Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior

Críticas / altas1389▼ 28 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-6529	Modificada	Media (4.9)	1.0%	—	Kunbus Pr100088 Modbus Gateway Firmware	7/1/2020	17/6/2026	An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 (or Software Version 1.1.13166).
CVE-2019-6531	Modificada	Alta (8.1)	1.0%	—	Kunbus Pr100088 Modbus Gateway Firmware	2/4/2019	17/6/2026	An attacker could retrieve passwords from a HTTP GET request from the Kunbus PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) if the attacker is in an MITM position.
CVE-2019-6549	Modificada	Alta (7.2)	0.59%	—	Kunbus Pr100088 Modbus Gateway Firmware	12/2/2019	17/6/2026	An attacker could retrieve plain-text credentials stored in a XML file on PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) through FTP.
CVE-2019-6533	Modificada	Crítica (9.1)	1.2%	—	Kunbus Pr100088 Modbus Gateway Firmware	12/2/2019	17/6/2026	Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166).
CVE-2019-6527	Modificada	Crítica (9.8)	1.2%	—	Kunbus Pr100088 Modbus Gateway Firmware	12/2/2019	17/6/2026	PR100088 Modbus gateway versions prior to Release R02 (or Software Version 1.1.13166) may allow an attacker to be able to change the password for an admin user who is currently or previously logged in, provided the device has not been restarted.