Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
–

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaCrítica (9.8)1.1%—Wago 0852-0303 FirmwareWago 0852-1305 FirmwareWago 0852-1505 FirmwareWago 0852-1305/000-001 Firmware+113/5/202117/6/2026
In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.
ModificadaAlta (7.5)1.0%—Wago 0852-0303 FirmwareWago 0852-1305 FirmwareWago 0852-1505 FirmwareWago 0852-1305/000-001 Firmware+113/5/202117/6/2026
In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.
ModificadaMedia (5.3)0.75%—Wago 0852-0303 FirmwareWago 0852-1305 FirmwareWago 0852-1505 FirmwareWago 0852-1305/000-001 Firmware+113/5/202117/6/2026
In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.
ModificadaAlta (7.5)0.54%—Wago 0852-0303 FirmwareWago 0852-1305 FirmwareWago 0852-1505 FirmwareWago 0852-1305/000-001 Firmware+113/5/202117/6/2026
In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.
ModificadaMedia (6.1)0.63%—Wago 0852-0303 FirmwareWago 0852-1305 FirmwareWago 0852-1505 FirmwareWago 0852-1305/000-001 Firmware+113/5/202117/6/2026
In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.
ModificadaMedia (5.3)0.79%—Wago 0852-0303 FirmwareWago 0852-1305 FirmwareWago 0852-1505 FirmwareWago 0852-1305/000-001 Firmware+113/5/202117/6/2026
In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.
Orbitaley — Vulnerabilidades