Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2733▼ 589 respecto a la semana anterior
Críticas / altas1313▼ 190 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)294▼ 216 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.9% | — | Schneider-electric Mtn6501-0001 FirmwareSchneider-electric Mtn6501-0002 FirmwareSchneider-electric Mtn6260-0410 FirmwareSchneider-electric Mtn6260-0415 Firmware+2 | 16/6/2020 | 17/6/2026 | A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause arbitrary code to be executed when a malicious command is entered. | |
| Modificada | Media (6.5) | 0.78% | — | Schneider-electric Mtn6501-0001 FirmwareSchneider-electric Mtn6501-0002 FirmwareSchneider-electric Mtn6260-0410 FirmwareSchneider-electric Mtn6260-0415 Firmware+2 | 16/6/2020 | 17/6/2026 | A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes. |