Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2737▼ 484 respecto a la semana anterior

Críticas / altas1302▼ 187 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)227▼ 275 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-3953	Modificada	Media (5.3)	0.18%	—	Schneider-electric Pro-face Gp-pro EX	9/8/2023	17/6/2026	A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.
CVE-2021-22775	Modificada	Alta (7.8)	0.33%	—	Schneider-electric Gp-pro EX	2/9/2021	17/6/2026	A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software.
CVE-2020-7492	Modificada	Media (6.5)	1.1%	—	Schneider-electric Gp-pro EX Firmware	16/6/2020	17/6/2026	A CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100 which could cause the discovery of the password when the user is entering the password because it is not masqueraded.
CVE-2018-7832	Modificada	Alta (8.8)	2.2%	—	Schneider-electric Pro-face Gp-pro EX	24/12/2018	17/6/2026	An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched.
CVE-2016-2292	Modificada	Media (6.5)	2.3%	—	Schneider-electric Proface Gp-pro EX Ex-ed Schneider-electric Proface Gp-pro EX Pfxexedls Schneider-electric Proface Gp-pro EX Pfxexedv Schneider-electric Proface Gp-pro EX Pfxexgrpls	6/4/2016	17/6/2026	Stack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-2291	Modificada	Media (6.5)	2.2%	—	Schneider-electric Proface Gp-pro EX Ex-ed Schneider-electric Proface Gp-pro EX Pfxexedls Schneider-electric Proface Gp-pro EX Pfxexedv Schneider-electric Proface Gp-pro EX Pfxexgrpls	6/4/2016	17/6/2026	Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allow remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2016-2290	Modificada	Alta (8.8)	2.3%	—	Schneider-electric Proface Gp-pro EX Ex-ed Schneider-electric Proface Gp-pro EX Pfxexedls Schneider-electric Proface Gp-pro EX Pfxexedv Schneider-electric Proface Gp-pro EX Pfxexgrpls	6/4/2016	17/6/2026	Heap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2015-7921	Modificada	Crítica (9.1)	2.0%	—	Schneider-electric Proface Gp-pro EX Ex-ed Schneider-electric Proface Gp-pro EX Pfxexedls Schneider-electric Proface Gp-pro EX Pfxexedv Schneider-electric Proface Gp-pro EX Pfxexgrpls	6/4/2016	17/6/2026	The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.