Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 87 respecto a la semana anterior
Críticas / altas1458▲ 97 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.9) | 1.1% | — | Zyxel N300 Netusb Nbg-419n FirmwareZyxel N300 Netusb Nbg-419n | 15/4/2014 | 17/6/2026 | The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1) detectWeather, (2) set_language, (3) SystemCommand, or (4) NTPSyncWithHost function in management.c, or a (5) SET COUNTRY, (6) SET WLAN SSID, (7) SET… | |
| Modificada | Alta (7.9) | 0.61% | — | Zyxel N300 Netusb Nbg-419n FirmwareZyxel N300 Netusb Nbg-419n | 15/4/2014 | 17/6/2026 | Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a long temp attribute in a yweather:condition element in a forecastrss file that is processed by the checkWeather function; the (2)… | |
| Modificada | Alta (7.8) | 0.75% | — | Zyxel N300 Netusb Nbg-419n FirmwareZyxel N300 Netusb Nbg-419n | 15/4/2014 | 17/6/2026 | The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 has a hardcoded password of qweasdzxc for an unspecified account, which allows remote attackers to obtain index.asp login access via an HTTP request. | |
| Modificada | Media (6.1) | 0.86% | — | Zyxel N300 Netusb Nbg-419n FirmwareZyxel N300 Netusb Nbg-419n | 15/4/2014 | 17/6/2026 | The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to bypass authentication by using %2F sequences in place of / (slash) characters. |