Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 12% | — | Schneider-electric SMT Series 1015 UPS FirmwareSchneider-electric SMC Series 1018 UPS FirmwareSchneider-electric Smtl Series 1026 UPS FirmwareSchneider-electric SCL Series 1029 UPS Firmware+4 | 9/3/2022 | 17/6/2026 | A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a malformed connection is sent. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018: UPS 04.2 and prior), SMTL… | |
| Modificada | Crítica (9.8) | 12% | — | Schneider-electric SMT Series 1015 UPS FirmwareSchneider-electric SMC Series 1018 UPS FirmwareSchneider-electric Smtl Series 1026 UPS FirmwareSchneider-electric SCL Series 1029 UPS Firmware+4 | 9/3/2022 | 17/6/2026 | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execution when an improperly handled TLS packet is reassembled. Affected Product: SmartConnect Family: SMT Series (SMT Series ID=1015: UPS 04.5 and prior), SMC Series (SMC Series ID=1018:… | |
| Modificada | Crítica (9.1) | 5.8% | — | Schneider-electric SMT Series 1015 UPS FirmwareSchneider-electric SMC Series 1018 UPS FirmwareSchneider-electric Smtl Series 1026 UPS FirmwareSchneider-electric SCL Series 1029 UPS Firmware+29 | 9/3/2022 | 17/6/2026 | A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series (SMT Series ID=18: UPS 09.8 and prior / SMT Series ID=1040: UPS 01.2 and… |