Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (8.7)1.1%—Siemens Simatic Cloud Connect 7 Cc712 FirmwareSiemens Simatic Cloud Connect 7 Cc716 FirmwareSiemens Simatic Drive Controller CPU 1504d TF FirmwareSiemens Simatic Drive Controller CPU 1507d TF Firmware+7412/9/202317/6/2026
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially…
ModificadaAlta (7.5)0.92%—Siemens Simatic S7-1200 CPU FirmwareSiemens Simatic Step 7 (tia Portal)10/8/202117/6/2026
A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download…
ModificadaCrítica (9.8)5.2%—Siemens Simatic Driver Controller FirmwareSiemens S7-1200 CPU FirmwareSiemens S7-1500 CPU FirmwareSiemens Simatic S7-1500 Software Controller+228/5/202117/6/2026
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS…
ModificadaAlta (7.5)2.1%—Siemens DK Standard Ethernet Controller FirmwareSiemens Ek-ertec 200 FirmwareSiemens Ek-ertec 200p FirmwareSiemens Simatic CFU PA Firmware+6210/10/201917/6/2026
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
Orbitaley — Vulnerabilidades