Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7) | 0.25% | — | Moxa Uc-1222a FirmwareMoxa Uc-2222a-t-us FirmwareMoxa Uc-2222a-t FirmwareMoxa Uc-2222a-t-ap Firmware+31 | 5/2/2026 | 17/6/2026 | Moxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique bootloader password provided on the device. An attacker with physical access to the device could use this information to access the bootloader menu via a serial interface. Access to the bootloader menu does not allow full… | |
| Analizada | Alta (7) | 0.14% | — | Moxa Uc-1222a FirmwareMoxa Uc-2222a-t-us FirmwareMoxa Uc-2222a-t FirmwareMoxa Uc-2222a-t-ap Firmware+31 | 5/2/2026 | 17/6/2026 | A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and attaching external equipment… |