Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Baja (2.7) | 0.68% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an… | |
| Modificada | Media (5.3) | 0.65% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources. | |
| Modificada | Alta (7.5) | 0.72% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via… | |
| Modificada | Alta (7.5) | 0.55% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions < V2.1). The affected device is vulnerable to a denial of… | |
| Modificada | Alta (7.6) | 0.71% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an… | |
| Modificada | Media (4.3) | 0.39% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions < V2.1). The affected device uses a hard-coded password to… | |
| Modificada | Alta (7.2) | 1.5% | — | Siemens 6gk1411-1ac00 FirmwareSiemens 6gk1411-5ac00 Firmware | 9/5/2023 | 17/6/2026 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The web based management of affected devices does not properly validate user input, making it susceptible to command injection. This could allow an… |