Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior

Críticas / altas1294▼ 196 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior

30 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-1328	Modificada	Media (4.6)	0.41%	—	Cisco Unified IP Phone Cisco Unified IP Phone Firmware	3/5/2012	16/6/2026	Cisco Unified IP Phones 9900 series devices with firmware 9.1 and 9.2 do not properly handle downloads of configuration information to an RT phone, which allows local users to gain privileges via unspecified injected data, aka Bug ID CSCts32237.
CVE-2012-0333	Modificada	Media (5)	1.1%	—	Cisco Small Business IP Phone Firmware Cisco Small Business IP Phone	2/5/2012	16/6/2026	Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML requests, which allows remote attackers to make telephone calls via an XML document, aka Bug ID CSCts08768.
CVE-2010-2291	Modificada	Baja (3.3)	0.80%	—	Snom Voip Phone Firmware	15/6/2010	16/6/2026	Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.
CVE-2007-1072	Modificada	Alta (7.2)	0.34%	—	Cisco Unified IP Phone Firmware 7906g Cisco Unified IP Phone Firmware 7911g Cisco Unified IP Phone Firmware 7941g Cisco Unified IP Phone Firmware 7961g+2	22/2/2007	16/6/2026	The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors. NOTE: this issue can be leveraged remotely via CVE-2007-1063.
CVE-2007-1063	Modificada	Alta (10)	3.4%	—	Cisco Unified IP Phone Firmware 7906g Cisco Unified IP Phone Firmware 7911g Cisco Unified IP Phone Firmware 7941g Cisco Unified IP Phone Firmware 7961g+2	22/2/2007	16/6/2026	The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.