Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7) | 0.20% | — | Teltonika-networks Rut240 Firmware | 17/2/2024 | 17/6/2026 | Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even though the UI shows that they are only available on the LAN interface. | |
| Modificada | Alta (8.8) | 1.5% | — | Teltonika-networks Rut200 FirmwareTeltonika-networks Rut240 FirmwareTeltonika-networks Rut241 FirmwareTeltonika-networks Rut300 Firmware+14 | 22/5/2023 | 17/6/2026 | Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a malicious name that… | |
| Modificada | Alta (8.8) | 1.1% | — | Teltonika-networks Rut200 FirmwareTeltonika-networks Rut240 FirmwareTeltonika-networks Rut241 FirmwareTeltonika-networks Rut300 Firmware+14 | 22/5/2023 | 17/6/2026 | Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI configuration utility to change… |