Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3001▼ 62 respecto a la semana anterior
Críticas / altas1373▲ 34 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)459▼ 50 respecto a la semana anterior
14 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Media (5.3) | 0.24% | — | Siemens Desigo Dxr2AISiemens Desigo Pxc3AISiemens Desigo Pxc4AISiemens Desigo Pxc5.e003AI+2 | 11/8/2026 | 28/8/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions… | |
| Modificada | Alta (8.7) | 1.4% | — | Siemens Nucleus NETSiemens Nucleus Readystart V3Siemens Nucleus Source CodeSiemens Apogee Modular Building Controller Firmware+17 | 11/10/2022 | 17/6/2026 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions <… | |
| Modificada | Media (6.5) | 0.60% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 20/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The application, after a successful login, sets the session cookie on the browser via… | |
| Modificada | Alta (7.5) | 0.90% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 20/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The login functionality of the application does not employ any countermeasures against… | |
| Modificada | Media (5.3) | 1.1% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 20/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The login functionality of the application fails to normalize the response times of… | |
| Modificada | Crítica (9.1) | 0.98% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Dxr2 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application returns an AuthToken that does not expire at the defined auto logoff… | |
| Modificada | Media (6.5) | 0.48% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Dxr2 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application stores the PBKDF2 derived key of users passwords with a low… | |
| Modificada | Media (6.5) | 0.85% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Dxr2 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application fails to enforce an upper bound to the cost factor of the PBKDF2… | |
| Modificada | Alta (7.5) | 0.93% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). When the controller receives a specific BACnet protocol packet, an exception causes the… | |
| Modificada | Alta (8.8) | 2.4% | — | Siemens Nucleus NETSiemens Nucleus Readystart V3Siemens Nucleus Source CodeSiemens Apogee Modular Building Controller Firmware+18 | 9/11/2021 | 17/6/2026 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions <… | |
| Modificada | Alta (8.8) | 2.4% | — | Siemens Nucleus NETSiemens Nucleus Readystart V3Siemens Nucleus Source CodeSiemens Apogee Modular Building Controller Firmware+18 | 9/11/2021 | 17/6/2026 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions <… | |
| Modificada | Crítica (9.8) | 3.0% | — | Siemens Nucleus NETSiemens Nucleus Readystart V3Siemens Nucleus Source CodeSiemens Apogee Modular Building Controller Firmware+18 | 9/11/2021 | 17/6/2026 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions <… | |
| Modificada | Crítica (9.8) | 1.5% | — | Siemens Capital VstarSiemens Nucleus NETSiemens Nucleus Readystart V3Siemens Nucleus Source Code+19 | 9/11/2021 | 17/6/2026 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions <… | |
| Modificada | Alta (7.1) | 0.71% | — | Siemens Capital VstarSiemens Nucleus NETSiemens Nucleus ReadystartSiemens Nucleus Safetycert+22 | 16/1/2020 | 17/6/2026 | A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.3), APOGEE PXC Modular (P2 Ethernet) (All versions >= V2.8.2… |