Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.3) | 0.42% | — | Cisco IOS XECisco Cgr1000 FirmwareCisco Ir510 Wpan FirmwareCisco Ic3000 Industrial Compute Gateway Firmware+3 | 7/5/2025 | 17/6/2026 | A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition. This vulnerability is due to the… | |
| Modificada | Alta (8.8) | 1.5% | — | Cisco Ic3000 Industrial Compute GatewayCisco IOXCisco IOS XECisco Cgr1240 Firmware+5 | 12/2/2023 | 17/6/2026 | A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An… | |
| Modificada | Media (6.7) | 1.1% | — | Cisco Cgr1000 Compute ModuleCisco Ic3000 Industrial Compute GatewayCisco Ir510 Operating SystemCisco IOS+1 | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (7.5) | 1.1% | — | Cisco Cgr1000 Compute ModuleCisco Ic3000 Industrial Compute GatewayCisco IOS | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Media (4.8) | 0.64% | — | Cisco Cgr1000 Compute ModuleCisco Ic3000 Industrial Compute GatewayCisco Ir510 Operating SystemCisco IOS+1 | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Media (5.3) | 1.3% | — | Cisco Cgr1000 Compute ModuleCisco Ic3000 Industrial Compute GatewayCisco IOSCisco IOS XE | 15/4/2022 | 17/6/2026 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or… | |
| Modificada | Alta (7.5) | 1.3% | — | Cisco IOSCisco Cgr1000 FirmwareCisco Ic3000 Industrial Compute Gateway Firmware | 24/3/2021 | 17/6/2026 | A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… | |
| Modificada | Media (6.5) | 1.5% | — | Cisco Ic3000 Industrial Compute Gateway Firmware | 2/10/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco IC3000 Industrial Compute Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages system resources. An attacker… |