Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2570▼ 329 respecto a la semana anterior
Críticas / altas1353▲ 95 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Crítica (9.3) | 3.1% | — | Skybridge Basic Mb-a130AI | 1/9/2025 | 17/6/2026 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges. | |
| Modificada | Alta (7.5) | 1.00% | — | Seiko-sol Skybridge Basic Mb-a130 FirmwareSeiko-sol Skybridge Mb-a200 FirmwareSeiko-sol Skyspider Mb-r210 Firmware | 10/5/2023 | 17/6/2026 | Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASIC MB-A130 firmware… | |
| Modificada | Media (6.5) | 0.46% | — | Seiko-sol Skybridge Basic Mb-a130 FirmwareSeiko-sol Skybridge Mb-a200 Firmware | 10/5/2023 | 17/6/2026 | Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, and SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, which may allow a remote unauthenticated attacker to eavesdrop on or alter the communication sent to the WebUI of the product. | |
| Modificada | Alta (8.6) | 0.98% | — | Seiko-sol Skybridge Basic Mb-a130 FirmwareSeiko-sol Skybridge Mb-a200 Firmware | 10/5/2023 | 17/6/2026 | Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. Affected products and versions are as follows:… |