Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (8.8)0.40%—Huawei FusionmanagerHuawei Usg9500 FirmwareHuawei Usg2100 FirmwareHuawei Usg2200 Firmware+22/4/201717/6/2026
Huawei USG9500 with software V200R001C01SPC800 and earlier versions, V300R001C00; USG2100 with software V300R001C00SPC900 and earlier versions; USG2200 with software V300R001C00SPC900; USG5100 with software V300R001C00SPC900 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of…
ModificadaAlta (8.8)0.40%—Huawei FusionmanagerHuawei Usg9500 FirmwareHuawei Usg2100 FirmwareHuawei Usg2200 Firmware+22/4/201717/6/2026
Huawei FusionManager with software V100R002C03 and V100R003C00 could allow an unauthenticated, remote attacker to conduct a CSRF attack against the user of the web interface.
ModificadaAlta (7.5)3.3%—Huawei Usg2100 FirmwareHuawei Usg2200 FirmwareHuawei Usg5100 FirmwareHuawei Usg5500 Firmware22/9/201617/6/2026
Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, and USG5500 unified security gateways with software before V300R001C10SPC600 allows remote authenticated RADIUS servers to execute arbitrary code by sending a crafted EAP packet.