BO THONG TIN VA TRUYEN THONG CVC AN TOAN THONG TIN

S6: j^ ' /^ /CATTT-TDQLGS V/v canh bao nguy ca mat an toan thong

tin tren cac thiet bi phat WiFi

CONG HOA XA H O I CHI) NGHIA VIET NAM D9C l a p - Tu- do - H a n h phuc

Hd Ngi, ngdy 19 thdng 6 nam 2017

Kinh giri:

- Dan vj chuyen trach v6 CNTT cac Bo, ca quan ngang Bo,

ca quan thuoc Chi'nh phu;

- Sa Thong tin va Truyen thong cac tinh, thanh pho true

thupc Trung uang;

- Cac Tap doan kinh te; Tong cong ty nha nuoc; To chuc tai

chi'nh va Ngan hang.

Ngay 15/6/2017, WikiLeaks (to chuc chuyen nghien cuu, phan tich va

cong bo cac tai lieu nhay cam) cong bo tai lieu lien quan den cong cu duac goi

la Cherry Blossom de khai thac 16 hong, chiem quyen dieu khien cac thiet bi

mang khong day (bao gom ca cac bo dinh tuyen va bp phat song Wifi) nham

thuc hien cac hoat dpng giam sat Internet va khai thac, tan cong cac he thong

khac thong qua cac thiet bi mang nay.

Khi thiet bi Wifi bi kiem soat, ke tan cong c6 the thuc hien thu thap thong

tin va gui ve may chu dieu khien hoac c6 the nhan lenh de thuc hien cac hanh

dpng nhu:

- Giam sat luu luang mang de thu thap thong tin: dia chi email, tai khoan

chat, dia chi MAC, VoIP;

- Chuyen huang nguai dung tai trang web dpc hai;

- Chen npi dung dpc hai vao luong du lieu nham tan cong he thong muc

tieu;

-Thiat lap kat noi VPN ...

Cong cu Cherry Blossom c6 the khai thac diem yau tran nhiau dong thiat

bi cua cac hang gom: 3Com, Accton, Aironet/Cisco, Allied Telesyn, Ambit,

A M I T , Apple, Asustek Co, Belkin, Breezecom, Dlink, Gemtek, Linksys,

Orinoco, Zcom ... (Danh sach chi tiat cac thiat bi do WikiLeak cong bo trong

Phu luc kem theo).

1

Cue An loan thong tin de nghi cac co quan, to chuc tang cuang cac bien

phcip bao dam an toan thong tin doi vdi cac thiet bi c6 kha nang bi anh hudng

thuoc pham vi minh quan ly nhu sau:

- Ra soat lai toan bo thiet bi Wifi trong he thong mang, kiem tra va cap

nhat Icn phien ban Firmware mdi nhat cho tat ca cac thiet bj, dac biet la cac thiet

bj CO trong Phu Luc kem theo.

- Kiem soat va giam sat cac chuc nang quan tri tren cac thiet bi nham

ngan chan cac cuoc tan cong mang lai dung cac thiet bi nay.

Khi trien khai cac npi dung neu tren, trong trudng hap can thiet, Quy dan

vj CO the lien he vdi Cue An toan thdng tin, so dien thoai: 04.3943.6684, thu

dien tu ais@mic.gov.vn de dugc phoi hop, hd tra.

Tran trpng./.

Noi nhan: KT. CyC TRlfdNG ^'"^'^ PHO e y e TRirdNG

- Lanii dao Bo (de b/c); - Cue ti irong (de b/c}; - Co' quan do'n vi thuoc Bo; - Lu'ii: VT. TDOLGS.

r 1

Phu luc: Danh sach cac thiet bi c6 the bj anh huong boi cong cu khai thac 16 h6ng Cherry Blossom

(Kem theo Cong van s6 ^jQ/CA TTT-TDQLGS ngdy 19/6/2017)

Ten hang Model Cong Quan tri

3Com 3CRWE454A72 HTTP

3Com 3CRWX120695A 3Com 3CRWX275075A MAP?

Cnm 3CRTRV10075 HTTP j c o m "^PR W F 4 1 1 Qfi

J \ ^ I \ W I 1 7 0 H T T P P r n n r i p t n r v I I I i r , I I u u i icL<ii 1 V

3Com 3 L . K W b 4 j 4 0 / / I 4 T T D

3Com 3CRWE53172 HTTP 3Com 3CRWE554G72T HTTP 3Com 3CRWE554G72T U HTTP 3Com 3CRWE675075 HTTP, SNMP 3Com T P R W F 7 ' ) S n 7 S A I J V - K W E . / Z J O / J A . - U O O IN IVi i

3Com 3CRWE754G72- A HTTP 3Com 3CRWE754G72- B HTTP 3Com 3CRWE825075A- US SNMP, HTTP 3Com 3CRWE875075A- US SNMP, irrTP 3Com 3CRWE91096A HTTP 3Com 3CRWE91096A HTTP

3Com 3CRWE920G73- US HTTP, SNMP, 3ND

3Com 3CRWEASY96A HTTP 3Com 3CRWEASY96A HTTP 3Com 3CRWEASYG73- U HTTP, SNMP. 3ND 3Com 3CRWX440095A 3Com 3CWE820A-US Telnet Accton WA3101 HTTP, SNMP Accton WA4101 HTTP SNMP Accton WA5101 HTTP, SNMP Accton WA5201 HTTP, SNMP Accton WA6101 HTTP, SNMP Accton WA6102 HTTP, SNMP / A C L l O I l W A ^ l n7Y H T T P * s M M P T p l n p l

Aironet/ Cisco Aironet 1310 Outdoor A c c e s s r O I I l l / O l l U g C

Telnet, HTIT, FTP, TFTP. Q M K / I P ( 'r»ncr\ lp n(^r1 oi^ijvi i , c u i i b u j c p u i I

Aironet/ Cisco Aironet 350 Series Wireless Bridge

Telnet, HTTP, FTP, FF l P. SNMP, console port

Aironet/ Cisco 1300 Series Outdoor Access Point/Bridge

Aironet/ Cisco Aironet 1100 Series Access Point

Telnet, HTTP, FTP. TFTP. SNMP. console port

Aironet/ Cisco Aironet 1200 Series a/b/g Access Point

Telnet. HTTP, FTP, TFTP, SNMP, console port

Aironet/ Cisco Aironet 1310 Outdoor Access Point/Bridge

Telnet, HTTP, FTP. TFTP. SNMP. console port

Aironet/ Cisco Aironet 350 Series Telnet, HTTP, FTP, TFTP. SNMP. console port

Aironet/ Cisco Aironet 350 Series AP Telnet. HTTP, FTP. TFTP. SNMP, console port

Aironet/ Cisco Cisco Aironet 1400 Series Wireless Bridge

Telnet, HTTP, FTP. TFTP. SNMP, console port

Aironet/ Cisco Cisco Aironet 1400 Series Wireless Bridge

Telnet- HTTP. FTP. TFTP. SNMP. console port

Allied Telesyn AT-WA1004G HTTP

Allied Telesvn AT-WA7500 i l l T T i l f ^ \ / V i

HTTP, SNMP. Telnet. RS-232

Allied Telesyn AT-WL2411 HTTP, SNMP. Telnet, RS-737 Z - J Z

A l l i p H 'T'p |pc\m

Ambit IN/A H1 I r , 1 einet Ambit N/A HTTP. Telnet Ambit AMIT, Inc WIS418 HTTP. Proprieta ry AMIT, Inc WQS418 HTTP, Proprieta ry /\ivii 1 , inc W U b i Z o n 1 1 1 , 1 roprieid ry A i N i coiiiiiiunicd lions M / A IN/ A

Apple AirPort F.xnress Asustek Co Wi,-1 oUg Proprieta ry Asustek Co WL-300 SNMP. Propneta ry Asustek Co WL-300g Proprieta ry Asustek Co WL-330 HTTP, Proprieta ry Asustek Co WL-330g HTTP. Proprieta ry

Asustek Co WI -500h HTTP, UPnP Internet Gateway Device

Asustek Co WL-500g HTTP, UPnP Internet Gateway Device

Belkin F5D7230-4 HTTP. Proprieta ry Belkin F5D8230-4 HTTP, Proprieta ry Breezecom AP-10 SNMP. RS-232 (telent) Breezecom AP-IOD SNMP, RS-232 (telent) Breezecom BU-DS.ll SNMP Breezecom BU-DS.llD SNMP Breezecom DS.5800 Base Unit SNMP Breezecom RB-DS.ll SNMP Breezecom RB-DS.llD SNMP Breezecom SA-IO SNMP, RS-232 (telent) Breezecom SA-IOD SNMP, RS-232 (telent) Breezecom SA-40 SNMP, RS-232 (telent) Breezecom SA-40D SNMP, RS-232 (telent) Breezecom WB-10 SNMP, RS-232 (telent) Breezecom WB-IOD SNMP, RS-232 (telent) Cameo WLB-2006 2007 HTTP Cameo WLB-2203/2204 HTTP

4

Cameo WLG-2002/2003 HTTP Cameo WLG-2204/2205 HTTP Cameo

D-Link AP Manager or D- View SNMP management module?

D-Link DCS-2100+ HTTP D-Link DCS-3220G HTTP D-Link DCS-5300G HTTP, FTP. IPSurveilan ce D-Link DCS-5300W HTTP. FTP. Telnet D-Link DI-514 HTTP D-Link DI-524 HTTP D-Link DI-624 HTTP D-Link DI-714P+ HTTP, SNMP D-Link Dl-774 HTTP D-Link DI-784 HTTP D-Link DI-824VUP HTTP. SNMP D-Link DP-311P SNMP D-Link DP-311U SNMP D-Link DPG-2000W D-Link DP-G310 SNMP, Telnet D-Link DP-G321 SNMP, Proprieta ry D-Link DSM-320 INMPR D-Link DVC-llOO N/A D-Link DWL-1000AP+ HTTP, AP Manager D-Link DWL-120 N/A D-Link DWL-1700AP SNMP, RS-232 Console

D-Link DWL-1750 SNMP, Telnet, HTTP. RS-232 Console

D-Link DWL-2100AP HTTP, SNMPv3 , AP Manager

D-Link DWL-2200AP SNMPv3 , Telnet, HITP, AP Manager

D-Link DWL-2700AP Telnet, AP Manager SNMPv3

D-Link DWL-7000AP HTTP

D-Link IT T i / \Z7 A r\

DWL-7100AP SNMP, Telnet, HTTP, AP Manager

D-Link DWL-800AP+ HTTP D-Link DWL-810+ HTTP D-Link DWL-G700AP HTTP D-Link DWL-G730AP HTTP D-Link DWL-G800AP HTTP D-Link DWL-G810 HTTP D-Link DWL-G820 HTTP, Telnet Gemtek WADB-IOOG HTTP Gemtek WHAPC-IOOGE I I G HTTP Gemtek WHRTC-IOOGW HI IP Gemtek WX-1500 HTTP, SNMP

Gemtek WX-1590 SNMP

5

Gemtek WX-1600 MXTP Prnnripta rv 1 1 ^ 1 I V L / i i \ b ' i c i I y

Gemtek WX-1688 HTTP, Proprieta ry Gemtek WX-2214 HTTP Gemtek WX-2501 HTTP Gemtek WX-5520A HTTP Gemtek WX-5520G HTTP Gemtek WX-5525G HTTP Gemtek WX-5525R HTTP Gemtek WX-5541 HTTP Gemtek WX-5545 HTTP, Proprieta ry Gemtek WX-5551 Proprieta ry Gemtek WX-5555 HTTP Gemtek WX-5800 HTTP Fipmtpk WX-S801 HTTP G p m t p k WX-S803

VV /\. j o \ j y HTTP 1 1 1 I X

Global Sun CM054RT HTTP Global Sun WL AP 2454 NMO HTTP Olnhnl Sun W l AP 2454 OAO HTTP

i l l 1 1 rilnhnl Siin V J I V V t * 1 k J L l l l

W I AP 2454 O A 3 HTTP i l l 1 1

O l O D a i o U n W/T X/tT 1 1 T i n W L M U Z 4 J 4 I J I U T 4 T T P

Global Sun WL RT 2454 NMO HTTP Global Sun WL RT2554 QAO HTTP Global Sun WL UD 2454 1310 HTTP Hsing Tech N/A Linksys BEFWnS4 HTTP Linksys WAP 11 HTTP Linksys WAP51AB HTTP Linksys WAP54G HTTP Linksys WAP55AG HTTP, SNMP Linksys WCG200 HTTP Linksys WET54G HTTP Linksys WET54GS5 HTTP Linksys W G A l l B Proprieta ry Linksys WGA54G HTTP Linksys W M A l l B Proprieta ry Linksys W M L S l l B N/A Linksys WPG12 Proprieta ry E H l K S y S W r k J j ' + v j Pf*/v r v r i T i t ^1 v\i r l U p i i c l a 1 y

I I t l k C V C W P S l 1 VV r o i 1

HTTP Linksys W l i j j 4 L r U Z H i 1 1 , o i N M r . rroprieta ry Linksys WRE54G HTTP, Proprieta ry Linksys WRT54G HTTP Linksys WRT54GP2 HTTP Linksys WRT54GS HTTP

6

Linksys WRT55AG HTTP

Linksys WRV54G HTTP

Linksys W V C l l B HTTP Linksvs WVC54G HTTP, Proprieta ry Motorola WR850G HTTP. Proprieta ry Orinoco AP-2000 Access Point SNMP, Telnet, HTTP Orinoco AP-2500 Access Point SNMP, Telnet, HTTP

Orinoco AP-4000 Tri-Mode Access Point

SNMP, Telnet, HTTP

Orinoco AP-600 Access Point SNMP, Telnet, HTTP Orinoco Orinoco AP-700 SNMP, Telnet, HTTP Orinoco Tsunami MP.l 1 SNMP, Telnet, HTTP Orinoco Tsunami QuickBridge 11 SNMP, Telnet, HTTP Orinoco Tsunami QuickBridge 20 Proprieta ry Orinoco Tsunami QuickBridge 60 Proprieta ry Planet Tec WAP-1963A HTTP

Planet Tec WAP-4030 HTTP

Planet Tec WRT-413 HTTP, UPnP

Planet Tec WAP-1963 HTTP Planet Tec WAP-1966 HTTP, Proprieta ry Planet Tec WAP-4000 HTTP, Proprieta ry Planet Tec WAP-4050 7

Planet Tec WAP-5000 SNMP Planet Tec WAP-5100 SNMP Planet Tec WL-U356 Proprieta ry Planet Tec WRT-403 HTTP, UPnP

Planet Tec WRT-410 HTTP

RPT Int N/A

Senao 5GHz/2.4GHz Dual Band Wireless Access Point

SNMP, Telnet, HTTP

Senao Aries2 HTTP, Telnet

Senao Dual Band Wireless Access Point

HTTP, Telnet

Senao Long Range Wireless Dongle

HTTP

Senao Long Range Wireless Outdoor Client Bridge

HTTP, SNMP

Senao NL-2511AP PRO PLUS SNMP, Telnet, HTTP Senao NL2511SRP1US SNMP, Telnet, HTTP Senao NL2511SR Plus(A) SNMP, Telnet, HTTP Senao NL-2611AP3 PLUS HTTP Senao NL-3054CB3 PLUS HTTP

Senao Outdoor Long Range Wireless Bridge/AP

HTTP

o C l l a u Outdoor Wireless Access Point/Router

SNMP Telnet HTTP

Senao Outdoor Wireless Bridge SNMP, Telnet, HTTP

7

Senao SL2511SRP1US SNMP, Telnet, HTTP

Senao Wireless l l g Broadband Router HTTP

Senao Wireless Muiii- uiieni HTTP Senao Bridge/ Access Point HTTP

US Robotics USR5420 Propneta ry US Robotics USR5430 HTTP

US Robotics USR5450 HTTP, SNMP. Telnet (over seiral port), Proprieta ry

US Robotics USR8054 HTTP Z-Com XI-2250 Z-Com XG-UOO HTTP, Telnet, Proprieta ry Z-Com XG-2000 SNMP Z-Com XG-3020 H11P, 1 eInet, Proprieta ry 7 P o m Y P . 580 A.CJ-3oU r i 1 1 r , 1 einei. rropneia ry Z-Com XG-580Plus HTTP, Telnet, Proprieta ry Z-CnTTi

Z - C n m t j \ ^ V y •

XG-582 Z-Com XI-1450 Z-Com XI-1500 Z-Com XI-1510

8