CERT@VDE

First CVE: May 29, 2020Active for: 6 years
664
CVEs Published
More CVEs Published than 89% of tracked CNAs
94.9
Avg CVEs / Year
More Avg CVEs / Year than 89% of tracked CNAs
7.5
Avg CVSS Score
Higher Avg CVSS Score than 69% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published by CERT@VDE over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 29, 2020
6 years ago
Most Recent CVE
Jul 20, 2026
4 days ago

Top CVEs

All CVEs published by CERT@VDE as a CNA, regardless of affected vendor or product.

664 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Sep 13, 20217.287NOYES
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behav
May 15, 20239.883NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can
Sep 13, 20219.883NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attack
Sep 13, 20217.269NOYES
An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device
Jun 6, 20259.865NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Sep 13, 20217.265NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Sep 13, 20217.265NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Sep 13, 20217.265NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Sep 13, 20217.260NOYES
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Sep 13, 20217.260NOYES

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA664 CVEs
Severity distribution among all CVEs352,231 CVEs
LowMediumHighCritical
Attack Vector
Local71 (10.7%)
Network572 (86.1%)
Unknown0 (0.0%)
Physical6 (0.9%)
Adjacent Network15 (2.3%)
Attack Complexity
Low646 (97.3%)
High18 (2.7%)
Unknown0 (0.0%)
User Interaction
None583 (87.8%)
Unknown0 (0.0%)
Required81 (12.2%)
Privileges Required
Low240 (36.1%)
High72 (10.8%)
None352 (53.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (664 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
9 CVEs
1.4% of CVEs· 89th percentile
Nuclei
3 CVEs
0.5% of CVEs· 74th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID published by CERT@VDE as a CNA.

Media Mentions

Media articles that mention a CVE ID published by CERT@VDE as a CNA — matched by CVE ID, not by organization name.

Top Affected Vendors

Top Affected Products

Top CWEs