Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior
Críticas / altas1415▲ 65 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)1.7%—Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon Bmenoc 0311 FirmwareSchneider-electric Modicon Bmenoc 0321 Firmware29/10/201917/6/2026
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when reading specific registers with the REST API of the controller/communication module.
ModificadaAlta (7.5)1.7%—Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon Bmenoc 0311 FirmwareSchneider-electric Modicon Bmenoc 0321 Firmware29/10/201917/6/2026
A CWE-200: Information Exposure vulnerability exists in Modicon M580, Modicon BMENOC 0311, and Modicon BMENOC 0321, which could cause the disclosure of sensitive information when using specific Modbus services provided by the REST API of the controller/communication module.
ModificadaAlta (8.6)33%—Schneider-electric Modicon M580 FirmwareSchneider-electric Modicon Bmenoc 0311 FirmwareSchneider-electric Modicon Bmenoc 0321 Firmware29/10/201917/6/2026
A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info), which could cause a Denial of Service attack on the PLC when sending specific data on the REST API of the…
Orbitaley — Vulnerabilidades