Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
7 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8) | 0.77% | — | Schneider-electric Rack Power Distribution Unit With Network Management Card 2 FirmwareSchneider-electric Rack Power Distribution Unit With Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token. Affected Products: AP7xxxx and AP8xxx with NMC2 (V6.9.6 or… | |
| Modificada | Media (5.3) | 0.77% | — | Schneider-electric Network Management Card 2 FirmwareSchneider-electric Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting archive to be accessed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2 including Smart-UPS, Symmetra, and Galaxy 3500 with Network Management Card 2 (NMC2): AP9630/AP9630CH/AP9630J,… | |
| Modificada | Media (6.1) | 0.74% | — | Schneider-electric Network Management Card 2 FirmwareSchneider-electric Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists which could cause arbritrary script execution when a malicious file is read and displayed. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2 including Smart-UPS, Symmetra, and… | |
| Modificada | Media (6.1) | 0.74% | — | Schneider-electric Network Management Card 2 FirmwareSchneider-electric Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to an edit policy file. Affected Products: 1-Phase… | |
| Modificada | Media (6.1) | 0.74% | — | Schneider-electric Network Management Card 2 FirmwareSchneider-electric Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2… | |
| Modificada | Media (6.1) | 0.74% | — | Schneider-electric Network Management Card 2 FirmwareSchneider-electric Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause script execution when the request of a privileged account accessing the vulnerable web page is intercepted. Affected Products: 1-Phase Uninterruptible Power Supply (UPS) using NMC2… | |
| Modificada | Media (6.1) | 0.75% | — | Schneider-electric Network Management Card 2 FirmwareSchneider-electric Network Management Card 3 Firmware | 28/1/2022 | 17/6/2026 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause arbritrary script execution when a privileged account clicks on a malicious URL specifically crafted for the NMC pointing to a delete policy file. Affected Products: 1-Phase… |