Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2841▼ 157 respecto a la semana anterior

Críticas / altas1370▲ 51 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-44725	Modificada	Alta (7.8)	0.18%	—	Opcfoundation Local Discovery Server	17/11/2022	17/6/2026	OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. This allows a normal user to create a malicious file that is loaded by LDS (running as a high-privilege user).
CVE-2017-17443	Modificada	Media (6.5)	0.90%	—	Opcfoundation Local Discovery Server	13/6/2018	17/6/2026	OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that allow attackers to trigger a crash by placing invalid data into the configuration file. This vulnerability requires an attacker with access to the file system where the configuration file is stored;…
CVE-2017-11672	Modificada	Alta (7.8)	0.32%	—	Opcfoundation Local Discovery Server	13/6/2018	17/6/2026	The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double quotes around the opcualds.exe executable path, which might allow local users to gain privileges.
CVE-2017-12069	Modificada	Alta (8.2)	2.9%	—	Siemens Simatic Pcs7 Siemens Wincc Ocpfoundation Local Discovery Server Ocpfoundation UA .net	30/8/2017	17/6/2026	An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367. Among the affected products are Siemens SIMATIC PCS7 (All versions V8.1 and earlier), SIMATIC WinCC (All versions < V7.4 SP1), SIMATIC WinCC Runtime Professional (All…