Yama Salısı

Aralık 2025

Her ayın ikinci salısı Microsoft, Adobe, SAP, Siemens ve Schneider Electric toplu yayın yapar; Oracle ocak, nisan, temmuz ve ekimde üçüncü salı. Burada o gün yayımlanan kayıtlar kendi veritabanımızdan, eylem puanına göre sıralı: önce KEV ve istismarı olgun olanlar.

Nasıl hesaplanır: CNA damgası + yayın tarihi (iki günlük pencere, UTC). Üreticinin bülteniyle bire bir eşleşme iddiası yok; ara güncellemeler ayrı günlerde çıkar.

224 kayıt · 1 KEV

Stack'inizi etkileyenler

Bu ayın kayıtlarından stack'inizdeki ürün ve sürümlere uyanlar.

Stack'inize uyanları görmek için giriş yapın; kayıtlar ve bildirimler ücretsiz. →

Microsoft · 9 Aralık

56 · 1 KEV · 1 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
62Bu hafta	CVE-2025-62221Silahlaştırılmış	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-416 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	KEV	%2,5	9 Ara 2025
36İzleyin	CVE-2025-64672İstismar yok	Microsoft SharePoint Server Spoofing Vulnerabilitymicrosoft · sharepoint server · CWE-79 XSS	Kritik9,0	—	%1,0	9 Ara 2025
35İzleyin	CVE-2025-62456İstismar yok	Windows Resilient File System (ReFS) Remote Code Execution Vulnerabilitymicrosoft · windows 11 23h2 · CWE-122 RCE Bellek hatası	Yüksek8,8	—	%1,1	9 Ara 2025
35İzleyin	CVE-2025-62549İstismar yok	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-822 pre-auth RCE	Yüksek8,8	—	%1,3	9 Ara 2025
35İzleyin	CVE-2025-62550İstismar yok	Azure Monitor Agent Remote Code Execution Vulnerabilitymicrosoft · azure monitor agent · CWE-131 RCE	Yüksek8,8	—	%0,7	9 Ara 2025
35İzleyin	CVE-2025-64678İstismar yok	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-122 pre-auth RCE Bellek hatası	Yüksek8,8	—	%1,0	9 Ara 2025
32İzleyin	CVE-2025-54100Kavram kanıtı	PowerShell Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-77 RCE Komut enjeksiyonu	Yüksek7,8	—	%2,2	9 Ara 2025
32İzleyin	CVE-2025-59516İstismar yok	Windows Storage VSP Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-73 Kimlik doğrulama atlatma Yol geçişi Yerel yetki yükseltme	Yüksek7,8	—	%2,3	9 Ara 2025
32İzleyin	CVE-2025-59517İstismar yok	Windows Storage VSP Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-284 Yerel yetki yükseltme Erişim denetimi (IDOR)	Yüksek7,8	—	%2,5	9 Ara 2025
32İzleyin	CVE-2025-62454Kavram kanıtı	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-122 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%2,3	9 Ara 2025
32İzleyin	CVE-2025-62472İstismar yok	Windows Remote Access Connection Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-416 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%2,2	9 Ara 2025
31İzleyin	CVE-2025-55233İstismar yok	Windows Projected File System Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-125 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	—	%0,4	9 Ara 2025

CVE-2025-62221
62Bu hafta
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %3
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 10 18099 Ara 2025
CVE-2025-64672
36İzleyin
Microsoft SharePoint Server Spoofing Vulnerability
KritikCVSS 9,0İstismar yokEPSS %1
- XSS
microsoft · sharepoint server9 Ara 2025
CVE-2025-62456
35İzleyin
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Bellek hatası
microsoft · windows 11 23h29 Ara 2025
CVE-2025-62549
35İzleyin
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
microsoft · windows 10 16079 Ara 2025
CVE-2025-62550
35İzleyin
Azure Monitor Agent Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
microsoft · azure monitor agent9 Ara 2025
CVE-2025-64678
35İzleyin
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- pre-auth RCE
- Bellek hatası
microsoft · windows 10 16079 Ara 2025
CVE-2025-54100
32İzleyin
PowerShell Remote Code Execution Vulnerability
YüksekCVSS 7,8Kavram kanıtıEPSS %2
- RCE
- Komut enjeksiyonu
microsoft · windows 10 16079 Ara 2025
CVE-2025-59516
32İzleyin
Windows Storage VSP Driver Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %2
microsoft · windows 10 18099 Ara 2025
CVE-2025-59517
32İzleyin
Windows Storage VSP Driver Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %2
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
microsoft · windows 10 16079 Ara 2025
CVE-2025-62454
32İzleyin
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
YüksekCVSS 7,8Kavram kanıtıEPSS %2
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 10 18099 Ara 2025
CVE-2025-62472
32İzleyin
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %2
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 10 16079 Ara 2025
CVE-2025-55233
31İzleyin
Windows Projected File System Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 10 18099 Ara 2025

+44 kayıt dahaÜreticinin tüm kayıtları

Adobe · 9 Aralık

135 · 0 KEV · 6 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2025-61808İstismar yok	ColdFusion \| Unrestricted Upload of File with Dangerous Type (CWE-434)adobe · coldfusion · CWE-434 RCE Dosya yükleme	Kritik9,1	—	%10,6	9 Ara 2025
37İzleyin	CVE-2025-64537İstismar yok	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79)adobe · experience manager · CWE-79 pre-auth RCE XSS	Kritik9,3	—	%0,7	10 Ara 2025
37İzleyin	CVE-2025-64538İstismar yok	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79)adobe · experience manager · CWE-79 pre-auth RCE XSS	Kritik9,3	—	%0,6	10 Ara 2025
37İzleyin	CVE-2025-64539İstismar yok	Adobe Experience Manager \| Cross-site Scripting (DOM-based XSS) (CWE-79)adobe · experience manager · CWE-79 pre-auth RCE XSS	Kritik9,3	—	%0,5	10 Ara 2025
36İzleyin	CVE-2025-61809İstismar yok	ColdFusion \| Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 Kimlik doğrulamasız	Kritik9,1	—	%0,7	9 Ara 2025
36İzleyin	CVE-2025-61810İstismar yok	ColdFusion \| Deserialization of Untrusted Data (CWE-502)adobe · coldfusion · CWE-502 RCE Deserializasyon	Yüksek8,4	—	%9,5	9 Ara 2025
36İzleyin	CVE-2025-61811İstismar yok	ColdFusion \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)adobe · coldfusion · CWE-22 RCE Yol geçişi	Kritik9,1	—	%1,2	9 Ara 2025
34İzleyin	CVE-2025-61812İstismar yok	ColdFusion \| Improper Input Validation (CWE-20)adobe · coldfusion · CWE-20 RCE	Yüksek8,4	—	%4,7	9 Ara 2025
31İzleyin	CVE-2025-64783İstismar yok	DNG SDK \| Integer Overflow or Wraparound (CWE-190)adobe · dng software development kit · CWE-190 RCE Bellek hatası	Yüksek7,8	—	%0,2	9 Ara 2025
31İzleyin	CVE-2025-64785İstismar yok	Acrobat Reader \| Untrusted Search Path (CWE-426)adobe · acrobat · CWE-426 RCE	Yüksek7,8	—	%0,5	9 Ara 2025
31İzleyin	CVE-2025-64899İstismar yok	Acrobat Reader \| Out-of-bounds Read (CWE-125)adobe · acrobat · CWE-125 Bellek hatası	Yüksek7,8	—	%0,5	9 Ara 2025
29İzleyin	CVE-2025-61813İstismar yok	ColdFusion \| Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)adobe · coldfusion · CWE-611 Kimlik doğrulamasız XXE	Yüksek7,4	—	%0,5	9 Ara 2025

CVE-2025-61808
39İzleyin
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
KritikCVSS 9,1İstismar yokEPSS %11
- RCE
- Dosya yükleme
adobe · coldfusion9 Ara 2025
CVE-2025-64537
37İzleyin
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- XSS
adobe · experience manager10 Ara 2025
CVE-2025-64538
37İzleyin
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- XSS
adobe · experience manager10 Ara 2025
CVE-2025-64539
37İzleyin
Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
KritikCVSS 9,3İstismar yokEPSS %0
- pre-auth RCE
- XSS
adobe · experience manager10 Ara 2025
CVE-2025-61809
36İzleyin
ColdFusion | Improper Input Validation (CWE-20)
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
adobe · coldfusion9 Ara 2025
CVE-2025-61810
36İzleyin
ColdFusion | Deserialization of Untrusted Data (CWE-502)
YüksekCVSS 8,4İstismar yokEPSS %10
- RCE
- Deserializasyon
adobe · coldfusion9 Ara 2025
CVE-2025-61811
36İzleyin
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
KritikCVSS 9,1İstismar yokEPSS %1
- RCE
- Yol geçişi
adobe · coldfusion9 Ara 2025
CVE-2025-61812
34İzleyin
ColdFusion | Improper Input Validation (CWE-20)
YüksekCVSS 8,4İstismar yokEPSS %5
- RCE
adobe · coldfusion9 Ara 2025
CVE-2025-64783
31İzleyin
DNG SDK | Integer Overflow or Wraparound (CWE-190)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
- Bellek hatası
adobe · dng software development kit9 Ara 2025
CVE-2025-64785
31İzleyin
Acrobat Reader | Untrusted Search Path (CWE-426)
YüksekCVSS 7,8İstismar yokEPSS %0
- RCE
adobe · acrobat9 Ara 2025
CVE-2025-64899
31İzleyin
Acrobat Reader | Out-of-bounds Read (CWE-125)
YüksekCVSS 7,8İstismar yokEPSS %0
- Bellek hatası
adobe · acrobat9 Ara 2025
CVE-2025-61813
29İzleyin
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
YüksekCVSS 7,4İstismar yokEPSS %1
- Kimlik doğrulamasız
- XXE
adobe · coldfusion9 Ara 2025

+123 kayıt dahaÜreticinin tüm kayıtları

SAP · 9 Aralık

12 · 0 KEV · 2 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2025-42880İstismar yok	Code Injection vulnerability in SAP Solution Managersap_se · sap solution manager · CWE-94 RCE	Kritik9,9	—	%4,5	9 Ara 2025
39İzleyin	CVE-2025-42928İstismar yok	Deserialization Vulnerability in SAP jConnect - SDK for ASEsap_se · sap jconnect - sdk for ase · CWE-502 RCE Deserializasyon	Kritik9,1	—	%9,5	9 Ara 2025
32İzleyin	CVE-2025-42878İstismar yok	Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)sap_se · sap web dispatcher and internet communication manager (icm) · CWE-1244 Kimlik doğrulamasız	Yüksek8,2	—	%0,4	9 Ara 2025
31İzleyin	CVE-2025-42874İstismar yok	Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)sap_se · sap netweaver (remote service for xcelsius) · CWE-405 RCE	Yüksek7,9	—	%0,5	9 Ara 2025
30İzleyin	CVE-2025-42877İstismar yok	Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Serversap_se · sap web dispatcher, internet communication manager and sap content server · CWE-787 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%0,5	9 Ara 2025
28İzleyin	CVE-2025-42876İstismar yok	Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)sap_se · sap s/4 hana private cloud (financials general ledger) · CWE-405	Yüksek7,1	—	%0,3	9 Ara 2025
26İzleyin	CVE-2025-42875İstismar yok	Missing Authentication check in SAP NetWeaver Internet Communication Frameworksap_se · sap netweaver internet communication framework · CWE-306 Kimlik doğrulama atlatma	Orta6,6	—	%0,3	9 Ara 2025
26İzleyin	CVE-2025-42904İstismar yok	Information Disclosure vulnerability in Application Server ABAPsap_se · application server abap · CWE-549	Orta6,5	—	%0,3	9 Ara 2025
24İzleyin	CVE-2025-42872İstismar yok	Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portalsap_se · sap netweaver enterprise portal · CWE-489 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	9 Ara 2025
23İzleyin	CVE-2025-42873İstismar yok	Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)sap_se · sapui5 framework (markdown-it component) · CWE-405 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,9	—	%0,4	9 Ara 2025
22İzleyin	CVE-2025-42891İstismar yok	Missing Authorization check in SAP Enterprise Search for ABAPsap_se · sap enterprise search for abap · CWE-862 Erişim denetimi (IDOR)	Orta5,5	—	%0,3	9 Ara 2025
21İzleyin	CVE-2025-42896İstismar yok	Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platformsap_se · sap businessobjects business intelligence platform · CWE-116 Kimlik doğrulamasız SSRF	Orta5,4	—	%0,3	9 Ara 2025

CVE-2025-42880
40Planlayın
Code Injection vulnerability in SAP Solution Manager
KritikCVSS 9,9İstismar yokEPSS %5
- RCE
sap_se · sap solution manager9 Ara 2025
CVE-2025-42928
39İzleyin
Deserialization Vulnerability in SAP jConnect - SDK for ASE
KritikCVSS 9,1İstismar yokEPSS %9
- RCE
- Deserializasyon
sap_se · sap jconnect - sdk for ase9 Ara 2025
CVE-2025-42878
32İzleyin
Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM)
YüksekCVSS 8,2İstismar yokEPSS %0
- Kimlik doğrulamasız
sap_se · sap web dispatcher and internet communication manager (icm)9 Ara 2025
CVE-2025-42874
31İzleyin
Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)
YüksekCVSS 7,9İstismar yokEPSS %0
- RCE
sap_se · sap netweaver (remote service for xcelsius)9 Ara 2025
CVE-2025-42877
30İzleyin
Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
YüksekCVSS 7,5İstismar yokEPSS %1
sap_se · sap web dispatcher, internet communication manager and sap content server9 Ara 2025
CVE-2025-42876
28İzleyin
Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger)
YüksekCVSS 7,1İstismar yokEPSS %0
sap_se · sap s/4 hana private cloud (financials general ledger)9 Ara 2025
CVE-2025-42875
26İzleyin
Missing Authentication check in SAP NetWeaver Internet Communication Framework
OrtaCVSS 6,6İstismar yokEPSS %0
- Kimlik doğrulama atlatma
sap_se · sap netweaver internet communication framework9 Ara 2025
CVE-2025-42904
26İzleyin
Information Disclosure vulnerability in Application Server ABAP
OrtaCVSS 6,5İstismar yokEPSS %0
sap_se · application server abap9 Ara 2025
CVE-2025-42872
24İzleyin
Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
sap_se · sap netweaver enterprise portal9 Ara 2025
CVE-2025-42873
23İzleyin
Denial of Service (DoS) in SAPUI5 framework (Markdown-it component)
OrtaCVSS 5,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
sap_se · sapui5 framework (markdown-it component)9 Ara 2025
CVE-2025-42891
22İzleyin
Missing Authorization check in SAP Enterprise Search for ABAP
OrtaCVSS 5,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
sap_se · sap enterprise search for abap9 Ara 2025
CVE-2025-42896
21İzleyin
Server-Side Request Forgery (SSRF) in SAP BusinessObjects Business Intelligence Platform
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
- SSRF
sap_se · sap businessobjects business intelligence platform9 Ara 2025

Üreticinin tüm kayıtları

Siemens · 9 Aralık

21 · 0 KEV · 3 kritik

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2025-40800İstismar yok	A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions < siemens · comos v10.6 · CWE-295 Kimlik doğrulamasız Zayıf kripto	Kritik9,1	—	%0,2	9 Ara 2025
36İzleyin	CVE-2025-40801İstismar yok	A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translasiemens · comos v10.6 · CWE-295 Kimlik doğrulamasız Zayıf kripto	Kritik9,2	—	%0,3	9 Ara 2025
36İzleyin	CVE-2025-40938İstismar yok	A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).siemens · simatic cn 4100 firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,2	—	%0,4	9 Ara 2025
34İzleyin	CVE-2024-56835İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEsiemens · ruggedcom rox ii firmware · CWE-74 RCE	Yüksek8,7	—	%0,5	9 Ara 2025
34İzleyin	CVE-2024-56837İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEsiemens · ruggedcom rox ii firmware · CWE-77 RCE Komut enjeksiyonu	Yüksek8,6	—	%0,5	9 Ara 2025
34İzleyin	CVE-2024-56838İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEsiemens · ruggedcom rox ii firmware · CWE-74 RCE	Yüksek8,6	—	%0,4	9 Ara 2025
34İzleyin	CVE-2024-56839İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEsiemens · ruggedcom rox ii firmware · CWE-74 RCE	Yüksek8,6	—	%0,6	9 Ara 2025
34İzleyin	CVE-2025-40820İstismar yok	Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range.siemens · sidoor atd430w · CWE-940 Kimlik doğrulamasız	Yüksek8,7	—	%0,5	9 Ara 2025
34İzleyin	CVE-2025-40937İstismar yok	A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).siemens · simatic cn 4100 firmware · CWE-77 RCE Komut enjeksiyonu	Yüksek8,7	—	%0,6	9 Ara 2025
33İzleyin	CVE-2025-40830İstismar yok	A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0).siemens · sinec security monitor · CWE-285 Yerel yetki yükseltme Erişim denetimi (IDOR)	Yüksek8,4	—	%0,2	9 Ara 2025
30İzleyin	CVE-2024-56836İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEsiemens · ruggedcom rox ii firmware · CWE-77 RCE Komut enjeksiyonu	Yüksek7,7	—	%0,4	9 Ara 2025
30İzleyin	CVE-2024-56840İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEsiemens · ruggedcom rox ii firmware · CWE-74 RCE	Yüksek7,5	—	%0,6	9 Ara 2025

CVE-2025-40800
36İzleyin
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2412 (All versions <
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
siemens · comos v10.69 Ara 2025
CVE-2025-40801
36İzleyin
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Transla
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
siemens · comos v10.69 Ara 2025
CVE-2025-40938
36İzleyin
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).
KritikCVSS 9,2İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
siemens · simatic cn 4100 firmware9 Ara 2025
CVE-2024-56835
34İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE
YüksekCVSS 8,7İstismar yokEPSS %1
- RCE
siemens · ruggedcom rox ii firmware9 Ara 2025
CVE-2024-56837
34İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox ii firmware9 Ara 2025
CVE-2024-56838
34İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE
YüksekCVSS 8,6İstismar yokEPSS %0
- RCE
siemens · ruggedcom rox ii firmware9 Ara 2025
CVE-2024-56839
34İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
siemens · ruggedcom rox ii firmware9 Ara 2025
CVE-2025-40820
34İzleyin
Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range.
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
siemens · sidoor atd430w9 Ara 2025
CVE-2025-40937
34İzleyin
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).
YüksekCVSS 8,7İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · simatic cn 4100 firmware9 Ara 2025
CVE-2025-40830
33İzleyin
A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0).
YüksekCVSS 8,4İstismar yokEPSS %0
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
siemens · sinec security monitor9 Ara 2025
CVE-2024-56836
30İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE
YüksekCVSS 7,7İstismar yokEPSS %0
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox ii firmware9 Ara 2025
CVE-2024-56840
30İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGE
YüksekCVSS 7,5İstismar yokEPSS %1
- RCE
siemens · ruggedcom rox ii firmware9 Ara 2025

+9 kayıt dahaÜreticinin tüm kayıtları

Schneider Electric · 9 Aralık

0 · 0 KEV · 0 kritik

Bu pencerede kayıt yok.