Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 3.7% | — | Schneider-electric Bmxnor0200 FirmwareSchneider-electric Bmxnor0200h FirmwareSchneider-electric 140cpu65150 FirmwareSchneider-electric 140cpu31110 Firmware+53 | 18/4/2018 | 17/6/2026 | Hard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200 controllers in all versions of the communication modules. | |
| Modificada | Alta (7.5) | 4.8% | — | Schneider-electric Bmxnoc0401 FirmwareSchneider-electric Bmxnoe0100 FirmwareSchneider-electric Bmxnoe0110 FirmwareSchneider-electric Bmxnoe0110h Firmware+11 | 30/6/2017 | 17/6/2026 | A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP341000, BMXP342000, BMXP3420102, BMXP3420102CL, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H. A remote attacker could send a specially… | |
| Modificada | Alta (10) | 7.4% | — | Schneider-electric Bmxnoc0401Schneider-electric Bmxnoe0100Schneider-electric Bmxnoe0100hSchneider-electric Bmxnoe0110+9 | 21/12/2015 | 17/6/2026 | Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices allows remote attackers to execute arbitrary code via a long password in HTTP Basic Authentication data. | |
| Modificada | Alta (10) | 9.5% | — | Schneider-electric Stbnic2212 FirmwareSchneider-electric Stbnip2212 FirmwareSchneider-electric Tsxetc0101 FirmwareSchneider-electric Tsxetc100 Firmware+39 | 3/10/2014 | 17/6/2026 | Directory traversal vulnerability in SchneiderWEB on Schneider Electric Modicon PLC Ethernet modules 140CPU65x Exec before 5.5, 140NOC78x Exec before 1.62, 140NOE77x Exec before 6.2, BMXNOC0401 before 2.05, BMXNOE0100 before 2.9, BMXNOE0110x Exec before 6.0, TSXETC101 Exec before 2.04, TSXETY4103x Exec before 5.7,… |