Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior
Críticas / altas1270▼ 74 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 16% | — | Aztech Adsl Dsl5018en (1t1r) FirmwareAztech Dsl705e FirmwareAztech Dsl705eu Firmware | 12/1/2018 | 17/6/2026 | Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via vectors involving the ROM file. | |
| Modificada | Crítica (9.8) | 42% | — | Aztech Adsl Dsl5018en (1t1r) FirmwareAztech Dsl705e FirmwareAztech Dsl705eu Firmware | 12/1/2018 | 17/6/2026 | Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login. | |
| Modificada | Alta (7.5) | 13% | — | Aztech Adsl Dsl5018en (1t1r) FirmwareAztech Dsl705e FirmwareAztech Dsl705eu Firmware | 12/1/2018 | 17/6/2026 | cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service (WAN connectivity reset) via a direct request. |