Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3005▼ 85 respecto a la semana anterior
Críticas / altas1403▲ 41 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AplazadaAlta (8.4)0.21%—Siemens Simatic Field PG M5AISiemens Simatic Field PG M6AISiemens Simatic IPC Bx-21aAISiemens Simatic IPC Bx-32aAI+2811/3/20258/9/2026
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC…
AplazadaAlta (8.4)0.21%—Siemens Simatic Field PG M5AISiemens Simatic IPC Bx-21aAISiemens Simatic IPC Bx-32aAISiemens Simatic IPC Bx-39aAI+2711/3/20258/9/2026
A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All versions < V32.01.04), SIMATIC IPC PX-32A (All versions < V29.01.07), SIMATIC…
ModificadaMedia (6.4)0.21%—Intel Local Manageability ServiceSiemens Simatic Field PG M5 FirmwareSiemens Simatic Field PG M6 FirmwareSiemens Simatic Ipc427e Firmware+99/6/202117/6/2026
Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
ModificadaMedia (6.7)0.33%—Intel Converged Security AND Manageability EngineNetapp Cloud BackupSiemens Simatic Field PG M6 FirmwareSiemens Simatic Field PG M5 Firmware+109/6/202117/6/2026
Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a privileged user to potentially enable escalation of privilege via local access.
ModificadaMedia (6.4)0.27%—Intel BiosSiemens Simatic Field PG M6 FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e Firmware+149/6/202117/6/2026
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
ModificadaMedia (4.4)0.28%—Intel Converged Security AND Manageability EngineSiemens Simatic Field PG M6 FirmwareSiemens Simatic Ipc427e FirmwareSiemens Simatic Ipc477e Firmware+99/6/202117/6/2026
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may allow a privileged user to potentially enable information disclosure via local access.
AnalizadaMedia (6.8)0.38%—Intel Converged Security AND Manageability EngineIntel Trusted Execution TechnologySiemens Simatic Drive Controller FirmwareSiemens Simatic Et200sp 1515sp PC2 Firmware+1812/11/202017/6/2026
Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
ModificadaAlta (7.8)0.42%—Intel Xeon Bronze 3206r FirmwareIntel Xeon Gold 5218r FirmwareIntel Xeon Gold 5220r FirmwareIntel Xeon Gold 6208u Firmware+13312/11/202017/6/2026
Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
ModificadaMedia (5.5)0.54%—Intel Celeron 1000mIntel Celeron 1005mIntel Celeron 1007uIntel Celeron 1017u+69015/6/202017/6/2026
Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.