Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.25% | — | Elecom Wrc-1167gs2-b FirmwareElecom Wrc-1167gs2h-b FirmwareElecom Wrc-1167gst2 FirmwareElecom Wrc-2533gs2-b Firmware+7 | 28/2/2024 | 17/6/2026 | Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote unauthenticated attacker to hijack the authentication of administrators and to perform unintended operations to the affected product. Note that WMC-X1800GST-B and WSC-X1800GS-B are also included in… | |
| Analizada | Media (4.8) | 1.3% | — | Elecom Wrc-1167gs2-b FirmwareElecom Wrc-1167gs2h-b FirmwareElecom Wrc-1167gst2 FirmwareElecom Wrc-2533gs2-b Firmware+6 | 28/2/2024 | 17/6/2026 | ELECOM wireless LAN routers contain a cross-site scripting vulnerability. Assume that a malicious administrative user configures the affected product with specially crafted content. When another administrative user logs in and operates the product, an arbitrary script may be executed on the web browser. Note that… |