Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.2% | — | Schneider-electric BMX P34x FirmwareSchneider-electric BMX NOE 0100 FirmwareSchneider-electric BMX NOE 0110 FirmwareSchneider-electric BMX NOC 0401 Firmware+6 | 22/4/2020 | 17/6/2026 | A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an… | |
| Modificada | Alta (7.5) | 1.4% | — | Schneider-electric BMX P34x FirmwareSchneider-electric BMX NOE 0100 FirmwareSchneider-electric BMX NOE 0110 FirmwareSchneider-electric BMX NOC 0401 Firmware+6 | 20/11/2019 | 17/6/2026 | A CWE-200: Information Exposure vulnerability exists in Modicon Controllers (M340 CPUs, M340 communication modules, Premium CPUs, Premium communication modules, Quantum CPUs, Quantum communication modules - see security notification for specific versions), which could cause the disclosure of FTP hardcoded credentials… |