Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 572 respecto a la semana anterior
Críticas / altas1301▼ 186 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)295▼ 215 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.3) | 0.69% | — | Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware | 12/3/2024 | 17/6/2026 | An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected. | |
| Analizada | Crítica (9.8) | 0.39% | — | Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware | 12/3/2024 | 17/6/2026 | An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user. | |
| Modificada | Crítica (9.8) | 1.4% | — | Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware | 12/3/2024 | 17/6/2026 | An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation. | |
| Modificada | Media (5.3) | 0.73% | — | Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware | 12/3/2024 | 17/6/2026 | An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only. |