Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior

Críticas / altas1415▲ 65 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-30307	Aplazada	Media (5.3)	0.36%	—	Tp-link TL R473gp AC^AI Tp-link Xdr6020^AI Tp-link TL R479gp AC^AI Tp-link TL R4239g^AI+2	28/5/2024	17/6/2026	An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R476G routers allows attackers to hijack TCP sessions which could lead to a denial of service.
CVE-2017-16960	Modificada	Alta (8.8)	2.4%	—	Tp-link Tl-er5510g Tp-link Tl-er5520g Tp-link Tl-er6120g Tp-link Tl-er6520g+51	27/11/2017	17/6/2026	TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/interface command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/interface.lua in uhttpd.
CVE-2017-16959	Modificada	Media (6.5)	1.9%	—	Tp-link Tl-wvr300 Firmware Tp-link Tl-wvr302 Firmware Tp-link Tl-wvr450 Firmware Tp-link Tl-wvr450l Firmware+49	27/11/2017	17/6/2026	The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP header, related to the…
CVE-2017-16958	Modificada	Alta (8.8)	2.9%	—	Tp-link Tl-wvr300 Firmware Tp-link Tl-wvr302 Firmware Tp-link Tl-wvr450 Firmware Tp-link Tl-wvr450l Firmware+49	27/11/2017	17/6/2026	TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the t_bindif field of an admin/bridge command to cgi-bin/luci, related to the get_device_byif function in /usr/lib/lua/luci/controller/admin/bridge.lua in uhttpd.
CVE-2017-16957	Modificada	Alta (8.8)	5.6%	—	Tp-link Tl-wvr300 Firmware Tp-link Tl-wvr302 Firmware Tp-link Tl-wvr450 Firmware Tp-link Tl-wvr450l Firmware+49	27/11/2017	17/6/2026	TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the iface field of an admin/diagnostic command to cgi-bin/luci, related to the zone_get_effect_devices function in /usr/lib/lua/luci/controller/admin/diagnostic.lua in uhttpd.