Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3005▼ 69 respecto a la semana anterior
Críticas / altas1419▲ 52 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.3) | 1.4% | — | Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x Firmware+5 | 18/9/2019 | 17/6/2026 | Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model information of the device by constructing malicious data packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for… | |
| Modificada | Alta (8.8) | 0.86% | — | Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x Firmware+5 | 18/9/2019 | 17/6/2026 | Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August… | |
| Modificada | Alta (7.5) | 1.0% | — | Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x Firmware+5 | 18/9/2019 | 17/6/2026 | Some Dahua products have the problem of denial of service during the login process. An attacker can cause a device crashed by constructing a malicious packet. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build… | |
| Modificada | Crítica (9.8) | 1.1% | — | Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x Firmware+5 | 18/9/2019 | 17/6/2026 | The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which… | |
| Modificada | Media (5.3) | 0.78% | — | Dahuasecurity Ipc-hdw1x2x FirmwareDahuasecurity Ipc-hfw1x2x FirmwareDahuasecurity Ipc-hdw2x2x FirmwareDahuasecurity Ipc-hfw2x2x Firmware+5 | 17/9/2019 | 17/6/2026 | Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for… |