Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (8.8)1.9%—Contec Cps-mg341-adsc1-111 FirmwareContec Cps-mg341-adsc1-931 FirmwareContec Cps-mg341g-adsc1-111 FirmwareContec Cps-mg341g-adsc1-930 Firmware+1511/4/202317/6/2026
OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute arbitrary OS commands with a root privilege. The affected products and versions are as follows: M2M Gateway with the firmware Ver.3.7.10 and earlier…
ModificadaAlta (7.2)0.52%—Contec Cps-mg341-adsc1-111 FirmwareContec Cps-mg341-adsc1-931 FirmwareContec Cps-mg341g-adsc1-111 FirmwareContec Cps-mg341g-adsc1-930 Firmware+1511/4/202317/6/2026
Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the information, cause a denial-of-service (DoS) condition, and/or execute arbitrary code. The affected…
ModificadaMedia (4.3)0.69%—Contec Cps-mg341-adsc1-111 FirmwareContec Cps-mg341-adsc1-931 FirmwareContec Cps-mg341g-adsc1-111 FirmwareContec Cps-mg341g-adsc1-930 Firmware+1511/4/202317/6/2026
Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network Maintenance page, which may result in obtaining the network information of the product. The affected products and versions are as follows: M2M Gateway with the…