¾ÝCNVD¹ûÕæÊý¾ÝÏÔʾ£¬£¬2020ÄêÅû¶Îó²î¹²20248ö£¬£¬2021ÄêÅû¶Îó²î17702ö£¬£¬Í¬±È½µµÍ13%¡£¡£¡£×¯ÏÐÓÎÏ·°¢¶û·¨ÊµÑéÊÒÐû²¼¡¶2021ÄêÍøÂç¿Õ¼äÇå¾²Îó²îµ÷ÑÐÆÊÎö±¨¸æ¡·£¬£¬±¨¸æÏÔʾ£¬£¬2021Äê1-12 Ô£¬£¬µÍΣÎó²î 33.5%£¬£¬ÖÐΣÎó²î 57.3%£¬£¬¸ßΣÎó²î 9.2%£»£»£»£»2021Äê¸ßΣÎó²îÀàÐÍÂþÑܸüÊÇÏà¶Ô¼¯ÖУ¬£¬´úÂëÖ´ÐÐÀàÐ͵ÄÎó²îÕ¼½ÏÁ¿¸ß£¬£¬ÕâÀà¸ßΣÎó²î¶ÔÍøÂç¿Õ¼äÇå¾²µÄÍþвԶԶ¸ßÓÚÆäËûÀàÐÍÎó²î£¬£¬´ËÀà¸ßΣÎó²îÊýÄ¿µÄÕ¼±ÈҲԤʾÁËÄ¿½ñÑÏËàµÄÍøÂçÇå¾²Ì¬ÊÆ¡£¡£¡£
±¨¸æ´Ó¡¸2021Äê¶ÈÎó²îÇ÷ÊÆ¸Å¿ö¡¹¡¢¡¸2021Äê¶È¸ßΣÎó²îÔ¤¾¯ÇéÐθÅÊö¡¹¡¢¡¸2021Äê¶ÈÎó²î×ܽ᡹Èý´ó²¿·Ö£¬£¬Ì½ÌÖÎó²îÍþвµÄÏÖ×´¼°Éú³¤Ç÷ÊÆ£¬£¬Îª¿í´óÆóÊÂÒµ¿Í»§¡¢Çå¾²ÔËάְԱµÈÓ¦¶ÔÎó²îÍþвÌṩָµ¼¡£¡£¡£
2021Äê¶ÈÎó²îÇ÷ÊÆ¸Å¿ö
01CNVDÎó²î¿âÇå¾²Îó²îµ÷Ñиſö
Îó²îµÄͳ¼ÆÓëÆÀÅÐÊÇÆÀ¹ÀÍøÂçÇå¾²ÇéÐεÄÒ»¸öÖ÷ÒªÖ¸±ê£¬£¬×¯ÏÐÓÎÏ·°¢¶û·¨ÊµÑéÊҲο¼CNVDÎó²îÊý¾Ý¿âÊý¾Ý£¬£¬´Ó¡¸Îó²îÍþвƷ¼¶Í³¼Æ¡¹¡¢¡¸Îó²îʹÓù¥»÷λÖÃͳ¼Æ¡¹¡¢¡¸Îó²îÓ°Ï칤¾ßÀàÐÍͳ¼Æ¡¹¡¢¡¸Îó²î±¬·¢Ôµ¹ÊÔÓÉͳ¼Æ¡¹¡¢¡¸Îó²îÒý·¢Íþвͳ¼Æ¡¹¡¢¡¸Îó²îÔöÌíÇ÷ÊÆ¡¹¶Ô 2021 ÄêÅû¶µÄÎó²î¾ÙÐÐÁËÈ«·½Î»µÄͳ¼ÆÆÊÎö¡£¡£¡£

02CVEÎó²î¿âÇå¾²Îó²îµ÷Ñиſö
ͨ¹ý¶ÔCVEÔÚ2021ÄêÐû²¼µÄÎó²î°´CVSSÆÀ·ÖÆé᫾ÙÐÐÅÅÐò£¬£¬×¯ÏÐÓÎϷɸѡÁËCVSS»ù±¾ÆÀ·Ö×î¸ßµÄǰ100¸öÎó²î¾ÙÐÐͳ¼ÆÆÊÎö¡£¡£¡£´Ë´Îͳ¼ÆÆÊÎöÖ÷Òª´Ó¡¸Îó²îËùÓ°Ïì³§ÉÌ¡¹¡¢¡¸Ó°ÏìÆ½Ì¨¡¹¡¢¡¸¹¥»÷;¾¶¡¹¡¢¡¸Åû¶ʱ¼ä¡¹¡¢¡¸Îó²îÀàÐÍ¡¹ÒÔ¼°¡¸POC¹ûÕæÇéÐΡ¹µÈ6¸ö·½ÃæÕö¿ª¡£¡£¡£

2021Äê¶È¸ßΣÎó²îÔ¤¾¯ÇéÐθÅÊö
2021Ä꣬£¬×¯ÏÐÓÎÏ·°¢¶û·¨ÊµÑéÊÒͨ¹ýÎó²î¼à²âϵ×ܹ²¼à²â·¢Ã÷ÖÖÖÖÎó²îÐÅÏ¢46316Ìõ£¬£¬¾ÓÉÎó²î¼à²âϵͳ×Ô¶¯ÖÇÄÜɸѡºóÁô´æ¸ßΣÎó²îÐÅÏ¢462Ìõ£¬£¬½øÒ»²½¾È˹¤ÑÐÅкóÐû²¼¸ßΣÎó²îΣº¦ÌáÐÑͨ¸æ66Ìõ¡£¡£¡£Éæ¼°ÖÚ¶à³§É̵ÄÈí¼þ²úÆ·£¬£¬ÓÉÎó²îÒý·¢µÄÇå¾²Íþв·ºÆð¶àÑù»¯£¬£¬Í³¼ÆÐ§¹ûÏÔʾ£¬£¬Ö÷Á÷²Ù×÷ϵͳÊÇÎó²î¸ß·¢²úÆ·¡£¡£¡£2021ÄêÕë¶ÔMicrosoft³§ÉÌÎó²îÔ¤¾¯´ÎÊý´ï16´Î£¬£¬ÆäÖÐWindowsϵͳµÄÎó²îÕ¼´ó´ó¶¼¡£¡£¡£Weblogic¡¢Log4j2¡¢Xstream¡¢VMwareµÈÒªº¦»ù´¡ÉèÊ©Îó²îÒ²ÊÇÊܹØ×¢¶È½Ï¸ßµÄÆ«Ïò¡£¡£¡£
2021Äê¶ÈÎó²î×ܽá
ͬÍùÄêÏà±È£¬£¬2021ÄêÎó²îÊýÄ¿ÔöÌí·Å»º£¬£¬µ«²¢²»ÁÏζ×ÅÀ´×Ô»¥ÁªÍøµÄΣº¦Òò´Ë¶ø½µµÍ£¬£¬Ïà·´£¬£¬Îó²î¹ûÕæµÄÊýÄ¿·Å»ºÄ³ÖÖˮƽÉÏÒâζןü¶àµÄÎó²îÓпÉÄÜÑ¡Ôñ±»ÎäÆ÷»¯£¬£¬¶øÑ¡Ôñ²»¾ÙÐйûÕæ¡£¡£¡£

Äêµ×Åû¶µÄLog4j2Îó²îÒ»¾Ðû²¼£¬£¬Õð¾ªÕû¸öº£ÄÚÍâµÄÇå¾²ÐÐÒµ£¬£¬ÉõÖÁÕû¸öº£ÄÚÍâµÄIT ½ç£¬£¬Ê¹ÓøÃ×é¼þµÄÓ¦Óü«ÎªÆÕ±é£¬£¬µ¼ÖÂÎÞÊýÒýÓøÃ×é¼þµÄϵͳºÍ¿ªÔ´×é¼þÊܵ½²¨¼°¡£¡£¡£Ëæ×ÅLog4j2Ô¶³Ì´úÂëÖ´ÐÐÎó²îµÄÀ©É¢£¬£¬¹©Ó¦Á´Çå¾²µÄųÈõÐÔÔÙ´ÎÊܵ½¿í´ó³§ÉÌÃǵĹØ×¢¡£¡£¡£ÔÚÕû¸ö¹©Ó¦Á´ÖУ¬£¬´óÅú¹©Ó¦ÉÌÔÚ¿ª·¢³ÌÐòʱѡÔñÒýÈëµÚÈý·½¿â£¬£¬ÓеÄÏîÄ¿ÉõÖÁÒýÈëÉϰٸöÖ®¶à£¬£¬¶øÕâЩµÚÈý·½¿âÒ»µ©Ä³Ò»¸ö±£´æÇå¾²ÎÊÌ⣬£¬¾Í»áÈÃÆóҵ̻¶ÔÚÇ徲Σº¦Ö®Ï£¬£¬ÓпÉÄܵ¼ÖÂÆóÒµÖ÷Ҫϵͳ±»Ö²ÈëÀÕË÷²¡¶¾¡¢Ð§ÀÍÆ÷Í߽⡢Óû§Êý¾Ý¼°Ô±¹¤Ð¡ÎÒ˽¼ÒÐÅϢй¶£¬£¬ÉõÖÁÊÇÆóÒµÉÌÒµÉñÃØÐ¹Â¶µÈΣº¦£¬£¬´Ó¶øÒý·¢ÎÞÏÞµÄÒþ»¼¡£¡£¡£
ïÔÌÎó²îÊÇ×èÖ¹Çå¾²ÊÂÎñ±¬·¢µÄȪԴ£¬£¬Õâ¾ÍÒªÇ󿪷¢Ö°Ô±ÔÚÕÆÎÕ±à³ÌÄÜÁ¦µÄͬʱ£¬£¬»¹Ó¦¾ß±¸Çå¾²¿ª·¢Òâʶ¡£¡£¡£¿£¿ª·¢Ö°Ô±²»µ«ÐèÒªÊìϤCWE TOP25£¨MITREÐû²¼µÄǰ25¸ö×îΣÏÕÈí¼þÇ徲ȱÏÝ֪ʶ¿â£©Îó²îµÄ³ÉÒò¼°Î£º¦£¬£¬»¹Ó¦½«Çå¾²ÐÔ²âÊÔ»·½ÚÌí¼Óµ½Èí¼þµÄ¿ª·¢Àú³ÌÖУ¬£¬Ê¹µÃÏîÄ¿¾ß±¸DevSecOpsÄÜÁ¦£¬£¬ÖÁÉÙÓ¦ÔÚÈí¼þ¿ª·¢Àú³ÌÖÐÔöÌí´úÂëÉ󼯹¤³Ìʦ»ò´úÂëÉ󼯹¤¾ß¶Ô´úÂë¾ÙÐÐÉ󼯡£¡£¡£Ö»ÓÐÌáÉýÎó²îÖÎÀíЧÂÊ£¬£¬²ÅÊǸßЧµÄÇå¾²´¦Öóͷ£¹æÔò¡£¡£¡£
×÷Ϊº£ÄÚÍøÂçÇå¾²¡¢´óÊý¾ÝÓëÔÆÐ§ÀÍÌṩÉÌ£¬£¬×¯ÏÐÓÎϷʼÖÕÒÔº´ÎÀ¹ú¼ÒÍøÂç¿Õ¼äÇ徲Ϊ¼ºÈΣ¬£¬Á¢ÒìÓâÔ½£¬£¬Ò»Á¬Îª¿Í»§¹¹½¨Ô½·¢ÍêÉÆµÄÍøÂçÇå¾²·ÀÓùÄÜÁ¦£¬£¬ÎªÊý×Ö¾¼ÃµÄÉú³¤±£¼Ý»¤º½¡£¡£¡£×¯ÏÐÓÎÏ·½«³ä·ÖÑéÕ¹×ÔÉíÓÅÊÆ£¬£¬ÔÚ°ü¹Ü¿Í»§ÍøÂçÇå¾²µÄͬʱ£¬£¬Æð¾¢¼ùÐÐÁì¾üÆóÒµµÄÉç»áÔðÈÎÓë¼ÌÐø£¬£¬Îª¹ú¼ÒÍøÂçÇå¾²ÕûÌåÄÜÁ¦½¨Éè×ö³öТ˳£¬£¬ÎªÊµÑéÍøÂçÇ¿¹úÕ½ÂÔТ˳ÆóҵʵÁ¦¡£¡£¡£

¾©¹«Íø°²±¸ 11010802026257ºÅ