Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▼ 173 respecto a la semana anterior
Críticas / altas1356▲ 48 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)267▼ 256 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 3.8% | — | Amazon Blink XT2 Sync Module Firmware | 31/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when the device retrieves updates scripts from the internet. | |
| Modificada | Crítica (9.8) | 3.7% | — | Amazon Blink XT2 Sync Module Firmware | 11/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when retrieving internal network configuration data. | |
| Modificada | Alta (8.8) | 1.7% | — | Amazon Blink XT2 Sync Module Firmware | 11/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the bssid parameter. | |
| Modificada | Alta (8.8) | 1.7% | — | Amazon Blink XT2 Sync Module Firmware | 11/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter. | |
| Modificada | Alta (8.8) | 1.2% | — | Amazon Blink XT2 Sync Module Firmware | 11/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter. | |
| Modificada | Alta (8.8) | 1.7% | — | Amazon Blink XT2 Sync Module Firmware | 11/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter. | |
| Modificada | Media (6.8) | 1.0% | — | Amazon Blink XT2 Sync Module Firmware | 11/12/2019 | 17/6/2026 | Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary code and commands on the device due to insufficient UART protections. |