Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2676▼ 422 respecto a la semana anterior
Críticas / altas1295▼ 73 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.76% | — | H3C N12 Firmware | 14/1/2025 | 5/7/2026 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. | |
| Modificada | Crítica (9.8) | 0.76% | — | H3C N12 Firmware | 14/1/2025 | 5/7/2026 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. | |
| Modificada | Crítica (9.8) | 0.55% | — | H3C N12 Firmware | 14/1/2025 | 5/7/2026 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. | |
| Modificada | Crítica (9.8) | 0.55% | — | H3C N12 Firmware | 14/1/2025 | 5/7/2026 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. | |
| Modificada | Crítica (9.8) | 0.76% | — | H3C N12 Firmware | 14/1/2025 | 5/7/2026 | H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. | |
| Modificada | Crítica (9.8) | 3.5% | — | Asus Rp-ac52 FirmwareAsus Ea-n66 FirmwareAsus Rp-n12 FirmwareAsus Rp-n14 Firmware+3 | 13/7/2018 | 17/6/2026 | A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface specifically in the action_script parameter. The action_script parameter specifies a script to be executed if the action_mode parameter does not contain a valid state.… | |
| Modificada | Alta (8.8) | 0.84% | — | Asus Rp-ac52 FirmwareAsus Ea-n66 FirmwareAsus Rp-n12 FirmwareAsus Rp-n14 Firmware+3 | 13/7/2018 | 17/6/2026 | In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify whether a valid request was intentionally provided by the user. An attacker can perform actions with the same permissions as a victim user, provided the victim has an… |