Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (10)3.0%—Schneider-electric Quantum Ethernet Module 140noe77100Schneider-electric Quantum Ethernet Module 140noe77101Schneider-electric Quantum Ethernet Module 140noe7711117/12/201116/6/2026
The modbus_125_handler function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) allows remote attackers to install arbitrary firmware updates via a MODBUS 125 function code to TCP port 502.
ModificadaAlta (10)2.6%—Schneider-electric Quantum Ethernet Module 140noe77100Schneider-electric Quantum Ethernet Module 140noe77101Schneider-electric Quantum Ethernet Module 140noe7711117/12/201116/6/2026
The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device (aka the Quantum 140NOE771* module) generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a (1) ARP request…
ModificadaAlta (10)3.9%—Schneider-electric Quantum Ethernet Module 140cpu65150Schneider-electric Quantum Ethernet Module 140cpu65160Schneider-electric Quantum Ethernet Module 140cpu65260Schneider-electric Quantum Ethernet Module 140noe77100+1717/12/201116/6/2026
The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4)…