Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2976▼ 107 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2018-0512	Modificada	Media (6.8)	0.66%	—	Iodata Hdl-xr Firmware Iodata Hdl-xrw Firmware Iodata Hdl-xr2u Firmware Iodata Hdl-xr2uw Firmware+41	8/2/2018	17/6/2026	Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2283	Modificada	Alta (8)	0.63%	—	Iodata Wn-g300r3 Firmware	2/8/2017	17/6/2026	WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the device.
CVE-2017-2142	Modificada	Crítica (9.8)	3.1%	—	Iodata Wn-g300r3 Firmware	28/4/2017	17/6/2026	Buffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2017-2141	Modificada	Alta (7.2)	1.6%	—	Iodata Wn-g300r3 Firmware	28/4/2017	17/6/2026	WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVE-2016-1207	Modificada	Media (5.4)	0.80%	—	Iodata Wn-g300r2 Firmware Iodata Wn-g300r3 Firmware Iodata Wn-g300r Firmware	14/5/2016	17/6/2026	Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.