Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2494▼ 459 respecto a la semana anterior
Críticas / altas1280▼ 13 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)64▼ 463 respecto a la semana anterior
2 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.83% | — | Endress Rsg35 FirmwareEndress Rsg45 FirmwareEndress Orsg35 FirmwareEndress Orsg45 Firmware | 19/11/2020 | 17/6/2026 | Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to the server,… | |
| Modificada | Alta (8.8) | 0.92% | — | Endress Rsg35 FirmwareEndress Rsg45 FirmwareEndress Orsg35 FirmwareEndress Orsg45 Firmware | 19/11/2020 | 17/6/2026 | Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system… |