Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.1% | — | Festo BUS Module Cpx-e-ep FirmwareFesto BUS Node Cpx-fb32 FirmwareFesto BUS Node Cpx-fb33 FirmwareFesto BUS Node Cpx-fb36 Firmware+95 | 1/12/2022 | 17/6/2026 | In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability. | |
| Modificada | Crítica (9.8) | 2.6% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. | |
| Modificada | Crítica (9.8) | 2.6% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. | |
| Modificada | Crítica (9.8) | 2.9% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. | |
| Modificada | Crítica (9.8) | 2.9% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. |