https:\/\/www.ioiotimes.com\/wordpress\/wp-content\/uploads\/2024\/06\/20240613_NEWS_2-13-1024x576.jpg 1024w, https:\/\/www.ioiotimes.com\/wordpress\/wp-content\/uploads\/2024\/06\/20240613_NEWS_2-13-300x169.jpg 300w, https:\/\/www.ioiotimes.com\/wordpress\/wp-content\/uploads\/2024\/06\/20240613_NEWS_2-13-768x432.jpg 768w, https:\/\/www.ioiotimes.com\/wordpress\/wp-content\/uploads\/2024\/06\/20240613_NEWS_2-13.jpg 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">\u25b2AutoVulnDB\u91dd\u5c0d\u6c7d\u8eca\u7522\u696d\u7684\u7279\u6b8a\u6027\uff0c\u9032\u4e00\u6b65\u63d0\u4f9b\u7cfb\u7d71\u4e0a\u4e0b\u6587\u548c\u60c5\u5883\u8cc7\u6599\uff0c\u4e26\u78ba\u5b9a\u6bcf\u500b\u6f0f\u6d1e\u7684\u98a8\u96aa\u7d1a\u5225\uff0c\u8b93\u6c7d\u8eca\u884c\u696d\u6240\u6709\u9818\u57df\u7684\u6c7a\u7b56\u8005\u66f4\u5bb9\u6613\u505a\u51fa\u66f4\u597d\u3001\u66f4\u5feb\u7684\u696d\u52d9\u548c\u958b\u767c\u6c7a\u7b56<\/figcaption><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u96a8\u8457\u5168\u7403\u9023\u7db2\u6c7d\u8eca\u666e\u53ca\uff0c\u6c7d\u8eca\u751f\u614b\u7cfb\u7d71\u8907\u96dc\u5ea6\u5927\u5e45\u589e\u52a0\uff0c\u50c5\u50c5 2023 \u5e74\u4e0a\u534a\u5e74\uff0c\u5168\u7403\u5c31\u901a\u5831\u4e86 200 \u591a\u500b\u6f0f\u6d1e\uff0c\u5176\u4e2d\u5305\u62ec\u5f71\u97ff\u591a\u500b\u6c7d\u8eca\u54c1\u724c\u7684\u95dc\u9375\u4e2d\u592e\u8655\u7406\u5668 (CPU) \u7f3a\u9677\uff0c\u6c7d\u8eca\u7522\u696d\u7db2\u8def\u5b89\u5168\u9762\u81e8\u7684\u5a01\u8105\u6b63\u5728\u8fc5\u901f\u589e\u52a0\u3002\u6f0f\u6d1e\u901a\u5831\u9069\u7528\u65bc\u5404\u7a2e\u9023\u7db2\u6c7d\u8eca\u7d44\u4ef6\u548c\u7cfb\u7d71\uff0c\u5305\u62ec\u8eca\u8f09\u8cc7\u8a0a\u5a1b\u6a02\u7cfb\u7d71 (IVI)\u3001\u4f5c\u696d\u7cfb\u7d71 (OS) \u548c\u96fb\u52d5\u8eca\u5145\u96fb\u5668 (EV charger) \u7b49\u3002\u7dad\u8b77\u6c7d\u8eca\u7522\u696d\u7db2\u8def\u5b89\u5168\u7684\u539f\u5247\u4e4b\u4e00\u662f\u5728\u8eca\u8f1b\u4e0a\u5e02\u4e4b\u524d\u5c31\u8b58\u5225\u51fa\u4e26\u4e14\u6d88\u9664\u6578\u4f4d\u5a01\u8105\u548c\u4ee5\u524d\u672a\u77e5\u7684\u6f0f\u6d1e\u3002VicOne \u548c ASRG \u5728 AutoVulnDB \u7684\u5408\u4f5c\u5c31\u662f\u8981\u767c\u8d77\u4e00\u5834\u904b\u52d5\uff0c\u5171\u540c\u62b5\u79a6\u3001\u9632\u8b77\u6574\u500b\u6c7d\u8eca\u7522\u696d\u7684\u65b0\u98a8\u96aa\u3002<\/p>\n\n\n\n<p>ASRG \u5275\u8fa6\u4eba John Heldreth \u8868\u793a\uff1a\u300c\u6211\u5011\u611f\u8b1d VicOne \u5728\u5275\u5efa\u8eca\u8f1b\u5c08\u5c6c AutoVulnDB CVE \u8cc7\u6599\u5eab\u65b9\u9762\u7684\u652f\u63f4\u548c\u5728\u8eca\u7528\u8cc7\u5b89\u4e0a\u7121\u51fa\u5176\u53f3\u7684\u5c08\u696d\u77e5\u8b58\u3002\u9019\u662f\u8de8\u51fa\u7684\u7b2c\u4e00\u6b65\uff0c\u4e5f\u662f\u4e00\u9805\u9700\u8981\u6301\u7e8c\u9032\u884c\u7684\u5de5\u4f5c\uff0c\u56e0\u70ba\u7db2\u8def\u653b\u64ca\u6c38\u9060\u4e0d\u6703\u505c\u6b62\uff0c\u4e14\u60c5\u6cc1\u53ea\u6703\u52a0\u5287\u3002\u6211\u5011\u9f13\u52f5\u696d\u5167\u5c08\u696d\u4eba\u58eb\u3001\u7db2\u8def\u5b89\u5168\u5c08\u5bb6\u548c\u7814\u7a76\u4eba\u54e1\u52a0\u5165\u63a2\u7d22\u9019\u500b\u8cc7\u6599\u5eab\uff0c\u900f\u904e\u5831\u544a\u4ed6\u5011\u7684\u767c\u73fe\u4f86\u53c3\u8207\u4e26\u6301\u7e8c\u589e\u9032\u8cc7\u6599\u5eab\u8c50\u5bcc\u5ea6\u3002AutoVulnDB \u662f\u7531\u975e\u71df\u5229\u7d44\u7e54\u6240\u5275\u5efa\uff0c\u76ee\u7684\u7d14\u7cb9\u662f\u70ba\u4e86\u63d0\u9ad8\u6c7d\u8eca\u7db2\u8def\u5b89\u5168\u6027\u3002\u9019\u8cc7\u6599\u5eab\u7684\u958b\u767c\u6e90\u81ea\u4e00\u500b\u793e\u7fa4\u7684\u652f\u6301\uff0c\u6211\u5011\u9700\u8981\u60a8\u7684\u56de\u994b\u3001\u8ca2\u737b\u548c\u60f3\u6cd5\uff0c\u4e00\u540c\u5c07\u76ee\u524d\u7684\u521d\u7248\u8cc7\u6599\u5eab\u63d0\u5347\u5230\u4e00\u500b\u65b0\u7684\u6c34\u5e73\u3002\u300d<\/p>\n\n\n\n<p>VicOne \u57f7\u884c\u9577\u912d\u5955\u7acb (Max Cheng) \u8868\u793a\uff1a\u300c\u53ca\u6642\u3001\u5168\u9762\u6027\u7684\u6f0f\u6d1e\u5075\u6e2c\u548c\u4fee\u5fa9\u5c0d\u6c7d\u8eca\u7522\u696d\u7684\u91cd\u8981\u6027\uff0c\u503c\u5f97\u53cd\u8986\u4e0d\u65b7\u5730\u5f37\u8abf\u3002VicOne \u5df2\u7d2f\u7a4d\u591a\u5e74\u4e26\u80fd\u63d0\u4f9b\u5c08\u696d\u5805\u5be6\u7684\u6c7d\u8eca\u5a01\u8105\u60c5\u5831\uff0c\u6db5\u84cb\u7bc4\u570d\u5f9e\u4ee5\u5f80\u672a\u77e5\u7684\u7db2\u8def\u554f\u984c\u5230\u5df2\u77e5\u4f46\u5c1a\u672a\u89e3\u6c7a\u7684\u7db2\u8def\u554f\u984c\u3002\u4f5c\u70ba\u6c7d\u8eca\u7db2\u8def\u5b89\u5168\u89e3\u6c7a\u65b9\u6848\u7684\u9818\u5c0e\u8005\uff0c\u9664\u4e86\u63d0\u4f9b\u8eca\u7528\u8cc7\u5b89\u65b9\u6848\u5354\u52a9\u6c7d\u8eca\u88fd\u9020\u5546\u548c Tier 1 \u4f9b\u61c9\u5546\u62b5\u79a6\u4e0d\u65b7\u9032\u5316\u7684\u5a01\u8105\u4e26\u4e14\u7b26\u5408\u76f8\u95dc\u898f\u7bc4\uff0c\u900f\u904e\u8207 ASRG \u7684\u5408\u4f5c\uff0c\u5e0c\u671b\u9577\u671f\u8015\u8018\u5275\u5efa\u4e00\u500b\u5f37\u5927\u7684\u793e\u5340\uff0c\u4ee5\u6301\u7e8c\u5354\u4f5c\u3001\u5171\u540c\u6539\u5584\u6c7d\u8eca\u7db2\u8def\u5b89\u5168\u3002\u300d<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>AutoVulnDB\u7684\u4e3b\u8981\u529f\u80fd\u5305\u62ec\uff1a<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u65b9\u4fbf\u4f7f\u7528\u8005\u64cd\u4f5c\u4f7f\u7528\u7684\u641c\u5c0b\u4ecb\u9762\uff0c\u65e8\u5728\u8f15\u9b06\u5b58\u53d6\u76f8\u95dc\u6f0f\u6d1e\u8cc7\u8a0a<\/li>\n\n\n\n<li>\u524d\u7aef\u548c\u5f8c\u7aef\u958b\u767c\u78ba\u4fdd\u9806\u66a2\u7684\u4f7f\u7528\u8005\u9ad4\u9a57<\/li>\n\n\n\n<li>\u5f37\u5927\u7684\u6578\u64da\u7ba1\u9053\u7d50\u5408\u54c1\u8cea\u6aa2\u67e5\u548c\u8c50\u5bcc\u6d41\u7a0b\uff0c\u78ba\u4fdd\u8cc7\u8a0a\u7684\u53ef\u9760\u6027\u4ee5\u53ca\u53ef\u64cd\u4f5c\u6027<\/li>\n\n\n\n<li>ASRG \u63d0\u4f9b\u7684\u73fe\u6709\u6c7d\u8eca\u5b89\u5168\u60c5\u5831\u7684\u9023\u7d50<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>\u3000<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-text-align-right has-very-light-gray-to-cyan-bluish-gray-gradient-background has-background\">\ud83d\udfe6\u770b\u6587\u7ae0\u3001\u5f97\u597d\u79ae\uff1aSeasonic\u6d77\u97fb\u96fb\u5b50Computex 2024\u5c55\u5834\u5de1\u79ae<a href=\"https:\/\/www.facebook.com\/ioioTIMES\/posts\/pfbid029p38dDLcfN9XSpLezswKgBgvCieJ95VXkXZ5eE7zhNYtHc2gZHJ8T2wKWVmJZTVNl\" data-type=\"link\" data-id=\"https:\/\/www.facebook.com\/ioioTIMES\/posts\/pfbid029p38dDLcfN9XSpLezswKgBgvCieJ95VXkXZ5eE7zhNYtHc2gZHJ8T2wKWVmJZTVNl\" target=\"_blank\" rel=\"noreferrer noopener\">FB\u6d3b\u52d5<\/a><br>\ud83d\udfe6<strong>\u770b\u6587\u7ae0\u5f97\u597d\u79ae\uff1abe quiet! Computex 2024\u5c55\u5834\u5de1\u79ae&nbsp;<a href=\"https:\/\/www.facebook.com\/ioioTIMES\/posts\/pfbid06bciDFGPXQrHwR5WzbVm2wYoEiJZjqqdhUj6B6xhWYHH9oGwincpTSLYBUNLnuiNl\" target=\"_blank\" rel=\"noreferrer noopener\">FB\u6d3b\u52d5<\/a><\/strong><br>\ud83d\udfe6\u66f4\u591a<a href=\"https:\/\/www.ioiotimes.com\/?cat=9740\" data-type=\"link\" data-id=\"https:\/\/www.ioiotimes.com\/?cat=9740\" target=\"_blank\" rel=\"noreferrer noopener\">\u300aCOMPUTEX 2024\u300b<\/a>\u5831\u5c0e!!<br>\ud83d\udfe6<strong>\u73fe\u5728\u5c31\u52a0\u5165&nbsp;<a href=\"https:\/\/www.facebook.com\/profile.php?id=100086628162118\" target=\"_blank\" rel=\"noreferrer noopener\">ioioTIMES \u81c9\u66f8\u7c89\u7d72\u5718<\/a>&nbsp;\u66f4\u591a\u4e92\u52d5\u3001\u66f4\u591a\u597d\u5eb7\u650f\u62b5\u52a0!!<\/strong><br>\ud83d\udfe6<strong>\u6211\u5011\u6709<a href=\"https:\/\/today.line.me\/tw\/v2\/publisher\/103117\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LINE TODAY<\/a>\u983b\u9053\u4e86\uff0c\u5feb\u4f86\u8ffd\u8e2a\u6211\u5011\u5427!!&#8211;\u6700\u65b0\u79d1\u6280\u65b0\u805e \u76e1\u5728\u4f60\u624b<\/strong><\/h4>\n","protected":false},"excerpt":{"rendered":"<p>\u7d50\u5408\u4e26\u512a\u5316CVE\u8cc7\u6599\u5eab\uff0c\u65b9\u4fbf\u6c7d\u8eca\u7522\u696d<\/p>\n","protected":false},"author":3,"featured_media":71679,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[13],"tags":[9952,946],"class_list":["post-71678","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-asrg","tag-vicone"],"_links":{"self":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts\/71678"}],"collection":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=71678"}],"version-history":[{"count":2,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts\/71678\/revisions"}],"predecessor-version":[{"id":71713,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/posts\/71678\/revisions\/71713"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=\/wp\/v2\/media\/71679"}],"wp:attachment":[{"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=71678"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=71678"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ioiotimes.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=71678"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}