Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior

Críticas / altas1293▼ 208 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-0595	Modificada	Media (5.3)	0.42%	—	Schneider-electric Clearscada Schneider-electric Ecostruxure GEO Scada Expert 2019 Schneider-electric Ecostruxure GEO Scada Expert 2020 Schneider-electric Ecostruxure GEO Scada Expert 2021	24/2/2023	17/6/2026	A CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the misinterpretation of log files when malicious packets are sent to the Geo SCADA server's database web port (default 443). Affected products: EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo…
CVE-2023-22611	Modificada	Alta (7.5)	0.57%	—	Schneider-electric Ecostruxure GEO Scada Expert 2019 Schneider-electric Ecostruxure GEO Scada Expert 2020 Schneider-electric Ecostruxure GEO Scada Expert 2021	31/1/2023	17/6/2026	A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA) (Versions prior…
CVE-2023-22610	Modificada	Alta (7.5)	0.57%	—	Schneider-electric Ecostruxure GEO Scada Expert 2019 Schneider-electric Ecostruxure GEO Scada Expert 2020 Schneider-electric Ecostruxure GEO Scada Expert 2021	31/1/2023	17/6/2026	A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messages are sent to the server over the database server TCP port.