-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


                                                         JPCERT-WR-2020-1501
                                                                   JPCERT/CC
                                                                  2020-04-15

            <<< JPCERT/CC WEEKLY REPORT 2020-04-15 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B04/05($BF|(B)$B!A(B04/11($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ==================================================================

$B!Z(B1$B![(BGoogle Chrome $B$KJ#?t$N@H<e@-(B
$B!Z(B2$B![J#?t$N(B Mozilla $B@=IJ$K@H<e@-(B
$B!Z(B3$B![(BVMware vCenter Server $B$K>pJsO3$($$$N@H<e@-(B
$B!Z(B4$B![%H%l%s%I%^%$%/%m@=%Q%9%o!<%I%^%M!<%8%c!<$K(B DLL $BFI$_9~$_$N@H<e@-(B
$B!Z(B5$B![J#?t$N(B Juniper $B@=IJ$K@H<e@-(B
$B!Z(B6$B![J#?t$N(B EasyBlocks IPv6 $B@=IJ$K@H<e@-(B
$B!Z(B7$B![(BJoomla! $BMQ%W%i%0%$%s!V(BAcyMailing$B!W$KG$0U$N%U%!%$%k$r%"%C%W%m!<%I2DG=$J@H<e@-(B
$B!Z(B8$B![(BBuySpeed $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
$B!Z(B9$B![(BICS-CERT$B$,8x3+$7$?@)8f%7%9%F%`$N@H<e@-(B
$B!Z:#=5$N$R$H$/$A%a%b![(BIPA $B$,!V@H<e@-H/8+(B $BJs9p$N$_$A$7$k$Y!AH/8+<T$KCN$C$F$*$$$FM_$7$$$3$H!A!WA4(B8$BJT$r8x3+(B

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        https://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        https://www.jpcert.or.jp/wr/2020/wr201501.html
        https://www.jpcert.or.jp/wr/2020/wr201501.xml
============================================================================


$B!Z(B1$B![(BGoogle Chrome $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Google Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2020/04/08/google-releases-security-updates

    $B35MW(B
      Google Chrome $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - Google Chrome 81.0.4044.92 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BGoogle Chrome $B$r(B Google $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99(B
      $B?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B


    $B4XO"J8=q(B ($B1Q8l(B)
      Google
      Stable Channel Update for Desktop
      https://chromereleases.googleblog.com/2020/04/stable-channel-update-for-desktop_7.html

$B!Z(B2$B![J#?t$N(B Mozilla $B@=IJ$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Mozilla Releases Security Updates for Firefox, Firefox ESR
      https://www.us-cert.gov/ncas/current-activity/2020/04/08/mozilla-releases-security-updates-firefox-firefox-esr

    $B35MW(B
      $BJ#?t$N(B Mozilla $B@=IJ$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,(B
      $BG$0U$N%3!<%I$r<B9T$9$k$J$I$N2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - Mozilla Firefox 75 $B$h$jA0$N%P!<%8%g%s(B
      - Mozilla Firefox ESR 68.7 $B$h$jA0$N%P!<%8%g%s(B
      - Mozilla Thunderbird 68.7 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B Mozilla $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99(B
      $B?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Mozilla
      Security Vulnerabilities fixed in Firefox 75
      https://www.mozilla.org/en-US/security/advisories/mfsa2020-12

      Mozilla
      Security Vulnerabilities fixed in Firefox ESR 68.7
      https://www.mozilla.org/en-US/security/advisories/mfsa2020-13

      Mozilla
      Security Vulnerabilities fixed in Thunderbird 68.7.0
      https://www.mozilla.org/en-US/security/advisories/mfsa2020-14/

$B!Z(B3$B![(BVMware vCenter Server $B$K>pJsO3$($$$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      VMware Releases Security Updates for VMware Directory Service
      https://www.us-cert.gov/ncas/current-activity/2020/04/10/vmware-releases-security-updates-vmware-directory-service

    $B35MW(B
      VMware vCenter Server $B$KF1:-$5$l$F$$$k(B VMware $B%G%#%l%/%H%j%5!<%S%9$K$O!"(B
      $B>pJsO3$($$$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,5!Hy$J>pJs$r@`(B
      $B<h$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - VMware vCenter Server 6.7 (Virtual Appliance/Windows)

      VMware $B$K$h$k$H!"(BVMware vCenter Server 6.7 $B$r?75,$G%$%s%9%H!<%k$7$?>l(B
      $B9g$O!"K\@H<e@-$N1F6A$r<u$1$J$$$H$N$3$H$G$9!#(B

      $B$3$NLdBj$O!"(BVMware vCenter Server $B$r(B VMware $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s(B
      $B$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@(B
      $B$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      VMware Security Advisories
      VMSA-2020-0006
      https://www.vmware.com/security/advisories/VMSA-2020-0006.html

      VMware Knowledge Base
      Additional Documentation for VMSA-2020-0006: Determining if a vCenter 6.7 deployment w/embedded or external Platform Services Controller (PSC) is affected by CVE-2020-3952 (78543)
      https://kb.vmware.com/s/article/78543

$B!Z(B4$B![%H%l%s%I%^%$%/%m@=%Q%9%o!<%I%^%M!<%8%c!<$K(B DLL $BFI$_9~$_$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVNVU#93266623
      $B%H%l%s%I%^%$%/%m@=%Q%9%o!<%I%^%M!<%8%c!<$K$*$1$k(B DLL $BFI$_9~$_$K4X$9$k@H<e@-(B
      https://jvn.jp/vu/JVNVU93266623

    $B35MW(B
      $B%H%l%s%I%^%$%/%m3t<02q<R$,Ds6!$9$k%Q%9%o!<%I%^%M!<%8%c!<$K$O!"(BDLL $BFI$_(B
      $B9~$_$K4X$9$k@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"Bh;0<T$,G$0U$N%3!<%I$r<B9T$9(B
      $B$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - $B%Q%9%o!<%I%^%M!<%8%c!<(B 5.0.0.1092 $B$h$jA0$N%P!<%8%g%s(B (Windows$BHG(B)

      $B$3$NLdBj$O!"%Q%9%o!<%I%^%M!<%8%c!<$r%H%l%s%I%^%$%/%m3t<02q<R$,Ds6!$9$k(B
      $B=$@5:Q$_$N%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9(B
      $B$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B%H%l%s%I%^%$%/%m3t<02q<R(B
      $B%"%i!<%H(B/$B%"%I%P%$%6%j!'%Q%9%o!<%I%^%M!<%8%c!<$N%;%-%e%j%F%#>pJs(B(CVE-2020-8469)
      https://helpcenter.trendmicro.com/ja-jp/article/TMKA-01154

$B!Z(B5$B![J#?t$N(B Juniper $B@=IJ$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Juniper Networks Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2020/04/09/juniper-networks-releases-security-updates

    $B35MW(B
      $BJ#?t$N(B Juniper $B@=IJ$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,(B
      $B%5!<%S%91?MQK832(B (DoS) $B967b$r9T$&$J$I$N2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O<!$N$H$*$j$G$9!#(B

      - Junos OS
      - Junos OS Evolved
      - NFX250 Series
      - JATP Series
      - vJATP
      - Juniper Secure Analytics

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B Juniper $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99(B
      $B?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Juniper Networks
      Security Advisories
      https://kb.juniper.net/InfoCenter/index?page=content&channel=SECURITY_ADVISORIES

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: SRX Branch Series and vSRX Series: Multiple vulnerabilities in ISC BIND named.
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10994

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement. (CVE-2020-1613)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10996

      Juniper Networks
      2020-04 Security Bulletin: NFX250 Series: Hardcoded credentials in the vSRX VNF instance. (CVE-2020-1614)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10997

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: vMX: Default credentials supplied in vMX configuration (CVE-2020-1615)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10998

      Juniper Networks
      2020-04 Security Bulletin: JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service. (CVE-2020-1616)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10999

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot. A second packet received and inspected by sFlow will cause a core and reboot. (CVE-2020-1617)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11000

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: EX and QFX Series: Console port authentication bypass vulnerability (CVE-2020-1618)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11001

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE. (CVE-2020-1619)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11002

      Juniper Networks
      2020-04 Security Bulletin: Junos OS Evolved: Local log files accessible from the shell may leak sensitive information
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11003

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: Kernel memory leak in virtual-memory due to interface flaps (CVE-2020-1625)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11004

      Juniper Networks
      2020-04 Security Bulletin: Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets (CVE-2020-1626)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11005

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing (CVE-2020-1627)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11006

      Juniper Networks
      2020-04 Security Bulletin: Juniper Secure Analytics (JSA): Multiple vulnerabilities resolved in JSA 7.3.2 Patch 5, and 7.3.3 Patch 1 FixPack 1
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11007

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces (CVE-2020-1628)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11008

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message. (CVE-2020-1629)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11009

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change. (CVE-2020-1630)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11010

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service (CVE-2020-1633)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11012

      Juniper Networks
      2020-04 Security Bulletin: Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate. (CVE-2020-1632)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11013

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset. (CVE-2020-1634)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11014

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: Multiple IPsec AH vulnerabilities resolved.
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11016

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (CVE-2020-1637)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11018

      Juniper Networks
      2020-04 Security Bulletin: Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart. (CVE-2020-1638)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11019

      Juniper Networks
      2020-04 Security Bulletin: Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core. (CVE-2020-1639)
      https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11020

$B!Z(B6$B![J#?t$N(B EasyBlocks IPv6 $B@=IJ$K@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#89224521
      EasyBlocks IPv6 $B$K$*$1$kJ#?t$N@H<e@-(B
      https://jvn.jp/jp/JVN89224521

    $B35MW(B
      EasyBlocks IPv6 $B$K$OJ#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,!"(B
      $BEv3:@=IJ$K%m%0%$%s$7$F$$$k%f!<%6$N%&%'%V%V%i%&%6>e$G!"0U?^$7$J$$A`:n$r(B
      $B9T$&$J$I$N2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - EasyBlocks IPv6 $B%P!<%8%g%s(B 2.0.1 $B$*$h$S$=$l0JA0$N%P!<%8%g%s(B
      - EasyBlocks IPv6 Enterprise $B%P!<%8%g%s(B 2.0.1 $B$*$h$S$=$l0JA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r$W$i$C$H%[!<%`3t<02q<R$,Ds6!$9$k=$@5:Q$_$N%P!<(B
      $B%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7(B
      $B$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B$W$i$C$H%[!<%`3t<02q<R(B
      EasyBlocks IPv6$B!!%=%U%H%&%'%"%j%j!<%9>pJs!C%P!<%8%g%s(B2.0.2
      https://www.plathome.co.jp/software/ipv6-v2-0-2

      $B$W$i$C$H%[!<%`3t<02q<R(B
      EasyBlocks IPv6 Enterprise$B!!%=%U%H%&%'%"%j%j!<%9>pJs!C%P!<%8%g%s(B2.0.2
      https://www.plathome.co.jp/software/ipv6-enterprise-v2-0-2

$B!Z(B7$B![(BJoomla! $BMQ%W%i%0%$%s!V(BAcyMailing$B!W$KG$0U$N%U%!%$%k$r%"%C%W%m!<%I2DG=$J@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#56890693
      Joomla! $BMQ%W%i%0%$%s!V(BAcyMailing$B!W$K$*$1$kG$0U$N%U%!%$%k$r%"%C%W%m!<%I$5$l$k@H<e@-(B
      https://jvn.jp/jp/JVN56890693

    $B35MW(B
      Joomla! $BMQ%W%i%0%$%s(B AcyMailing $B$K$O!"G$0U$N%U%!%$%k$r%"%C%W%m!<%I$5$l(B
      $B$k@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,G$0U$N(B PHP $B%3!<%I$r<B9T(B
      $B$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - AcyMailing 6.9.2 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BAcyMailing $B$r(B Acyba $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7$9(B
      $B$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Acyba
      AcyMailing Change log
      https://www.acyba.com/acymailing/68-acymailing-changelog.html?Itemid=329

$B!Z(B8$B![(BBuySpeed $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B

    $B>pJs8;(B
      CERT/CC Vulnerability Note VU#660597
      Periscope BuySpeed is vulnerable to stored cross-site scripting
      https://www.kb.cert.org/vuls/id/660597

    $B35MW(B
      BuySpeed $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-$,$"$j$^$9!#7k2L$H(B
      $B$7$F!"Bh;0<T$,!"%f!<%6$N%&%'%V%V%i%&%6>e$G!"G$0U$N%9%/%j%W%H$r<B9T$9$k(B
      $B2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O<!$N$H$*$j$G$9!#(B

      - BuySpeed version 14.5

      $B$3$NLdBj$O!"(BBuySpeed $B$r(B Periscope $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#91401524
      Periscope $B@=(B BuySpeed $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      https://jvn.jp/vu/JVNVU91401524

    $B4XO"J8=q(B ($B1Q8l(B)
      Periscope
      Buyspeed 15.3.0 Release Notes
      https://support.buyspeed.com/hc/en-us/articles/360035773831-Buyspeed-15-3-0-Release-Notes

$B!Z(B9$B![(BICS-CERT$B$,8x3+$7$?@)8f%7%9%F%`$N@H<e@-(B

    $B>pJs8;(B
      Industrial Control Systems
      ICS-CERT Alerts
      https://www.us-cert.gov/ics/alerts

    $B35MW(B
      ICS-CERT $B$O!"@)8f%7%9%F%`$N@H<e@->pJs$r8x3+$7$^$7$?!#(B

      $BBP>]$H$J$k@=IJ$O<!$N$H$*$j$G$9!#(B

      - Automation Studio
      - WebAccess/NMS
      - CIMPLICITY
      - eWON Flexy $B$*$h$S(B eWON Cosy
      - V-Server Lite
      - KUKA.Sim Pro
      - RSLinx Classic

      $B1F6A$r<u$1$k@=IJ$N%P!<%8%g%s$d@H<e@-$N>\:Y$O!"(BICS-CERT $B$,Ds6!$9$k%"%I(B
      $B%P%$%6%j>pJs$d3+H/<T$N>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      ICS Advisory (ICSA-20-093-01)
      B&R Automation Studio
      https://www.us-cert.gov/ics/advisories/icsa-20-093-01

      ICS Advisory (ICSA-20-098-01)
      Advantech WebAccess/NMS
      https://www.us-cert.gov/ics/advisories/icsa-20-098-01

      ICS Advisory (ICSA-20-098-02)
      GE Digital CIMPLICITY
      https://www.us-cert.gov/ics/advisories/icsa-20-098-02

      ICS Advisory (ICSA-20-098-03)
      HMS Networks eWON Flexy and Cosy
      https://www.us-cert.gov/ics/advisories/icsa-20-098-03

      ICS Advisory (ICSA-20-098-04)
      Fuji Electric V-Server Lite
      https://www.us-cert.gov/ics/advisories/icsa-20-098-04

      ICS Advisory (ICSA-20-098-05)
      KUKA.Sim Pro
      https://www.us-cert.gov/ics/advisories/icsa-20-098-05

      ICS Advisory (ICSA-20-100-01)
      Rockwell Automation RSLinx Classic
      https://www.us-cert.gov/ics/advisories/icsa-20-100-01


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N$R$H$/$A%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{(BIPA $B$,!V@H<e@-H/8+(B $BJs9p$N$_$A$7$k$Y!AH/8+<T$KCN$C$F$*$$$FM_$7$$$3$H!A!WA4(B8$BJT$r8x3+(B

      2020$BG/(B4$B7n(B6$BF|!">pJs=hM}?d?J5!9=(B (IPA) $B$O!"A4(B8$BJT$NC;JTF02h!V@H<e@-H/8+(B
      $BJs9p$N$_$A$7$k$Y!AH/8+<T$KCN$C$F$*$$$FM_$7$$$3$H!A!W$r8x3+$7$^$7$?!#(B
      $B$3$l$O!"(BIPA $B$,$3$l$^$G$N@H<e@-$NH/8+$d<h07$$$K4X$9$k@bL@;qNA$r!"@H<e@-(B
      $B$NH/8+$r9T$&=i3X<T8~$1$K%9%i%$%I%7%g!<$H$7$F:F9=@.$7$?$b$N$G$9!#3FF02h(B
      $B$N:F@8;~4V$O(B2$B!A(B3$BJ,DxEY$H$J$C$F$$$^$9!#8D?M3X=,$d%o!<%/%7%g%C%W!"650i5!(B
      $B4X$G$N65:`3hMQ$rA[Dj$7!"A4(B8$BJT$r$^$H$a$?E}9gHG$bMQ0U$5$l$F$$$^$9!#(B


    $B;29MJ88%(B ($BF|K\8l(B)
      $B>pJs=hM}?d?J5!9=(B (IPA)
      $B%W%l%9H/I=!!F02h!V@H<e@-H/8+(B $BJs9p$N$_$A$7$k$Y(B $B!AH/8+<T$KCN$C$F$*$$$FM_$7$$$3$H!A!WA4(B8$BJT$N8x3+(B
      https://www.ipa.go.jp/about/press/20200406.html


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B ew-info@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        https://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r;2>H$7$F$/$@$5$$!#(B

        https://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r;2>H$7$F$/$@$5$$!#(B

        https://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

-----BEGIN PGP SIGNATURE-----
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=nxDM
-----END PGP SIGNATURE-----