Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2857▼ 164 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (5.4)1.2%—GE Multilink Ml810 FirmwareGE Multilink Ml3000 FirmwareGE Multilink Ml3100 FirmwareGE Multilink Ml800 Firmware+328/8/201717/6/2026
Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.
ModificadaMedia (5)2.4%—GE Multilink Ml3100 FirmwareGE Multilink Ml3100GE Multilink Ml3000 FirmwareGE Multilink Ml3000+1017/1/201517/6/2026
GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of…
ModificadaAlta (7.8)3.2%—GE Multilink Ml810 FirmwareGE Multilink Ml810GE Multilink Ml1600 FirmwareGE Multilink Ml1600+1017/1/201517/6/2026
GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.