Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2976▼ 107 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.6% | — | Moxa Oncell G3110-hspa FirmwareMoxa Oncell G3110-hspa-t FirmwareMoxa Oncell G3150-hspa FirmwareMoxa Oncell G3150-hspa-t Firmware | 5/3/2018 | 17/6/2026 | A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining… | |
| Modificada | Alta (7.5) | 1.2% | — | Moxa Oncell G3110-hspa FirmwareMoxa Oncell G3110-hspa-t FirmwareMoxa Oncell G3150-hspa FirmwareMoxa Oncell G3150-hspa-t Firmware | 5/3/2018 | 17/6/2026 | An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable. | |
| Modificada | Media (6.5) | 0.48% | — | Moxa Oncell G3150-hspa-t FirmwareMoxa Oncell G3110-hspa-t FirmwareMoxa Oncell G3150-hspa FirmwareMoxa Oncell G3110-hspa Firmware | 5/3/2018 | 17/6/2026 | A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack. |