Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3007▼ 67 respecto a la semana anterior

Críticas / altas1403▲ 50 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)390▼ 120 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2021-44827	Modificada	Alta (8.8)	54%	—	Tp-link Archer C20i Firmware	4/3/2022	17/6/2026	There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_ExternalIPv6Address HTTP parameter, allowing a remote attacker to run arbitrary commands on the router with root privileges.
CVE-2017-8220	Modificada	Crítica (9.9)	37%	—	Tp-link C2 Firmware Tp-link C20i Firmware	25/4/2017	17/6/2026	TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP request by placing shell commands in a "host=" line within HTTP POST data.
CVE-2017-8219	Modificada	Media (6.5)	1.2%	—	Tp-link C2 Firmware Tp-link C20i Firmware	25/4/2017	17/6/2026	TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie header to the /cgi/ansi URI.
CVE-2017-8218	Modificada	Crítica (9.8)	2.0%	—	Tp-link C2 Firmware Tp-link C20i Firmware	25/4/2017	17/6/2026	vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234 password, a backdoor guest account with the guest password, and a backdoor test account with the test password.
CVE-2017-8217	Modificada	Media (5.3)	0.94%	—	Tp-link C2 Firmware Tp-link C20i Firmware	25/4/2017	17/6/2026	TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not blocked on any interface.