Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior
Críticas / altas1299▼ 202 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6.5)0.40%—Netgear Wc7500 FirmwareNetgear Wc7600 FirmwareNetgear Wc9500 Firmware9/10/202017/6/2026
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.
ModificadaMedia (4.8)0.52%—Netgear Wc7500 FirmwareNetgear Wc7600 FirmwareNetgear Wc7600v2 FirmwareNetgear Wc9500 Firmware9/10/202017/6/2026
Certain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.
ModificadaMedia (6.7)0.44%—Netgear Wc7500 FirmwareNetgear Wc7600 FirmwareNetgear Wc7600v2 FirmwareNetgear Wc9500 Firmware9/10/202017/6/2026
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600v2 before 6.5.5.24, and WC9500 before 6.5.5.24.
ModificadaAlta (8.8)1.5%—Netgear Wc7500 FirmwareNetgear Wc7520 FirmwareNetgear Wc7600 Firmware22/4/202017/6/2026
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WC7500 before 6.5.3.9, WC7520 before 6.5.3.9, WC7600v1 before 6.5.3.9, and WC7600v2 before 6.5.3.9.
ModificadaAlta (7.2)3.2%—Netgear Prosafe Wc9500 FirmwareNetgear Prosafe Wc7600 FirmwareNetgear Prosafe Wc7520 Firmware23/3/202017/6/2026
NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.
Orbitaley — Vulnerabilidades