Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior

Críticas / altas1419▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-32449	Modificada	Crítica (9.8)	19%	—	Totolink Ex300 V2 Firmware	7/7/2022	17/6/2026	TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet.
CVE-2021-43663	Modificada	Alta (7.5)	0.96%	—	Totolink Ex300 V2 Firmware	31/3/2022	17/6/2026	totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.
CVE-2021-43662	Modificada	Media (6.5)	0.55%	—	Totolink Ex300 V2 Firmware Totolink A720r Firmware	31/3/2022	17/6/2026	totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.
CVE-2021-43661	Modificada	Media (6.1)	0.64%	—	Totolink Ex300 V2 Firmware	31/3/2022	17/6/2026	totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.
CVE-2022-25008	Modificada	Alta (8.8)	4.4%	—	Totolink Ex300 V2 Firmware Totolink Ex1200t Firmware	30/3/2022	17/6/2026	totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
CVE-2021-43664	Modificada	Alta (8.1)	1.7%	—	Totolink Ex300 V2 Firmware	30/3/2022	17/6/2026	totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.