Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior
Críticas / altas1447▲ 86 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (8.7) | 0.97% | — | Buffalo Wrc-x3000gsAIBuffalo Wrc-x3000gsaAIBuffalo Wrc-x3000gsnAI | 24/6/2025 | 17/6/2026 | WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be… | |
| Modificada | Media (6.1) | 0.25% | — | Elecom Wrc-x3000gs2-b FirmwareElecom Wrc-x3000gs2-w FirmwareElecom Wrc-x3000gs2a-b Firmware | 30/8/2024 | 17/6/2026 | Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to improper processing of input values in easysetup.cgi. If a user views a malicious web page while logged in to the product, an arbitrary script may be executed on the user's web browser. | |
| Modificada | Media (6.8) | 0.86% | — | Elecom Wrc-x3000gsn FirmwareElecom Wrc-x3000gs FirmwareElecom Wrc-x3000gsa Firmware | 12/12/2023 | 17/6/2026 | OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier allows a network-adjacent attacker with an administrative privilege to execute an arbitrary OS command by sending a specially crafted request to the product. | |
| Modificada | Alta (8) | 1.00% | — | Elecom Wrc-x3000gs2-w FirmwareElecom Wrc-x3000gs2-b FirmwareElecom Wrc-x3000gs2a-b Firmware | 16/11/2023 | 17/6/2026 | OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted request. |