Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.4% | — | Omron Cs1w-eip21 FirmwareOmron Cs1w-spu01-v2 FirmwareOmron Cs1w-spu02-v2 FirmwareOmron Cs1w-etn21 Firmware+267 | 19/6/2023 | 17/6/2026 | FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext… | |
| Modificada | Crítica (9.1) | 0.62% | — | Omron Sysmac Cj2h-cpu64 FirmwareOmron Sysmac Cj2h-cpu64-eip FirmwareOmron Sysmac Cj2h-cpu65 FirmwareOmron Sysmac Cj2h-cpu65-eip Firmware+124 | 16/3/2023 | 17/6/2026 | Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard… | |
| Modificada | Crítica (9.8) | 1.2% | — | Omron Cp1l-el20dr-d Firmware | 17/1/2023 | 17/6/2026 | Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a… |