Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.5% | — | Huawei S9300 FirmwareHuawei S9700 FirmwareHuawei S7700 FirmwareHuawei S5300 Firmware+17 | 30/1/2018 | 17/6/2026 | Multiple heap-based buffer overflows in the eSap software platform in Huawei Campus S9300, S7700, S9700, S5300, S5700, S6300, and S6700 series switches; AR150, AR160, AR200, AR1200, AR2200, AR3200, AR530, NetEngine16EX, SRG1300, SRG2300, and SRG3300 series routers; and WLAN AC6005, AC6605, and ACU2 access controllers… | |
| Modificada | Alta (7.5) | 1.3% | — | Huawei Wlan Acu2 FirmwareHuawei Wlan Ac6005 FirmwareHuawei Wlan Ac6605 Firmware | 23/5/2017 | 17/6/2026 | The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network. | |
| Modificada | Alta (7.5) | 0.79% | — | Huawei S5700 FirmwareHuawei S6700 FirmwareHuawei S7700 FirmwareHuawei S9700 Firmware+2 | 2/4/2017 | 17/6/2026 | Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a switch enables… | |
| Modificada | Media (6.5) | 0.99% | — | Huawei Ac6003 FirmwareHuawei Ac6005 FirmwareHuawei Ac6605 FirmwareHuawei Acu2 Firmware | 22/9/2016 | 17/6/2026 | Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authenticated users to cause a denial of service (device restart) via crafted CAPWAP packets. |