{"id":578,"date":"2026-07-14T14:10:42","date_gmt":"2026-07-14T05:10:42","guid":{"rendered":"https:\/\/onepress.co.kr\/index.php\/briefing\/2026-07-14-router-security-check-vi\/"},"modified":"2026-07-14T14:10:42","modified_gmt":"2026-07-14T05:10:42","slug":"2026-07-14-router-security-check-vi","status":"publish","type":"briefing","link":"https:\/\/onepress.co.kr\/index.php\/briefing\/2026-07-14-router-security-check-vi\/","title":{"rendered":"12 qu\u1ed1c gia c\u00f9ng c\u1ea3nh b\u00e1o v\u1ec1 b\u1ed9 \u0111\u1ecbnh tuy\u1ebfn d\u1ec5 t\u1ed5n th\u01b0\u01a1ng: s\u00e1u vi\u1ec7c c\u1ea7n ki\u1ec3m tra h\u00f4m nay"},"content":{"rendered":"<figure class=\"wp-block-image size-large\">\n  <img decoding=\"async\" src=\"https:\/\/onepress.co.kr\/wp-content\/uploads\/2026\/07\/router-security-response-scene.png\" alt=\"Hai qu\u1ea3n tr\u1ecb vi\u00ean ki\u1ec3m tra router v\u00e0 m\u00e1y t\u00ednh trong ph\u00f2ng v\u1eadn h\u00e0nh m\u1ea1ng s\u00e1ng r\u00f5\" \/><figcaption>H\u00ecnh c\u00f4ng ngh\u1ec7 v\u00e0 an to\u00e0n ONEPRESS t\u1eadp trung v\u00e0o vi\u1ec7c ki\u1ec3m tra thi\u1ebft b\u1ecb m\u1ea1ng t\u1ea1i ch\u1ed7.<\/figcaption><\/figure>\n<ul>\n<li><strong>Th\u1eddi \u0111i\u1ec3m ki\u1ec3m tra:<\/strong> 2026-07-14 09:24 KST<\/li>\n<li><strong>C\u01a1 s\u1edf x\u00e1c minh:<\/strong> Th\u00f4ng c\u00e1o NSA ng\u00e0y 13\/7 v\u00e0 khuy\u1ebfn c\u00e1o chung c\u1ee7a 19 c\u01a1 quan thu\u1ed9c 12 qu\u1ed1c gia, g\u1ed3m ACSC v\u00e0 NCSC<\/li>\n<\/ul>\n<p><strong>Router v\u1eabn truy\u1ec1n d\u1eef li\u1ec7u b\u00ecnh th\u01b0\u1eddng kh\u00f4ng c\u00f3 ngh\u0129a c\u1ea5u h\u00ecnh b\u1ea3o v\u1ec7 m\u1ea1ng v\u1eabn an to\u00e0n.<\/strong> NSA, CISA, FBI, NCSC Anh, ACSC Australia v\u00e0 c\u00e1c \u0111\u1ed1i t\u00e1c cho bi\u1ebft ng\u00e0y 13\u201314\/7 r\u1eb1ng t\u00e1c nh\u00e2n li\u00ean quan Trung t\u00e2m 16 c\u1ee7a FSB Nga ti\u1ebfp t\u1ee5c khai th\u00e1c thi\u1ebft b\u1ecb m\u1ea1ng d\u1ec5 t\u1ed5n th\u01b0\u01a1ng ho\u1eb7c c\u1ea5u h\u00ecnh k\u00e9m tr\u00ean to\u00e0n c\u1ea7u.<\/p>\n<p>C\u1ea3nh b\u00e1o n\u00eau c\u00e1c l\u0129nh v\u1ef1c vi\u1ec5n th\u00f4ng, n\u0103ng l\u01b0\u1ee3ng, t\u00e0i ch\u00ednh, d\u1ecbch v\u1ee5 c\u00f4ng v\u00e0 y t\u1ebf. K\u1ebb t\u1ea5n c\u00f4ng qu\u00e9t SNMP v1\/v2 v\u1edbi chu\u1ed7i c\u1ed9ng \u0111\u1ed3ng m\u1eb7c \u0111\u1ecbnh, sao ch\u00e9p c\u1ea5u h\u00ecnh \u0111\u1ec3 l\u1ea5y th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 c\u1ea5u tr\u00fac m\u1ea1ng. Cisco Smart Install v\u00e0 c\u00e1c l\u1ed7 h\u1ed5ng \u0111\u00e3 c\u00f4ng b\u1ed1 c\u0169ng \u0111\u01b0\u1ee3c nh\u1eafc t\u1edbi.<\/p>\n<p><strong>\u0110\u00e2y kh\u00f4ng ph\u1ea3i th\u00f4ng b\u00e1o ch\u1ec9 c\u1ea7n v\u00e1 m\u1ed9t l\u1ed7 h\u1ed5ng m\u1edbi.<\/strong> T\u1ed5 ch\u1ee9c c\u1ea7n t\u00ecm thi\u1ebft b\u1ecb b\u1ecb b\u1ecf qu\u00ean, giao th\u1ee9c qu\u1ea3n tr\u1ecb l\u1ed9 ra internet v\u00e0 ph\u1ea7n c\u1ee9ng h\u1ebft h\u1ed7 tr\u1ee3.<\/p>\n<h2>C\u1ea3nh b\u00e1o n\u00e0y c\u00f3 \u00fd ngh\u0129a g\u00ec<\/h2>\n<ul>\n<li>Ho\u1ea1t \u0111\u1ed9ng bao g\u1ed3m qu\u00e9t di\u1ec7n r\u1ed9ng \u0111\u1ec3 t\u00ecm thi\u1ebft b\u1ecb y\u1ebfu tr\u01b0\u1edbc.<\/li>\n<li>C\u1ea5u h\u00ecnh b\u1ecb \u0111\u00e1nh c\u1eafp c\u00f3 th\u1ec3 l\u1ed9 th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 c\u1ea5u tr\u00fac m\u1ea1ng n\u1ed9i b\u1ed9.<\/li>\n<li>M\u1ea1ng vi\u1ec5n th\u00f4ng, \u0111i\u1ec7n, t\u00e0i ch\u00ednh, ch\u00ednh ph\u1ee7 v\u00e0 y t\u1ebf c\u00f3 m\u1ee9c r\u1ee7i ro cao h\u01a1n.<\/li>\n<li>Khuy\u1ebfn c\u00e1o chung kh\u00f4ng c\u00f3 ngh\u0129a m\u1ecdi router \u0111\u1ec1u \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp.<\/li>\n<\/ul>\n<h2>S\u00e1u vi\u1ec7c c\u1ea7n ki\u1ec3m tra h\u00f4m nay<\/h2>\n<ol>\n<li><strong>Ki\u1ec3m k\u00ea:<\/strong> ghi r\u00f5 m\u1eabu m\u00e1y, firmware, ng\u00e0y h\u1ebft h\u1ed7 tr\u1ee3 v\u00e0 ng\u01b0\u1eddi ph\u1ee5 tr\u00e1ch m\u1ecdi router, switch, firewall h\u01b0\u1edbng internet.<\/li>\n<li><strong>SNMP:<\/strong> t\u1eaft v1\/v2 khi c\u00f3 th\u1ec3 v\u00e0 d\u00f9ng SNMPv3 c\u00f3 x\u00e1c th\u1ef1c, m\u00e3 h\u00f3a; n\u1ebfu b\u1eaft bu\u1ed9c d\u00f9ng b\u1ea3n c\u0169, \u0111\u1ed5i gi\u00e1 tr\u1ecb m\u1eb7c \u0111\u1ecbnh v\u00e0 ch\u1ec9 cho ph\u00e9p \u0111\u1ecdc t\u1eeb m\u1ea1ng qu\u1ea3n tr\u1ecb.<\/li>\n<li><strong>Qu\u1ea3n tr\u1ecb:<\/strong> t\u1eaft Cisco Smart Install sau khi c\u00e0i \u0111\u1eb7t v\u00e0 kh\u00f4ng \u0111\u1ec3 c\u1ed5ng qu\u1ea3n tr\u1ecb m\u1edf tr\u1ef1c ti\u1ebfp ra internet.<\/li>\n<li><strong>T\u00e0i kho\u1ea3n:<\/strong> d\u00f9ng m\u1eadt kh\u1ea9u m\u1ea1nh, ri\u00eang cho t\u1eebng thi\u1ebft b\u1ecb v\u00e0 c\u1ea3nh b\u00e1o \u0111\u0103ng nh\u1eadp c\u1ee5c b\u1ed9 b\u1ea5t th\u01b0\u1eddng.<\/li>\n<li><strong>Bi\u00ean m\u1ea1ng:<\/strong> ch\u1eb7n TFTP UDP 69, SMI TCP 4786 v\u00e0 c\u1ed5ng SNMP n\u1ebfu kh\u00f4ng thi\u1ebft y\u1ebfu, sau khi \u0111\u00e1nh gi\u00e1 \u1ea3nh h\u01b0\u1edfng.<\/li>\n<li><strong>C\u1eadp nh\u1eadt v\u00e0 d\u1ea5u v\u1ebft:<\/strong> v\u00e1 firmware, thay thi\u1ebft b\u1ecb h\u1ebft h\u1ed7 tr\u1ee3 v\u00e0 ki\u1ec3m tra log SNMP, sao ch\u00e9p c\u1ea5u h\u00ecnh, TFTP b\u1ea5t th\u01b0\u1eddng.<\/li>\n<\/ol>\n<h2>\u0110\u1ed1i v\u1edbi gia \u0111\u00ecnh v\u00e0 v\u0103n ph\u00f2ng r\u1ea5t nh\u1ecf<\/h2>\n<ul>\n<li>\u0110\u1ed5i m\u1eadt kh\u1ea9u qu\u1ea3n tr\u1ecb m\u1eb7c \u0111\u1ecbnh v\u00e0 x\u00e1c nh\u1eadn c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng ho\u1eb7c firmware m\u1edbi nh\u1ea5t.<\/li>\n<li>T\u1eaft qu\u1ea3n tr\u1ecb t\u1eeb xa qua internet n\u1ebfu kh\u00f4ng d\u00f9ng v\u00e0 h\u1ecfi nh\u00e0 m\u1ea1ng v\u1ec1 thi\u1ebft b\u1ecb \u0111\u00e3 h\u1ebft h\u1ed7 tr\u1ee3.<\/li>\n<li>Khuy\u1ebfn c\u00e1o ch\u1ee7 y\u1ebfu d\u00e0nh cho t\u1ed5 ch\u1ee9c; ng\u01b0\u1eddi d\u00f9ng gia \u0111\u00ecnh n\u00ean theo h\u01b0\u1edbng d\u1eabn h\u00e3ng thay v\u00ec t\u1ef1 \u0111\u1ed5i c\u00e1c c\u1ed5ng kh\u00f4ng hi\u1ec3u r\u00f5.<\/li>\n<\/ul>\n<h2>C\u00e1ch hi\u1ec3u m\u00e0 kh\u00f4ng ph\u1ea3n \u1ee9ng qu\u00e1 m\u1ee9c<\/h2>\n<ul>\n<li>\u0110\u00e2y kh\u00f4ng ph\u1ea3i m\u1ed9t CVE m\u1edbi duy nh\u1ea5t m\u00e0 l\u00e0 c\u1ea3nh b\u00e1o v\u1ec1 c\u1ea5u h\u00ecnh c\u0169 ti\u1ebfp t\u1ee5c b\u1ecb khai th\u00e1c.<\/li>\n<li>Kh\u00f4ng n\u00ean coi m\u1ecdi s\u1ef1 c\u1ed1 m\u1ea1ng l\u00e0 b\u1eb1ng ch\u1ee9ng t\u1ea5n c\u00f4ng c\u1ea5p nh\u00e0 n\u01b0\u1edbc.<\/li>\n<li>Thay \u0111\u1ed5i giao th\u1ee9c v\u00e0 firewall c\u00f3 th\u1ec3 g\u00e2y gi\u00e1n \u0111o\u1ea1n, c\u1ea7n sao l\u01b0u v\u00e0 k\u1ebf ho\u1ea1ch ho\u00e0n t\u00e1c.<\/li>\n<\/ul>\n<h2>Ngu\u1ed3n ch\u00ednh th\u1ee9c<\/h2>\n<ul>\n<li><a href=\"https:\/\/www.nsa.gov\/Press-Room\/Press-Releases-Statements\/Press-Release-View\/Article\/4541059\/nsa-and-partners-release-guidance-on-improving-router-hygiene-to-protect-agains\/\" target=\"_blank\" rel=\"noopener noreferrer\">NSA: improving router hygiene against Russian state-sponsored targeting<\/a><\/li>\n<li><a href=\"https:\/\/www.cyber.gov.au\/about-us\/view-all-content\/alerts-and-advisories\/improve-router-hygiene-to-protect-against-russian-state-sponsored-targeting\" target=\"_blank\" rel=\"noopener noreferrer\">Australian Cyber Security Centre: full joint advisory and mitigations<\/a><\/li>\n<li><a href=\"https:\/\/www.ncsc.gov.uk\/news\/uk-and-allies-urge-critical-sectors-to-improve-defences-against-russian-intelligence-targeting\" target=\"_blank\" rel=\"noopener noreferrer\">UK NCSC: critical sectors urged to improve router defences<\/a><\/li>\n<li><a href=\"https:\/\/media.defense.gov\/2026\/Jul\/09\/2003959498\/-1\/-1\/1\/CSA_IMPROVE_ROUTER_HYGIENE.PDF\" target=\"_blank\" rel=\"noopener noreferrer\">Joint cybersecurity advisory PDF<\/a><\/li>\n<\/ul>\n<p><strong>K\u1ebft lu\u1eadn:<\/strong> H\u00e3y b\u1eaft \u0111\u1ea7u b\u1eb1ng danh s\u00e1ch thi\u1ebft b\u1ecb l\u1ed9 ra ngo\u00e0i, r\u1ed3i l\u1ea7n l\u01b0\u1ee3t ki\u1ec3m tra SNMP, th\u00f4ng tin m\u1eb7c \u0111\u1ecbnh, qu\u1ea3n tr\u1ecb t\u1eeb xa, firmware v\u00e0 th\u1eddi h\u1ea1n h\u1ed7 tr\u1ee3.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>M\u01b0\u1eddi ch\u00edn c\u01a1 quan c\u1ee7a 12 qu\u1ed1c gia c\u1ea3nh b\u00e1o c\u00e1c t\u00e1c nh\u00e2n li\u00ean quan FSB Nga v\u1eabn khai th\u00e1c router d\u1ec5 t\u1ed5n th\u01b0\u01a1ng ho\u1eb7c c\u1ea5u h\u00ecnh k\u00e9m. H\u00e3y ki\u1ec3m tra SNMP, m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh, qu\u1ea3n tr\u1ecb t\u1eeb xa v\u00e0 firmware.<\/p>\n","protected":false},"featured_media":0,"template":"","meta":[],"class_list":["post-578","briefing","type-briefing","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing\/578","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing"}],"about":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/types\/briefing"}],"wp:attachment":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/media?parent=578"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}