Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2857▼ 164 respecto a la semana anterior
Críticas / altas1379▲ 45 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)266▼ 258 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.5) | 0.63% | — | Codesys OPC UA ServerAI | 18/3/2025 | 17/6/2026 | An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy. | |
| Aplazada | Media (5.3) | 0.46% | — | Siemens Simatic Energy Manager BasicAISiemens Simatic Energy Manager PROAISiemens Simatic IPC DiagbaseAISiemens Simatic IPC DiagmonitorAI+2 | 9/7/2024 | 17/6/2026 | A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), SIMATIC IPC DiagMonitor (All versions), SIMIT V10 (All versions), SIMIT V11 (All versions < V11.1). Unified Automation .NET based OPC UA… | |
| Modificada | Media (5.3) | 0.36% | — | Integrationobjects OPC UA Server Toolkit | 16/1/2024 | 17/6/2026 | OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's self-defined description field. | |
| Modificada | Media (5.5) | 0.21% | — | Ecostruxure OPC UA Server Expert | 12/7/2023 | 17/6/2026 | A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server. | |
| Modificada | Alta (7.5) | 2.6% | — | Opcfoundation Local Discover ServerSiemens Simatic Process Historian OPC UA Server FirmwareSiemens Simatic NET PCSiemens Simatic Wincc+3 | 27/8/2021 | 17/6/2026 | In OPC Foundation Local Discovery Server (LDS) before 1.04.402.463, remote attackers can cause a denial of service (DoS) by sending carefully crafted messages that lead to Access of a Memory Location After the End of a Buffer. | |
| Modificada | Media (5.3) | 0.95% | — | Beckhoff IPC Diagnostics UA ServerBeckhoff Tf6100Beckhoff Twincat OPC UA Server | 13/5/2021 | 17/6/2026 | TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the… | |
| Modificada | Media (5.9) | 64% | — | OpensslDebian LinuxFreebsdNetapp Active IQ Unified Manager+102 | 25/3/2021 | 17/6/2026 | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer… | |
| Modificada | Alta (7.5) | 1.6% | — | Siemens Simatic Cp443-1 OPC UA FirmwareSiemens Simatic ET 200 Open Controller CPU 1515sp PC2 FirmwareSiemens Simatic IPC Diagmonitor FirmwareSiemens Simatic NET PC Software Firmware+23 | 17/4/2019 | 17/6/2026 | A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) (All versions < V15.1 Upd 4), SIMATIC HMI Comfort Panels 4" - 22" (incl.… |