Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2568▼ 306 respecto a la semana anterior
Críticas / altas1351▲ 96 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.5) | 36% | — | Rockwellautomation Ethernet/ip FirmwareRockwellautomation Compactlogix FirmwareRockwellautomation Flexlogix FirmwareRockwellautomation Flex I/O Ethernet/ip Firmware+8 | 24/1/2013 | 16/6/2026 | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected… | |
| Modificada | Media (5) | 57% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | An information exposure of confidential information results when the device receives a specially crafted CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP. Successful exploitation of this vulnerability could cause loss of confidentiality. Rockwell Automation EtherNet/IP products; 1756-ENBT,… | |
| Modificada | Media (4.8) | 9.3% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | The Web server password authentication mechanism used by the products is vulnerable to a MitM and Replay attack. Successful exploitation of this vulnerability will allow unauthorized access of the product’s Web server to view and alter product configuration and diagnostics information. Rockwell Automation EtherNet/IP… | |
| Modificada | Alta (8.5) | 23% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that changes the product’s configuration and network parameters, a DoS condition can occur. This situation could cause loss of availability and a disruption… | |
| Modificada | Alta (7.5) | 27% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the NIC to crash. Successful exploitation of this vulnerability could cause loss of… | |
| Modificada | Crítica (9.8) | 7.8% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | The device does not properly authenticate users and the potential exists for a remote user to upload a new firmware image to the Ethernet card, whether it is a corrupt or legitimate firmware image. Successful exploitation of this vulnerability could cause loss of availability, integrity, and confidentiality and a… | |
| Modificada | Alta (7.5) | 27% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the CPU to crash. Successful exploitation of this vulnerability could cause loss of… | |
| Modificada | Alta (7.5) | 33% | — | Rockwellautomation Controllogix ControllersRockwellautomation Guardlogix ControllersRockwellautomation MicrologixRockwellautomation Softlogix Controllers+13 | 24/1/2013 | 16/6/2026 | When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This situation could cause loss of availability and a disruption of… |