Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.1% | — | Schneider-electric Meg6501-0001 FirmwareSchneider-electric Meg6501-0002 FirmwareSchneider-electric Meg6260-0410 FirmwareSchneider-electric Meg6260-0415 Firmware | 17/9/2019 | 17/6/2026 | A Format String: CWE-134 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to send a crafted message to the target… | |
| Modificada | Alta (8.8) | 1.1% | — | Schneider-electric Meg6501-0001 FirmwareSchneider-electric Meg6501-0002 FirmwareSchneider-electric Meg6260-0410 FirmwareSchneider-electric Meg6260-0415 Firmware | 17/9/2019 | 17/6/2026 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low… | |
| Modificada | Media (6.5) | 0.82% | — | Schneider-electric Meg6501-0001 FirmwareSchneider-electric Meg6501-0002 FirmwareSchneider-electric Meg6260-0410 FirmwareSchneider-electric Meg6260-0415 Firmware | 17/9/2019 | 17/6/2026 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow a user with low privileges to delete a… | |
| Modificada | Crítica (9.1) | 0.99% | — | Schneider-electric Meg6501-0001 FirmwareSchneider-electric Meg6501-0002 FirmwareSchneider-electric Meg6260-0410 FirmwareSchneider-electric Meg6260-0415 Firmware | 17/9/2019 | 17/6/2026 | A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could cause server configuration data to be… | |
| Modificada | Alta (7.5) | 1.3% | — | Schneider-electric Meg6501-0001 FirmwareSchneider-electric Meg6501-0002 FirmwareSchneider-electric Meg6260-0410 FirmwareSchneider-electric Meg6260-0415 Firmware | 17/9/2019 | 17/6/2026 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow the file system to access the wrong file. | |
| Modificada | Media (5.4) | 0.52% | — | Schneider-electric Meg6501-0001 FirmwareSchneider-electric Meg6501-0002 FirmwareSchneider-electric Meg6260-0410 FirmwareSchneider-electric Meg6260-0415 Firmware | 17/9/2019 | 17/6/2026 | A Cross-Site Scripting (XSS) CWE-79 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server Plus, MEG6260-0410 - U.motion KNX Server Plus, Touch 10, MEG6260-0415 - U.motion KNX Server Plus, Touch 15), which could allow an attacker to inject client-side script… |