Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.68% | — | Schneider-electric Hmibscea53d1edb FirmwareSchneider-electric Hmibscea53d1eds FirmwareSchneider-electric Hmibscea53d1edm FirmwareSchneider-electric Hmibscea53d1edl Firmware+3 | 9/2/2022 | 17/6/2026 | A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conducting cross-domain attacks based on same-origin policy or cross-site request forgery protections bypass. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink… | |
| Modificada | Alta (7.4) | 0.94% | — | Schneider-electric Hmibscea53d1edb FirmwareSchneider-electric Hmibscea53d1eds FirmwareSchneider-electric Hmibscea53d1edm FirmwareSchneider-electric Hmibscea53d1edl Firmware+3 | 9/2/2022 | 17/6/2026 | A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within iframes. Affected Product: EcoStruxure EV Charging Expert (formerly known as EVlink… |