Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 2.6% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. | |
| Modificada | Crítica (9.8) | 2.6% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. | |
| Modificada | Crítica (9.8) | 2.9% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-off" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. | |
| Modificada | Crítica (9.8) | 2.9% | — | Festo Controller Cecc-x-m1 FirmwareFesto Controller Cecc-x-m1-mv FirmwareFesto Controller Cecc-x-m1-mv-s1 FirmwareFesto Controller Cecc-x-m1-ys-l1 Firmware+4 | 13/6/2022 | 17/6/2026 | In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection. |