Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2983▼ 79 respecto a la semana anterior
Críticas / altas1412▲ 62 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.9% | — | Schneider-electric Powerlogic Pm5560 FirmwareSchneider-electric Powerlogic Pm5561 FirmwareSchneider-electric Powerlogic Pm5562 FirmwareSchneider-electric Powerlogic Pm5563 Firmware+1 | 11/6/2021 | 17/6/2026 | A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device. | |
| Modificada | Crítica (9.8) | 1.9% | — | Schneider-electric Powerlogic Pm8ecc Firmware | 13/2/2017 | 17/6/2026 | An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device. | |
| Modificada | Media (6.1) | 0.91% | — | Schneider-electric Powerlogic Pm8ecc Firmware | 26/6/2016 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |