Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior
Críticas / altas1277▼ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior
–

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
AnalizadaCrítica (9.8)6.6%—Cisco SPA 301 FirmwareCisco SPA 303 FirmwareCisco SPA 501g FirmwareCisco SPA 502g Firmware+77/8/202417/6/2026
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities…
AnalizadaAlta (7.5)0.75%—Cisco SPA 301 FirmwareCisco SPA 303 FirmwareCisco SPA 501g FirmwareCisco SPA 502g Firmware+77/8/202417/6/2026
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly. These vulnerabilities exist because HTTP packets are not…
AnalizadaCrítica (9.8)7.2%—Cisco SPA 301 FirmwareCisco SPA 303 FirmwareCisco SPA 501g FirmwareCisco SPA 502g Firmware+77/8/202417/6/2026
Multiple vulnerabilities in the web-based management interface of Cisco Small Business SPA300 Series IP Phones and Cisco Small Business SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system with root privileges. These vulnerabilities…
ModificadaAlta (7.5)2.7%—Cisco SPA 301 FirmwareCisco SPA 303 FirmwareCisco SPA 500ds FirmwareCisco SPA 500s Firmware+721/9/201717/6/2026
A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to the inability to handle many…