Vulnerabilities

Summary — last 7 days

New vulnerabilities2,871▲ 247 vs. last week
Critical / high1,338▼ 91 vs. last week
New active exploitation (KEV)6▼ 1 vs. last week
Unscored (no CVSS)237▲ 223 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)1.1%—Siemens Simatic Mv440 SR FirmwareSiemens Simatic Mv440 HR FirmwareSiemens Simatic Mv440 UR FirmwareSiemens Simatic Mv420 Sr-b Firmware+33/15/20216/17/2026
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.
Orbitaley — Vulnerabilities