Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.38% | — | Schneider-electric Powerlogic Ion9000 FirmwareSchneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Pm8000 FirmwareSchneider-electric Powerlogic Ion8650 Firmware+1 | 22/5/2023 | 17/6/2026 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic. | |
| Modificada | Crítica (9.8) | 2.4% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Pm8000 FirmwareSchneider-electric Powerlogic Ion9000 Firmware | 11/3/2021 | 17/6/2026 | A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution. | |
| Modificada | Alta (7.5) | 0.60% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Ion7650 FirmwareSchneider-electric Powerlogic Ion8600 FirmwareSchneider-electric Powerlogic Ion8650 Firmware+6 | 19/2/2021 | 17/6/2026 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic… | |
| Modificada | Alta (7.5) | 0.59% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Ion7650 FirmwareSchneider-electric Powerlogic Ion7700 FirmwareSchneider-electric Powerlogic Ion7300 Firmware+8 | 19/2/2021 | 17/6/2026 | A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet… | |
| Modificada | Media (4.5) | 0.34% | — | Schneider-electric Powerlogic Ion7400 FirmwareSchneider-electric Powerlogic Ion7650 FirmwareSchneider-electric Powerlogic Ion8600 FirmwareSchneider-electric Powerlogic Ion8650 Firmware+6 | 19/2/2021 | 17/6/2026 | A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface. |