2023-06适用于 Windows 10 神州网信政府版V2022-L基于x64系统的累积更新 (KB5027215)——cve

以下为2023-06适用于 Windows 10 神州网信政府版V2022-L基于x64系统的累积更新 (KB5027215)覆盖的CVE列表,

CVE列表
Release Date 产品 影响 最高严重性 Article Details
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Critical 5027215 CVE-2023-32015
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Critical 5027215 CVE-2023-29363
2023年6月13日 Windows 10 神州网信政府版v2022-L Denial of Service Critical 5027215 CVE-2023-32013
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Critical 5027215 CVE-2023-32014
2023年6月13日 Windows 10 神州网信政府版v2022-L Denial of Service Important 5027215 CVE-2023-24937
2023年6月13日 Windows 10 神州网信政府版v2022-L Denial of Service Important 5027215 CVE-2023-24938
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29346
2023年6月13日 Windows 10 神州网信政府版v2022-L Security Feature Bypass Important 5027215 CVE-2023-29352
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29358
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29360
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29361
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-29362
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-29365
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-29370
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-32012
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29351
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29359
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29371
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-32017
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-32009
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-29372
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-29373
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-32008
2023年6月13日 Windows 10 神州网信政府版v2022-L Information Disclosure Important 5027215 CVE-2023-32016
2023年6月13日 Windows 10 神州网信政府版v2022-L Remote Code Execution Important 5027215 CVE-2023-29366
2023年6月13日 Windows 10 神州网信政府版v2022-L Information Disclosure Important 5027215 CVE-2023-32019
2023年6月13日 Windows 10 神州网信政府版v2022-L Denial of Service Important 5027215 CVE-2023-32011
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29364
2023年6月13日 Windows 10 神州网信政府版v2022-L Elevation of Privilege Important 5027215 CVE-2023-29368

CMIT ADVANCED TECHNICAL SUPPORT SERVICES–Description of Services

Content

  1. About this document
  2. CMIT Advanced Technical Support Services

2.1.      Service delivery management

2.2.      Reactive services.

2.3.      Proactive services.

1.     About this document

The CMIT Advanced Technical Services Description of Services provides you with information on the advanced technical services that are available to purchase from CMIT.

The services that you purchase will be listed in your Enterprise Services Work Order (Work Order) or another applicable Statement of Services that references and incorporates this document.

2.     CMIT Advanced Technical Support Services

CMIT Support is a comprehensive support solution that helps reduce costs, enhance productivity, and use technology to realize new business opportunities for any stage of the IT lifecycle. Support services include:

  • Service Delivery Management to facilitate planning and implementation
  • Proactive services help maintain and improve health of your IT infrastructure and operations.
  • Prioritized 8×5 problem resolution services to provide rapid response to minimize downtime

2.1.    Service delivery management

All Advanced Support packages are coordinated and initiated by a Technical Account Manager (TAM).  This delivery may be refined, based on delivery model, level of service, and geography.

Delivery model

Item Definition
Pooled Performed by a group of individuals located remotely
Designated Provided on a part-time basis, either onsite or remotely, by a named individual who also services other CMIT Advanced Support customers
Dedicated Provided, either onsite or remotely, by a named individual who is solely focused on a single CMIT Advanced Support customer

Scope details:

Service Delivery Plan (SDP): The basis of your Advanced Support services that includes a customized service plan created in collaboration with your team to determine how and when services are to be applied. We monitor and adjust your SDP based on your needs throughout the term.

Service reviews: On an ongoing basis, we review the past period’s services, report to you on what has been delivered and improved, review your feedback, and discuss any actions or adjustments, which may be required. These reviews may consist of standard status reports and virtual or onsite status meetings (if onsite travel is authorized).

Incident management: Oversight by your TAM of support incidents to drive timely resolution and a high quality of support delivery.  This may include the development of incident response plans, identification of a primary contact for status updates during incidents and facilitating root cause analysis after an incident has occurred.

Crisis management: Around-the-clock issue ownership and communication to you from SDMs and Critical Situation Managers during situations in which you experience critical business impacts.

2.2.    Reactive services

Problem Resolution Support (PRS): Assistance for problems with specific symptoms encountered while using Windows 10 CMIT Government Edition, where there is a reasonable expectation that the problems are caused by Windows 10 CMIT Government Edition. Severity definitions, our estimated initial response times, and submission requirements are detailed in “Table: Incident response.”

PRS is charged on an hourly basis, deducted from the pre-paid hours established in your Work Order. If we determine that the problem resulted from a bug in a product in mainstream support, we will not deduct PRS hours. If you exhaust all pre-paid hours while we are addressing a particular problem, we will charge you in arrears and you must purchase additional PRS hours before we respond to additional incidents. Upon your request, we collaborate with third-party technology suppliers to help resolve complex multi-vendor product interoperability issues, however, it is the responsibility of the third party to support its product.

The incident severity determines the response levels within CMIT, initial estimated response times and your responsibilities.  You are responsible for outlining the business impact to your organization and, in consultation with us, CMIT will assign the appropriate severity level.  You can request a change in severity level during the term of an incident should the business impact require a change to a higher or lower severity.

Table:incident response

Severity and situation Our expected response Your expected response
 P1

Complete loss of a core business process and work cannot reasonably continue

•  First call response in one hour or less

•  Our Resources on site as required

•  Continuous effort on a 24/7 basis

•  Allocation of appropriate resources to sustain continuous effort on a 24/7 basis2

•  Submission via phone only

P2

Moderate loss or degradation of services, but work can reasonably continue in an impaired manner  

•  First call response in two hours or less

•  Effort during business hours only

•  Accurate contact information on case owner Responsive within 2 hours

•  Submission via E-mail only

P3

No loss or degradation of services

•  First call response in one weekday or less

•  Effort during business hours only

•  Accurate contact information on case owner

•  Responsive within one weekday

•  Submission via E-mail only

Onsite Support: Onsite reactive support provides assistance at your location. This service is subject to CMIT’s resource availability and may require an additional charge per onsite visit.

2.3.    Proactive services

Proactive services help prevent issues in your Windows 10 CMIT Government Edition environment and are typically scheduled in advance of the service delivery to help ensure resource availability.

  • Maintenance services
  • Assessment Program: An assessment on the design, technical implementation, operations or change management of your Windows 10 CMIT Government Edition environment against CMIT recommended practices. At the conclusion of the assessment, the CMIT resource will work directly with you to remediate possible issues and provide a report containing the technical assessment of your environment, which may include a remediation plan.
  • Health Check: An implementation assessment review of your technology implementation against our recommended practices. A CMIT engineer plans the health check engagement with you, performs the review, analyzes the data and delivers a report upon completion.
  • Offline Assessment: An automated assessment of your Windows 10 CMIT Government Edition environment implementation with data collected remotely, or by a CMIT engineer at your location.
  • Proactive Operations Programs (POP): A review with your staff of your planning, design, implementation or operational processes against CMIT recommended practices. This review is done either onsite or remotely by a CMIT support resource.
  • Education services

Short interactive services, typically one-day sessions, that cover product and support topics of Windows 10 CMIT Government Edition, provided in a lecture and demonstration format and are delivered by a CMIT engineer either in person or online.

  • Support Assistance

Where available, proactive services may be sold as a quantity of Support Assistance hours. These hours can be exchanged for one or more proactive services, described above, at current rates that are provided by your CMIT Services representative. After scheduling the proactive service, we will deduct the appropriate number of Support Assistance hours from your balance, rounded up to the nearest hour, to cover the value of a daily rate or the fixed fee for the service. If you order one type of Support Assistance service and wish to exchange it for another, you may apply the hours already purchased to that alternative service, where available and agreed upon with your Service Delivery Manager.

 

神州网信高级技术支持服务–服务说明

目   录

  1.  关于本文档
  2.  神州网信支持服务

2.1. 服务交付管理

2.2. 响应式服务

2.3. 主动服务

1.     关于本文档

神州网信高级技术支持服务的服务说明为您提供可从神州网信购买的高级技术支持服务的相关信息。

您购买的服务会在您的专业服务工作订单(工作订单)或引用和包含本文档的其他适用服务说明中列出。

2.     神州网信高级技术支持服务

神州网信支持是全面的支持解决方案,有助于降低成本、提升工作效率,并可利用技术在 IT 生命周期的任何阶段发掘新的商业机遇。支持服务包括:

  • 促进计划和实施的服务交付管理
  • 主动服务可帮助维护和改进您的 IT 基础架构的运行状况和运营
  • 优先安排的工作时间(8×5)问题解决服务,可提供快速响应以最大限度减少停机时间

2.1.    服务交付管理

所有支持服务均由技术客户经理 (TAM)负责协调和启动。此交付可根据交付模式、服务级别和地理区域得到完善。

交付模式

项目 定义
合并 由一组人员远程执行
指定 由同时为其他神州网信支持客户提供服务的指定人员以兼职方式现场或远程提供
专用 由专门为单个神州网信支持客户服务的指定人员在现场或通过远程方式提供

服务详细信息:

服务交付计划 (SDP):支持服务的基础,包括为确定支持服务的方式和时间而与贵方团队合作制定的定制服务计划。我们将在整个合同期内根据您的需求对您的 SDP 进行监控和调整。

服务审核:我们会持续审核上一周期的服务,向您报告已交付和改进的服务内容,查看您的反馈,并讨论任何可能需要采取的行动或调整措施。这些审核可能包含标准状态报告以及虚拟或现场状态会议(如得到前往现场的授权)。

事件管理:您的 TAM 对支持事件的监督,可促进及时解决问题并提高支持服务的质量。这可能包括制定事件响应计划、在事件发生时确定状态更新的主要联系人,以及在事件发生后协助进行根本原因分析。

危机管理:在您的业务受到严重影响的情况下,TAM 将为您提供全天候问题查找和协调服务。

2.2.    响应式服务

问题解决支持 (PRS):协助解决在使用 Windows 10 神州网信政府版时遇到的具有特定症状的问题,但您应有合理理由认为这些问题是由神州网信产品引起的。严重程度定义、我们预计的初始响应时间以及提交要求在“表:事件响应”中详细说明。

PRS 按小时收费,从工作订单中确定的预付费小时数中扣除。如果我们确定问题是由 Windows 10 神州网信政府版产品错误引起的,则不会扣除 PRS 小时数。如果您的所有预付费小时数在我们解决某个特定问题时用尽,我们将延期向您收费,且您必须在我们对其他事件做出回应之前购买额外的服务小时数。根据您的请求,我们将与第三方技术供应商合作,帮助您解决复杂的多供应商产品互操作性问题。但是应由第三方负责对其产品提供支持。

事件的严重程度将决定神州网信内部的响应级别、预计的初始响应时间和您的责任。您应负责告知我们事件对贵组织的业务影响,并与我们协商,以便神州网信指定相应的严重程度。如果业务影响需要改为较高或较低严重程度,您可以在事件持续期间请求更改严重程度。

表:事件响应

严重程度和情况 我们的预期响应 您的预期响应
 P1

业务中断

•  一小时或更短时间内首次电话响应

•  我们会根据需要给您所在的地点提供资源

•  全天候 (24×7) 持续采取措施

•  分配适当资源以全天候

(24×7) 持续采取措施

•  只能通过电话提交

P2

对业务有影响:  

•  两小时内首次电话响应

•  仅在工作时间采取措施

•  关于事件所有者的准确联系信息

•  在两小时内响应

•  只能通过邮件提交

P3

没有业务影响:

•  下一工作日内首次电话响应

•  仅在工作时间采取措施

•  关于事件所有者的准确联系信息

•  在下一工作日内响应

•  只能通过邮件提交

 

现场支持:现场响应式支持可在您的所在地提供援助。此服务受神州网信资源可用性的限制,每次现场访问可能需要额外收费。

2.3.    主动服务

主动服务有助于防止您的 Windows 10 神州网信政府版桌面环境出现问题。通常将其安排在服务交付之前,以帮助确保资源可用性。

  • 维护服务
  •   评估计划:根据神州网信建议的做法,对您的 Windows 10 神州网信政府版桌面环境的设计、技术实施、运营或变更管理进行评估。在评估结束时,神州网信资源会直接与您合作,对潜在问题进行修正并提供针对您的环境的技术评估报告,其中可能包含一份修正计划。
  •   运行状况检查:根据我们建议的做法,对您的技术实施情况进行的实施评估审查。神州网信工程师会与您一同计划运行状况检查合作事宜、执行审查、分析数据,并在完成时交付报告。
  •   脱机评估:利用远程收集的数据或神州网信工程师在您所在地收集的数据,对您的 Windows 10 神州网信政府版桌面环境实施情况进行的评估。
  •   主动运营计划 (POP):根据神州网信建议的做法,与您的员工一起审查计划、设计、实施或运营流程。此审查由神州网信支持资源在现场或远程完成。
  • 培训服务

简短的交互式服务,通常是为期一天的会议,涵盖以讲座和演示形式提供 Windows 10 神州网信政府版的产品与支持主题,由神州网信工程师当面或在线交付。

  • 支持协助

可用的主动服务可以按支持协助的小时数出售。这些小时数可以按您的神州网信服务代表提供的现行比率兑换为上述一项或多项主动服务。安排主动服务后,我们会从您的支持协助小时数余额中扣减相应数量(四舍五入为最接近的小时数),作为提供此服务的固定费用或日费用。如果您订购了一种支持协助服务但希望将其换成另一种服务,您可以将已购买的小时数应用于该替代服务,前提是该服务可用且经您的服务交付经理同意。