Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2991▼ 71 respecto a la semana anterior
Críticas / altas1367▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)458▼ 52 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 1.2% | — | GE Multilink Ml810 FirmwareGE Multilink Ml3000 FirmwareGE Multilink Ml3100 FirmwareGE Multilink Ml800 Firmware+3 | 28/8/2017 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier. | |
| Modificada | Media (5) | 2.4% | — | GE Multilink Ml3100 FirmwareGE Multilink Ml3100GE Multilink Ml3000 FirmwareGE Multilink Ml3000+10 | 17/1/2015 | 17/6/2026 | GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of… | |
| Modificada | Alta (7.8) | 3.2% | — | GE Multilink Ml810 FirmwareGE Multilink Ml810GE Multilink Ml1600 FirmwareGE Multilink Ml1600+10 | 17/1/2015 | 17/6/2026 | GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets. |