Illustrative image (Photo: The Daily Swig) Hanoi (VNA) – The Ministry of Informationand Communications’ Authority of Information Security (AIS) has recently issueda warning about serious and high-impact securityvulnerabilities in Microsoft products.
In a warning sent to IT units of ministries, ministerial-level andGovernment agencies, municipal and provincial Departments of Information andCommunications, State-owned corporations, commercial banks, financial organisations,and information security units, the AIS announced that on February 14,Microsoft had released a list of 75 security patches for its products.
The AIS highlighted 12 high-impact and serious vulnerabilities,including four security holes, namely CVE-2023-21529, CVE-2023-21710,CVE-2023-21707 and CVE-2023-21706 in Microsoft Exchange Server that allowremote code execution by attackers.
Othersinclude CVE-2023-21716 in Microsoft Word, CVE-2023-21715 in MicrosoftPublisher, CVE-2023-23376 and CVE-2023-21812 in Windows Common Log File System;CVE-2023-21705, CVE-2023-21713 and CVE-2023- 21528 in Microsoft SQL Server, andCVE-2023-21717 in Microsoft SharePoint Server.
The AISadvised units to check Windows operating systems that are likely to be affected,perform timely patch updates to avoid the risk of attacks, strengthen monitoringand get solutions readied in case signs of network exploitation and attacks aredetected, and regularly monitor warning channels from relevant agencies topromptly detect attack risks.
If necessary, unitscould contact the National Cyber Security Monitoring Centre (NCSC) for support via phonenumber 02432091616 and email address: ais@mic.gov.vn./.
