Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2636▼ 272 respecto a la semana anterior
Críticas / altas1349▲ 92 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)58▼ 469 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Media (5.3) | 0.24% | — | Siemens Desigo Dxr2AISiemens Desigo Pxc3AISiemens Desigo Pxc4AISiemens Desigo Pxc5.e003AI+2 | 11/8/2026 | 28/8/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715), Desigo PXC5.E24 (All versions < V02.21.194.36-2715), Desigo PXC7 (All versions… | |
| Modificada | Media (6.5) | 0.60% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 20/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The application, after a successful login, sets the session cookie on the browser via… | |
| Modificada | Alta (7.5) | 0.90% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 20/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The login functionality of the application does not employ any countermeasures against… | |
| Modificada | Media (5.3) | 1.1% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 20/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The login functionality of the application fails to normalize the response times of… | |
| Modificada | Crítica (9.1) | 0.98% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Dxr2 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application returns an AuthToken that does not expire at the defined auto logoff… | |
| Modificada | Media (6.5) | 0.48% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Dxr2 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application stores the PBKDF2 derived key of users passwords with a low… | |
| Modificada | Media (6.5) | 0.85% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Dxr2 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The web application fails to enforce an upper bound to the cost factor of the PBKDF2… | |
| Modificada | Crítica (9) | 2.0% | — | Siemens Desigo Pxc5 FirmwareSiemens Desigo Pxc4 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). The “addCell” JavaScript function fails to properly sanitize user-controllable input before including it into the generated XML body of the XLS report document, such that it is… | |
| Modificada | Alta (7.5) | 0.93% | — | Siemens Desigo Dxr2 FirmwareSiemens Desigo Pxc3 FirmwareSiemens Desigo Pxc4 FirmwareSiemens Desigo Pxc5 Firmware | 10/5/2022 | 17/6/2026 | A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884). When the controller receives a specific BACnet protocol packet, an exception causes the… |