Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2855▼ 333 respecto a la semana anterior
Críticas / altas1381▼ 36 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)296▼ 213 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 3.0% | — | Arris Sbr-ac1900p FirmwareArris Sbr-ac3200p FirmwareArris Sbr-ac1200p Firmware | 15/3/2022 | 17/6/2026 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the pptpUserName and pptpPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. | |
| Modificada | Crítica (9.8) | 2.7% | — | Arris Sbr-ac1900p FirmwareArris Sbr-ac3200p FirmwareArris Sbr-ac1200p Firmware | 15/3/2022 | 17/6/2026 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the pppoeUserName, pppoePassword, and pppoe_Service parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted… | |
| Modificada | Crítica (9.8) | 2.9% | — | Arris Sbr-ac1900p FirmwareArris Sbr-ac3200p FirmwareArris Sbr-ac1200p Firmware | 15/3/2022 | 17/6/2026 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. | |
| Modificada | Crítica (9.8) | 2.7% | — | Arris Sbr-ac1900p FirmwareArris Sbr-ac3200p FirmwareArris Sbr-ac1200p Firmware | 15/3/2022 | 17/6/2026 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. | |
| Modificada | Crítica (9.8) | 2.9% | — | Arris Sbr-ac1900p FirmwareArris Sbr-ac3200p FirmwareArris Sbr-ac1200p Firmware | 15/3/2022 | 17/6/2026 | Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers to execute arbitrary… |