Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2797▼ 203 respecto a la semana anterior
Críticas / altas1352▲ 28 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)255▼ 266 respecto a la semana anterior
–

166 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaBaja (1.8)0.19%—Netgear Xr1000 FirmwareNetgear Xr1000v2 FirmwareNetgear Xr500 Firmware8/9/202611/9/2026
A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality…
AnalizadaMedia (5.6)0.47%—Netgear Lbr1020 FirmwareNetgear Lbr20 FirmwareNetgear R6700ax FirmwareNetgear R7800 Firmware+189/6/202623/7/2026
Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations.
AnalizadaAlta (7.5)0.41%—Elcaradio Star150 FirmwareElcaradio Bp1000 FirmwareElcaradio Star300 FirmwareElcaradio Star2000 Firmware+219/11/202517/6/2026
The ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2000, STAR1000, STAR500, and possibly other models, contains an information disclosure vulnerability allowing unauthenticated attackers to retrieve admin credentials and system settings via an unprotected /setup.xml endpoint. The…
ModificadaAlta (7.5)0.19%—Omron Nj101-1000 FirmwareOmron Nj101-1020 FirmwareOmron Nj101-9000 FirmwareOmron Nj101-9020 Firmware+5124/6/202417/6/2026
Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.
AnalizadaAlta (8.8)0.55%—Netgear D7800 FirmwareNetgear Ex2700 FirmwareNetgear Ex6100 FirmwareNetgear Ex6150 Firmware+377/5/202417/6/2026
NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of…
ModificadaCrítica (9.8)1.4%—Omron Cs1w-eip21 FirmwareOmron Cs1w-spu01-v2 FirmwareOmron Cs1w-spu02-v2 FirmwareOmron Cs1w-etn21 Firmware+26719/6/202317/6/2026
FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext…
ModificadaAlta (7.5)1.3%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaMedia (6.5)0.52%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaAlta (7.5)0.56%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaAlta (7.5)0.31%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaCrítica (9.8)0.51%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaCrítica (9.1)0.60%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaAlta (7.5)0.49%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaAlta (7.5)0.46%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaCrítica (9.8)0.34%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaCrítica (9.8)0.55%—Ruckuswireless R310 FirmwareRuckuswireless R500 FirmwareRuckuswireless R600 FirmwareRuckuswireless T300 Firmware+1020/1/202317/6/2026
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone…
ModificadaMedia (4.8)0.96%—Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance Sc-600 FirmwareSiemens Scalance Sc622-2c Firmware+8610/8/202217/6/2026
Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS.
ModificadaAlta (7.5)1.7%—Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance W700 Ieee 802.11ax FirmwareSiemens Scalance W700 Ieee 802.11n Firmware+8010/8/202217/6/2026
Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.
ModificadaAlta (7.2)1.8%—Siemens Scalance M-800 FirmwareSiemens Scalance S615 FirmwareSiemens Scalance Sc-600 FirmwareSiemens Scalance Sc622-2c Firmware+8610/8/202217/6/2026
Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject code or spawn a system root shell.
ModificadaAlta (8.1)1.3%—Omron Nx701-1600 FirmwareOmron Nx701-1700 FirmwareOmron Nx701-z700 FirmwareOmron Nx701-z600 Firmware+534/7/202217/6/2026
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49…
ModificadaAlta (7.5)1.2%—Omron Nx701-1600 FirmwareOmron Nx701-1700 FirmwareOmron Nx701-z700 FirmwareOmron Nx701-z600 Firmware+484/7/202217/6/2026
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker…
ModificadaAlta (8.1)1.9%—Omron Nx701-1600 FirmwareOmron Nx701-1700 FirmwareOmron Nx701-z700 FirmwareOmron Nx701-z600 Firmware+534/7/202217/6/2026
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all…
ModificadaCrítica (9.8)0.82%—Netgear D7800 FirmwareNetgear Dm200 FirmwareNetgear Ex2700 FirmwareNetgear Ex6150v2 Firmware+2826/12/202117/6/2026
Certain NETGEAR devices are affected by server-side injection. This affects D7800 before 1.0.1.58, DM200 before 1.0.0.66, EX2700 before 1.0.1.56, EX6150v2 before 1.0.1.86, EX6100v2 before 1.0.1.86, EX6200v2 before 1.0.1.78, EX6250 before 1.0.0.110, EX6410 before 1.0.0.110, EX6420 before 1.0.0.110, EX6400v2 before…
ModificadaAlta (7.2)0.94%—Netgear D7800 FirmwareNetgear Ex6250 FirmwareNetgear Ex7700 FirmwareNetgear Lbr20 Firmware+2526/12/202117/6/2026
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.64, EX6250 before 1.0.0.134, EX7700 before 1.0.0.222, LBR20 before 2.6.3.50, RBS50Y before 2.7.3.22, R8900 before 1.0.5.26, R9000 before 1.0.5.26, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700…
ModificadaAlta (8.8)0.69%—Netgear D3600 FirmwareNetgear D6000 FirmwareNetgear D6200 FirmwareNetgear D6220 Firmware+4526/12/202117/6/2026
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, D6200 before 1.1.00.34, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7000 before 1.0.1.74, D7000v2 before 1.0.0.53, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DC112A…