Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2739▼ 501 respecto a la semana anterior
Críticas / altas1301▼ 201 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)225▼ 277 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.7% | — | Wavlink Wl-wn575a3 FirmwareWavlink Wl-wn579g3 FirmwareWavlink Wn531a6 FirmwareWavlink Wn535g3 Firmware+9 | 7/5/2020 | 17/6/2026 | An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication is required. Affected devices: Wavlink WN575A3, Wavlink WN579G3, Wavlink WN531A6, Wavlink WN535G3, Wavlink WN530H4,… | |
| Modificada | Alta (7.5) | 1.8% | — | Wavlink Wl-wn579g3 FirmwareWavlink Wl-wn575a3 FirmwareWavlink Wl-wn530hg4 FirmwareWavlink Wn531g3 Firmware+11 | 27/4/2020 | 17/6/2026 | An issue was discovered where there are multiple externally accessible pages that do not require any sort of authentication, and store system information for internal usage. The devices automatically query these pages to update dashboards and other statistics, but the pages can be accessed externally without any… | |
| Modificada | Media (6.8) | 0.46% | — | Zyxel Ac3000 Firmware | 1/4/2018 | 17/6/2026 | The Zyxel Multy X (AC3000 Tri-Band WiFi System) device doesn't use a suitable mechanism to protect the UART. After an attacker dismantles the device and uses a USB-to-UART cable to connect the device, he can use the 1234 password for the root account to login to the system. Furthermore, an attacker can start the… |