Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-7829	Modificada	Alta (8.8)	1.7%	—	Schneider-electric D6220 Firmware Schneider-electric D6220l Firmware Schneider-electric D6230 Firmware Schneider-electric D6230l Firmware+55	22/5/2019	17/6/2026	An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.
CVE-2018-7828	Modificada	Alta (8.8)	0.57%	—	Schneider-electric D6220 Firmware Schneider-electric D6220l Firmware Schneider-electric D6230 Firmware Schneider-electric D6230l Firmware+55	22/5/2019	17/6/2026	A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
CVE-2018-7827	Modificada	Media (5.4)	0.80%	—	Schneider-electric D6220 Firmware Schneider-electric D6220l Firmware Schneider-electric D6230 Firmware Schneider-electric D6230l Firmware+55	22/5/2019	17/6/2026	A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session.
CVE-2018-7826	Modificada	Alta (8.8)	2.2%	—	Schneider-electric D6220 Firmware Schneider-electric D6220l Firmware Schneider-electric D6230 Firmware Schneider-electric D6230l Firmware+55	22/5/2019	17/6/2026	A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
CVE-2018-7825	Modificada	Alta (8.8)	2.2%	—	Schneider-electric D6220 Firmware Schneider-electric D6220l Firmware Schneider-electric D6230 Firmware Schneider-electric D6230l Firmware+55	22/5/2019	17/6/2026	A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
CVE-2018-7816	Modificada	Media (6.5)	1.2%	—	Schneider-electric D6220 Firmware Schneider-electric D6220l Firmware Schneider-electric D6230 Firmware Schneider-electric D6230l Firmware+55	22/5/2019	17/6/2026	A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file.