Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2738▼ 102 respecto a la semana anterior
Críticas / altas1420▲ 177 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)86▼ 423 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
Pendiente de análisisCrítica (9.3)0.32%—Hirschmann HilcosAIHirschmann OpenbatAIHirschmann Bat450AI3/4/202624/7/2026
Hirschmann HiLCOS OpenBAT and BAT450 products contain a firewall bypass vulnerability in IPv6 IPsec deployments that allows traffic from VPN connections to bypass configured firewall rules. Attackers can exploit this vulnerability by establishing IPv6 IPsec connections (IKEv1 or IKEv2) while simultaneously using an…
Pendiente de análisisMedia (5.3)0.20%—Hirschmann OpenbatAIHirschmann Bat450AIHirschmann Bat867AIWeblate WLCAI3/4/202621/7/2026
Hirschmann HiLCOS products OpenBAT, BAT450, WLC, BAT867 contains a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed. Attackers with network access can inject or observe…
Pendiente de análisisAlta (8.8)0.29%—Hirschmann HilcosAIHirschmann OpenbatAIHirschmann Bat300AIHirschmann Bat54AI+13/4/202621/7/2026
Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that cannot be changed, allowing unauthenticated remote attackers to decrypt or intercept encrypted management communications. Attackers can perform man-in-the-middle…