Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3028▼ 62 respecto a la semana anterior

Críticas / altas1422▲ 60 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-10371	Aplazada	Media (5.5)	0.36%	—	Hardy-barth Echarge Salia Plcc^AI	13/9/2025	17/6/2026	A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may…
CVE-2025-5873	Aplazada	Baja (2.1)	0.32%	—	Hardy-barth Salia Plcc^AI	9/6/2025	17/6/2026	A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload. The attack can be initiated remotely. The exploit is now…
CVE-2024-11666	Analizada	Crítica (9.8)	0.43%	—	Echarge Salia Plcc Firmware	24/11/2024	17/6/2026	Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably positioned on the network between an EV charger controller…
CVE-2024-11665	Analizada	Alta (8.8)	1.3%	—	Echarge Salia Plcc Firmware	24/11/2024	17/6/2026	Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.