Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3006▼ 69 respecto a la semana anterior

Críticas / altas1420▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2007-2334	Modificada	Alta (7.5)	1.6%	—	Nortel Contivity Nortel VPN Router 5000	27/4/2007	16/6/2026	Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 has two template HTML files lacking certain verification tags, which allows remote attackers to access the administration interface and change the device configuration via certain requests.
CVE-2007-2332	Modificada	Alta (9)	1.7%	—	Nortel VPN Router 1010 Nortel VPN Router 1050 Nortel VPN Router 1100 Nortel VPN Router 1700+4	27/4/2007	16/6/2026	Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store.
CVE-2007-2333	Modificada	Alta (10)	2.6%	—	Nortel Contivity Nortel VPN Router 5000 Nortel VPN Router Portfolio	27/4/2007	16/6/2026	Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before 6_05.140 includes the FIPSecryptedtest1219 and FIPSunecryptedtest1219 default accounts in the LDAP template, which might allow remote attackers to access the private network.
CVE-2005-1802	Modificada	Media (5)	1.6%	—	Nortel Contivity Nortel VPN Router 1010 Nortel VPN Router 1050 Nortel VPN Router 1100+5	27/5/2005	16/6/2026	Nortel VPN Router (aka Contivity) allows remote attackers to cause a denial of service (crash) via an IPsec IKE packet with a malformed ISAKMP header.