Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 10% | 💥 Exploit | Humaxdigital Hg100r Firmware | 19/7/2017 | 17/6/2026 | The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers… | |
| Modificada | Crítica (9.8) | 2.2% | — | Humaxdigital Hg100r Firmware | 4/7/2017 | 17/6/2026 | An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin. | |
| Modificada | Media (6.1) | 0.76% | — | Humaxdigital Hg100r Firmware | 4/7/2017 | 17/6/2026 | An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. | |
| Modificada | Crítica (9.8) | 2.1% | — | Humaxdigital Hg100r Firmware | 4/7/2017 | 17/6/2026 | An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin. |