Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
–

29 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaMedia (5.3)0.69%—Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware12/3/202417/6/2026
An unauthenticated remote attacker can perform a log injection due to improper input validation. Only a certain log file is affected.
AnalizadaCrítica (9.8)0.39%—Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware12/3/202417/6/2026
An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user.
ModificadaCrítica (9.8)1.4%—Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware12/3/202417/6/2026
An unauthenticated remote attacker can modify configurations to perform a remote code execution, gain root rights or perform an DoS due to improper input validation.
ModificadaMedia (5.3)0.73%—Phoenixcontact Charx Sec-3000 FirmwarePhoenixcontact Charx Sec-3050 FirmwarePhoenixcontact Charx Sec-3100 FirmwarePhoenixcontact Charx Sec-3150 Firmware12/3/202417/6/2026
An unauthenticated remote attacker can upload a arbitrary script file due to improper input validation. The upload destination is fixed and is write only.