Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.44% | — | Sprecher-automation Sprecon-e Cp-2500 FirmwareSprecher-automation Sprecon-e-p Dd6-2 FirmwareSprecher-automation Sprecon-e-c FirmwareSprecher-automation Sprecon-e Ap-2200 Firmware+8 | 12/8/2024 | 17/6/2026 | Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unauthorized protection assignments. | |
| Modificada | Crítica (9.8) | 0.86% | — | Sprecher-automation Sprecon-e-p Dq6-1 FirmwareSprecher-automation Sprecon-e-p Dl6-1 FirmwareSprecher-automation Sprecon-e-p Ds6-0 FirmwareSprecher-automation Sprecon-e-c Firmware+5 | 1/6/2023 | 17/6/2026 | Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines. | |
| Modificada | Media (6.8) | 0.34% | — | Sprecher-automation Sprecon-e-p Dq6-1 FirmwareSprecher-automation Sprecon-e-p Dl6-1 FirmwareSprecher-automation Sprecon-e-p Ds6-0 FirmwareSprecher-automation Sprecon-e-c Firmware+2 | 1/6/2023 | 17/6/2026 | In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full access of the device. |