Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 572 respecto a la semana anterior
Críticas / altas1301▼ 186 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)295▼ 215 respecto a la semana anterior
92 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 3.6% | — | Siemens Simatic HMI Comfort Panels FirmwareSiemens Simatic HMI Comfort Outdoor Panels FirmwareSiemens Simatic HMI KTP Mobile Panels Ktp400f FirmwareSiemens Simatic HMI KTP Mobile Panels Ktp700 Firmware+8 | 13/12/2018 | 17/6/2026 | A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15 Update 4), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15 Update 4), SIMATIC WinCC Runtime Advanced… | |
| Modificada | Alta (7.1) | 0.91% | — | Siemens Simatic CP 343-1 STD FirmwareSiemens Simatic CP 343-1 Lean FirmwareSiemens Simatic CP 343-1 ADV FirmwareSiemens Simatic CP 443-1 STD Firmware+75 | 11/5/2017 | 17/6/2026 | Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product. Human interaction is required to recover the system. PROFIBUS interfaces are not affected. | |
| Modificada | Alta (7.1) | 1.1% | — | Siemens Simatic CP 343-1 STD FirmwareSiemens Simatic CP 343-1 Lean FirmwareSiemens Simatic CP 343-1 ADV FirmwareSiemens Simatic CP 443-1 STD Firmware+89 | 11/5/2017 | 17/6/2026 | Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected. | |
| Modificada | Baja (3.5) | 0.79% | — | Fieldable Panels Panes Project Fieldable Panels Panes | 17/9/2015 | 17/6/2026 | The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels. | |
| Modificada | Alta (8.5) | 12% | 💥 Exploit | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a… | |
| Modificada | Alta (7.8) | 11% | 💥 Exploit | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows… | |
| Modificada | Alta (7.1) | 7.3% | 💥 Exploit | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of… | |
| Modificada | Alta (9.3) | 9.0% | 💥 Exploit | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote… | |
| Modificada | Alta (9.3) | 14% | 💥 Exploit | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote… | |
| Modificada | Alta (10) | 3.4% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attackers to obtain access… | |
| Modificada | Alta (10) | 4.8% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the HMI web… | |
| Modificada | Media (5) | 1.6% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to… | |
| Modificada | Media (4.3) | 1.4% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote… | |
| Modificada | Media (4.3) | 1.4% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote… | |
| Modificada | Alta (10) | 2.0% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account, which makes it… | |
| Modificada | Alta (9.3) | 3.0% | — | Siemens Wincc FlexibleSiemens WinccSiemens Simatic HMI PanelsSiemens Wincc Runtime Advanced+1 | 3/2/2012 | 16/6/2026 | The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which… | |
| Modificada | Media (4.3) | 2.3% | — | Earl Miles Panels | 24/1/2012 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the Region title. |