Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3006▼ 69 respecto a la semana anterior
Críticas / altas1420▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

3 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.4)0.57%—Netgear Wnr612v2 FirmwareNetgear Dgn1000v3 FirmwareNetgear D6100 FirmwareNetgear Wnr1000v2 Firmware+52/2/202317/6/2026
An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-uploaded firmware image and bypass the checksum verification.…
ModificadaAlta (7.5)1.1%—Netgear Ac1450 FirmwareNetgear C6300 FirmwareNetgear D1500 FirmwareNetgear D3600 Firmware+3928/4/202017/6/2026
Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before…
AnalizadaCrítica (9.8)83%⚠ Explotación activaNetgear D6100 FirmwareNetgear D7000 FirmwareNetgear D7800 FirmwareNetgear Jnr1010v2 Firmware+2430/1/201717/6/2026
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.