Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior

Críticas / altas1352▲ 28 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2017-6040	Modificada	Media (5.3)	0.95%	—	Belden Hirschmann Gecko Lite Managed Switch Firmware	30/6/2017	17/6/2026	An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. Non-sensitive information can be obtained anonymously.
CVE-2017-6038	Modificada	Alta (7.1)	0.44%	—	Belden Hirschmann Gecko Lite Managed Switch Firmware	30/6/2017	17/6/2026	A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web application does not sufficiently verify that requests were provided by the user who submitted the request.
CVE-2017-6036	Modificada	Media (6.5)	0.92%	—	Belden Hirschmann Gecko Lite Managed Switch Firmware	30/6/2017	17/6/2026	A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a request, but does not sufficiently verify that the request is being sent to the expected destination.
CVE-2017-5163	Modificada	Media (5.9)	1.9%	—	Belden Hirschmann Gecko Lite Managed Switch Firmware	13/2/2017	17/6/2026	An issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. After an administrator downloads a configuration file, a copy of the configuration file, which includes hashes of user passwords, is saved to a location that is accessible without authentication by path traversal.