Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2976▼ 107 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
20 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (6.5) | 0.19% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability is associated to the backup configuration functionality that by default encrypts the archives using… | |
| Analizada | Media (5.2) | 0.44% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited remotely leveraging a rogue… | |
| Analizada | Crítica (9.8) | 1.0% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote unauthenticated users capable of interacting with the… | |
| Analizada | Crítica (9.8) | 1.5% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote… | |
| Analizada | Crítica (9.8) | 1.3% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote… | |
| Analizada | Crítica (9.8) | 1.3% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote… | |
| Analizada | Crítica (9.8) | 1.3% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote… | |
| Analizada | Crítica (9.8) | 1.5% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by remote… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 0.69% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.1% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 1.3% | — | Advantech Eki-6333ac-2g FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-1gpo Firmware | 26/11/2024 | 17/6/2026 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The source of the vulnerability relies on multiple… | |
| Analizada | Alta (7.2) | 0.54% | — | Advantech Eki-6333ac-1gpo FirmwareAdvantech Eki-6333ac-2gd FirmwareAdvantech Eki-6333ac-2g Firmware | 26/11/2024 | 17/6/2026 | A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G (<= 1.6.3), EKI-6333AC-2GD (<= v1.6.3) and EKI-6333AC-1GPO (<= v1.2.1). The vulnerability can be exploited by authenticated users by restoring a tampered configuration… |