Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2636▼ 212 respecto a la semana anterior

Críticas / altas1386▲ 155 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 473 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-7180	Modificada	Alta (7.8)	1.9%	—	Cobham Aviator 200 Cobham Aviator 300 Cobham Aviator 350 Cobham Aviator 700d+5	15/8/2014	17/6/2026	Cobham SAILOR 900 VSAT; SAILOR FleetBroadBand 150, 250, and 500; EXPLORER BGAN; and AVIATOR 200, 300, 350, and 700D devices do not properly restrict password recovery, which allows attackers to obtain administrative privileges by leveraging physical access or terminal access to spoof a reset code.
CVE-2013-6035	Modificada	Alta (10)	4.6%	—	Gatehouse Harris Bgan Hughes Network Systems 9201 Hughes Network Systems 9450+5	4/2/2014	16/6/2026	The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary…
CVE-2013-6034	Modificada	Alta (10)	1.7%	—	Gatehouse Harris Bgan Hughes Network Systems 9201 Hughes Network Systems 9450+5	4/2/2014	16/6/2026	The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals has hardcoded credentials, which makes it easier for attackers to obtain unspecified login access via unknown vectors.