Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2676▼ 422 respecto a la semana anterior
Críticas / altas1295▼ 73 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.4) | 0.83% | — | Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 Firmware+1 | 5/10/2018 | 17/6/2026 | A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could… | |
| Modificada | Alta (7.8) | 0.45% | — | Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 Firmware+4 | 5/10/2018 | 17/6/2026 | A vulnerability in the command-line interface (CLI) in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to… | |
| Modificada | Alta (8.8) | 2.6% | — | Cisco Vedge 100 FirmwareCisco Vedge 1000 FirmwareCisco Vedge 2000 FirmwareCisco Vedge 5000 Firmware+1 | 5/10/2018 | 17/6/2026 | A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting application configuration. An… |