Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2983▼ 79 respecto a la semana anterior
Críticas / altas1412▲ 62 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 1.2% | — | Schneider-electric Powerlogic Ion8650 FirmwareSchneider-electric Powerlogic Ion8800 FirmwareSchneider-electric Powerlogic Ion7550 FirmwareSchneider-electric Powerlogic Ion7650 Firmware+7 | 11/3/2021 | 17/6/2026 | A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot. | |
| Modificada | Alta (7.5) | 0.60% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Ion7650 FirmwareSchneider-electric Powerlogic Ion8600 FirmwareSchneider-electric Powerlogic Ion8650 Firmware+6 | 19/2/2021 | 17/6/2026 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic… | |
| Modificada | Alta (7.5) | 0.59% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Ion7650 FirmwareSchneider-electric Powerlogic Ion7700 FirmwareSchneider-electric Powerlogic Ion7300 Firmware+8 | 19/2/2021 | 17/6/2026 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet… | |
| Modificada | Media (4.5) | 0.34% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Ion7650 FirmwareSchneider-electric Powerlogic Ion8600 FirmwareSchneider-electric Powerlogic Ion8650 Firmware+6 | 19/2/2021 | 17/6/2026 | A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface. |