Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaCrítica (9.8)1.1%—Honeywell Maxpro NVR XE FirmwareHoneywell Maxpro NVR SE FirmwareHoneywell Maxpro NVR PE FirmwareHoneywell Mpnvrswxx Firmware+222/1/202017/6/2026
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to…
ModificadaCrítica (9.8)2.2%—Honeywell Maxpro NVR XE FirmwareHoneywell Maxpro NVR SE FirmwareHoneywell Maxpro NVR PE FirmwareHoneywell Mpnvrswxx Firmware+222/1/202017/6/2026
The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to…
ModificadaAlta (8.1)3.7%💥 PoCHoneywell Enterprise DVR FirmwareHoneywell Maxpro NVR Hybrid SE FirmwareHoneywell Maxpro NVR Hybrid XE FirmwareHoneywell Maxpro NVR SE Firmware+311/9/201717/6/2026
Honeywell NVR devices allow remote attackers to create a user account in the admin group by leveraging access to a guest account to obtain a session ID, and then sending that session ID in a userManager.addUser request to the /RPC2 URI. The attacker can login to the device with that new user account to fully control…
Orbitaley — Vulnerabilidades