MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 2.2.CURSOS, OPOSICIONES Y CONCURSOS CONSEJERÍA DE PRESIDENCIA Y JUSTICIA CVE-2019-3750 Orden PRE/28/2019, de 24 de abril, por la que se hacen públicos los programas de las pruebas selectivas para el ingreso, mediante oposición libre, en los Subgrupos A1, A2, C1, C2 y en la Agrupación Profesional de Subalternos, así como en las categorías profesionales de los grupos 1, 2 y 3. La Base Séptima de la Orden PRE/19/2010, de 2 de julio, por la que se establecen las bases comunes que regirán los procesos selectivos para el ingreso en la Administración de la Comunidad Autónoma de Cantabria, señala que "Los programas que han de regir las pruebas selectivas se detallarán como Anexo de cada convocatoria salvo que, por razones de oportunidad, se publiquen con anterioridad". La Disposición Adicional Primera del Decreto 90/2017, de 21 de diciembre, por el que se aprueba la Oferta de Empleo Público para el año 2017 y la Disposición Adicional Primera del Decreto 83/2018, de 11 de octubre, por el que se aprueba la Oferta de Empleo Público de estabilización para el año 2017 indican que "Por motivos de racionalización y eficacia de los procesos selectivos, se acumularán las plazas correspondientes a la Oferta de Empleo Público correspondientes al personal funcionario y laboral para el año 2017 con las que se convoquen en el año 2018, ejecutándose de forma conjunta". Publicadas por Decreto 98/2018, de 20 de diciembre, la Oferta de Empleo Público para el año 2018, y por Decreto 99/2018, de 20 de diciembre, la Oferta de Empleo Público de estabilización para el año 2018 y habiendo transcurrido en algunos casos hasta más de quince años desde la publicación de los últimos programas de las pruebas selectivas correspondientes a ambas ofertas, se considera oportuno hacer públicos dichos programas actualizados para permitir que los aspirantes puedan abordar su estudio con la antelación suficiente a su realización. En virtud de todo lo anterior, se hacen públicos dichos programas que aparecen contenidos en los Anexos que se reproducen a continuación. Santander, 24 de abril de 2019. El consejero de Presidencia y Justicia (por delegación, Resolución de 21 de diciembre de 2018), la directora general de Función Pública (P.S. Decreto 112/2015, de 13 de agosto), la directora del CEARC, CVE-2019-3750 Marina Lombó Gutiérrez. i Pág. 12508 boc.cantabria.es 1/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2 &8(532683(5,25'(,163(&725(6'(),1$1=$6 %/248(, 'HUHFKR 7(0$ /DV IXHQWHV GHO 'HUHFKR HQ JHQHUDO \ HQ HVSHFLDO HQ HO VLVWHPD MXUtGLFR SRVLWLYR HVSDxRO $SOLFDFLyQ GH ODV QRUPDV MXUtGLFDV (ILFDFLD JHQHUDO \ OtPLWHV HQ HO WLHPSR \ HQ HO HVSDFLR (ILFDFLDFRQVWLWXWLYDGHOGHUHFKR 7(0$ /D SHUVRQD FRQFHSWR \ FODVHV 3HUVRQD LQGLYLGXDO &DSDFLGDG 3HUVRQD MXUtGLFD 5HSUHVHQWDFLyQ'HUHFKRGHIDPLOLDORVUHJtPHQHVHFRQyPLFRVGHOPDWULPRQLR 7(0$ (OREMHWRGHO'HUHFKR+HFKRDFWR\QHJRFLRMXUtGLFR(OHPHQWRVHVHQFLDOHV 7(0$ /RV GHUHFKRV UHDOHV &RQFHSWR FDUDFWHUHV \ FODVHV (O GHUHFKR GH SURSLHGDG &RQWHQLGR $GTXLVLFLyQ\SpUGLGDGHOGRPLQLR(O5HJLVWURGHODSURSLHGDG 7(0$ /DSRVHVLyQ/DFRPXQLGDGGHELHQHV(OXVXIUXFWR'HUHFKRVUHDOHVGHJDUDQWtD+LSRWHFD/D SUHQGD+LSRWHFDPRELOLDULD3UHQGDVLQGHVSOD]DPLHQWR 7(0$ /D REOLJDFLyQ &RQFHSWR IXHQWHV \ HVWUXFWXUD &ODVLILFDFLRQHV &XPSOLPLHQWR QRUPDO GH ODV REOLJDFLRQHVHOSDJR&XPSOLPLHQWRDQRUPDO3UXHEDGHODVREOLJDFLRQHV 7(0$ (O &RQWUDWR (OHPHQWRV \ UHTXLVLWRV 6LVWHPDV GH FRQWUDWDFLyQ &ODVLILFDFLRQHV *HQHUDFLyQ SHUIHFFLyQ \ FRQVXPDFLyQ GHO FRQWUDWR &RQWUDWR SUHOLPLQDU &RQWUDWR GH RSFLyQ ,QHILFDFLD GH ORVFRQWUDWRV&RQILUPDFLyQ,QWHUSUHWDFLyQGHORVFRQWUDWRV 7(0$ &RQWUDWRGHFRPSUDYHQWD(ODUUHQGDPLHQWR(OSUpVWDPR(OSUHFDULR(OGHSyVLWR(OVHFXHVWUR /DILDQ]D 7(0$ /D VXFHVLyQ PRUWLV FDXVD /D KHUHQFLD +HUHGHUR \ OHJDWDULR $FHSWDFLyQ \ UHSXGLDFLyQ GH OD KHUHQFLD /D VXFHVLyQ WHVWDPHQWDULD (O WHVWDPHQWR FODVHV ,QVWLWXFLyQ GH KHUHGHURV /D VXFHVLyQ LQWHVWDGD 6XVWLWXFLyQ /HJDGRV /D GRQDFLyQ FRQFHSWR \ FODVHV (OHPHQWRV GH OD GRQDFLyQ(IHFWRVGHODGRQDFLyQ5HYRFDFLyQ\UHGXFFLyQGHGRQDFLRQHV 7(0$ ,QIOXHQFLDGHOWLHPSRHQODVUHODFLRQHVMXUtGLFDV3UHVFULSFLyQ\FDGXFLGDG 7(0$ (OGHUHFKR0HUFDQWLO/RVDFWRVGHFRPHUFLR/DVIXHQWHVGHOGHUHFKR0HUFDQWLO/D(PSUHVD PHUFDQWLO 1DWXUDOH]D MXUtGLFD (O HPSUHVDULR LQGLYLGXDO &DSDFLGDG GH REUDU PHUFDQWLO /D FRQWDELOLGDGPHUFDQWLO(O5HJLVWUR0HUFDQWLO 7(0$ /DVRFLHGDGUHJXODUFROHFWLYD/DVRFLHGDGFRPDQGLWDULDVLPSOH/DVVRFLHGDGHVGHFDSLWDO , &ODVHV\QDWXUDOH]D5pJLPHQOHJDO&DSLWDOVRFLDO'HQRPLQDFLyQQDFLRQDOLGDG\GRPLFLOLR/D VRFLHGDGXQLSHUVRQDO/RVJUXSRVGHVRFLHGDGHV i Pág. 12509 boc.cantabria.es CVE-2019-3750 7(0$ /DV 6RFLHGDGHV PHUFDQWLOHV (O FRQWUDWR GH VRFLHGDG /D VRFLHGDG LUUHJXODU 1DFLRQDOLGDG GH ODVVRFLHGDGHV 2/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 6RFLHGDGHV GH FDSLWDO ,, (VFULWXUD \ UHJLVWUR /D QXOLGDG GH OD VRFLHGDG /DV DSRUWDFLRQHV VRFLDOHV3DUWLFLSDFLRQHVVRFLDOHV\DFFLRQHV 7(0$ 6RFLHGDGHV GH FDSLWDO ,,, /D MXQWD JHQHUDO &RPSHWHQFLD &ODVHV $GRSFLyQ GH DFXHUGR ,PSXJQDFLyQ GH DFXHUGRV /D DGPLQLVWUDFLyQ GH OD VRFLHGDG GH FDSLWDO /RV DGPLQLVWUDGRUHV GHEHUHV \ UHVSRQVDELOLGDG 0RGLILFDFLyQ GH ORV HVWDWXWRV VRFLDOHV $XPHQWR \ UHGXFFLyQ GH FDSLWDO 7(0$ 6RFLHGDGHV GH FDSLWDO ,9 /DV FXHQWDV DQXDOHV /D PHPRULD (O LQIRUPH GH JHVWLyQ 9HULILFDFLyQDSUREDFLyQGHSyVLWR\SXEOLFLGDGGHODVFXHQWDVDQXDOHV 7(0$ 6RFLHGDG 1XHYD (PSUHVD 6RFLHGDG DQyQLPD HXURSHD 6RFLHGDGHV DQyQLPDV FRWL]DGDV /D XQLyQRFRQFHQWUDFLyQGHHPSUHVDV/DVVRFLHGDGHVFRRSHUDWLYDV 7(0$ (O SURFHVR H[WLQWLYR GH ODV VRFLHGDGHV PHUFDQWLOHV 5pJLPHQ GH ODV PRGLILFDFLRQHV HVWUXFWXUDOHV GH ODV VRFLHGDGHV PHUFDQWLOHV 7UDQVIRUPDFLyQ )XVLyQ (VFLVLyQ &HVLyQ JOREDO GHDFWLYR\SDVLYR 7(0$ /DV REOLJDFLRQHV \ ORV FRQWUDWRV PHUFDQWLOHV /D SUHVFULSFLyQ HQ 'HUHFKR 0HUFDQWLO /D UHSUHVHQWDFLyQPHUFDQWLO/DFHVLyQGHOFRQWUDWR&RQWUDWRGHFRPLVLyQ(OFRQWUDWRGHDJHQFLD (O$JHQWHGH$GXDQDV 7(0$ (O FRQFXUVR , 3UHVXSXHVWR VXEMHWLYR \ REMHWLYR (O DXWR GH GHFODUDFLyQ GH FRQFXUVR /D $GPLQLVWUDFLyQ FRQFXUVDO (IHFWRV VREUH ORV DFUHHGRUHV ORV FUpGLWRV \ ORV FRQWUDWRV 'HWHUPLQDFLyQGHODPDVDDFWLYDGHOFRQFXUVR/DVDFFLRQHVGHUHLQWHJUDFLyQSDWULPRQLDO 7(0$ (OFRQFXUVR ,, /DPDVDSDVLYD\ORVFUpGLWRVFRQWUDODPDVDFODVLILFDFLyQ\SDJR(OFRQYHQLR IDVHV FRQWHQLGR \ HIHFWRV (IHFWRV GH OD DSHUWXUD GH OD IDVH GH OLTXLGDFLyQ /DV FDXVDV GH FRQFOXVLyQGHOFRQFXUVR\VXUHDSHUWXUDHIHFWRV/DFDOLILFDFLyQGHOFRQFXUVR 7(0$ 9DORUHV PRELOLDULRV 9DORUHV QHJRFLDEOHV 7tWXORV YDORUHV /D OHWUD GH FDPELR &RQFHSWR \ IXQFLyQ HFRQyPLFD &UHDFLyQ GH OD OHWUD FDSDFLGDG FDPELDULD \ UHSUHVHQWDFLyQ UHTXLVLWRV IRUPDOHV /D DFHSWDFLyQ (O HQGRVR (O DYDO 9HQFLPLHQWR \ SDJR GH OD OHWUD $FFLRQHV \ H[FHSFLRQHVFDPELDULDV(OFKHTXH(OSDJDUp 7(0$ /DSURSLHGDGLQGXVWULDO3DWHQWHV\0DUFDV/DSURWHFFLyQGHODSURSLHGDGLQGXVWULDO/D2ILFLQD GH3DWHQWHV\0DUFDV/DSURWHFFLyQLQWHUQDFLRQDO i Pág. 12510 7(0$ (OGHUHFKRFRPXQLWDULR/DVIXHQWHVGHORUGHQDPLHQWRFRPXQLWDULR\VXDSOLFDFLyQ$SOLFDFLyQ\ HILFDFLDGHOGHUHFKRFRPXQLWDULRHQ(VSDxD 7(0$ (VWUXFWXUDLQVWLWXFLRQDOGHOD8QLyQ(XURSHD(O3DUODPHQWR(XURSHR(O&RQVHMRGH0LQLVWURV\ HO &RQVHMR (XURSHR /D &RPLVLyQ (O 7ULEXQDO GH -XVWLFLD (O 7ULEXQDO GH &XHQWDV ÏUJDQRV FRPXQLWDULRV(O&RPLWp(FRQyPLFR\6RFLDOHO&RPLWpGHODV5HJLRQHVGH(XURSDHO'HIHQVRU GHO3XHEORHO%DQFR&HQWUDO(XURSHR\HO%DQFR(XURSHRGH,QYHUVLRQHV 7(0$ /D$GPLQLVWUDFLyQHOHFWUyQLFD1RUPDWLYDUHJXODGRUD,QVWUXPHQWRVSDUDHODFFHVRHOHFWUyQLFRD ODV $GPLQLVWUDFLRQHV 3~EOLFDV VHGH HOHFWUyQLFD FDQDOHV \ SXQWR GH DFFHVR LGHQWLILFDFLyQ \ DXWHQWLFDFLyQ (O *RELHUQR DELHUWR OD WUDQVSDUHQFLD HO DFFHVR D OD LQIRUPDFLyQ S~EOLFD OD SDUWLFLSDFLyQ HQ OD UHQGLFLyQ GH FXHQWDV \ HO EXHQ JRELHUQR (VSHFLDO UHIHUHQFLD D OD /H\ GHGHPDU]RGH7UDQVSDUHQFLDGHOD$FWLYLGDG3~EOLFDGH&DQWDEULD boc.cantabria.es CVE-2019-3750 'HUHFKR&RPXQLWDULR\/DERUDO$GPLQLVWUDFLyQ(OHFWUyQLFD)XQFLyQ3~EOLFD\3ROtWLFDVGH,JXDOGDG 3/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (O 'HUHFKR GHO WUDEDMR &DUDFWHUtVWLFDV 3ULQFLSLRV FRQVWLWXFLRQDOHV /DV IXHQWHV GHO 2UGHQDPLHQWRODERUDO(VSHFLDOUHIHUHQFLDDORV&RQYHQLRV&ROHFWLYRV(OFRQYHQLR~QLFRGHOD $GPLQLVWUDFLyQ 7(0$ /DQHJRFLDFLyQFROHFWLYD\HOSURFHGLPLHQWRQHJRFLDO3DUWLFLSDFLyQ\UpJLPHQGHUHSUHVHQWDFLyQ GHOSHUVRQDO/DVSHFXOLDULGDGHVHQOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD FRQ HVSHFLDO UHIHUHQFLD D ORV UHTXLVLWRV SDUD OD GHWHUPLQDFLyQ R PRGLILFDFLyQ GH ODV UHWULEXFLRQHVGHOSHUVRQDOODERUDO 7(0$ 3ROtWLFDV GH ,JXDOGDG GH *pQHUR /D /H\ 2UJiQLFD GH GH PDU]R SDUD OD ,JXDOGDG HIHFWLYD GH PXMHUHV \ KRPEUHV /H\ GH &DQWDEULD GH GH PDU]R SDUD OD LJXDOGDG HIHFWLYD HQWUH PXMHUHV \ KRPEUHV 3ROtWLFDV FRQWUD OD 9LROHQFLD GH *pQHUR /D /H\ 2UJiQLFD GHGHGLFLHPEUHGH0HGLGDVGH3URWHFFLyQ,QWHJUDOFRQWUDOD9LROHQFLDGH*pQHUR 3ROtWLFDVGLULJLGDVDODDWHQFLyQGHSHUVRQDVGLVFDSDFLWDGDV\RGHSHQGLHQWHV/D/H\ GH GH GLFLHPEUH GH 3URPRFLyQ GH OD $XWRQRPtD 3HUVRQDO \ DWHQFLyQ D ODV SHUVRQDV HQ VLWXDFLyQGHGHSHQGHQFLD\OD/H\GH&DQWDEULDGHGHGLFLHPEUHGH*DUDQWtDGHORV 'HUHFKRVGHODV3HUVRQDVFRQ'LVFDSDFLGDG 7(0$ /DIXQFLyQS~EOLFD1DWXUDOH]DGHODUHODFLyQIXQFLRQDULDO$GTXLVLFLyQ\SpUGLGDGHODFRQGLFLyQ GHIXQFLRQDULR6LWXDFLRQHV'HUHFKRV\GHEHUHV(OUpJLPHQGLVFLSOLQDULRGHODIXQFLyQS~EOLFD (OUpJLPHQGHLQFRPSDWLELOLGDGHV 7(0$ 5HWULEXFLRQHV GH ORV $OWRV &DUJRV (O 5pJLPHQ UHWULEXWLYR GH ORV IXQFLRQDULRV FRQFHSWRV UHWULEXWLYRV 3URFHGLPLHQWR SDUD GHWHUPLQDFLyQ GH ODV UHWULEXFLRQHV FRPSOHPHQWDULDV ODV UHODFLRQHVGHSXHVWRVGHWUDEDMR'HYHQJRGHODVUHWULEXFLRQHV3URFHGLPLHQWRSDUDHOSDJRGH ODVUHWULEXFLRQHV/DQyPLQD/DVLQGHPQL]DFLRQHVSRUUD]yQGHOVHUYLFLR i Pág. 12511 7(0$ (YROXFLyQ GH OD HFRQRPtD HVSDxROD /D FRQYHUJHQFLD QDFLRQDO \ HO LQJUHVR HQ OD 8QLyQ (XURSHD(OSURFHVRGHFRQVROLGDFLyQILVFDOSUHYLR\SRVWHULRUDOLQJUHVRGH(VSDxDHQOD8QLyQ 0RQHWDULD(XURSHD3HUVSHFWLYDVDFWXDOHV\FRQYHUJHQFLDUHDO 7(0$ (OVHFWRUSULPDULRHVSDxRO/DSROtWLFDDJUtFRODGHOD8QLyQ(XURSHD\(VSDxD6HFWRUSHVTXHUR 3ROtWLFDFRPXQLWDULDGHSHVFD\VXVUHSHUFXVLRQHV 7(0$ (OVHFWRULQGXVWULDO(YROXFLyQGHODLQGXVWULDHVSDxROD3ROtWLFDLQGXVWULDOGHOD8QLyQ(XURSHD\ VXLQFLGHQFLDVHFWRULDOVLGHUXUJLDQDYDOHWF(OVHFWRUHQHUJpWLFR 7(0$ 6HFWRU VHUYLFLRV (YROXFLyQ GH ORV VHUYLFLRV HQ (VSDxD /D LQIUDHVWUXFWXUD GH WUDQVSRUWH \ ODV UHGHVWUDQVHXURSHDV(OFRPHUFLRLQWHULRU 7(0$ (OVHFWRUH[WHULRU/DEDODQ]DGHSDJRVFRQFHSWR\FRPSRQHQWHVIXQFLRQDPLHQWR\VDOGRV 7(0$ (VWUXFWXUDUHJLRQDO&RPXQLGDGHV$XWyQRPDV'HVDUUROORUHJLRQDO/DVROLGDULGDGLQWHUUHJLRQDO 3ROtWLFDUHJLRQDOGHOD8QLyQ(XURSHD 7(0$ 0DJQLWXGHV DJUHJDGDV EiVLFDV 3URGXFWR QDFLRQDO FRQVXPR H LQYHUVLyQ JDVWR QDFLRQDO 3URGXFWR QDFLRQDO EUXWR \ SURGXFWR QDFLRQDO QHWR 5HQWD QDFLRQDO \ UHQWD GLVSRQLEOH (O IOXMR FLUFXODUGHODUHQWD\HOSURGXFWR&RQWDELOLGDGGHODUHQWDQDFLRQDOHQXQDHFRQRPtDDELHUWD 7(0$ 0RGHORV GH GHWHUPLQDFLyQ GH OD UHQWD HQ XQD HFRQRPtD FHUUDGD (O PRGHOR FOiVLFR 1HXWUDOLGDG (O PRGHOR NH\QHVLDQR FRPSRUWDPLHQWR D FRUWR \ ODUJR SOD]R /D QXHYD PDFURHFRQRPtDFOiVLFDH[SHFWDWLYDVUDFLRQDOHV\YDFLDGRFRQWLQXRGHORVPHUFDGRV boc.cantabria.es CVE-2019-3750 (FRQRPtD 4/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 8Q PRGHOR GH GHWHUPLQDFLyQ GH OD UHQWD HQ XQD HFRQRPtD DELHUWD /D FXHQWD FRUULHQWH \ HO HTXLOLEULRGHOPHUFDGRSURGXFWLYR/DFXHQWDGHOFDSLWDO\HOHTXLOLEULRGHODEDODQ]DGHSDJRV (ODMXVWHGHODEDODQ]DGHSDJRV\ODSROtWLFDPRQHWDULD3ODQGHDFFLyQSDUDDMXVWDUODEDODQ]D GHSDJRV 7(0$ /DSROtWLFDPRQHWDULD\ODSROtWLFDILVFDODQWHODVVLWXDFLRQHVGHGHVHTXLOLEULRHQXQDHFRQRPtD DELHUWD5HWDUGR\FRRUGLQDFLyQ 7(0$ /DLQIODFLyQ&RQFHSWRV\FODVHV/DLQIODFLyQGHGHPDQGD/DLQIODFLyQGHFRVWHV(OSURFHVR LQIODFLRQLVWD(IHFWRVGHODLQIODFLyQ 7(0$ (FRQRPtD GHO ELHQHVWDU ySWLPR HFRQyPLFR ELHQHV S~EOLFRV \ H[WHUQDOLGDGHV 7HRUtD GH OD HOHFFLyQFROHFWLYD7HRUtDGHODUHJXODFLyQODOLEHUDOL]DFLyQGHVHFWRUHVHFRQyPLFRV 7(0$ 7HRUtDGHORVFLFORVHFRQyPLFRVFLFORVQRPLQDOHV\UHDOHV 7(0$ /D HPSUHVD \ VX PDUFR LQVWLWXFLRQDO /D HPSUHVD \ HO PHUFDGR /D DFWLYLGDG FRPHUFLDO HQ OD HPSUHVD\HOVLVWHPDHFRQyPLFR/DSODQLILFDFLyQHQODHPSUHVD(VWDEOHFLPLHQWRGHREMHWLYRV /DGLPHQVLyQGHODSODQLILFDFLyQ(OSURFHVRGHSODQLILFDFLyQ 7(0$ 6LVWHPDVGHFRQWUROHQOD(PSUHVD&RQFHSWR\HOHPHQWRV/RVSULQFLSDOHVVLVWHPDVGHFRQWURO /DLQWHJUDFLyQGHODSODQLILFDFLyQ\HOFRQWURO 7(0$ /DHVWUXFWXUDHFRQyPLFRILQDQFLHUDGHODHPSUHVD/DVIXHQWHVGHILQDQFLDFLyQGHODHPSUHVD (TXLOLEULRHQWUHLQYHUVLRQHV\ILQDQFLDFLRQHV(OIRQGRGHPDQLREUD 7(0$ /RV PpWRGRV FOiVLFRV GH YDORUDFLyQ \ VHOHFFLyQ GH SUR\HFWRV GH LQYHUVLyQ (O SHUtRGR GH PDGXUDFLyQ&RQFHSWR\FiOFXOR0pWRGRGHYDORUFDSLWDO0pWRGRGHODWDVDGHUHWRUQR 7(0$ /D ILQDQFLDFLyQ LQWHUQD R DXWRILQDQFLDFLyQ /D DPRUWL]DFLyQ &DXVDV GH OD GHSUHFLDFLyQ /D IXQFLyQ ILQDQFLHUD GH ODV DPRUWL]DFLRQHV 0pWRGRV GH DPRUWL]DFLyQ /D ILQDQFLDFLyQ GH OD HPSUHVD /D HPLVLyQ GH YDORUHV (O FUpGLWR D ODUJR PHGLR \ FRUWR SOD]R (O HQGHXGDPLHQWR SHUPDQHQWH 7(0$ /D HVWUXFWXUD ILQDQFLHUD ySWLPD GH OD HPSUHVD \ OD SROtWLFD GH GLYLGHQGRV (QGHXGDPLHQWR \ UHQWDELOLGDG ILQDQFLHUD /DYDORUDFLyQH[WHUQD GH OD HPSUHVD 0pWRGR SDUDGHWHUPLQDU HO YDORU JOREDOGHODHPSUHVD CVE-2019-3750 7(0$ /D HPSUHVD S~EOLFD &RQFHSWR 2EMHWLYRV GH OD HPSUHVD S~EOLFD (IHFWRV PDFURHFRQyPLFRV &DUDFWHUtVWLFDVIXQGDPHQWDOHVGHVXJHVWLyQ(OVLVWHPDGHFRQWUROGHODHPSUHVDS~EOLFD/D ILQDQFLDFLyQ GH OD HPSUHVD S~EOLFD 0HWRGRORJtD /DV IXHQWHV GH ILQDQFLDFLyQ H[WHUQDV /D HVWUXFWXUDILQDQFLHUD i Pág. 12512 boc.cantabria.es 5/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,, &RQWDELOLGDG &RQWDELOLGDGJHQHUDO 3ODQ *HQHUDO GH &RQWDELOLGDG \ 1RUPDV ,QWHUQDFLRQDOHV GH &RQWDELOLGDG 2SHUDFLRQHV GHO HMHUFLFLR \ FiOFXOR FRQWDEOHGHOUHVXOWDGR0DUFR&RQFHSWXDO1RUPDVGHUHJLVWUR\YDORUDFLyQ&XHQWDVDQXDOHV &RQWDELOLGDGGHVRFLHGDGHV &RQVWLWXFLyQ GLVWULEXFLyQ GH EHQHILFLRV DXPHQWR \ UHGXFFLyQ GH FDSLWDO ILQDQFLDFLyQ \ WUDQVIRUPDFLyQ GH VRFLHGDGHV&RPELQDFLRQHVGHQHJRFLRVQHJRFLRVFRQMXQWRV\RSHUDFLRQHVHQWUHHPSUHVDVGHOJUXSR)XVLyQ DEVRUFLyQHVFLVLyQ\GLVROXFLyQGHHPSUHVDVLQGLYLGXDOHV\VRFLDOHV &RQWDELOLGDGVXSHULRU $QiOLVLVSDWULPRQLDOHFRQyPLFR\GHORVHVWDGRVILQDQFLHURV 0DWHPiWLFDVILQDQFLHUDV &DSLWDOL]DFLyQVLPSOH\FRPSXHVWD 5HQWDVSUpVWDPRV\HPSUpVWLWRV 2SHUDFLRQHVFRQYDORUHVPRELOLDULRV %/248(,,, i Pág. 12513 7(0$ /D &RQVWLWXFLyQ (VSDxRODGH &DUDFWHUtVWLFDV(VWUXFWXUD /D UHIRUPDFRQVWLWXFLRQDO/DV &RUWHV*HQHUDOHV&RPSRVLFLyQ\IXQFLRQHV/D&RURQD(O*RELHUQRFRPSRVLFLyQ\IXQFLRQHV 7(0$ (OSRGHUMXGLFLDO/RVGHUHFKRV\OLEHUWDGHVS~EOLFDV(O7ULEXQDO&RQVWLWXFLRQDO2UJDQL]DFLyQ\ )XQFLRQHV5HFXUVRV\SURFHVRVDQWHHO7ULEXQDO&RQVWLWXFLRQDO 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD &DUDFWHUtVWLFDV \ HVWUXFWXUD &RPSHWHQFLDV /D UHIRUPDGHO(VWDWXWR 7(0$ /D $GPLQLVWUDFLyQ \ HO 'HUHFKR $GPLQLVWUDWLYR /DV IXHQWHV GH 'HUHFKR $GPLQLVWUDWLYR /D &RQVWLWXFLyQ/D/H\/RV'HFUHWRVOH\HV/DGHOHJDFLyQOHJLVODWLYD 7(0$ /DSRWHVWDGUHJODPHQWDULDWLWXODULGDGOtPLWHV\FRQWURO(OUHJODPHQWR&ODVHV(ILFDFLDGHORV 5HJODPHQWRV$FWRV$GPLQLVWUDWLYRVJHQHUDOHVFLUFXODUHVHLQVWUXFFLRQHV boc.cantabria.es CVE-2019-3750 'HUHFKR&RQVWLWXFLRQDO\$GPLQLVWUDWLYR 6/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /RVGLYHUVRVHQWHVS~EOLFRV\VXSHUVRQLILFDFLyQ/DSHUVRQDOLGDGMXUtGLFDGHOD$GPLQLVWUDFLyQ ,QVWLWXFLRQDO/DDGPLQLVWUDFLyQFRUSRUDWLYD\ODVIXQGDFLRQHVS~EOLFDV 7(0$ /DV SRWHVWDGHV DGPLQLVWUDWLYDV (O SULQFLSLR GH OHJDOLGDG /D DFWLYLGDG DGPLQLVWUDWLYD GLVFUHFLRQDO /D DXWRWXWHOD DGPLQLVWUDWLYD /D UHVSRQVDELOLGDG GH OD $GPLQLVWUDFLyQ \ VXV DJHQWHV5HTXLVLWRV3OD]RVGHUHFODPDFLyQ\SURFHGLPLHQWR 7(0$ (O DFWR DGPLQLVWUDWLYR FRQFHSWR HOHPHQWRV \ FODVHV )RUPD &ODVHV /D QRWLILFDFLyQ \ SXEOLFDFLyQGHORVDFWRVDGPLQLVWUDWLYRV(OVLOHQFLRDGPLQLVWUDWLYR 7(0$ (ILFDFLD GH ORV DFWRV DGPLQLVWUDWLYRV /D VXVSHQVLyQ GH HIHFWRV GHO DFWR DGPLQLVWUDWLYR /D HMHFXFLyQ IRU]RVD \ HVSHFLDO UHIHUHQFLD D OD YtD GH DSUHPLR /D LQYDOLGH] GH ORV DFWRV DGPLQLVWUDWLYRV /D UHYLVLyQ GH RILFLR GH ORV DFWRV DGPLQLVWUDWLYRV /D WHUPLQDFLyQ GHO SURFHGLPLHQWRIRUPDV 7(0$ /RVUHFXUVRVDGPLQLVWUDWLYRVFRQFHSWR\FODVHV3URFHGLPLHQWRGHWUDPLWDFLyQ\UHVROXFLyQGH ORVUHFXUVRVDGPLQLVWUDWLYRV/DMXULVGLFFLyQFRQWHQFLRVRDGPLQLVWUDWLYD([WHQVLyQ\OtPLWHV/DV SDUWHVGHOSURFHGLPLHQWR/DVHQWHQFLD5HFXUVRV 7(0$ /D SRWHVWDG VDQFLRQDGRUD GH OD $GPLQLVWUDFLyQ )XQGDPHQWRV FRQWHQLGR \ OtPLWHV /DV VDQFLRQHVDGPLQLVWUDWLYDV&RQFHSWR\FODVHV(OSURFHGLPLHQWRVDQFLRQDGRU 7(0$ /RV FRQWUDWRV DGPLQLVWUDWLYRV , 1RUPDWLYD UHJXODGRUD GH ORV FRQWUDWRV GHO 6HFWRU 3~EOLFR ÈPELWRVXEMHWLYR\REMHWLYRGHDSOLFDFLyQÏUJDQRVGHFRQWUDWDFLyQ(OFRQWUDWLVWDDSWLWXGSDUD FRQWUDWDU6ROYHQFLDGHORVFRQWUDWLVWDV 7(0$ /RV FRQWUDWRV DGPLQLVWUDWLYRV ,, (O REMHWR GHO FRQWUDWR HO SUHFLR \ VX UHYLVLyQ 3OD]R GH GXUDFLyQ /D SUHSDUDFLyQ GH ORV FRQWUDWRV 3URFHGLPLHQWRV GH VHOHFFLyQ GHO DGMXGLFDWDULR /D DGMXGLFDFLyQGHORVFRQWUDWRVFULWHULRVGHVHOHFFLyQ 7(0$ /RVFRQWUDWRVDGPLQLVWUDWLYRV ,,, ,QYDOLGH]GHORVFRQWUDWRV\UHFXUVRHVSHFLDOHQPDWHULDGH FRQWUDWDFLyQ (IHFWRV FXPSOLPLHQWR \ H[WLQFLyQ GH ORV FRQWUDWRV DGPLQLVWUDWLYRV QRUPDV JHQHUDOHV5HJLVWURVRILFLDOHV 7(0$ 6XEYHQFLRQHV FRQFHSWR QDWXUDOH]D \ FODVLILFDFLyQ GH ODV VXEYHQFLRQHV *DVWRV GH WUDQVIHUHQFLDV5HSDUWRGHFRPSHWHQFLDVSDUDUHJXODU\FRQFHGHUVXEYHQFLRQHVHQWUHHO(VWDGR \ODV&RPXQLGDGHV$XWyQRPDV(OSURFHGLPLHQWRGHFRQFHVLyQ\SDJR-XVWLILFDFLyQ5HLQWHJUR ,QIUDFFLRQHVDGPLQLVWUDWLYDVHQPDWHULDGHVXEYHQFLRQHV(OGHOLWRVXEYHQFLRQDO 7(0$ /RV5HJODPHQWRV&RPXQLWDULRV\ODJHVWLyQGHORV)RQGRV(XURSHRV 7(0$ 3DWULPRQLR GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV FRQFHSWR \ FODVLILFDFLyQ %LHQHV GH GRPLQLR S~EOLFR\ELHQHVSDWULPRQLDOHV&RQFHSWROHJDO\SULQFLSLRUHODWLYRVDORVPLVPRV(O3DWULPRQLR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &RQFHSWR \ FRPSHWHQFLDV $GTXLVLFLyQ \ HQDMHQDFLyQGHELHQHV\GHUHFKRV 7(0$ /DH[SURSLDFLyQIRU]RVD)XQGDPHQWR\OtPLWHV/RVVXMHWRVGHODH[SURSLDFLyQ5HTXLVLWRVGHOD H[SURSLDFLyQ(OMXVWLSUHFLR/DUHYHUVLyQH[SURSLDWRULD CVE-2019-3750 i Pág. 12514 boc.cantabria.es 7/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ +DFLHQGD3~EOLFD7HRUtD\7pFQLFD3UHVXSXHVWDULD\GHOD*HVWLyQ3~EOLFD 7(0$ (O VHFWRU S~EOLFR GHOLPLWDFLyQ DQiOLVLV FXDQWLWDWLYR \ FRPSDUDFLRQHV LQWHUQDFLRQDOHV &DXVDV GHOFUHFLPLHQWRGHOJDVWRS~EOLFR(OGHEDWHVREUHHOWDPDxRGHOVHFWRUS~EOLFR 7(0$ /DDFWLYLGDGILQDQFLHUDGHOVHFWRUS~EOLFRILQHVGHOVHFWRUS~EOLFR/DDVLJQDFLyQGHUHFXUVRV /DUHGLVWULEXFLyQGHODUHQWD/DHVWDELOLGDG\FUHFLPLHQWRHFRQyPLFR 7(0$ /DVQXHYDVIRUPDVGHUHGLVWULEXFLyQGHODUHQWD/RVJDVWRVS~EOLFRVHQ(VSDxDHQSROtWLFDVGH 6DQLGDG \ (GXFDFLyQ /RV JDVWRV S~EOLFRV HQ (VSDxD HQ LQIUDHVWUXFWXUDV H ,'L &RPSDUDFLRQHVLQWHUQDFLRQDOHV 7(0$ /DVSROtWLFDVS~EOLFDV/DVSROtWLFDVGHOELHQHVWDUVRFLDOORVJDVWRVGHO6LVWHPDGHOD6HJXULGDG 6RFLDOSUHVWDFLRQHVFRQWULEXWLYDV\QRFRQWULEXWLYDV/DSURWHFFLyQGHOGHVHPSOHR/DVGHPiV SROtWLFDV GH SURWHFFLyQ VRFLDO GHSHQGHQFLD IDPLOLD \ VHFWRUHV GH HVSHFLDO SURWHFFLyQ (O WUDWDPLHQWRGHODLJXDOGDG\ODYLROHQFLDGHJpQHURHQ(VSDxD 7(0$ 1XHYRV VLVWHPDV SUHVXSXHVWDULRV /D JHVWLyQ SUHVXSXHVWDULD SRU REMHWLYRV 0HWRGRORJtDV PRGHORVSUHVXSXHVWDULRV\GHUHFKRSRVLWLYR 7(0$ (OSUHVXSXHVWRFRPRHOHPHQWRFRPSHQVDGRUGHODDFWLYLGDGHFRQyPLFD(IHFWRVGLVFUHFLRQDOHV \DXWRPiWLFRVGHOSUHVXSXHVWRORVHVWDELOL]DGRUHVDXWRPiWLFRVGHILQLFLyQ\IXQFLRQDPLHQWR 7(0$ 6HOHFFLyQGHSUR\HFWRVGHJDVWRS~EOLFR)XQGDPHQWRVGHODHYDOXDFLyQGHSUR\HFWRV&RVWHV EHQHILFLRVWDVDV\UHJODVGHGHFLVLyQ/RVDVSHFWRVGLVWULEXWLYRVHQODVHOHFFLyQGHSUR\HFWRV 7(0$ 'LVWULEXFLyQ IRUPDO \ PDWHULDO GH ORV FRVWHV S~EOLFRV 3ULQFLSLRV JHQHUDOHV GH OD LPSRVLFLyQ %HQHILFLR\FDSDFLGDGGHSDJRFRPRFULWHULRVGHGLVWULEXFLyQ/DLQFLGHQFLDLPSRVLWLYD&RVWHV LPSOtFLWRVGHODLPSRVLFLyQ,PSRVLFLyQySWLPD([FHVRGHJUDYDPHQHLPSRVLFLyQySWLPD 7(0$ /RV LQJUHVRV S~EOLFRV \ OD LPSRVLFLyQ &ULWHULRV GH FODVLILFDFLyQ GH ORV LQJUHVRV S~EOLFRV (O LPSXHVWR &RQFHSWR \ HOHPHQWRV LQWHJUDQWHV 3ULQFLSDOHV ILJXUDV LPSRVLWLYDV SUHFLRV WDVDV \ FRQWULEXFLRQHVHVSHFLDOHV(PSUHVDS~EOLFD\ILMDFLyQGHSUHFLRV 7(0$ /RV GLVWLQWRV QLYHOHV GH OD +DFLHQGD 3~EOLFD 'LVWULEXFLyQ GH FRPSHWHQFLDV \ PRGHORV GH ILQDQFLDFLyQ/DVVXEYHQFLRQHVLQWHUJXEHUQDPHQWDOHV/D+DFLHQGD3~EOLFDLQWHUQDFLRQDO 7(0$ (O'pILFLWSUHVXSXHVWDULR\VXVFODVHV,PSDFWRHFRQyPLFRGHVXILQDQFLDFLyQ'pILFLW\VXSHUiYLW SULPDULR 'pILFLW HVWUXFWXUDO \ GpILFLW REVHUYDGR VXV LQWHUUHODFLRQHV 3ULYDWL]DFLyQ GH DFWLYRV S~EOLFRV/DLQIODFLyQFRPRXQDIRUPDGHLPSRVLFLyQ 7(0$ 5HTXHULPLHQWRVSDUDODIRUPXODFLyQGHXQDSROtWLFDS~EOLFDHVWUDWHJLDREMHWLYRVLQGLFDGRUHV\ VLVWHPD GH VHJXLPLHQWR &RQFHSWR GH UHVXOWDGR LPSDFWR \ HIHFWLYLGDG FXDOLGDGHV TXH OR GHILQHQ(YDOXDFLyQSUHYLD\DVLJQDFLyQUHFXUVRV$XGLWRUtDS~EOLFD\HYDOXDFLyQGHUHVXOWDGRV HQHOPDUFRGHODDVLJQDFLyQGHUHFXUVRV 7(0$ (OFRQWUROLQWHUQRGHODJHVWLyQILQDQFLHUD(OFRQWUROGHLQJUHVRV(OFRQWUROGHORVJDVWRVVXV IDVHV&RQWUROHVGHOHJDOLGDG\GHRSRUWXQLGDG(OFRQWUROVREUHSURJUDPDV\UHDOL]DFLRQHV/D FRQWDELOLGDGHQHOFRQWUROLQWHUQRVXPLVLyQHLPSRUWDQFLD i Pág. 12515 boc.cantabria.es CVE-2019-3750 7(0$ (O FRQWURO GH OD JHVWLyQ ILQDQFLHUD &ODVHV GH FRQWURO &RQWURO DGPLQLVWUDWLYR ,GHD JHQHUDO GHO PLVPR &ODVHV \ VLVWHPDV GH FRQWURO DGPLQLVWUDWLYR /RV yUJDQRV SHUVRQDOHV GHO FRQWURO DGPLQLVWUDWLYR /DV IXQFLRQHV LQWHUYHQWRUDV GH UHODFLyQ $VHVRUtD H LQIRUPDFLyQ ILQDQFLHUD UHSUHVHQWDFLyQ \ GHOHJDFLyQ DGPLQLVWUDWLYD &RQWURO H[WHUQR R MXULVGLFFLRQDO &RQWURO SROtWLFR R SDUODPHQWDULR 8/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 'HUHFKR3UHVXSXHVWDULR\6LVWHPDVGHFRQWURO\&RQWDELOLGDG3~EOLFD 7(0$ (OGHUHFKRSUHVXSXHVWDULR&RQFHSWR\FRQWHQLGR/D/H\2UJiQLFDGHGHDEULOGH (VWDELOLGDG3UHVXSXHVWDULD\6RVWHQLELOLGDG)LQDQFLHUD/RVREMHWLYRVGHGpILFLWUHJODGHJDVWR\ GHXGD S~EOLFD (O SHUtRGR PHGLR GH SDJR D SURYHHGRUHV /D $XWRULGDG ,QGHSHQGLHQWH GH 5HVSRQVDELOLGDG)LVFDO $,5() 7(0$ (OGHUHFKRILQDQFLHUR&RQFHSWR\FRQWHQLGR/D/H\GHGHRFWXEUHGH)LQDQ]DV GH&DQWDEULDÈPELWRGHDSOLFDFLyQ/D+DFLHQGDS~EOLFDDXWRQyPLFDGHUHFKRV\REOLJDFLRQHV 5HODFLRQHVILQDQFLHUDVFRQRWUDV$GPLQLVWUDFLRQHV3~EOLFDV 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGH&DQWDEULD , &RQWHQLGR3ULQFLSLRV\UHJODVGHSURJUDPDFLyQ\ GHJHVWLyQSUHVXSXHVWDULD3URJUDPDFLyQSUHVXSXHVWDULD\REMHWLYRGHHVWDELOLGDG 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGH&DQWDEULD ,, &RQWHQLGRHODERUDFLyQHVWUXFWXUD\WUDPLWDFLyQ SDUODPHQWDULD (VSHFLDO UHIHUHQFLD D OD SUyUURJD SUHVXSXHVWDULD (VSHFLILFLGDGHV SUHVXSXHVWDULDV GH ODV HQWLGDGHV S~EOLFDV HPSUHVDULDOHV VRFLHGDGHV PHUFDQWLOHV HVWDWDOHV \ IXQGDFLRQHVGHOVHFWRUS~EOLFRUHJLRQDO 7(0$ /RV 3UHVXSXHVWRV *HQHUDOHV GH &DQWDEULD ,,, (VSHFLDOLGDG \ HVSHFLILFDFLyQ GH ORV FUpGLWRV /LPLWDFLyQ GH ORV FRPSURPLVRV GH JDVWR &RPSURPLVRV GH JDVWR GH FDUiFWHU SOXULDQXDO 7HPSRUDOLGDGGHORVFUpGLWRV)RQGRGH&RQWLQJHQFLDGHHMHFXFLyQSUHVXSXHVWDULD 7(0$ /DVPRGLILFDFLRQHVSUHVXSXHVWDULDV7LSRORJtDUHTXLVLWRV\FRPSHWHQFLDVSDUDVXDXWRUL]DFLyQ 7UDPLWDFLyQGHODVPLVPDV(OFRQWUROGHODVPRGLILFDFLRQHVSUHVXSXHVWDULDV 7(0$ (O FRQFHSWR GH JDVWR S~EOLFR (O SURFHGLPLHQWR JHQHUDO GH HMHFXFLyQ GHO JDVWR S~EOLFR 1DFLPLHQWR \ H[LJLELOLGDG GH ODV REOLJDFLRQHV (O DFWR DGPLQLVWUDWLYR GH JDVWR HOHPHQWRV UHTXLVLWRV SDUD VX YDOLGH] /RV VXMHWRV HQ HO DFWR DGPLQLVWUDWLYR GH JDVWR /D DGPLQLVWUDFLyQ S~EOLFD\HOHMHUFLFLRGHODFRPSHWHQFLD1XOLGDG\DQXODELOLGDGHVSHFLDOUHIHUHQFLDDODQXOLGDG SRUIDOWDGHFUpGLWR/RVSURFHGLPLHQWRVHVSHFLDOHVGHHMHFXFLyQGHOJDVWRS~EOLFR 7(0$ )DVHVGHOSURFHGLPLHQWRGHODJHVWLyQGHORVJDVWRV&RPSHWHQFLDVHQPDWHULDGHJHVWLyQGH JDVWRV2UGHQDFLyQGHSDJRV/DH[WLQFLyQGHREOLJDFLRQHVFRQFDUJRDOD+DFLHQGD3~EOLFD 7(0$ $QWLFLSRVGHFDMDILMD\IRQGRVGHPDQLREUD3DJRVDMXVWLILFDU(PEDUJRGHGHUHFKRVGHFREUR 3DJRVLQGHELGRV\GHPiVUHLQWHJURV*HVWLyQGH3UHVXSXHVWRVGH ,QJUHVRV'HYROXFLRQHVGH LQJUHVRV 7(0$ /D QRUPDOL]DFLyQ GH OD FRQWDELOLGDG S~EOLFD HQ (VSDxD $QWHFHGHQWHV /DV 1RUPDV ,QWHUQDFLRQDOHVGH&RQWDELOLGDGGHO6HFWRU3~EOLFRÏUJDQRVFRPSHWHQWHVGHUHJXODFLyQGHOD FRQWDELOLGDGS~EOLFDHQHOiPELWRHVWDWDODXWRQyPLFR\ORFDO 7(0$ (O 3ODQ JHQHUDO GH FRQWDELOLGDG S~EOLFD 0DUFR FRQFHSWXDO 1RUPDV GH UHFRQRFLPLHQWR \ YDORUDFLyQ&XHQWDVDQXDOHV3DUWLFXODULGDGHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (O FRQWURO GH OD DFWLYLGDG ILQDQFLHUD S~EOLFD (O FRQWURO LQWHUQR GH OD DFWLYLGDG HFRQyPLFR ILQDQFLHUD GHO 6HFWRU S~EOLFR DXWRQyPLFR , &RQFHSWR GH FRQWURO &ODVHV GH FRQWURO 1DWXUDOH]D IXQGDPHQWR \ iPELWR GH DSOLFDFLyQ GHO FRQWURO /D ,QWHUYHQFLyQ *HQHUDO GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULD ,*$& 2UJDQL]DFLyQ\IXQFLRQHV(OHVWDWXWRGHOSHUVRQDO FRQWURODGRUGHUHFKRV\GHEHUHV i Pág. 12516 boc.cantabria.es CVE-2019-3750 7(0$ 3URFHGLPLHQWR GH UHJLVWUR FRQWDEOH GH ODV IDVHV GH HMHFXFLyQ GHO SUHVXSXHVWR /D &XHQWD *HQHUDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD /D UHQGLFLyQ GH FXHQWDV /D &RQWDELOLGDG 1DFLRQDO DVSHFWRV JHQHUDOHV 6XEVHFWRU GH DGPLQLVWUDFLRQHV S~EOLFDV DKRUUR EUXWR \ DKRUUR QHWRFDSDFLGDG\QHFHVLGDGGHILQDQFLDFLyQ\GHHQGHXGDPLHQWR 9/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (O FRQWURO LQWHUQR GH OD DFWLYLGDG HFRQyPLFRILQDQFLHUD GHO 6HFWRU S~EOLFR DXWRQyPLFR ,, /D IXQFLyQ LQWHUYHQWRUD 0RGDOLGDGHV GH HMHUFLFLR 5HSDURV 'LVFUHSDQFLDV 2PLVLyQ GH ILVFDOL]DFLyQ 7(0$ (O FRQWURO LQWHUQR GH OD DFWLYLGDG HFRQyPLFRILQDQFLHUD GHO 6HFWRU S~EOLFR DXWRQyPLFR ,,, (O FRQWURO ILQDQFLHUR SHUPDQHQWH &RQFHSWR 5HJXODFLyQ \ SULQFLSLRV JHQHUDOHV ÈPELWR GH DSOLFDFLyQ,QIRUPHVGHFRQWUROILQDQFLHURSHUPDQHQWH 7(0$ (OFRQWUROLQWHUQRGHODDFWLYLGDGHFRQyPLFRILQDQFLHUDGHO6HFWRU3~EOLFRDXWRQyPLFR ,9 /D DXGLWRUtD S~EOLFD )RUPDV GH HMHUFLFLR 3ODQ DQXDO GH DXGLWRUtDV $XGLWRUtD GH ODV FXHQWDV DQXDOHV$XGLWRUtDVS~EOLFDVHVSHFtILFDV1RUPDVGHDXGLWRUtDGHOVHFWRUS~EOLFR 7(0$ (O FRQWURO H[WHUQR GH OD DFWLYLGDG HFRQyPLFRILQDQFLHUD GHO VHFWRU S~EOLFR , (O FRQWURO SDUODPHQWDULR (O FRQWURO GHO 7ULEXQDO GH &XHQWDV FRPSHWHQFLDV \ IXQFLRQHV /D IXQFLyQ ILVFDOL]DGRUD GHO 7ULEXQDO GH &XHQWDV /RV yUJDQRV GH FRQWURO H[WHUQR HQ ODV &RPXQLGDGHV $XWyQRPDV 7(0$ (O FRQWURO H[WHUQR ,, /D IXQFLyQ MXULVGLFFLRQDO GHO 7ULEXQDO GH &XHQWDV /D UHVSRQVDELOLGDG FRQWDEOH SRU HO PDQHMR GH IRQGRV S~EOLFRV /RV SURFHGLPLHQWRV SDUD OD H[LJHQFLD GH UHVSRQVDELOLGDGFRQWDEOH 'HUHFKR7ULEXWDULR 7(0$ ÈPELWRWHPSRUDO\FULWHULRVGHVXMHFLyQ$QDORJtDVLPXODFLyQ\FRQIOLFWRHQODDSOLFDFLyQGHOD QRUPDWULEXWDULD$GPLQLVWUDFLyQWULEXWDULDHVSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ ,QJUHVRV GH GHUHFKR S~EOLFR \ GH GHUHFKR SULYDGR /RV WULEXWRV &RQFHSWR ILQHV \ FODVHV GH WULEXWRV,PSXHVWRVWDVDV\FRQWULEXFLRQHVHVSHFLDOHV/DUHODFLyQMXUtGLFRWULEXWDULD(OKHFKR LPSRQLEOH\HOGHYHQJR([HQFLRQHV/DVREOLJDFLRQHVWULEXWDULDV\ORVREOLJDGRVWULEXWDULRV/D REOLJDFLyQWULEXWDULDSULQFLSDO\DFFHVRULDV 7(0$ (OHPHQWRV GH FXDQWLILFDFLyQ GH OD REOLJDFLyQ WULEXWDULD SULQFLSDO \ GH OD REOLJDFLyQ GH UHDOL]DU SDJRV D FXHQWD %DVH LPSRQLEOH \ EDVH OLTXLGDEOH UHJtPHQHV GH GHWHUPLQDFLyQ R HVWLPDFLyQ %DVHOLTXLGDEOH7LSRGHJUDYDPHQ&XRWDWULEXWDULD'HXGDWULEXWDULD&RQFHSWR*DUDQWtDVGH ODGHXGDWULEXWDULD 7(0$ /RV REOLJDGRV WULEXWDULRV &ODVHV 'HUHFKRV \ JDUDQWtDV /RV VXMHWRV SDVLYRV FRQWULEX\HQWH \ VXVWLWXWRGHOFRQWULEX\HQWH([HQFLRQHVVXEMHWLYDV/DFDSDFLGDGGHREUDUHQHORUGHQWULEXWDULR 5HSUHVHQWDFLyQ 5HVLGHQFLD \ GRPLFLOLR ILVFDO /D UHVSRQVDELOLGDG WULEXWDULD 5HVSRQVDEOHV VROLGDULRV \ VXEVLGLDULRV /RV VXFHVRUHV 5HWHQHGRUHV \ REOLJDGRV D LQJUHVDU D FXHQWD 2WURV REOLJDGRVWULEXWDULRV 7(0$ /DDSOLFDFLyQGHORVWULEXWRV&RQFHSWR\yUJDQRVFRPSHWHQWHV/DLQIRUPDFLyQ\DVLVWHQFLDD ORVREOLJDGRVWULEXWDULRV/DFRQVXOWDWULEXWDULD/RVSURFHGLPLHQWRVDGPLQLVWUDWLYRVHQPDWHULD WULEXWDULD)RUPDVGHLQLFLDFLyQIDVHVSUXHEDQRWLILFDFLRQHVREOLJDFLyQGHUHVROXFLyQ\SOD]R GHUHVROXFLyQ/DGHQXQFLDS~EOLFD/DVOLTXLGDFLRQHVWULEXWDULDV CVE-2019-3750 i Pág. 12517 boc.cantabria.es 10/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ $FWXDFLRQHV\SURFHGLPLHQWRVGHJHVWLyQWULEXWDULD)XQFLRQHVGHJHVWLyQWULEXWDULD,QLFLDFLyQ 'HFODUDFLRQHV $XWROLTXLGDFLRQHV &RPXQLFDFLRQHV GH GDWRV 3URFHGLPLHQWR GH GHYROXFLyQ LQLFLDGR PHGLDQWH DXWROLTXLGDFLyQ VROLFLWXG R FRPXQLFDFLyQ GH GDWRV 3URFHGLPLHQWR LQLFLDGR PHGLDQWHGHFODUDFLyQ3URFHGLPLHQWRGHYHULILFDFLyQGHGDWRV3URFHGLPLHQWRGHFRPSUREDFLyQ GH YDORUHV 3URFHGLPLHQWR GH FRPSUREDFLyQ OLPLWDGD 2WURV SURFHGLPLHQWRV GH JHVWLyQ WULEXWDULD 7(0$ /D JHVWLyQ UHFDXGDWRULD , &DUDFWHUtVWLFDV \ UpJLPHQ JHQHUDO ÏUJDQRV GH UHFDXGDFLyQ GHO (VWDGR \ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &RPSHWHQFLDV \ HVWUXFWXUD RUJDQL]DWLYD )DFXOWDGHVGHODUHFDXGDFLyQ2EOLJDGRVDOSDJR([WLQFLyQGHODVGHXGDV&UpGLWRVLQFREUDEOHV HLQVROYHQFLDV2WUDVIRUPDVGHH[WLQFLyQ 7(0$ /D JHVWLyQ UHFDXGDWRULD ,, 3URFHGLPLHQWR GH UHFDXGDFLyQ HQ SHULRGR YROXQWDULR $SOD]DPLHQWRV \ IUDFFLRQDPLHQWRV *DUDQWtDV SDUD HO DSOD]DPLHQWR \ HO IUDFFLRQDPLHQWR (O SURFHGLPLHQWRGHFRPSHQVDFLyQ/DFRPSHQVDFLyQGHRILFLRGHGHXGDVGH(QWLGDGHV3~EOLFDV (OSURFHGLPLHQWRGHGHGXFFLyQ3UHVFULSFLyQ 7(0$ /D JHVWLyQ UHFDXGDWRULD ,,, /D UHFDXGDFLyQ HQ SHUtRGR HMHFXWLYR (O SURFHGLPLHQWR GH UHFDXGDFLyQ HQ YtD GH DSUHPLR FRQFHSWR &RQFXUUHQFLD GH SURFHGLPLHQWRV 6XVSHQVLyQ 3ULYLOHJLRVSDUDHOFREURGHGHXGDVWULEXWDULDV(PEDUJR\HQDMHQDFLyQGHELHQHV\GHUHFKRV /DV WHUFHUtDV /D +DFLHQGD 3~EOLFD \ ORV SURFHVRV FRQFXUVDOHV (O SDSHO GH ODV HQWLGDGHV ILQDQFLHUDVHQODUHFDXGDFLyQ 7(0$ 3URFHGLPLHQWR GH LQVSHFFLyQ WULEXWDULD , REMHWR )XQFLRQHV )DFXOWDGHV 'HEHUHV &ODVHV GH DFWXDFLRQHV ,QLFLDFLyQ GHVDUUROOR \ WHUPLQDFLyQ GH ODV DFWXDFLRQHV LQVSHFWRUDV 2EMHWR \ DOFDQFH /XJDU \ KRUDULR GH ODV DFWXDFLRQHV LQVSHFWRUDV 'HVDUUROOR GHO SURFHGLPLHQWR 3OD]R PHGLGDVFDXWHODUHVDOHJDFLRQHV\WUiPLWHGHDXGLHQFLD 7(0$ 3URFHGLPLHQWRGHLQVSHFFLyQWULEXWDULD ,, 7UDPLWDFLyQGHDFWDVyUJDQRVFRPSHWHQWHVSDUDOD SUiFWLFD GH OLTXLGDFLRQHV \ FODVHV GH OLTXLGDFLRQHV GHULYDGDV GH DFWDV GH LQVSHFFLyQ 2WUDV IRUPDVGHWHUPLQDFLyQ'LVSRVLFLRQHVHVSHFLDOHV$SOLFDFLyQGHOPpWRGRGHHVWLPDFLyQLQGLUHFWD \HOLQIRUPHSUHFHSWLYRSDUDODGHFODUDFLyQGHOFRQIOLFWRHQODDSOLFDFLyQGHODQRUPDWULEXWDULD\ RWUDVHVWDEOHFLGDVUHJODPHQWDULDPHQWH 7(0$ /D SRWHVWDG VDQFLRQDGRUD HQ PDWHULD WULEXWDULD 3ULQFLSLRV /RV VXMHWRV UHVSRQVDEOHV GH ODV LQIUDFFLRQHV\VDQFLRQHVWULEXWDULDV&RQFHSWR\FODVHVGHLQIUDFFLRQHV\VDQFLRQHVWULEXWDULDV &XDQWLILFDFLyQ GH ODV VDQFLRQHV ([WLQFLyQ GH OD UHVSRQVDELOLGDG GHULYDGD GH ODV LQIUDFFLRQHV WULEXWDULDV \ H[WLQFLyQ GH ODV VDQFLRQHV WULEXWDULDV 'HUHFKRV \ JDUDQWtDV HQ HO SURFHGLPLHQWR VDQFLRQDGRUÏUJDQRVFRPSHWHQWHVSDUDODLPSRVLFLyQGHVDQFLRQHV 7(0$ 'HOLWRV FRQWUD OD +DFLHQGD 3~EOLFD GHVFULSFLyQ GH ORV WLSRV SHQDOHV GH GHOLWRV FRQWUD OD +DFLHQGD 3~EOLFD /D UHVSRQVDELOLGDG FLYLO /DV OLTXLGDFLRQHV YLQFXODGDV D GHOLWRV FRQWUD OD +DFLHQGD3~EOLFD(OGHOLWRFRQWUDOD+DFLHQGD3~EOLFDHQOD/H\*HQHUDO7ULEXWDULD'HUHFKRV\ JDUDQWtDVGHORVFRQWULEX\HQWHV 7(0$ (O ,PSXHVWR VREUH OD 5HQWD GH ODV 3HUVRQDV )tVLFDV , 1DWXUDOH]D REMHWR \ iPELWR GH DSOLFDFLyQ6XMHFLyQDOLPSXHVWRDVSHFWRVPDWHULDOHVSHUVRQDOHV\WHPSRUDOHV'HWHUPLQDFLyQ GH OD FDSDFLGDG HFRQyPLFD VRPHWLGD D JUDYDPHQ UHQGLPLHQWRV \ JDQDQFLDV \ SpUGLGDV SDWULPRQLDOHV i Pág. 12518 boc.cantabria.es CVE-2019-3750 7(0$ /D UHYLVLyQ GH ORV DFWRV HQ YtD DGPLQLVWUDWLYD HO UHFXUVR GH UHSRVLFLyQ /DV UHFODPDFLRQHV HFRQyPLFRDGPLQLVWUDWLYDV iPELWR GH DSOLFDFLyQ RUJDQL]DFLyQ \ FRPSHWHQFLDV (VSHFLDO UHIHUHQFLDD&DQWDEULD6XVSHQVLyQGHORVDFWRVLPSXJQDGRV3URFHGLPLHQWRVHVSHFLDOHV 11/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (OLPSXHVWRVREUHOD5HQWDGHODV3HUVRQDV)tVLFDV ,, ,QWHJUDFLyQ\FRPSHQVDFLyQGHUHQWDV 0tQLPR SHUVRQDO \ IDPLOLDU %DVH LPSRQLEOH \ EDVH OLTXLGDEOH &iOFXOR GHO ,PSXHVWR HVWDWDO \ JUDYDPHQ DXWRQyPLFR &XRWD GLIHUHQFLDO 'HGXFFLRQHV FRQ HVSHFLDO UHIHUHQFLD D ODV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &XRWD GLIHUHQFLDO 7ULEXWDFLyQ IDPLOLDU &RPSHWHQFLDV QRUPDWLYDVGHODV&&$$ 7(0$ (O,PSXHVWRVREUHHO3DWULPRQLR(VSHFLDOUHIHUHQFLDD&DQWDEULD1DWXUDOH]DREMHWR\iPELWR GH DSOLFDFLyQ +HFKR ,PSRQLEOH ([HQFLRQHV 6XMHWR SDVLYR %DVH LPSRQLEOH \ OLTXLGDEOH 'HYHQJR 'HWHUPLQDFLyQ GH OD GHXGD WULEXWDULD 5HODFLyQ FRQ RWURV WULEXWRV *HVWLyQ GHO LPSXHVWR&RPSHWHQFLDVQRUPDWLYDVGHODV&&$$ 7(0$ (O ,PSXHVWR VREUH 6XFHVLRQHV \ 'RQDFLRQHV (VSHFLDO UHIHUHQFLD D &DQWDEULD +HFKR LPSRQLEOH 6XMHWR SDVLYR %DVH LPSRQLEOH %DVH OLTXLGDEOH 'HXGD WULEXWDULD &RPSHWHQFLDV QRUPDWLYDVGHODV&&$$ 7(0$ (O ,PSXHVWR VREUH HO 9DORU $xDGLGR 1DWXUDOH]D \ iPELWR GH DSOLFDFLyQ (QWUHJD GH ELHQHV \ SUHVWDFLRQHVGHVHUYLFLRV2SHUDFLRQHVQRVXMHWDV$GTXLVLFLRQHVLQWUDFRPXQLWDULDVGHELHQHV ,PSRUWDFLRQHVGHELHQHV([HQFLRQHV/XJDUGHUHDOL]DFLyQGHOKHFKRLPSRQLEOH'HYHQJRGHO LPSXHVWR %DVH LPSRQLEOH 6XMHWR SDVLYR 5HSHUFXVLyQ GHO LPSXHVWR \ WLSRV LPSRVLWLYRV 'HGXFFLRQHV5HJODGHSURUUDWD'HYROXFLRQHV 7(0$ (O ,PSXHVWR VREUH 7UDQVPLVLRQHV 3DWULPRQLDOHV \ $FWRV -XUtGLFRV 'RFXPHQWDGRV 7UDQVPLVLRQHV SDWULPRQLDOHV RQHURVDV (VSHFLDO UHIHUHQFLD D &DQWDEULD +HFKR LPSRQLEOH VXMHWR SDVLYR EDVH LPSRQLEOH FXRWD WULEXWDULD GHXGD WULEXWDULD \ UHJODV HVSHFLDOHV 2SHUDFLRQHV VRFLHWDULDV +HFKR LPSRQLEOH VXMHWR SDVLYR EDVH LPSRQLEOH \ FXRWD WULEXWDULD $FWRV -XUtGLFRV 'RFXPHQWDGRV 7ULEXWDFLyQ ([HQFLRQHV FRPSUREDFLyQ GH YDORUHV *HVWLyQ \ OLTXLGDFLyQGHOLPSXHVWR&RPSHWHQFLDVQRUPDWLYDVGHODV&&$$ 7(0$ ,PSXHVWRV 3URSLRV HO &DQRQ GH $JXDV 5HVLGXDOHV +HFKR LPSRQLEOH 6XMHWR 3DVLYR %DVH ,PSRQLEOH&XRWDWULEXWDULD([HQFLRQHV\ERQLILFDFLRQHV*HVWLyQ\OLTXLGDFLyQGHO,PSXHVWR 7(0$ /RV ,PSXHVWRV (VSHFLDOHV /RV LPSXHVWRV HVSHFLDOHV GH IDEULFDFLyQ (OHPHQWRV HVWUXFWXUDOHV GHFDGDLPSXHVWR*HVWLyQGHORVPLVPRV(O,PSXHVWR(VSHFLDOVREUHGHWHUPLQDGRVPHGLRVGH WUDQVSRUWH&RPSHWHQFLDVQRUPDWLYDVGHODV&&$$(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ /DV WDVDV &RQFHSWR iPELWR GH DSOLFDFLyQ KHFKR LPSRQLEOH VXMHWR SDVLYR UHVSRQVDEOHV GHYHQJR JHVWLyQ \ OLTXLGDFLyQ 3ULQFLSDOHV WDVDV HVWDEOHFLGDV /RV SUHFLRV S~EOLFRV /RV DUDQFHOHV GH ORV IXQFLRQDULRV S~EOLFRV /DV H[DFFLRQHV SDUDILVFDOHV (VSHFLDO UHIHUHQFLD D &DQWDEULD CVE-2019-3750 7(0$ /DILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV3ULQFLSLRV\UHFXUVRVILQDQFLHURV5pJLPHQGH WULEXWRV FHGLGRV \ GH OD FRUUHVSRQVDELOLGDG ILVFDO /DV RSHUDFLRQHV GH FUpGLWR (O IRQGR GH JDUDQWtD GH VHUYLFLRV S~EOLFRV IXQGDPHQWDOHV /RV IRQGRV GH FRPSHQVDFLyQ LQWHUWHUULWRULDO 2WUDVRSHUDFLRQHVGHILQDQFLDFLyQVXEYHQFLRQHVJHVWLRQDGDV i Pág. 12519 boc.cantabria.es 12/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2 &8(5327e&1,&2683(5,25 3$57(*(1(5$/ '(5(&+2&2167,78&,21$/ 7(0$ /D &RQVWLWXFLyQ (VSDxROD GH HVWUXFWXUD \ FDUDFWHUtVWLFDV JHQHUDOHV /D &RQVWLWXFLyQ FRPR QRUPD MXUtGLFD (O (VWDGR VRFLDO \ GHPRFUiWLFR GH GHUHFKR /RV YDORUHV VXSHULRUHV HQ OD &RQVWLWXFLyQ(VSDxROD/DUHIRUPDGHOD&RQVWLWXFLyQ(VSDxROD 7(0$ /RV'HUHFKRV)XQGDPHQWDOHV(YROXFLyQKLVWyULFD\FRQFHSWXDO/DVGHFODUDFLRQHVGHGHUHFKRV\ VX SUREOHPiWLFD MXUtGLFD /RV GHUHFKRV IXQGDPHQWDOHV ODV OLEHUWDGHV S~EOLFDV \ ORV GHUHFKRV HFRQyPLFRV\VRFLDOHVHQOD&RQVWLWXFLyQ*DUDQWtDVGHODVOLEHUWDGHV\GHUHFKRVIXQGDPHQWDOHV /DVXVSHQVLyQGHORVGHUHFKRV\OLEHUWDGHV(VSHFLDOUHIHUHQFLDDO'HIHQVRUGHO3XHEOR 7(0$ )RUPDGH(VWDGR\IRUPDGH*RELHUQR/D-HIDWXUDGHO(VWDGRVXVDWULEXFLRQHV(O*RELHUQRHQHO VLVWHPD FRQVWLWXFLRQDO HVSDxRO &RPSRVLFLyQ /D GHVLJQDFLyQ \ UHPRFLyQ GHO *RELHUQR \ VX 3UHVLGHQWH 7(0$ /DV&RUWHV*HQHUDOHV&RQJUHVRGHORV'LSXWDGRV\6HQDGRFRPSRVLFLyQ\IXQFLRQHV/DIXQFLyQ SDUODPHQWDULDGHFRQWUROGHO*RELHUQRHQ(VSDxD 7(0$ /D &RURQD )XQFLRQHV GHO UH\ HQ OD &RQVWLWXFLyQ (VSDxROD GH 6XFHVLyQ \ UHJHQFLD (O UHIUHQGR/DFDVDGHOUH\ 7(0$ (O 3RGHU -XGLFLDO (O &RQVHMR *HQHUDO GHO 3RGHU -XGLFLDO /D RUJDQL]DFLyQ MXGLFLDO HVSDxROD (O 7ULEXQDO&RQVWLWXFLRQDOUHJXODFLyQFRQVWLWXFLRQDO 7(0$ /D RUJDQL]DFLyQ WHUULWRULDO GHO (VWDGR (O (VWDGR GH ODV $XWRQRPtDV (O (VWDWXWR GH $XWRQRPtD FRPRQRUPDLQVWLWXFLRQDOEiVLFDGHFDGD&RPXQLGDG$XWyQRPDFRQWHQLGRDSUREDFLyQ\UHIRUPD GH ORV (VWDWXWRV (OHPHQWRV LQVWLWXFLRQDOHV GH ODV &RPXQLGDGHV $XWyQRPDV HO WHUULWRULR OD SREODFLyQ\ODRUJDQL]DFLyQ 7(0$ /D &RPXQLGDG $XWyQRPD GH &DQWDEULD , (O 7tWXOR 9,,, GH OD &RQVWLWXFLyQ \ VX DSOLFDFLyQ D &DQWDEULD,QLFLDWLYDDXWRQyPLFD\SURFHVROHJLVODWLYRGHWUDPLWDFLyQ\DSUREDFLyQGHO(VWDWXWRGH $XWRQRPtDGH&DQWDEULD&RPSHWHQFLDVDVXPLGDVSRUOD&RPXQLGDG$XWyQRPDGH&DQWDEULD/D UHIRUPDGHO(VWDWXWR 7(0$ /D &RPXQLGDG $XWyQRPD GH &DQWDEULD ,, /DV LQVWLWXFLRQHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR \ OD $GPLQLVWUDFLyQ GH &DQWDEULD UpJLPHQ MXUtGLFR HVWUXFWXUD \ FRQWURO GH ORVDFWRV MXUtGLFRV GH OD&RPXQLGDG $XWyQRPD HQ HO (VWDWXWR GH $XWRQRPtD 7(0$ /D$GPLQLVWUDFLyQ/RFDO&RQFHSFLyQFRQVWLWXFLRQDOGHODDXWRQRPtDORFDO(QWLGDGHVTXHLQWHJUDQ OD$GPLQLVWUDFLyQ/RFDO3ULQFLSDOHVFRPSHWHQFLDV/tQHDVJHQHUDOHVGHODRUJDQL]DFLyQ '(5(&+2&,9,/ 7(0$ /DV SHUVRQDV MXUtGLFDV QDWXUDOH]D \ FODVHV &RQVWLWXFLyQ FDSDFLGDG UHSUHVHQWDFLyQ GRPLFLOLR QDFLRQDOLGDG \ H[WLQFLyQ GH ODV SHUVRQDV MXUtGLFDV /DV DVRFLDFLRQHV /DV IXQGDFLRQHV /D FRPXQLGDGGHELHQHV 7(0$ 'HUHFKRV\IDFXOWDGHV(OGHUHFKRVXEMHWLYR/DREOLJDFLyQ/DUHODFLyQMXUtGLFD i Pág. 12520 boc.cantabria.es CVE-2019-3750 13/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7HRUtD JHQHUDO GHO QHJRFLR MXUtGLFR (VWXGLR HVSHFLDO GHO FRQWUDWR &RQFHSWR \ HOHPHQWRV GH ORV FRQWUDWRVFRQVHQWLPLHQWRREMHWR\FDXVD/DIRUPDGHORVFRQWUDWRV 7(0$ /RV GHUHFKRV UHDOHV (O GHUHFKR GH SURSLHGDG /RV GHUHFKRV UHDOHV OLPLWDGRV \ GH JDUDQWtD /D SRVHVLyQ 7(0$ (O 5HJLVWUR GH OD 3URSLHGDG 7tWXORV LQVFULELEOHV &ODVHV GH DVLHQWRV /D $GPLQLVWUDFLyQ \ HO 5HJLVWURGHOD3URSLHGDG 81,Ï1(8523($ 7(0$ /D &RPXQLGDG (XURSHD DQWHFHGHQWHV REMHWLYRV \ QDWXUDOH]D MXUtGLFD /RV WUDWDGRV RULJLQDULRV /RVWUDWDGRVPRGLILFDWLYRV/D8QLyQ(XURSHD(O7UDWDGRGHOD8QLyQ(XURSHD(O7UDWDGRSRUHO TXH VH HVWDEOHFH XQD &RQVWLWXFLyQ SDUD (XURSD (O 7UDWDGR GH /LVERD /D SOHQD LQWHJUDFLyQ GH (VSDxDHQOD&RPXQLGDG(XURSHD 7(0$ (O 'HUHFKR GH OD 8QLyQ (XURSHD GHUHFKR RULJLQDULR \ GHULYDGR 5HJODPHQWRV GLUHFWLYDV \ GHFLVLRQHV 3ULQFLSDOHV FDUDFWHUHV GHO 'HUHFKR GH OD 8QLyQ (XURSHD OD SULPDFtD \ HO HIHFWR GLUHFWR 7(0$ (O VLVWHPD LQVWLWXFLRQDO GH OD 8QLyQ (XURSHD (O &RQVHMR (XURSHR /D &RPLVLyQ (XURSHD (O 3DUODPHQWR (XURSHR (O &RQVHMR (O 7ULEXQDO GH &XHQWDV /RV yUJDQRV FRQVXOWLYRV (O &RPLWp (FRQyPLFR\6RFLDOHO&RPLWpGHODV5HJLRQHVHO%DQFR(XURSHRGH,QYHUVLRQHV 7(0$ (O VLVWHPD MXULVGLFFLRQDO GH OD 8QLyQ (XURSHD (O 7ULEXQDO GH -XVWLFLD GH OD 8QLyQ (XURSHD FRPSRVLFLyQ RUJDQL]DFLyQ \ IXQFLRQDPLHQWR &RPSHWHQFLDV HO UHFXUVR GH LQFXPSOLPLHQWR HO UHFXUVR GH DQXODFLyQ HO UHFXUVR SRU RPLVLyQ OD FXHVWLyQ SUHMXGLFLDO \ HO UHFXUVR SRU UHVSRQVDELOLGDGH[WUDFRQWUDFWXDO 7(0$ /DOLEUHFLUFXODFLyQGHPHUFDQFtDV\WUDEDMDGRUHV5HIHUHQFLDDORVUDVJRVIXQGDPHQWDOHVGHODV SROtWLFDVFRPHUFLDOHV\ODSROtWLFDVRFLDO 7(0$ (O GHUHFKR GH HVWDEOHFLPLHQWR \ OD OLEUH SUHVWDFLyQ GH VHUYLFLRV /D OLEHUWDG GH FLUFXODFLyQ GH FDSLWDOHV/RV)RQGRV(VWUXFWXUDOHV 7(0$ /DV 3ROtWLFDV &RPXQHV /D SROtWLFD DJUtFROD FRP~Q \ OD SROtWLFD SHVTXHUD /D SROtWLFD GH OD FRPSHWHQFLD /D SROtWLFD GH WUDQVSRUWHV ODV UHGHV WUDQVHXURSHDV /D SROtWLFD H[WHULRU \ GH VHJXULGDGFRP~Q2WUDVSROtWLFDV\DFFLRQHVFRPXQHV 7(0$ /D 8QLyQ (FRQyPLFD \ 0RQHWDULD DQWHFHGHQWHV VLJQLILFDGR VLWXDFLyQ DFWXDO \ SHUVSHFWLYDV /D SROtWLFD PRQHWDULD HQ OD ]RQD (XUR (O %DQFR &HQWUDO (XURSHR \ HO 6LVWHPD (XURSHR GH %DQFRV &HQWUDOHV '(5(&+2$'0,1,675$7,92 7(0$ /D /H\ FRQFHSWR \ FODVHV 3URFHGLPLHQWR GH HODERUDFLyQ GH ODV OH\HV /DV GLVSRVLFLRQHV GHO *RELHUQR FRQ UDQJR GH /H\ 'HFUHWRVOH\HV \ 'HFUHWRV OHJLVODWLYRV 5HIHUHQFLD D OD &RPXQLGDG $XWyQRPDGH&DQWDEULD i Pág. 12521 boc.cantabria.es CVE-2019-3750 7(0$ (O RUGHQDPLHQWR MXUtGLFRDGPLQLVWUDWLYR 3ULQFLSLRV GH DUWLFXODFLyQ \ UHODFLRQHV LQWHUQRUPDWLYDV 5HODFLyQHQWUHODVOH\HV\UHJODPHQWRVGHODV&RPXQLGDGHV$XWyQRPDV\HO(VWDGR&RQIOLFWRV\ FOiXVXODGHSUHYDOHQFLDGHOGHUHFKRHVWDWDO/DVIXHQWHVGHO'HUHFKRDGPLQLVWUDWLYRUHIHUHQFLDDOD FRVWXPEUHODVSUiFWLFDV\HOSUHFHGHQWHDGPLQLVWUDWLYR 14/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (OUHJODPHQWR&RQFHSWR\QDWXUDOH]DVXGLVWLQFLyQFRQORVDFWRVDGPLQLVWUDWLYRV7LWXODUHVGHOD SRWHVWDGUHJODPHQWDULD,QGHURJDELOLGDGVLQJXODUGHORVUHJODPHQWRV/DQRUPDUHJODPHQWDULD\OD /H\5HIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (O DFWR DGPLQLVWUDWLYR &RQFHSWR &ODVHV (OHPHQWRV VXEMHWLYRV (OHPHQWRV REMHWLYRV (OHPHQWRV IRUPDOHVHQSDUWLFXODUODPRWLYDFLyQ(OVLOHQFLRDGPLQLVWUDWLYR 7(0$ /DHILFDFLDGHORVDFWRVDGPLQLVWUDWLYRV3UHVXSXHVWRVHQHVSHFLDOODQRWLILFDFLyQ\ODSXEOLFDFLyQ /DQRWLILFDFLyQHOHFWUyQLFD/DVXVSHQVLyQGHODHILFDFLD/DHMHFXWLYLGDG\ODHMHFXFLyQIRU]RVDGH ORVDFWRVDGPLQLVWUDWLYRV 7(0$ /DLQYDOLGH]GHODFWRDGPLQLVWUDWLYR&ODVHVGHYLFLRV\VXVHIHFWRV,UUHJXODULGDGHVQRLQYDOLGDQWHV ([FHSFLRQHV D OD LQYDOLGH] GH ORV DFWRV WUDQVPLVLELOLGDG FRQYHUVLyQ FRQVHUYDFLyQ \ FRQYDOLGDFLyQ5HYRFDFLyQ\UHYLVLyQGHORVDFWRVDGPLQLVWUDWLYRV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR 3ULQFLSLRV JHQHUDOHV ,QWHUHVDGRV $EVWHQFLyQ \ UHFXVDFLyQ/RVGHUHFKRVGHORVFLXGDGDQRV5HJLVWURVDGPLQLVWUDWLYRV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ\WHUPLQDFLyQGHOSURFHGLPLHQWR 7(0$ /RV UHFXUVRV DGPLQLVWUDWLYRV &RQFHSWR \ VLJQLILFDGR &ODVHV (O SURFHGLPLHQWR DGPLQLVWUDWLYR HQ YtDGHUHFXUVRSULQFLSLRVJHQHUDOHV5HIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /D UHVSRQVDELOLGDG SDWULPRQLDO GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV (YROXFLyQ 3UHVXSXHVWRV (IHFWLYLGDGGHODUHSDUDFLyQ/DDFFLyQGHUHVSRQVDELOLGDG/DUHVSRQVDELOLGDGDGPLQLVWUDWLYDHQHO iPELWR GHO 'HUHFKR SULYDGR /D UHVSRQVDELOLGDG SDWULPRQLDO GH ODV DXWRULGDGHV IXQFLRQDULRV \ SHUVRQDOGHOD$GPLQLVWUDFLyQ/DDFFLyQGHUHJUHVR 7(0$ /D SRWHVWDG VDQFLRQDGRUD GH OD $GPLQLVWUDFLyQ SULQFLSLRV TXH OD LQIRUPDQ (O SURFHGLPLHQWR VDQFLRQDGRU /D UHVROXFLyQ VDQFLRQDGRUD \ OD VXVSHQVLyQ GH VX HMHFXWRULHGDG 5HIHUHQFLD D OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ )RUPDVGHDFFLyQDGPLQLVWUDWLYDFODVLILFDFLyQ(OIRPHQWR/DVVXEYHQFLRQHVFRQFHSWRSULQFLSLRV \ OtPLWHV GH OD DFWLYLGDG VXEYHQFLRQDO 1RUPDV UHJXODGRUDV FRPSHWHQFLD \ SURFHGLPLHQWR GH FRQFHVLyQ 3URFHGLPLHQWR GH UHLQWHJUR (VSHFLDO UHIHUHQFLD D OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ /RV FRQWUDWRV GHO 6HFWRU 3~EOLFR &RQILJXUDFLyQ JHQHUDO GH OD FRQWUDWDFLyQ GHO VHFWRU S~EOLFR \ HOHPHQWRVHVWUXFWXUDOHVGHORVFRQWUDWRV3UHSDUDFLyQGHORVFRQWUDWRV6HOHFFLyQGHOFRQWUDWLVWD\ DGMXGLFDFLyQGHORVFRQWUDWRV(IHFWRVFXPSOLPLHQWR\H[WLQFLyQGHORVFRQWUDWRVDGPLQLVWUDWLYRV 2UJDQL]DFLyQ DGPLQLVWUDWLYD SDUD OD JHVWLyQ GH OD FRQWUDWDFLyQ 5HIHUHQFLD D OD &RPXQLGDG $XWyQRPDGH&DQWDEULD (6758&785$(&21Ï0,&$<*(67,Ï135(6838(67$5,$ 7(0$ /D &RQWDELOLGDG 1DFLRQDO 'HILQLFLyQ \ DQiOLVLV GH ODV SULQFLSDOHV PDJQLWXGHV PDFURHFRQyPLFDV 3URGXFWR 1DFLRQDO 5HQWD 1DFLRQDO /D IXQFLyQ GH FRQVXPR &RQVXPR \ $KRUUR /D LQYHUVLyQ %UHYHUHIHUHQFLDDO6HFWRU3~EOLFR(VSDxRO 7(0$ )RUPDVMXUtGLFDVGHODVHPSUHVDVFRPRVRFLHGDGHVPHUFDQWLOHV/DVRFLHGDGDQyQLPD\OLPLWDGD /DVDJUXSDFLRQHVGHLQWHUpVHFRQyPLFR2WUDVIRUPDVGHVRFLHGDG 7(0$ (O SUHVXSXHVWR FRQFHSWR \ FODVHV 3UHVXSXHVWR SRU SURJUDPDV 2EMHWLYRV 3URJUDPDV \ VX HYDOXDFLyQ3UHVXSXHVWRHQEDVHFHURREMHWLYRV8QLGDGHV\SDTXHWHVGHGHFLVLyQ$VLJQDFLyQGH SULRULGDGHV&UpGLWRVSUHVXSXHVWDULRV*DVWRVSOXULDQXDOHV i Pág. 12522 boc.cantabria.es CVE-2019-3750 7(0$ 0RGHOR HFRQyPLFR GH OD &RQVWLWXFLyQ (O VHFWRU 3~EOLFR HFRQyPLFR /DV 6RFLHGDGHV (VWDWDOHV \ $XWRQyPLFDV 15/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /RV 3UHVXSXHVWRV *HQHUDOHV GHO (VWDGR FRQFHSWR HVWUXFWXUD \ FRQWHQLGR (ODERUDFLyQ DSUREDFLyQHMHFXFLyQ\FRQWUROGHOSUHVXSXHVWR 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5HJXODFLyQHQOD/H\GH )LQDQ]DVGH&DQWDEULD(VWUXFWXUDGHOSUHVXSXHVWR&ODVLILFDFLyQRUJiQLFDHFRQyPLFD\IXQFLRQDO 'RFXPHQWRVFRQWDEOHV(ODERUDFLyQHQWpUPLQRVGH&RQWDELOLGDG1DFLRQDO 7(0$ /D/H\2UJiQLFDGHGHDEULOGH(VWDELOLGDG3UHVXSXHVWDULD\6RVWHQLELOLGDG)LQDQFLHUD GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV &RQFHSWRV GH HVWDELOLGDG SUHVXSXHVWDULD \ VRVWHQLELOLGDG ILQDQFLHUD3ULQFLSLRV*HQHUDOHVGHODOH\2EMHWLYRGHHVWDELOLGDGSUHVXSXHVWDULD\UHJODGHJDVWR 0HGLGDV SUHYHQWLYDV FRUUHFWLYDV \ FRHUFLWLYDV 3ODQHV HFRQyPLFRILQDQFLHURV (O SULQFLSLR GH 7UDQVSDUHQFLD /tPLWH GH *DVWR QR ILQDQFLHUR 5HIRUPD GHO DUWtFXOR GH OD &RQVWLWXFLyQ (VSDxROD 7(0$ /D$XWRULGDG,QGHSHQGLHQWHGH5HVSRQVDELOLGDG)LVFDO $,5() %UHYHUHIHUHQFLDDVXQDWXUDOH]D MXUtGLFDIXHQWHVGHILQDQFLDFLyQ\FRPSRVLFLyQ)XQFLRQHVDWULEXLGDVPiVLPSRUWDQWHV5HODFLRQHV FRQHOUHVWRGH$GPLQLVWUDFLRQHV 7(0$ /RV 7ULEXWRV FRQFHSWR QDWXUDOH]D \ FODVHV 6LVWHPD WULEXWDULR HVSDxRO 3ULQFLSLRV *HQHUDOHV FRQWHQLGRVHQOD&RQVWLWXFLyQ\HVWUXFWXUDEiVLFDGHOVLVWHPDYLJHQWH 7(0$ /D UHODFLyQ MXUtGLFD WULEXWDULD &RQFHSWR \ HOHPHQWRV HO KHFKR LPSRQLEOH HO VXMHWR SDVLYR \ ORV UHVSRQVDEOHVODEDVHLPSRQLEOH\VXVUHJtPHQHVGHGHWHUPLQDFLyQODEDVHOLTXLGDEOH\HOWLSRGH JUDYDPHQ\ODGHXGDWULEXWDULD 7(0$ (O FRQWULEX\HQWH GHVGH OD SHUVSHFWLYD GH OD /H\ *HQHUDO 7ULEXWDULD GHUHFKRV JDUDQWtDV \ REOLJDFLRQHVGHORVFRQWULEX\HQWHV 7(0$ /DV UHFODPDFLRQHV HFRQyPLFR DGPLQLVWUDWLYDV /RV LQWHUHVDGRV HQ HO SURFHGLPLHQWR $FWRV LPSXJQDEOHV HQ HVWD YtD 5HTXLVLWRV GH ODV DFWXDFLRQHV 6XVSHQVLyQ GHO DFWR LPSXJQDGR 3URFHGLPLHQWRV\UHFXUVRV 7(0$ /DILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV3ULQFLSLRVGHOD/H\2UJiQLFDGH)LQDQFLDFLyQHO 3DFWR GH (VWDELOLGDG \ &UHFLPLHQWR \ GH OD /H\ GH (VWDELOLGDG 3UHVXSXHVWDULD \ 6RVWHQLELOLGDG )LQDQFLHUD 5HFXUVRV RUGLQDULRV /RV LQJUHVRV SDWULPRQLDOHV /RV LQJUHVRV WULEXWDULRV SURSLRV \ HVSHFLDOUHIHUHQFLDDODVWDVDV\VXUpJLPHQMXUtGLFR 7(0$ /RV LQJUHVRV \ WULEXWRV GH SURFHGHQFLD HVWDWDO /RV WULEXWRV FHGLGRV (O QXHYR VLVWHPD GH ILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDVGHUpJLPHQFRP~Q5pJLPHQMXUtGLFRGHODFHVLyQGH WULEXWRV$OFDQFHGHODFHVLyQHQUHODFLyQFRQODJHVWLyQWULEXWDULD 7(0$ 5HFXUVRV H[WUDRUGLQDULRV GH ODV &RPXQLGDGHV $XWyQRPDV /RV )RQGRV GH &RPSHQVDFLyQ ,QWHUWHUULWRULDOFDUDFWHUHV/DVRSHUDFLRQHVGHFUpGLWRGHODV&RPXQLGDGHV$XWyQRPDV/DHPLVLyQ GHGHXGDS~EOLFD 7(0$ (O 7ULEXQDO GH &XHQWDV 1DWXUDOH]D FRPSRVLFLyQ \ RUJDQL]DFLyQ 6X IXQFLyQ ILVFDOL]DGRUD /RV SURFHGLPLHQWRV GH ILVFDOL]DFLyQ $FWXDFLRQHV SUHYLDV D OD H[LJHQFLD GH UHVSRQVDELOLGDG FRQWDEOH 5HIHUHQFLDDODMXULVGLFFLyQFRQWDEOH\ORVSURFHGLPLHQWRVHVSHFLDOHV *(5(1&,$3Ò%/,&$ 7(0$ /D FXOWXUD DGPLQLVWUDWLYD /D pWLFD S~EOLFD /DV %XHQDV 3UiFWLFDV$GPLQLVWUDWLYDV 7UDQVSDUHQFLD DFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR 7(0$ /D SODQLILFDFLyQ GH OD JHVWLyQ S~EOLFD (O SURFHVR GH SODQLILFDFLyQ /D SODQLILFDFLyQ HVWUDWpJLFD \ RSHUDWLYD i Pág. 12523 boc.cantabria.es CVE-2019-3750 7(0$ /D $GPLQLVWUDFLyQ FRPR 6HUYLFLR 3~EOLFR VX UHODFLyQ FRQ HO FLXGDGDQR \ HO FLXGDGDQR FRPR FOLHQWH/DV&DUWDVGHGHUHFKRVGHORVXVXDULRVGHORVVHUYLFLRVS~EOLFRV/DJHVWLyQGHODFDOLGDG 16/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /DRUJDQL]DFLyQ7HRUtDVGHODRUJDQL]DFLyQ\HOHPHQWRVHVHQFLDOHVGHODVPLVPDV 7(0$ /DGLUHFFLyQHQODVRUJDQL]DFLRQHV)DVHVGHOSURFHVRGHGLUHFFLyQ/DGHFLVLyQ\VXVWpFQLFDVGH DSR\R(VWLORVGHGLUHFFLyQOD'LUHFFLyQSRUREMHWLYRV 7(0$ 6LVWHPDV\SURFHVRVGHFRQWURO/DSODQLILFDFLyQ\HOFRQWURO(VWiQGDUHVGHFRQWURO,QIRUPDFLyQ\ FRQWUROGHOWLHPSRUHDO 7(0$ $QiOLVLVGHODVSROtWLFDVS~EOLFDVQHFHVLGDGHV\DOWHUQDWLYDV2EMHWLYRVGHODHYDOXDFLyQPpWRGRV 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ (OSHUVRQDODOVHUYLFLRGHOD$GPLQLVWUDFLyQ3~EOLFD(VSDxRODDOWHUQDWLYDVSDUDODFRQILJXUDFLyQGH ODUHODFLyQMXUtGLFDFRQHOHPSOHDGRS~EOLFR)DVHVGHODHYROXFLyQGHOD)XQFLyQ3~EOLFDHVSDxROD 7(0$ /DSODQLILFDFLyQGHORVUHFXUVRVKXPDQRVQDWXUDOH]D\REMHWLYRV,QVWUXPHQWRVGHSODQLILFDFLyQODV 5HODFLRQHVGH3XHVWRVGH7UDEDMROD2IHUWDGH(PSOHR3~EOLFR\ORV3ODQHVGH(PSOHR$QiOLVLV\ YDORUDFLyQGHORVSXHVWRVGHWUDEDMR 7(0$ /RVSURFHGLPLHQWRVGHVHOHFFLyQGHSHUVRQDOFODVHV\WpFQLFDV/DVHOHFFLyQHQOD$GPLQLVWUDFLyQ HVSDxROD 2IHUWD GH (PSOHR 3~EOLFR \ SURFHGLPLHQWRV GH VHOHFFLyQ /D IRUPDFLyQ HQ OD $GPLQLVWUDFLyQ3~EOLFD 7(0$ 'HUHFKRV\GHEHUHVGHORVIXQFLRQDULRVS~EOLFRV6LWXDFLRQHVDGPLQLVWUDWLYDV 7(0$ ,QFRPSDWLELOLGDGHVGHORVIXQFLRQDULRVS~EOLFRV5HVSRQVDELOLGDG\UpJLPHQGLVFLSOLQDULR 7(0$ /DSURYLVLyQGHSXHVWRVGHWUDEDMRFODVHV'LVHxRGHODVFDUUHUDVSURIHVLRQDOHV/DSURYLVLyQGH SXHVWRVGHWUDEDMRHQOD$GPLQLVWUDFLyQ3~EOLFD6LVWHPDV/DFDUUHUD\ODSURPRFLyQSURIHVLRQDO 7(0$ (O &RQYHQLR FROHFWLYR QDWXUDOH]D UpJLPHQ MXUtGLFR \ FODVHV 3DUWHV OHJLWLPDGDV 3URFHGLPLHQWR QHJRFLDO &RQWHQLGR \ HILFDFLD (O &RQYHQLR &ROHFWLYR SDUD HO 3HUVRQDO /DERUDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /DV UHODFLRQHV ODERUDOHV HQ ODV $GPLQLVWUDFLRQHV 3~EOLFDV UHSUHVHQWDFLyQ SDUWLFLSDFLyQ \ QHJRFLDFLyQFROHFWLYDGHORVHPSOHDGRVS~EOLFRV/RVGHUHFKRVGHVLQGLFDFLyQ\GHKXHOJDHQHO 6HFWRU3~EOLFR 7(0$ /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ 5HDO'HFUHWRGHGHHQHUR 7(0$ /D FRPXQLFDFLyQ HQ ODV RUJDQL]DFLRQHV /tQHDV \ UHGHV GH FRPXQLFDFLyQ (O SURFHVR GH OD FRPXQLFDFLyQ /DV FRPXQLFDFLRQHV LQIRUPDOHV (O UXPRU %DUUHUDV \ REVWiFXORV GH OD FRPXQLFDFLyQ(VWUDWHJLDVGHPHMRUD 7(0$ 'HILQLFLyQ\SDSHOGHODVGLUHFFLRQHVGHUHFXUVRVKXPDQRV$OWHUQDWLYDVGHPHMRUD0RWLYDFLyQ\ VDWLVIDFFLyQHQHOWUDEDMR)DFWRUHVHVHQFLDOHV 7(0$ (O 0DQDJHPHQW 7HRUtD JHQHUDO GH VLVWHPDV (O 0DQDJHPHQW FRPR SURFHVR GH WRPD GH GHFLVLRQHV)XQGDPHQWRVGHGLUHFFLyQHVWUDWpJLFD 7(0$ 'LVHxR \ HYDOXDFLyQ GH RUJDQL]DFLRQHV (VWUXFWXUD IRUPDO H LQIRUPDO &RPXQLFDFLyQ DXWRULGDG \ OLGHUD]JR'LVHxRHVWUXFWXUDO)DFWRUHVGHFRQWLQJHQFLD CVE-2019-3750 7(0$ (O JUXSR QDWXUDOH]D \ FODVHV (WDSDV GH IRUPDFLyQ GHO JUXSR /D GHFLVLyQ JUXSDO WpFQLFDV QRPLQDOHVGHJUXSR'LQiPLFDGHJUXSR/DUHXQLyQ i Pág. 12524 boc.cantabria.es 17/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 3$57((63(&Ë),&$ 5$0$-85Ë',&$ 7(0$ /D SURWHFFLyQ MXUtGLFD GH ORV GHUHFKRV IXQGDPHQWDOHV OD YtD MXGLFLDO SUHIHUHQWH \ VXPDULD (O ³KDEHDVFRUSXV´\HOUHFXUVRGHDPSDURFRQVWLWXFLRQDO,QVWLWXFLRQHVLQWHUQDFLRQDOHVGHJDUDQWtD 7(0$ /D SDUWLFLSDFLyQ SROtWLFD 'HPRFUDFLD GLUHFWD \ UHSUHVHQWDWLYD HQ OD &RQVWLWXFLyQ (VSDxROD /DV HOHFFLRQHVJHQHUDOHVDXWRQyPLFDV\ORFDOHV 7(0$ $QWHFHGHQWHV KLVWyULFRV GH ODV $XWRQRPtDV &DUDFWHUHV GHO GHUHFKR D OD DXWRQRPtD HQ OD &RQVWLWXFLyQHVSDxRODGH/RVUHJtPHQHVSUHDXWRQyPLFRV\HOSURFHVRGHDSUREDFLyQGHORV (VWDWXWRV /DV &RPXQLGDGHV FRQ DXWRQRPtD SOHQD (O SURFHGLPLHQWR SDUD HO DFFHVR JUDGXDO D OD DXWRQRPtD 7(0$ /DVFRPSHWHQFLDVGHODV&RPXQLGDGHV$XWyQRPDV(OVLVWHPDGHGLVWULEXFLyQGHFRPSHWHQFLDVHQ SDUWLFXODU ORV FULWHULRV GH DVLJQDFLyQ GH ODV FRPSHWHQFLDV \ OD LQWHUSUHWDFLyQ \ OD DSOLFDFLyQ GHO VLVWHPD HQ VX FRQMXQWR /D VXSOHWRULHGDG \ OD VXSOHQFLD GHO 'HUHFKR HVWDWDO &RQIOLFWRV GH FRPSHWHQFLDV 7(0$ )yUPXODV GH DPSOLDFLyQ GH ODV FRPSHWHQFLDV DXWRQyPLFDV DO PDUJHQ GH ORV (VWDWXWRV /DV FRPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD ODV WUDQVIHUHQFLDV GH FRPSHWHQFLDV IXQFLRQHV\VHUYLFLRVUpJLPHQMXUtGLFR\SURFHGLPLHQWR/DVIDFXOWDGHVHVWDWDOHVGHYLJLODQFLD\DOWD LQVSHFFLyQ 7(0$ &RRUGLQDFLyQ \ FRQWURO HQ HO (VWDGR GH ODV $XWRQRPtDV /RV FRQYHQLRV LQWHUDGPLQLVWUDWLYRV /DV IXQFLRQHVGHDUPRQL]DFLyQ\FRQWUROGHODV&RUWHV*HQHUDOHV/DUHYLVLyQMXULVGLFFLRQDODWUDYpVGHO 7ULEXQDO &RQVWLWXFLRQDO \ OD MXULVGLFFLyQ FRQWHQFLRVRDGPLQLVWUDWLYD GH ODV QRUPDV \ ORV DFWRV DXWRQyPLFRV 7(0$ /DV FRPSHWHQFLDV GHO PXQLFLSLR \ GH OD SURYLQFLD /RV UHJtPHQHV PXQLFLSDOHV \ SURYLQFLDOHV HVSHFLDOHV/DVFRPDUFDV/DVUHODFLRQHVHQWUHORVHQWHVORFDOHV\ODV$GPLQLVWUDFLRQHVWHUULWRULDOHV VXSHULRUHV&RQIOLFWRVHQGHIHQVDGHODDXWRQRPtDORFDO 7(0$ %DVHV KLVWyULFDV GH OD $GPLQLVWUDFLyQ 3~EOLFD \ GHO 'HUHFKR DGPLQLVWUDWLYR HO QDFLPLHQWR GHO UpJLPHQ DGPLQLVWUDWLYR (O FRQVWLWXFLRQDOLVPR \ HO (VWDGR GH 'HUHFKR 'HUHFKR DGPLQLVWUDWLYR \ $GPLQLVWUDFLyQ 3~EOLFD /D $GPLQLVWUDFLyQ FRPR VXMHWR GH GHUHFKR /RV OtPLWHV GHO 'HUHFKR DGPLQLVWUDWLYR\ODDSOLFDFLyQDOD$GPLQLVWUDFLyQGHO'HUHFKRSULYDGR 7(0$ /DDSOLFDFLyQGHORUGHQDPLHQWRMXUtGLFRDGPLQLVWUDWLYR9DOLGH](ILFDFLD9LJHQFLDHQHOWLHPSR\HQ HOHVSDFLR 7(0$/RV 7UDWDGRV ,QWHUQDFLRQDOHV /D DSOLFDFLyQ HQ (VSDxD GHO 'HUHFKR FRPXQLWDULR HO SDSHO GH ODV &RPXQLGDGHV$XWyQRPDVHQODDSOLFDFLyQ\UHFHSFLyQGHO'HUHFKRFRPXQLWDULR 7(0$&ODVHV GH UHJODPHQWRV &RQWURO MXGLFLDO GH OD OHJLVODFLyQ GHOHJDGD \ SRWHVWDG UHJODPHQWDULD 6LJQLILFDGR \ DOFDQFH GHO FRQWURO VREUH QRUPDV UHJODPHQWDULDV /RV 7ULEXQDOHV FRQWHQFLRVR DGPLQLVWUDWLYRV\ODOHJLVODFLyQGHOHJDGD 7(0$(O SULQFLSLR GH OHJDOLGDG HQ OD $GPLQLVWUDFLyQ 3~EOLFD 3RWHVWDGHV UHJODGDV \ GLVFUHFLRQDOHV 'LVFUHFLRQDOLGDG\FRQFHSWRVMXUtGLFRVLQGHWHUPLQDGRV/tPLWHV\FRQWUROGHODGLVFUHFLRQDOLGDG 7(0$/D MXULVGLFFLyQ FRQWHQFLRVRDGPLQLVWUDWLYD /D /H\ GH GH MXOLR SULQFLSLRV TXH OD LQIRUPDQ6XQDWXUDOH]DH[WHQVLyQ\OtPLWHVÏUJDQRV\FRPSHWHQFLDV i Pág. 12525 boc.cantabria.es CVE-2019-3750 7(0$'HWHUPLQDFLRQHVDFFHVRULDVGHORVDFWRVDGPLQLVWUDWLYRVFRQGLFLyQWpUPLQR\PRGR(MHFXWLYLGDG\ HMHFXFLyQIRU]RVD0HGLRVGHHMHFXFLyQIRU]RVD3ULQFLSLRVJHQHUDOHVGHXWLOL]DFLyQGHORVPHGLRVGH HMHFXFLyQIRU]RVD/DYtDGHKHFKR 18/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$/DV SDUWHV HQ HO SURFHVR FRQWHQFLRVR DGPLQLVWUDWLYR (O REMHWR GHO UHFXUVR FRQWHQFLRVR DGPLQLVWUDWLYR (O UHTXHULPLHQWR HQWUH $GPLQLVWUDFLRQHV 3~EOLFDV (O SURFHGLPLHQWR HQ SULPHUD \ ~QLFDLQVWDQFLD(OSURFHGLPLHQWRDEUHYLDGR 7(0$5HFXUVRV FRQWUD UHVROXFLRQHV SURFHVDOHV UHFXUVRV FRQWUD SURYLGHQFLDV \ DXWRV DSHODFLyQ FDVDFLyQ UHYLVLyQ GH VHQWHQFLDV \ UHFXUVRV FRQWUD ODV UHVROXFLRQHV GHO 6HFUHWDULR GH OD $GPLQLVWUDFLyQGH-XVWLFLD(MHFXFLyQGHVHQWHQFLDV 7(0$/RV FRQWUDWRV GHO VHFWRU S~EOLFR iPELWR VXEMHWLYR GH OD /H\ GH &RQWUDWRV GHO 6HFWRU 3~EOLFR &RQWUDWRVVXMHWRVDUHJXODFLyQDUPRQL]DGD5pJLPHQMXUtGLFRGHORVFRQWUDWRVDGPLQLVWUDWLYRV\GH ORV GH GHUHFKR SULYDGR ORV DFWRV VHSDUDEOHV 'LVSRVLFLRQHV FRPXQHV GH ORV FRQWUDWRV GHO VHFWRU S~EOLFRHVSHFLDOUHIHUHQFLDDOUpJLPHQGHLQYDOLGH]GHORVFRQWUDWRV\DOUHFXUVRHVSHFLDOHQPDWHULD GHFRQWUDWDFLyQ 7(0$/RV yUJDQRV FRPSHWHQWHV HQ PDWHULD GH FRQWUDWDFLyQ 3UHUURJDWLYDV GH GHUHFKR S~EOLFR HQ OD FRQWUDWDFLyQDGPLQLVWUDWLYD&DSDFLGDG\VROYHQFLDGHORVFRQWUDWLVWDV3URKLELFLRQHV&ODVLILFDFLyQ\ UHJLVWUR GH FRQWUDWRV \ GH FRQWUDWLVWDV *DUDQWtDV H[LJLEOHV HQ ORV FRQWUDWRV DGPLQLVWUDWLYRV $FWXDFLRQHVSUHSDUDWRULDV 7(0$3URFHGLPLHQWR \ WUDPLWDFLyQ GH OD DGMXGLFDFLyQ GH ORV FRQWUDWRV DGPLQLVWUDWLYRV &ULWHULRV GH DGMXGLFDFLyQGH ODV RIHUWDV 3HUIHFFLyQ \ IRUPDOL]DFLyQ (MHFXFLyQ \ PRGLILFDFLyQ GH ORV FRQWUDWRV ([WLQFLyQ /D FHVLyQ GH ORV FRQWUDWRV \ OD VXEFRQWUDWDFLyQ 5HIHUHQFLD D ORV SURFHGLPLHQWRV GH FRQWUDWDFLyQHQORVVHFWRUHVGHODJXDODHQHUJtDORVWUDQVSRUWHV\WHOHFRPXQLFDFLRQHV 7(0$5pJLPHQMXUtGLFRGHOFRQWUDWRGHREUDVDFWXDFLRQHVSUHSDUDWRULDV\SURFHGLPLHQWRGHDGMXGLFDFLyQ (MHFXFLyQ\PRGLILFDFLyQ([WLQFLyQ(MHFXFLyQGHREUDVSRUODSURSLD$GPLQLVWUDFLyQ(OFRQWUDWRGH FRQFHVLyQGHREUDS~EOLFD 7(0$&RQWUDWRV GH VXPLQLVWURV /RV FRQWUDWRV GH VHUYLFLRV /RV FRQWUDWRV PL[WRV (VSHFLDOLGDGHV GHO FRQWUDWRGHHODERUDFLyQGHSUR\HFWRVGHREUDV/DFRQFHVLyQGHVHUYLFLRV 7(0$/D H[SURSLDFLyQ IRU]RVD 1DWXUDOH]D MXVWLILFDFLyQ \ HOHPHQWRV GH OD SRWHVWDG H[SURSLDWRULD /D GHFODUDFLyQGHXWLOLGDGS~EOLFDRLQWHUpVVRFLDO(OSURFHGLPLHQWRJHQHUDOH[SURSLDWRULRDFXHUGRGH QHFHVLGDGGHRFXSDFLyQILMDFLyQGHOMXVWLSUHFLRSDJR\WRPDGHSRVHVLyQ 7(0$*DUDQWtDVMXULVGLFFLRQDOHVHQHOSURFHGLPLHQWRH[SURSLDWRULR/DUHYHUVLyQ*DUDQWtDVHFRQyPLFDVOD UHWDVDFLyQ(OSURFHGLPLHQWRH[SURSLDWRULRGHXUJHQFLD/RVSURFHGLPLHQWRVHVSHFLDOHV 7(0$/D SROLFtD DGPLQLVWUDWLYD \ VXV FODVHV 5pJLPHQ MXUtGLFR GH ODV DXWRUL]DFLRQHV (O DUELWUDMH DGPLQLVWUDWLYR 7(0$(OVHUYLFLRS~EOLFRFRQFHSWRVHYROXFLyQ\FULVLV*HVWLyQGLUHFWD\JHVWLyQLQGLUHFWD/DFRQFHVLyQ QDWXUDOH]D\UpJLPHQMXUtGLFR 7(0$/DRUJDQL]DFLyQDGPLQLVWUDWLYD/RVyUJDQRVDGPLQLVWUDWLYRVÏUJDQRVFROHJLDGRV/DFRPSHWHQFLD /DMHUDUTXtD/DGHOHJDFLyQODDYRFDFLyQ\ODHQFRPLHQGDGHJHVWLyQ/DVXSOHQFLD&RQFHQWUDFLyQ \GHVFRQFHQWUDFLyQ&HQWUDOL]DFLyQ\GHVFHQWUDOL]DFLyQ 7(0$/D$GPLQLVWUDFLyQ*HQHUDOGHO(VWDGRUpJLPHQMXUtGLFR\SULQFLSLRV2UJDQL]DFLyQFHQWUDOyUJDQRV VXSHULRUHV \ GLUHFWLYRV 2UJDQL]DFLyQ WHUULWRULDO 'HOHJDGRV GHO *RELHUQR 6XEGHOHJDGRV GHO *RELHUQR\'LUHFWRUHVLQVXODUHV/D$GPLQLVWUDFLyQ*HQHUDOGHO(VWDGRHQHO([WHULRU 7(0$/D $GPLQLVWUDFLyQ ,QVWLWXFLRQDO /D $GPLQLVWUDFLyQ FRUSRUDWLYD /RV &ROHJLRV 3URIHVLRQDOHV 5HIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD i Pág. 12526 boc.cantabria.es CVE-2019-3750 7(0$/RVyUJDQRVGHJRELHUQR\DGPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD(O*RELHUQR FRPSRVLFLyQ\FRPSHWHQFLDV/D$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDUpJLPHQ MXUtGLFR \ SULQFLSLRV (VWUXFWXUD DGPLQLVWUDWLYD yUJDQRV VXSHULRUHV \ yUJDQRV GLUHFWLYRV /DV &RQVHMHUtDV 19/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$/RVyUJDQRVFRQVXOWLYRVHQOD$GPLQLVWUDFLyQVXVFODVHV(O&RQVHMRGH(VWDGR(VSHFLDOUHIHUHQFLD DODVIXQFLRQHVDWULEXLGDVFRQUHVSHFWRDORVDFWRV\GLVSRVLFLRQHVGHODV&RPXQLGDGHV$XWyQRPDV /D$GPLQLVWUDFLyQILVFDOL]DGRUD\GHFRQWURO/D,QWHUYHQFLyQ*HQHUDO 7(0$/D IXQFLyQ S~EOLFD HQ HO RUGHQDPLHQWR HVSDxRO (YROXFLyQ KLVWyULFD \ UHJXODFLyQ FRQVWLWXFLRQDO &ODVHVGHOSHUVRQDODOVHUYLFLRGHODV$GPLQLVWUDFLRQHV3~EOLFDV1RFLyQGHIXQFLRQDULRS~EOLFR/D UHODFLyQ GH VHUYLFLR FDUDFWHUHV QDFLPLHQWR \ QDWXUDOH]D 3RWHVWDG GH RUJDQL]DFLyQ GH OD $GPLQLVWUDFLyQ\GHUHFKRVDGTXLULGRVGHORVIXQFLRQDULRV 7(0$&RQWHQLGRGHODUHODFLyQMXUtGLFDIXQFLRQDULDO , 6LWXDFLRQHVDGPLQLVWUDWLYDV 7(0$&RQWHQLGR GH OD UHODFLyQ MXUtGLFD IXQFLRQDULDO ,, 'HUHFKRV GHEHUHV H LQFRPSDWLELOLGDGHV GH ORV IXQFLRQDULRV(OUpJLPHQGLVFLSOLQDULR 7(0$/RV GHUHFKRV HFRQyPLFRV GH ORV IXQFLRQDULRV 5HWULEXFLRQHV EiVLFDV \ FRPSOHPHQWDULDV /RV GHUHFKRVSDVLYRVGHORVIXQFLRQDULRV6HJXULGDG6RFLDOGHORVIXQFLRQDULRVS~EOLFRV 7(0$2UJDQLVPRVGHJHVWLyQGHODIXQFLyQS~EOLFD3ULQFLSLRVIXQGDPHQWDOHVSDUDHODFFHVRDODIXQFLyQ S~EOLFD7pFQLFDVGHVHOHFFLyQGHORVIXQFLRQDULRV&XHUSRV\HVFDODVGHIXQFLRQDULRVS~EOLFRV/D FDUUHUDDGPLQLVWUDWLYD\ODSURYLVLyQGHSXHVWRVGHWUDEDMR 7(0$(O GRPLQLR S~EOLFR &RQFHSWR \ QDWXUDOH]D (OHPHQWRV VXMHWR REMHWR \ GHVWLQR $IHFWDFLyQ GHVDIHFWDFLyQ \ PXWDFLRQHV GHPDQLDOHV 5pJLPHQ MXUtGLFR GHO GRPLQLR S~EOLFR 3RWHVWDGHV DGPLQLVWUDWLYDV\UpJLPHQGHSURWHFFLyQ8VRGHORVELHQHVGHPDQLDOHVDXWRUL]DFLyQFRQFHVLyQ\ UHVHUYDGHPDQLDO 7(0$(OSDWULPRQLRSULYDGRGHODV(QWLGDGHVS~EOLFDV5pJLPHQMXUtGLFR3RWHVWDGHVGHOD$GPLQLVWUDFLyQ 5pJLPHQ GH DGTXLVLFLyQ XVR \ HQDMHQDFLyQ (VSHFLDO UHIHUHQFLD D OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$(O GRPLQLR S~EOLFR KLGUiXOLFR GHOLPLWDFLyQ QDWXUDOH]D \ UpJLPHQ MXUtGLFR $SURYHFKDPLHQWRV FRPXQHVHVSHFLDOHV\SULYDWLYRVGHODVDJXDVS~EOLFDV2UJDQL]DFLyQDGPLQLVWUDWLYD\SODQLILFDFLyQ KLGUROyJLFDGHODVDJXDVWHUUHVWUHV&RPSHWHQFLDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$(O GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH QDWXUDOH]D \ UpJLPHQ MXUtGLFR =RQDV TXH OR LQWHJUDQ $SURYHFKDPLHQWRVGLUHFWRVHVSHFLDOHV\SULYDWLYRV5pJLPHQGHDXWRUL]DFLRQHV\FRQFHVLRQHV/DV VHUYLGXPEUHVOHJDOHV&RPSHWHQFLDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$(O SDWULPRQLR IRUHVWDO QDWXUDOH]D \ UpJLPHQ MXUtGLFR /RV PRQWHV FRQFHSWR \ FODVHV 'HVOLQGH GH PRQWHVS~EOLFRV5pJLPHQGHDSURYHFKDPLHQWR\SURWHFFLyQ 7(0$0LQDV QDWXUDOH]D UpJLPHQ MXUtGLFR \ DSURYHFKDPLHQWR GH UHFXUVRV PLQHURV 2EUDV S~EOLFDV FRQFHSWR QDWXUDOH]D UpJLPHQ MXUtGLFR \ FODVLILFDFLyQ 5HIHUHQFLD D OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$'HPDQLRYLDULRQDWXUDOH]D\UpJLPHQMXUtGLFR7LSRORJtDXVR\SURWHFFLyQGHFDUUHWHUDV5HIHUHQFLD DOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$(O 2UGHQ S~EOLFR 3ROLFtD GH RUGHQ \ VHJXULGDG S~EOLFD UpJLPHQ MXUtGLFR SULQFLSLRV \ FODVHV 3URWHFFLyQ &LYLO UpJLPHQ MXUtGLFR SULQFLSLRV RUJDQL]DFLyQ \ SODQHV 5HIHUHQFLD D OD &RPXQLGDG $XWyQRPDGH&DQWDEULD 7(0$(OVLVWHPDVDQLWDULRS~EOLFRQDWXUDOH]DUpJLPHQMXUtGLFR\GLVWULEXFLyQGHFRPSHWHQFLDV(O6LVWHPD 1DFLRQDO GH 6DOXG /DV SUHVWDFLRQHV VRFLDOHV /D SURWHFFLyQ D ODV SHUVRQDV GHSHQGLHQWHV (O 6HUYLFLR&iQWDEURGH6DOXG 7(0$/DSURWHFFLyQGHOPHGLRDPELHQWH(VSDFLRVQDWXUDOHVSURWHJLGRV(YDOXDFLyQGHLPSDFWRDPELHQWDO 5HIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD i Pág. 12527 boc.cantabria.es CVE-2019-3750 7(0$(O GHUHFKR D OD HGXFDFLyQ \ OD OLEHUWDG GH HQVHxDQ]D (O VLVWHPD HGXFDWLYR HQ &DQWDEULD /D OHJLVODFLyQGH&DQWDEULDHQPDWHULDGHSURWHFFLyQDODLQIDQFLD\ODDGROHVFHQFLD 20/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$(O3DWULPRQLRFXOWXUDOGH&DQWDEULDQDWXUDOH]DUpJLPHQMXUtGLFRSULQFLSLRV\ELHQHVTXHORLQWHJUDQ %LHQHV GH LQWHUpV FXOWXUDO \ ELHQHV GH LQWHUpV ORFDO 3DWULPRQLR DUTXHROyJLFR \ HWQRJUiILFR 3DWULPRQLRGRFXPHQWDO\ELEOLRJUiILFR$UFKLYRVELEOLRWHFDV\PXVHRV 7(0$2UGHQDFLyQ GH ORV WUDQVSRUWHV SRU FDUUHWHUD UpJLPHQ MXUtGLFR \ FRPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD(OFRPHUFLRLQWHULRU\ODGHIHQVDGHOFRQVXPLGRU5HIHUHQFLDDOD&RPXQLGDG$XWyQRPD GH&DQWDEULD 7(0$/D 2UGHQDFLyQ GHO WXULVPR GH &DQWDEULD RUJDQL]DFLyQ \ FRPSHWHQFLDV HQ PDWHULD GH WXULVPR ORV DJHQWHV WXUtVWLFRV ORV GHUHFKRV \ REOLJDFLRQHV HQ PDWHULD GH WXULVPR GHVDUUROOR \ PDQWHQLPLHQWR GHOUHFXUVRWXUtVWLFRGLVFLSOLQDWXUtVWLFD\DUELWUDMH 7(0$8UEDQLVPRQDWXUDOH]D\HYROXFLyQKLVWyULFRQRUPDWLYD2UGHQDFLyQGHOWHUULWRULR5pJLPHQMXUtGLFR\ GLVWULEXFLyQGHFRPSHWHQFLDV 7(0$(O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WRUHIXQGLGRGHOD /H\GH6XHOR\5HKDELOLWDFLyQ8UEDQD 7(0$/D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHORGH&DQWDEULD 7(0$&ODVLILFDFLyQ \ UpJLPHQ XUEDQtVWLFR GHO VXHOR HQ &DQWDEULD HQ HVSHFLDO HO VXHOR QR XUEDQL]DEOH R U~VWLFR(OSODQHDPLHQWRXUEDQtVWLFRFODVHVHODERUDFLyQDSUREDFLyQ\HIHFWRV 7(0$/D HMHFXFLyQ GHO SODQHDPLHQWR VLVWHPDV 5pJLPHQ GH XVR \ HGLILFDFLyQ GHO VXHOR OD OLFHQFLD 'LVFLSOLQDXUEDQtVWLFD&RPSHWHQFLDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$(O 'HUHFKR GHO WUDEDMR 6X HVSHFLDOLGDG \ FDUDFWHUHV /DV IXHQWHV GHO 'HUHFKR GHO 7UDEDMR 3ULQFLSLRVLQVSLUDGRUHVMHUDUTXtDQRUPDWLYDQRUPDPtQLPD\QRUPDPiVIDYRUDEOH 7(0$(OFRQWUDWRGHWUDEDMR&RQFHSWR\QDWXUDOH]DHOFRQWUDWRFRPRIXHQWHGHREOLJDFLRQHV(OHPHQWRV FRQVHQWLPLHQWR REMHWR \ FDXVD /D IRUPD GHO FRQWUDWR 'HUHFKRV \ REOLJDFLRQHV GH OD UHODFLyQ ODERUDO 7(0$0RGLILFDFLyQ GHO FRQWUDWR GH WUDEDMR OD PRYLOLGDG IXQFLRQDO \ JHRJUiILFD \ ODV PRGLILFDFLRQHV VXVWDQFLDOHV6XVSHQVLyQ\H[WLQFLyQGHOFRQWUDWRGHWUDEDMRFDXVDV\HIHFWRV 7(0$0RGDOLGDGHVGHFRQWUDWRGHWUDEDMRFULWHULRVGHFODVLILFDFLyQ&RQWUDWDFLyQLQGHILQLGDQDWXUDOH]D\ PHGLGDVGHIRPHQWR0RGDOLGDGHVGHFRQWUDWDFLyQWHPSRUDO/RVFRQWUDWRVIRUPDWLYRV&RQWUDWRVD WLHPSRSDUFLDO/DUHODFLyQODERUDOHVSHFLDOGHDOWDGLUHFFLyQQDWXUDOH]D\UpJLPHQMXUtGLFR 7(0$&RQGLFLRQHV GH WUDEDMR -RUQDGD \ KRUDULR ,QWHUUXSFLyQ GH OD MRUQDGD GHVFDQVRV YDFDFLRQHV \ SHUPLVRV/DUHPXQHUDFLyQGHOWUDEDMDGRUQDWXUDOH]DFRQWHQLGR\WLSRV 7(0$5pJLPHQ GH UHSUHVHQWDFLyQ GHO SHUVRQDO ODERUDO &RPLWpV GH HPSUHVD \ 'HOHJDGRV GH SHUVRQDO QDWXUDOH]DFRPSRVLFLyQ\FRPSHWHQFLDV/DUHSUHVHQWDFLyQVLQGLFDOHQODHPSUHVD 7(0$5pJLPHQ GLVFLSOLQDULR ODERUDO (O SRGHU HPSUHVDULDO GH GLUHFFLyQ IDOWDV \ VDQFLRQHV GH ORV WUDEDMDGRUHV -XULVGLFFLyQ VRFLDO QDWXUDOH]D UpJLPHQ MXUtGLFR SULQFLSLRV \ yUJDQRV FRPSHWHQWHV $GPLQLVWUDFLyQODERUDOGLVWULEXFLyQGHFRPSHWHQFLDV\yUJDQRV 7(0$(O 6LVWHPD GH 6HJXULGDG 6RFLDO QDWXUDOH]D \ QLYHOHV GH SURWHFFLyQ (VWUXFWXUD \ WLSRV GH UHJtPHQHV ,QVFULSFLyQ GH HPSUHVDV DILOLDFLyQ DOWDV \ EDMDV FRWL]DFLyQ \ UHFDXGDFLyQ $FFLyQ SURWHFWRUDVLWXDFLRQHVGHQHFHVLGDGFRQWLQJHQFLDV\SUHVWDFLRQHV 7(0$&RQIOLFWRV GH WUDEDMR FRQFHSWR \ HQFXDGUDPLHQWR &ODVLILFDFLyQ GH ORV FRQIOLFWRV FROHFWLYRV 3URFHGLPLHQWR GH VROXFLyQ GH FRQIOLFWRV FRQFLOLDFLyQ PHGLDFLyQ \ DUELWUDMH /D KXHOJD \ HO FLHUUH SDWURQDO CVE-2019-3750 i Pág. 12528 boc.cantabria.es 21/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 $5&+,92 0$7(5,$6(63(&Ë),&$6 7(0$ &RQFHSWR GH $UFKLYtVWLFD (YROXFLyQ KLVWyULFD 3ULQFLSDOHV FLHQFLDV DX[LOLDUHV GH OD $UFKLYtVWLFD 7(0$ &RQFHSWRGH$UFKLYR(YROXFLyQKLVWyULFD)DVHV)XQFLRQHV7LSRVGH$UFKLYRV 7(0$ &RQFHSWR GH GRFXPHQWR GH DUFKLYR &DUDFWHUHV 7LSRV GH GRFXPHQWRV 9DORUHV GHO GRFXPHQWR 7(0$ /RVSULQFLSLRVGHSURFHGHQFLD\UHVSHWRDORUGHQRULJLQDO/DWHRUtDGHODV(GDGHVGHORV GRFXPHQWRV 7(0$ ,QJUHVRVGHIRQGRVGRFXPHQWDOHV7UDQVIHUHQFLDVHLQJUHVRVH[WUDRUGLQDULRVGHGRFXPHQWRV HQORVDUFKLYRV 7(0$ (O WUDWDPLHQWR DUFKLYtVWLFR /D LGHQWLILFDFLyQ \ FODVLILFDFLyQ GRFXPHQWDO /D GHVFULSFLyQ RUGHQDFLyQHLQVWDODFLyQGHIRQGRVGHDUFKLYR 7(0$ /DGHVFULSFLyQDUFKLYtVWLFD&RQFHSWRV'HVFULSFLyQPXOWLQLYHO,QVWUXPHQWRVGHGHVFULSFLyQ 7(0$ /D QRUPDOL]DFLyQ LQWHUQDFLRQDO GH OD GHVFULSFLyQ DUFKLYtVWLFD (YROXFLyQ KLVWyULFD 2UJDQLVPRV1RUPDVLQWHUQDFLRQDOHV 7(0$ /DQRUPDOL]DFLyQGHODGHVFULSFLyQDUFKLYtVWLFDHQ(VSDxD(YROXFLyQ+LVWyULFD2UJDQLVPRV 1RUPDV1DFLRQDOHV 7(0$ /D9DORUDFLyQ'RFXPHQWDO([SXUJR9DORUDFLyQ6HOHFFLyQ\(OLPLQDFLyQ 7(0$ /HQJXDMHVGRFXPHQWDOHV'HVFULSWRUHV\7HVDXURV 7(0$ (ODFFHVRDODGRFXPHQWDFLyQGHDUFKLYR1RUPDWLYD/D3URWHFFLyQGH'DWRV 7(0$ /D 7UDQVSDUHQFLD \ ORV DUFKLYRV 1RUPDWLYD HVWDWDO \ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ /RVGRFXPHQWRVHOHFWUyQLFRV$VSHFWRVOHJDOHV\MXUtGLFRV0HWDGDWRV$UFKLYRHOHFWUyQLFR ~QLFR 7(0$ 5HFXUVRVGHLQIRUPDFLyQDUFKLYtVWLFDHQ,QWHUQHW 7(0$ /DGLIXVLyQ\ORVVHUYLFLRVDUFKLYtVWLFRV6HUYLFLRVDOD$GPLQLVWUDFLyQ\DORVFLXGDGDQRV 6HUYLFLRVHGXFDWLYRV\FXOWXUDOHV 7(0$ 6RSRUWHVGRFXPHQWDOHVWLSRV\FDXVDVILVLFRTXtPLFDV\ELROyJLFDVGHDOWHUDFLyQ 7(0$ )RQGRVHVSHFLDOHVIRWRJUiILFRVDXGLRYLVXDOHVGLJLWDOHVFDUWRJUiILFRV6RSRUWHV7pFQLFDV GHFRQVHUYDFLyQHLQVWDODFLyQ 7(0$ (O$UFKLYRFRPRFHQWURGHFRQVHUYDFLyQ(GLILFLR,QVWDODFLRQHV&RQVHUYDFLyQSUHYHQWLYD i Pág. 12529 boc.cantabria.es CVE-2019-3750 %/248(,$5&+,9Ë67,&$ 22/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /DUHVWDXUDFLyQGHGRFXPHQWRVJUiILFRV(WDSDVPHGLRV\SURFHGLPLHQWRV 7(0$ /DUHSURJUDItDGHGRFXPHQWRVHQORVDUFKLYRV3ODQLILFDFLyQ7pFQLFDV)RUPDWRV 7(0$ 'LPHQVLyQLQWHUQDFLRQDOGHORVDUFKLYRV2UJDQLVPRVLQWHUQDFLRQDOHVGHDUFKLYRV3UR\HFWRV LQWHUQDFLRQDOHVHQPDWHULDGHDUFKLYRV 7(0$ /D DGPLQLVWUDFLyQ HVSDxROD \ ORV DUFKLYRV /D &RQVWLWXFLyQ (O 0LQLVWHULR GH &XOWXUD &RPSHWHQFLDV HQ PDWHULD GH DUFKLYRV HQ OD $GPLQLVWUDFLyQ *HQHUDO GHO (VWDGR HQ ODV &RPXQLGDGHV$XWyQRPDV\HQOD$GPLQLVWUDFLyQ/RFDO 7(0$ /D/H\GHGHMXQLRGHO3DWULPRQLR+LVWyULFR(VSDxRO(O3DWULPRQLR'RFXPHQWDO \ %LEOLRJUiILFR /RV $UFKLYRV %LEOLRWHFDV \ 0XVHRV /D 'HFODUDFLyQ GH %LHQHV GH ,QWHUpV &XOWXUDO/DSURWHFFLyQGHORVELHQHVPXHEOHVHLQPXHEOHV/DVPHGLGDVGHIRPHQWR 7(0$ $UFKLYRV \ GRFXPHQWRV HQ OD /H\ GH GH RFWXEUH GH 3DWULPRQLR &XOWXUDO GH &DQWDEULD 7(0$ /D/H\GHGHMXQLRGH$UFKLYRVGH&DQWDEULD 7(0$ (O6LVWHPDGH$UFKLYRVGHO(VWDGR 7(0$ (O6LVWHPDGH$UFKLYRVGH&DQWDEULD 7(0$ /DVFRPLVLRQHVGHYDORUDFLyQGHGRFXPHQWRV 7(0$ /D&RPLVLyQGH3DWULPRQLR'RFXPHQWDOGH&DQWDEULD 7(0$ /RVDUFKLYRVGHWLWXODULGDGHVWDWDOJHVWLRQDGRVSRUOD&RPXQLGDGHV$XWyQRPDV 7(0$ (O$UFKLYR+LVWyULFR3URYLQFLDOGH&DQWDEULD+LVWRULD)RQGRV 7(0$ /RVDUFKLYRVGHODV&RQVHMHUtDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /RVDUFKLYRVPXQLFLSDOHVGH&DQWDEULD 7(0$ /RVDUFKLYRVHFOHVLiVWLFRVHQ&DQWDEULD 7(0$ /RV DUFKLYRV MXGLFLDOHV /D -XQWD GH ([SXUJR GHO $UFKLYR -XGLFLDO GH *HVWLyQ GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ )RUPDFLyQIXQFLRQHV\pWLFDSURIHVLRQDOGHORVDUFKLYHURV 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD0RQDUTXtDHQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD&DQFLOOHUtD&DVWHOODQR OHRQHVD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD$GPLQLVWUDFLyQHQ(VSDxD HQOD(GDG0HGLD\0RGHUQD 7(0$ $UFKLYRV IXHQWHV GRFXPHQWDOHV \ ELEOLRJUDItD SDUD HO HVWXGLR GH ODV $GPLQLVWUDFLRQHV 3~EOLFDVHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHODDGPLQLVWUDFLyQWHUULWRULDO GH(VSDxD i Pág. 12530 boc.cantabria.es CVE-2019-3750 %/248(,,)8(17(6'2&80(17$/(6 23/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD+DFLHQGD\ORVVLVWHPDV ILVFDOHVHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD+DFLHQGD3~EOLFD\ORV VLVWHPDVILVFDOHVHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD$GPLQLVWUDFLyQGH-XVWLFLD HQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHO1RWDULDGR\GHORV5HJLVWURV GHOD3URSLHGDG\0HUFDQWLOHVHQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHODV&RUWHVHQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOPXQLFLSLRHQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHODDFFLyQGH(VSDxDHQHO H[WHULRU 7(0$ $UFKLYRV IXHQWHV GRFXPHQWDOHV \ ELEOLRJUDItD SDUD HO HVWXGLR GH ODV LQVWLWXFLRQHV HFOHVLiVWLFDV 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOFRPHUFLRODLQGXVWULD\OD QDYHJDFLyQHQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHODVRUJDQL]DFLRQHVSROtWLFDV \VLQGLFDOHVHQ(VSDxD 7(0$ $UFKLYRVIXHQWHVGRFXPHQWDOHV\ELEOLRJUDItDSDUDHOHVWXGLRGHOD*XHUUD&LYLOHVSDxROD\ VXVFRQVHFXHQFLDV 7(0$ )XHQWHV GRFXPHQWDOHV \ ELEOLRJUDItD GH UHIHUHQFLD SDUD HO HVWXGLR GH OD KLVWRULD GH ORV DUFKLYRVHVSDxROHV %/248(,,,+,6725,$'(/$6,167,78&,21(6 7(0$ /DVHVWUXFWXUDVGHSRGHUHQOD(VSDxDPHGLHYDO&RQFHSWRVGH(VWDGR0RQDUTXtD&RURQD \5HLQR 7(0$ /DVLQVWLWXFLRQHVIHXGRYDVDOOiWLFDVHQ(VSDxD 7(0$ /D &DQFLOOHUtD FDVWHOODQROHRQHVD 2UJDQL]DFLyQ WLSRORJtD GLSORPiWLFD \ VLVWHPDV GH HVFULWXUD 7(0$ /DV&RUWHVHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ (O (VWDGR 0RGHUQR /D $GPLQLVWUDFLyQ \ HO UpJLPHQ GH JRELHUQR GH ORV $XVWULDV \ ORV %RUERQHV&RQVHMRV-XQWDV\6HFUHWDUtDV 7(0$ /D$GPLQLVWUDFLyQ7HUULWRULDOHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ (O0XQLFLSLRHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ +DFLHQGD\ILVFDOLGDGHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ /D$GPLQLVWUDFLyQGH-XVWLFLDHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ (O(MpUFLWR\OD0DULQDHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ /DVLQVWLWXFLRQHVGH%HQHILFHQFLDHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD i Pág. 12531 boc.cantabria.es CVE-2019-3750 24/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (GXFDFLyQ\8QLYHUVLGDGHVHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ /DRUJDQL]DFLyQGHOWUDEDMRHQ(VSDxDHQOD(GDG0HGLD\0RGHUQDORVJUHPLRV 7(0$ (VWUXFWXUDVHFRQyPLFDVDJUDULDV\XUEDQDVHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ (OFRPHUFLRHOVLVWHPDILQDQFLHUR\ODLQGXVWULDHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ /DVRFLHGDGHQ(VSDxDHQOD(GDG0HGLD\0RGHUQD 7(0$ /DLQVWLWXFLyQQRWDULDO\UHJLVWUDOHQ(VSDxD 7(0$ /DVLQVWLWXFLRQHVHFOHVLiVWLFDVHQ(VSDxD 7(0$ /DVÏUGHQHV0LOLWDUHVHQ(VSDxD 7(0$ /D,QTXLVLFLyQHVSDxROD 7(0$ (OUpJLPHQVHxRULDO\PD\RUD]JRV 7(0$ (O&RQVWLWXFLRQDOLVPR(VSDxRO 7(0$ /DV&RUWHV(VSDxRODVHQOD(GDG&RQWHPSRUiQHD 7(0$ /D$GPLQLVWUDFLyQ&HQWUDO\OD$GPLQLVWUDFLyQ3HULIpULFDGHO(VWDGRHQ(VSDxDHQOD(GDG &RQWHPSRUiQHD 7(0$ /D$GPLQLVWUDFLyQ7HUULWRULDOHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ /D$GPLQLVWUDFLyQ0XQLFLSDOHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ /DVLQVWLWXFLRQHVSURSLDVGHO5pJLPHQGH)UDQFR/D2UJDQL]DFLyQ6LQGLFDO/RVyUJDQRVGHO 0RYLPLHQWR +DFLHQGD3~EOLFD\VLVWHPDILVFDOHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD /RVSURFHVRVGHVDPRUWL]DGRUHVGHORVVLJORV;9,,,\;,;HQ(VSDxD 7(0$ /D$GPLQLVWUDFLyQGH-XVWLFLD\HO3RGHU-XGLFLDOHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ /RV(MpUFLWRV\ODV)XHU]DVGH2UGHQ3~EOLFRHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ /DV LQVWLWXFLRQHV GH 6DQLGDG 3UHYLVLyQ \ %HQHILFHQFLD HQ (VSDxD HQ OD (GDG &RQWHPSRUiQHD 7(0$ /D(GXFDFLyQ\ODVLQVWLWXFLRQHVGRFHQWHVHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ /DVRUJDQL]DFLRQHVVRFLDOHVSROtWLFDV\VLQGLFDOHVHQ(VSDxDHQOD(GDG&RQWHPSRUiQHD 7(0$ /D'LSXWDFLyQ3URYLQFLDOGH6DQWDQGHU 7(0$ /DVQXHYDVLQVWLWXFLRQHVGHPRFUiWLFDVGHO(VWDGR(VSDxROHQOD&RQVWLWXFLyQGH(O (VWDGRGHODV$XWRQRPtDV CVE-2019-3750 7(0$ 7(0$ i Pág. 12532 boc.cantabria.es 25/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 $548,7(&72 0$7(5,$6(63(&Ë),&$6 i Pág. 12533 7(0$ /D 6HQWHQFLD GHO 7ULEXQDO &RQVWLWXFLRQDO GH GH PDU]R /D /H\ GH DEULO VREUH 5pJLPHQ GH 6XHOR \ 9DORUDFLRQHV (O 5HDO 'HFUHWR /H\ GH GH MXQLR /D 6HQWHQFLDGHO7ULEXQDO&RQVWLWXFLRQDOGHGHMXOLR/D/H\GHGHPD\R GH0HGLGDV8UJHQWHVGH/LEHUDOL]DFLyQHQHOVHFWRULQPRELOLDULR 7(0$ 5HDO'HFUHWROHJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHOWH[WRUHIXQGLGRGHOD /H\GH6XHOR\5HKDELOLWDFLyQ8UEDQD 7(0$ /H\ GH &DQWDEULD GH GH MXQLR GH 2UGHQDFLyQ 7HUULWRULDO \ 5pJLPHQ 8UEDQtVWLFR GHO 6XHOR3ULQFLSLRVLQVSLUDGRUHV9LVLyQGHFRQMXQWRGHOD/H\5pJLPHQWUDQVLWRULR 7(0$ /DRUGHQDFLyQGHOWHUULWRULR5HODFLRQHVHQWUHRUGHQDFLyQGHOWHUULWRULR\XUEDQLVPRHQUHIHUHQFLD DOD/H\GH&DQWDEULDGHGHGLFLHPEUHGHO3DLVDMH 7(0$ /RV LQVWUXPHQWRV GH RUGHQDFLyQ GHO WHUULWRULR (O 3ODQ 5HJLRQDO GH 2UGHQDFLyQ GHO 7HUULWRULR (O 3ODQGH2UGHQDFLyQGHO/LWRUDO/DV1RUPDV8UEDQtVWLFDV5HJLRQDOHV/RV3UR\HFWRV6LQJXODUHV GH,QWHUpV5HJLRQDO/RV3ODQHV(VSHFLDOHVGH2UGHQDFLyQGHO7HUULWRULR 7(0$ /H\ GH &DQWDEULD GH GH VHSWLHPEUH GHO 3ODQ GH 2UGHQDFLyQ GHO /LWRUDO 9LVLyQ GH FRQMXQWR 7(0$ (O'HFUHWRGHGHPD\RSRUHOTXHVHDSUXHEDGHILQLWLYDPHQWHHO3ODQ(VSHFLDOGHOD $FWXDFLyQ ,QWHJUDO (VWUDWpJLFD GH 5HRUGHQDFLyQ GH OD %DKtD GH 6DQWDQGHU 2EMHWLYRV PRGHOR WHUULWRULDO GHWHUPLQDFLRQHV JHQHUDOHV GH OD RUGHQDFLyQ 3URSXHVWDV GH DFWXDFLyQ JHVWLyQ FRQRFLPLHQWR\GLIXVLyQ 7(0$ /DV1RUPDV8UEDQtVWLFDV5HJLRQDOHV)LQDOLGDG\REMHWLYRV(VWUXFWXUD\FRQWHQLGRGHODV185 (ILFDFLD 7(0$ /RV3UR\HFWRV6LQJXODUHVGH,QWHUpV5HJLRQDO2EMHWR&RQWHQLGR3URFHGLPLHQWRGHHODERUDFLyQ (IHFWRVHVSHFLDOUHIHUHQFLDDOSODQHDPLHQWRXUEDQtVWLFRPXQLFLSDO 7(0$ (O SODQHDPLHQWR XUEDQtVWLFR /tPLWHV OHJDOHV GH OD SRWHVWDG GHO SODQHDPLHQWR /DV QRUPDV GH DSOLFDFLyQGLUHFWD\ORVHVWiQGDUHVXUEDQtVWLFRV 7(0$ (O3ODQ*HQHUDOGH2UGHQDFLyQ8UEDQDREMHWR\GHWHUPLQDFLRQHV)RUPDFLyQ\DSUREDFLyQGHORV SODQHVXUEDQtVWLFRV(IHFWRVGHODDSUREDFLyQGHORVSODQHV9LJHQFLDUHYLVLyQ\PRGLILFDFLyQGH ORVSODQHVGHXUEDQLVPR(OSODQHDPLHQWRGHORVSHTXHxRVPXQLFLSLRV 7(0$ /RV 3ODQHV SDUFLDOHV /RV VHFWRUHV /DV RUGHQDQ]DV XUEDQtVWLFDV /RV 3ODQHV (VSHFLDOHV /RV (VWXGLRVGH'HWDOOH/RV3UR\HFWRVGH8UEDQL]DFLyQ 7(0$ &ODVLILFDFLyQ\UpJLPHQGHOVXHOR(OUpJLPHQMXUtGLFRGHODSURSLHGDGXUEDQD/RVHIHFWRVGHOD FODVLILFDFLyQGHOVXHOR&ODVLILFDFLyQGHOVXHORHQPXQLFLSLRVVLQSODQ 7(0$ 'HWHUPLQDFLyQ \ UpJLPHQ MXUtGLFR GHO VXHOR XUEDQR 'HUHFKRV \ GHEHUHV GH ORV SURSLHWDULRV 6HQWHQFLDGHO7ULEXQDO&RQVWLWXFLRQDOGHGHIHEUHUR boc.cantabria.es CVE-2019-3750 %/248(,85%$1,602 7(0$ )RUPDFLyQ\HYROXFLyQGHO'HUHFKR8UEDQtVWLFRHQ(VSDxD/H\GHPD\RGH3ULQFLSLRV LQVSLUDGRUHVGHODUHIRUPDGH/D/H\GHGHMXOLR\HO5HDO'HFUHWR/HJLVODWLYR GHGHMXQLR 26/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 'HWHUPLQDFLyQ\UpJLPHQMXUtGLFRGHOVXHORXUEDQL]DEOH'HUHFKRV\GHEHUHVGHORVSURSLHWDULRV 7(0$ 5pJLPHQ MXUtGLFR GHO VXHOR U~VWLFR HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &ODVHV &RQVWUXFFLRQHV HQ VXHOR U~VWLFR (IHFWRV \ SURFHGLPLHQWR /D UHIRUPD GHO UpJLPHQ GHO VXHOR U~VWLFRHQOD/H\GH&DQWDEULDGHGHMXQLRSRUODTXHVHPRGLILFDOD/H\GH&DQWDEULD GHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO6XHORGH&DQWDEULD 7(0$ 5HJXODFLyQ GH ODV DXWRUL]DFLRQHV GH FRQVWUXFFLRQHV \ XVRV HQ VXHOR U~VWLFR GH DFXHUGR FRQ OR HVWDEOHFLGRHQODV1RUPDV8UEDQtVWLFDV5HJLRQDOHV 7(0$ /DHMHFXFLyQGHOSODQHDPLHQWR'LVSRVLFLRQHVJHQHUDOHV'HOLPLWDFLyQGHXQLGDGHVGHDFWXDFLyQ &ULWHULRV\UHTXLVLWRV 7(0$ (O DSURYHFKDPLHQWR XUEDQtVWLFR $SURYHFKDPLHQWR XUEDQtVWLFR SULYDWL]DEOH $SURYHFKDPLHQWR PHGLR$SURYHFKDPLHQWRSULYDGR'LIHUHQFLDVGHDSURYHFKDPLHQWR 7(0$ ,QVWUXPHQWRV GH JHVWLyQ XUEDQtVWLFD ,QVWUXPHQWRV S~EOLFRV \ SULYDGRV 2EWHQFLyQ GH WHUUHQRV GRWDFLRQDOHV6LVWHPDVJHQHUDOHV\ORFDOHV&RQFHSWR0RGRVGHREWHQFLyQ 7(0$ 6LVWHPDVGHDFWXDFLyQ$FWXDFLRQHVVLVWHPiWLFDV\DVLVWHPiWLFDV/DHOHFFLyQGHOVLVWHPD 7(0$ 6LVWHPD GH &RPSHQVDFLyQ -XQWD GH &RPSHQVDFLyQ 3UR\HFWR )RUPDFLyQ &RQWHQLGR 7UDPLWDFLyQ 6LVWHPD GH FRRSHUDFLyQ 3UR\HFWRV GH 5HSDUFHODFLyQ &RQWHQLGR \ UHJODV GH UHSDUFHODFLyQ 7(0$ 6LVWHPD GH H[SURSLDFLyQ )RUPDFLyQ &RQWHQLGR WUDPLWDFLyQ 6XSXHVWRV H[SURSLDWRULRV /D H[SURSLDFLyQSRULQFXPSOLPLHQWRGHODODERUVRFLDOGHODSURSLHGDG(OVLVWHPDGHFRQFHVLyQGH REUDXUEDQL]DGRUD&RQFHSWR\SULQFLSLRVJHQHUDOHV3URFHGLPLHQWRGHUHFKRV\GHEHUHV 7(0$ /DV OLFHQFLDV XUEDQtVWLFDV $FWRV VXMHWRV D OLFHQFLD 7LSRV GH OLFHQFLD &RPSHWHQFLD \ SURFHGLPLHQWR3DUFHODFLRQHV\UHSDUFHODFLRQHVXUEDQtVWLFDV3DUFHODFLRQHVLOHJDOHV 7(0$ (O GHEHU GH FRQVHUYDFLyQ \ VXV OtPLWHV &DVR HVSHFLDO GH OD SURSLHGDG PRQXPHQWDO 5HKDELOLWDFLRQHV/DGHFODUDFLyQGHUXLQD6XSXHVWRV3URFHGLPLHQWRV\WUDPLWDFLyQ/DHMHFXFLyQ IRU]RVD 7(0$ /D SURWHFFLyQ GH OD OHJDOLGDG XUEDQtVWLFD &RPSHWHQFLDV HQ HO HMHUFLFLR GH OD LQVSHFFLyQ XUEDQtVWLFD &RPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD ,QIUDFFLRQHV XUEDQtVWLFDV 5pJLPHQ MXUtGLFR6DQFLRQHVXUEDQtVWLFDV5pJLPHQMXUtGLFR 7(0$ 3DWULPRQLRV S~EOLFRV GHO VXHOR PXQLFLSDO \ DXWRQyPLFR 'HUHFKR GH VXSHUILFLH 'HUHFKRV GH WDQWHR\UHWUDFWR(GLILFDFLyQIRU]RVD 7(0$ &RQYHQLRVXUEDQtVWLFRV&RQYHQLRVGHSODQHDPLHQWR&RQYHQLRVGHJHVWLyQ/DDFFLyQS~EOLFDHQ PDWHULDXUEDQtVWLFD$FFLRQHV\UHFXUVRVDGPLQLVWUDWLYRV 7(0$ 2UJDQL]DFLyQ DGPLQLVWUDWLYD /D &RPLVLyQ 5HJLRQDO GH 2UGHQDFLyQ GHO 7HUULWRULR \ 8UEDQLVPR &RPSRVLFLyQ\IXQFLRQDPLHQWR(O&RQVHMRGH2UGHQDFLyQGHO7HUULWRULR\8UEDQLVPR 7(0$ 9DORUDFLRQHVGHOVXHOR\ODHGLILFDFLyQ5HJXODFLyQHQHO5HDO'HFUHWR/HJLVODWLYRGH GHRFWXEUH6XGLVSRVLFLyQWUDQVLWRULDWHUFHUDUHPLVLyQDODUHJXODFLyQHQOD/H\HVWDWDO GH GH DEULO 0pWRGRV GH YDORUDFLyQHQ FDGD FODVH GH VXHOR HQ DPEDV QRUPDV 6XSXHVWR GH FDUHQFLDGHSODQ6XSXHVWRVLQGHPQL]DWRULRV CVE-2019-3750 i Pág. 12534 boc.cantabria.es 27/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,,/(*,6/$&,Ï16(&725,$/ i Pág. 12535 (O PDUFR MXUtGLFR GH (YDOXDFLyQ GH ,PSDFWR $PELHQWDO HQ &DQWDEULD /HJLVODFLyQ EiVLFD \ DXWRQyPLFD7UDPLWDFLyQGHH[SHGLHQWHV 7(0$ 'HFUHWRGHGHRFWXEUHSRUHOTXHVHUHJXODODSURGXFFLyQ\JHVWLyQGHORVUHVLGXRV GHFRQVWUXFFLyQ\GHPROLFLyQHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /H\ GH &DQWDEULD GH GH QRYLHPEUH GH 0RGHUQL]DFLyQ \ 'HVDUUROOR $JUDULR \ VX UHODFLyQFRQHOSODQHDPLHQWRXUEDQtVWLFR\WHUULWRULDO 7(0$ $FWLYLGDGHV 0ROHVWDV ,QVDOXEUHV 1RFLYDV \ 3HOLJURVDV 5HJXODFLyQ GHVSXpV GH OD /H\ GH &DQWDEULDGHGHGLFLHPEUHGH&RQWURO$PELHQWDO,QWHJUDGR 7(0$ /H\GHGHMXOLRGHSUHYHQFLyQ\FRQWUROLQWHJUDGRVGHODFRQWDPLQDFLyQ 7(0$ /H\ GH GH GLFLHPEUH GH 3DWULPRQLR 1DWXUDO \ GH OD %LRGLYHUVLGDG /D /H\ GH &DQWDEULD GH GH PD\R GH &RQVHUYDFLyQ GH OD 1DWXUDOH]D GH &DQWDEULD (VSHFLDO UHIHUHQFLD D ORV HVSDFLRV QDWXUDOHV SURWHJLGRV /RV 3ODQHV GH 2UGHQDFLyQ GH ORV 5HFXUVRV 1DWXUDOHV 7(0$ /H\GHGHPD\RGHSURWHFFLyQ\XVRVRVWHQLEOHGHOOLWRUDO\GHPRGLILFDFLyQGHOD/H\ GHGHMXOLRGH&RVWDV6XLQFLGHQFLDHQHOSODQHDPLHQWR\JHVWLyQXUEDQtVWLFD 7(0$ 5HDO'HFUHWR/HJLVODWLYRGHGHVHSWLHPEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GHOD/H\GH3XHUWRVGHO(VWDGR\GHOD0DULQD0HUFDQWH6XLQFLGHQFLDHQHOXUEDQLVPR 7(0$ /H\ GH &DQWDEULD GH GH QRYLHPEUH GH 3XHUWRV GH &DQWDEULD 6X LQFLGHQFLD HQ HO SODQHDPLHQWR\JHVWLyQXUEDQtVWLFD 7(0$ 5HDO'HFUHWR/HJLVODWLYRGHGHMXOLRSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGRGHOD /H\GH$JXDV6XLQFLGHQFLDHQHOXUEDQLVPR 7(0$ /H\GHGHVHSWLHPEUHGHFDUUHWHUDV$IHFFLRQHVXUEDQtVWLFDV 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH&DUUHWHUDV$IHFFLRQHVXUEDQtVWLFDV 7(0$ /H\ GH GH VHSWLHPEUH GHO VHFWRU IHUURYLDULR 6X LQFLGHQFLD HQ HO SODQHDPLHQWR XUEDQtVWLFR 7(0$ $HURSXHUWRVGHLQWHUpVJHQHUDO(VSHFLDOUHIHUHQFLDDODRUGHQDFLyQGHORVDHURSXHUWRVGHLQWHUpV JHQHUDO\VX]RQDGHVHUYLFLR 7(0$ /H\ GH GH QRYLHPEUH GHO UXLGR 6X LQFLGHQFLD HQ OD 2UGHQDFLyQ GHO 7HUULWRULR \ HO 8UEDQLVPR 7(0$ /H\GH&DQWDEULDGHGHQRYLHPEUHGH$EDVWHFLPLHQWR\6DQHDPLHQWRGH$JXDVGHOD &RPXQLGDG$XWyQRPDGH&DQWDEULD3ULQFLSLRVLQIRUPDGRUHV5pJLPHQHFRQyPLFRILQDQFLHURGHO FDQRQGHVDQHDPLHQWR 7(0$ /H\ GH &DQWDEULD GH GH RFWXEUH GH 3DWULPRQLR &XOWXUDO 1RUPDV HVSHFtILFDV DSOLFDEOHVDORVLQPXHEOHVGHFODUDGRVGHLQWHUpVFXOWXUDO(OSDWULPRQLRDUTXHROyJLFR 7(0$ /H\ GH GH MXOLR SRU OD TXH VH PRGLILFD OD /H\ GH GH QRYLHPEUH GH 0RQWHV\VXUHODFLyQFRQHOXUEDQLVPR 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH*DUDQWtDGHORV'HUHFKRVGHODV3HUVRQDVFRQ 'LVFDSDFLGDG 7tWXOR ,,, $FFHVLELOLGDG XQLYHUVDO \ YLGD LQGHSHQGLHQWH 'HFUHWR GH &DQWDEULD GHGHMXOLRVREUHHYLWDFLyQ\VXSUHVLyQGHEDUUHUDVDUTXLWHFWyQLFDV 7(0$ 2UGHQDFLyQ GHO WXULVPR HQ &DQWDEULD /D /H\ GH &DQWDEULD GH GH PDU]R GH 2UGHQDFLyQ GHO 7XULVPR 1RUPDWLYD GH GHVDUUROOR HQ PDWHULD GH DORMDPLHQWRV WXUtVWLFRV HQ OD &RPXQLGDG$XWyQRPDGH&DQWDEULD boc.cantabria.es CVE-2019-3750 7(0$ 28/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /H\GHGHPD\R*HQHUDOGH7HOHFRPXQLFDFLRQHV\VXUHODFLyQFRQHOXUEDQLVPR 7(0$ 2WUDV OHJLVODFLRQHV VHFWRULDOHV LQIUDHVWUXFWXUD GH GHIHQVD \ FHPHQWHULRV 5LHVJRV \ SURWHFFLyQ FLYLO OD /H\ GH &DQWDEULD GH GH DEULO GHO 6LVWHPD GH 3URWHFFLyQ &LYLO \ *HVWLyQ GH (PHUJHQFLDVGH&DQWDEULD 7(0$ 1RUPDVGHYDORUDFLyQFDWDVWUDOHQHO5HDO'HFUHWR/HJLVODWLYRGHGHPDU]RSRUHOTXH VHDSUXHEDHOWH[WRUHIXQGLGRGHOD/H\GHO&DWDVWUR,QPRELOLDULR(O5HDO'HFUHWRGH GH MXQLR SRU HO TXH VH DSUXHEDQ ODV QRUPDV WpFQLFDV GH YDORUDFLyQ \ HO FXDGUR PDUFR GH YDORUHV GHO VXHOR \ GH ODV FRQVWUXFFLRQHV SDUD GHWHUPLQDU HO YDORU FDWDVWUDO GH ORV ELHQHV LQPXHEOHV GH QDWXUDOH]D XUEDQD 9DORUDFLyQ FDWDVWUDO GH ORV ELHQHV LQPXHEOHV /DV QRUPDV WpFQLFDVGHYDORUDFLyQ\FXDGURPDUFRGHYDORUHVSDUDGHWHUPLQDUHOYDORUFDWDVWUDOGHORVELHQHV LQPXHEOHVGHQDWXUDOH]DXUEDQD/DVSRQHQFLDVGHYDORUHV9DORUDFLyQGHVXHOR9DORUHVEiVLFRV \YDORUHVXQLWDULRV&RHILFLHQWHVFRUUHFWRUHVDDSOLFDU 7(0$ 9DORUDFLyQGHODVFRQVWUXFFLRQHV&ODVLILFDFLyQWLSROyJLFDHQUD]yQGHVXXVRFODVH0RGDOLGDG\ FDWHJRUtD$QWLJHGDGGHODVFRQVWUXFFLRQHV\HVWDGRGHFRQVHUYDFLyQ&RHILFLHQWHVFRUUHFWRUHV GH DSOLFDFLyQ D OD VXPD GHO YDORU GHO VXHOR \ YDORU GH OD FRQVWUXFFLyQ 9DORU FDWDVWUDO GH ORV ELHQHVLQPXHEOHVGHQDWXUDOH]DXUEDQD 7(0$ 5HDO'HFUHWRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHYDORUDFLRQHV GHOD/H\GHO6XHOR %/248(,,,(',),&$&,Ï1<9,9,(1'$ 7(0$ /H\ GH GH QRYLHPEUH GH 2UGHQDFLyQ GH OD (GLILFDFLyQ (O SURFHVR FRQVWUXFWLYR VX HVWUXFWXUDFLyQVHJ~QOD/2(&RQILJXUDFLyQOHJDOGHOSUR\HFWRGHHGLILFDFLyQ/DFRPSRVLFLyQGHO SUR\HFWR /RV SUR\HFWRV FRPSOHMRV \ VX UpJLPHQ GH UHVSRQVDELOLGDG ,QWHUYHQFLyQ GH HQWLGDGHV DVRFLDWLYDV 5HDO'HFUHWRGHGHDJRVWRVREUHYLVDGRFROHJLDOREOLJDWRULR 7(0$ /DIDVHGHODHMHFXFLyQGHODREUD/RVDJHQWHVGHODHGLILFDFLyQHOSURPRWRUHOFRQVWUXFWRUORV DJHQWHV WpFQLFRV /DV HQWLGDGHV \ ORV ODERUDWRULRV GH FRQWURO GH FDOLGDG GH OD HGLILFDFLyQ \ ORV VXPLQLVWUDGRUHV GH SURGXFWRV GH FRQVWUXFFLyQ /RV SURSLHWDULRV \ ORV XVXDULRV 'HFUHWR GHGHHQHURSRUHOTXHVHUHJXODHO/LEURGHO(GLILFLRGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV 7(0$ 5HDO'HFUHWRGHGHHQHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORV6HUYLFLRVGH 3UHYHQFLyQ5HDO'HFUHWRGHGHRFWXEUHSRUHOTXHVHHVWDEOHFHQODVFRQGLFLRQHV PtQLPDVGHVHJXULGDG\VDOXGHQODVREUDVGHFRQVWUXFFLyQ 7(0$ 3DWRORJtD GH ORV HGLILFLRV 'HILFLHQFLDV HQ HOHPHQWRV HVWUXFWXUDOHV JULHWDV HQ LQVWDODFLRQHV KXPHGDGHVGHSHQHWUDFLyQ\FRQGHQVDFLyQ6XVFDXVDV\VXUHSDUDFLyQ 7(0$ 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHED OD LQVWUXFFLyQ GH KRUPLJyQ HVWUXFWXUDO (+( $QiOLVLVGHVXFRQWHQLGR 7(0$ 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH DSUXHED HO &yGLJR 7pFQLFR GH OD HGLILFDFLyQ(VWUXFWXUD\FRQWHQLGR5pJLPHQWUDQVLWRULR 7(0$ (O &yGLJR 7pFQLFR GH OD HGLILFDFLyQ 'LVSRVLFLRQHV JHQHUDOHV &RQGLFLRQHV 7pFQLFDV \ $GPLQLVWUDWLYDV([LJHQFLDV%iVLFDV CVE-2019-3750 7(0$ i Pág. 12536 boc.cantabria.es 29/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ i Pág. 12537 (VTXHPD JHQHUDO \ HVWUXFWXUD GH ORV VLJXLHQWHV 'RFXPHQWRV %iVLFRV GH DSOLFDFLyQ HQ FXPSOLPLHQWR GHO &yGLJR 7pFQLFR GH OD (GLILFDFLyQ '% 6( 6HJXULGDG (VWUXFWXUDO '%6($( $FFLRQHV HQ OD (GLILFDFLyQ '%6(& &LPLHQWRV '%6($ $FHUR '%6() )iEULFD \ '%6(±0 0DGHUD 7(0$ (VTXHPD JHQHUDO HVWUXFWXUD \ FRQWHQLGR GHO 'RFXPHQWR %iVLFR 6, GH 6HJXULGDG HQ FDVR GH ,QFHQGLR 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR+(GH$KRUURGHHQHUJtD 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR68$GHVHJXULGDGGHXWLOL]DFLyQ \DFFHVLELOLGDG 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR+6GH6DOXEULGDG 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR+5GH3URWHFFLyQIUHQWHDOUXLGR 7(0$ 2UGHQ 9,9 GH GH IHEUHUR SRU OD TXH VH GHVDUUROOD HO GRFXPHQWR WpFQLFR GH FRQGLFLRQHV EiVLFDV GH DFFHVLELOLGDG \ QR GLVFULPLQDFLyQ SDUD HO DFFHVR \ QR XWLOL]DFLyQ GH ORV HVSDFLRVS~EOLFRVXUEDQL]DGRV 7(0$ 5HDO 'HFUHWR GH GH DEULO SRU HO TXH VH DSUXHED HO SURFHGLPLHQWR EiVLFR SDUD OD FHUWLILFDFLyQGHODHILFLHQFLDHQHUJpWLFDGHORVHGLILFLRV2UGHQ,11GHGHPD\RSRU OD TXH VH UHJXOD HO UHJLVWUR GH FHUWLILFDFLRQHV GH HILFLHQFLD HQHUJpWLFD GH ORV HGLILFLRV GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 5HDO'HFUHWRGHGHIHEUHURSRUHOTXHVHHVWDEOHFHQORVUHTXLVLWRVPtQLPRVGHORV FHQWURV TXH LPSDUWDQ ODV HQVHxDQ]DV GHO VHJXQGR FLFOR GH OD HGXFDFLyQ LQIDQWLO OD HGXFDFLyQ SULPDULD \ OD HGXFDFLyQ VHFXQGDULD 'HFUHWR GH &DQWDEULD GH GH HQHUR VREUH UHTXLVLWRV PtQLPRV TXH GHEHQ FXPSOLU ORV FHQWURV TXH LPSDUWDQ HO SULPHU FLFOR GH HGXFDFLyQ LQIDQWLO5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHHVWDEOHFHODRUGHQDFLyQJHQHUDOGH ODIRUPDFLyQSURIHVLRQDOGHOVLVWHPDHGXFDWLYR 7(0$ /RV FRQWUDWRV GHO 6HFWRU 3~EOLFR 5HDO 'HFUHWR /HJLVODWLYR GH GH QRYLHPEUH SRU HO TXHVHDSUXHEDHOWH[WRUHIXQGLGRGHOD/H\GH&RQWUDWRVGHO6HFWRU3~EOLFR 7(0$ (O FRQWUDWR GH REUDV 3OLHJRV GH 3UHVFULSFLRQHV 7pFQLFDV 5HTXLVLWRV GH DSWLWXG SDUD FRQWUDWDU FDSDFLGDGVROYHQFLD\FODVLILFDFLyQGHORVFRQWUDWLVWDV 7(0$ (O SUR\HFWR 6XSHUYLVLyQ )RUPDOL]DFLyQ 1RUPDV WpFQLFDV \ SOLHJR GH FRQGLFLRQHV WpFQLFDV \ DSUREDFLyQWpFQLFD(ODERUDFLyQDSUREDFLyQ\UHSODQWHRGHOSUR\HFWR/DHMHFXFLyQGHOFRQWUDWR 7(0$ /DVFHUWLILFDFLRQHVGHREUD5HYLVLyQGHSUHFLRV/DPRGLILFDFLyQGHOFRQWUDWR/DUHVROXFLyQ 7(0$ (O FRQWUDWR GH VHUYLFLRV /D LQVSHFFLyQ GHO FRQWUDWR 'H ODV HVSHFLDOLGDGHV GHO FRQWUDWR GH HODERUDFLyQGHSUR\HFWRV 7(0$ 'H ORV FRQWUDWRV GH FRQFHVLyQ GH VHUYLFLRV S~EOLFRV \ VXPLQLVWURV $VSHFWRV HVHQFLDOHV GH OD OHJLVODFLyQGHHVWRVFRQWUDWRV 7(0$ 9LYLHQGD DQWHFHGHQWHV GH OD LQWHUYHQFLyQ S~EOLFD HQ OD YLYLHQGD 9LYLHQGDV SURWHJLGDV /RV SODQHVGHYLYLHQGD 7(0$ 5HJXODFLyQ HVWDWDO GH ODV YLYLHQGDV SURWHJLGDV 5HDO 'HFUHWR/H\ GH GH RFWXEUH VREUHSROtWLFDGHYLYLHQGDVGHSURWHFFLyQ2ILFLDO5HDO'HFUHWRGHGHQRYLHPEUH SRU HO TXH VH GHVDUUROOD HO 5HDO 'HFUHWR/H\ GH GH RFWXEUH VREUH SROtWLFD GH YLYLHQGD 7(0$ /H\ GH GH GLFLHPEUH GH 9LYLHQGD 3URWHJLGD GH &DQWDEULD (VSHFLDO UHIHUHQFLD DO UpJLPHQOHJDOGHODVYLYLHQGDVGHSURWHFFLyQRILFLDO,QIUDFFLRQHV\VXVDQFLyQ boc.cantabria.es CVE-2019-3750 7(0$ 30/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 'HFUHWRGH&DQWDEULDGHGHDJRVWRSRUHOTXHVHUHJXODQODVFRQGLFLRQHVPtQLPDV GH KDELWDELOLGDG TXH GHEHQ UHXQLU ODV YLYLHQGDV HQ HO iPELWR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD DVt FRPR OD FRQFHVLyQ \ FRQWURO GH ODV FpGXODV GH KDELWDELOLGDG /HJLVODFLyQ \ WUDPLWDFLyQGHODFpGXODGHKDELWDELOLGDG&RQGLFLRQHVPtQLPDVGHKLJLHQHHQODVYLYLHQGDV /D 2UGHQ 2%5 GH GH DEULO SRU OD TXH VH DSUXHEDQ ODV RUGHQDQ]DV JHQHUDOHV GH GLVHxR\FDOLGDGSDUDODVYLYLHQGDVSURWHJLGDVGH&DQWDEULD 7(0$ (O,QIRUPHGH(YDOXDFLyQGHO(GLILFLR'HFUHWRGHGHHQHURSRUHOTXHVHUHJXODQODV FRQGLFLRQHV\VHFUHDHO5HJLVWURGHORV,QIRUPHVGH(YDOXDFLyQGHO(GLILFLR CVE-2019-3750 7(0$ i Pág. 12538 boc.cantabria.es 31/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 %,2/2*Ë$ 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ (O0HGLR1DWXUDOGH&DQWDEULD*HRJUDItDItVLFD*HRORJtD(GDIRORJtD&OLPDWRORJtD 7(0$ %LRJHRJUDItDGH&DQWDEULD8QLGDGHVDPELHQWDOHV3ULQFLSDOHVHFRVLVWHPDVGLVWULEXFLyQ\ FDUDFWHUtVWLFDVSULQFLSDOHV 7(0$ /D 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV 3ULQFLSDOHV FDUDFWHUtVWLFDV'HVFULSFLyQ3UREOHPiWLFDGHFRQVHUYDFLyQ 7(0$ /D 5HG 1DWXUD HQ &DQWDEULD $QWHFHGHQWHV 2EMHWLYRV 9DORUHV GH FRQVHUYDFLyQ 'HVFULSFLyQ\FDUDFWHUtVWLFDV&RQGLFLRQDQWHVGHVXJHVWLyQ 7(0$ =RQDV GH (VSHFLDO 3URWHFFLyQ SDUD ODV $YHV HQ &DQWDEULD 'HVFULSFLyQ \ FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ =RQDV (VSHFLDOHV GH &RQVHUYDFLyQ )OXYLDOHV GH &DQWDEULD 'HVFULSFLyQ \ FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ =RQDV (VSHFLDOHV GH &RQVHUYDFLyQ /LWRUDOHV GH &DQWDEULD 'HVFULSFLyQ \ FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ =RQDV(VSHFLDOHVGH&RQVHUYDFLyQGH0RQWDxDGH&DQWDEULD'HVFULSFLyQ\FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ 3DUTXH1DFLRQDOGHORV3LFRVGH(XURSD$QWHFHGHQWHV'HVFULSFLyQ9DORUHVTXHPRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRV GH SODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ 3DUTXH 1DWXUDO 6DMD%HVD\D $QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRV GH SODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ 3DUTXH 1DWXUDO GH 2\DPEUH $QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRV GH SODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ 3DUTXH 1DWXUDO GH ODV 'XQDV GH /LHQFUHV (VWXDULR GHO 3DV \ &RVWD 4XHEUDGD $QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV\FRQGLFLRQDQWHVGHJHVWLyQ,QVWUXPHQWRVGHSODQHDPLHQWRRUGHQDFLyQ\ JHVWLyQHQYLJRU 7(0$ 3DUTXH1DWXUDOGHODV0DULVPDVGH6DQWRxD9LFWRULD\-R\HO$QWHFHGHQWHV'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ,QVWUXPHQWRVGHSODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU i Pág. 12539 boc.cantabria.es CVE-2019-3750 32/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 3DUTXH1DWXUDOGHORV&ROODGRVGHO$VyQ$QWHFHGHQWHV'HVFULSFLyQ9DORUHVTXHPRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRV GH SODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ ÈUHDV1DWXUDOHVGH(VSHFLDO,QWHUpV\0RQXPHQWRV1DWXUDOHVGH&DQWDEULD$QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHVGHJHVWLyQ,QVWUXPHQWRVGHSODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ *HVWLyQ GH (VSHFLHV 3URWHJLGDV HQ &DQWDEULD 'LIHUHQWHV FDWHJRUtDV GH SURWHFFLyQ GH HVSHFLHV\HIHFWRVMXUtGLFRV&RQGLFLRQDQWHVGHJHVWLyQ 7(0$ (VSHFLHV GH IORUD DPHQD]DGD GH &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV 'LVWULEXFLyQ 2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (VSHFLHV GH IDXQD DPHQD]DGD GH &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV 'LVWULEXFLyQ 2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ /DV HVSHFLHV H[yWLFDV LQYDVRUDV 'HILQLFLyQ H LPSRUWDQFLD 3ODQ (VWUDWpJLFR 5HJLRQDO GH *HVWLyQ\&RQWUROGH(VSHFLHV([yWLFDV,QYDVRUDV 7(0$ 3ULQFLSDOHVHVSHFLHVGHIORUDH[yWLFDLQYDVRUDHQ&DQWDEULD&DUDFWHUtVWLFDVHFROyJLFDV\ GLVWULEXFLyQHQ&DQWDEULD9tDVGHHQWUDGDSUREOHPiWLFDDPELHQWDOJHVWLyQ\PpWRGRVGH FRQWURO 7(0$ 3ULQFLSDOHVHVSHFLHVGHIDXQDH[yWLFDLQYDVRUDHQ&DQWDEULD&DUDFWHUtVWLFDVHFROyJLFDV\ GLVWULEXFLyQHQ&DQWDEULD9tDVGHHQWUDGDSUREOHPiWLFDDPELHQWDOJHVWLyQ\PpWRGRVGH FRQWURO 7(0$ (ORVRSDUGRHQ&DQWDEULD%LRORJtD\HFRORJtD'LVWULEXFLyQ\HVWDGRGHFRQVHUYDFLyQGH VXVSREODFLRQHV3UREOHPiWLFDGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (OXURJDOORHQ&DQWDEULD%LRORJtD\HFRORJtD'LVWULEXFLyQ\HVWDGRGHFRQVHUYDFLyQGHVXV SREODFLRQHV3UREOHPiWLFDGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (O ORER HQ &DQWDEULD %LRORJtD \ HFRORJtD 'LVWULEXFLyQ \ HVWDGR GH FRQVHUYDFLyQ GH VXV SREODFLRQHV3UREOHPiWLFDGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (OVDOPyQDWOiQWLFRHQ&DQWDEULD%LRORJtD\HFRORJtD'LVWULEXFLyQ\HVWDGRGHFRQVHUYDFLyQ GHVXVSREODFLRQHV3UREOHPiWLFDGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ /DFD]DHQ&DQWDEULD2UGHQDFLyQ\3ODQLILFDFLyQ&LQHJpWLFD3ULQFLSDOHVHVSHFLHVGHFD]D HQ&DQWDEULD3UREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQ 7(0$ /DSHVFDIOXYLDOHQ&DQWDEULD2UGHQDFLyQ\SODQLILFDFLyQ(VSHFLHVREMHWRGHSHVFDPiV LPSRUWDQWHV3UREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQ 7(0$ (OXVRS~EOLFRHQOD5HGGH(VSDFLRV1DWXUDOHV3URWHJLGRVGH&DQWDEULD2EMHWLYRV\JHVWLyQ 0RWLYDFLyQ\WLSRORJtDGHYLVLWDQWHV&ULWHULRVGHFDOLGDGGHODYLVLWDDORVHVSDFLRVQDWXUDOHV SURWHJLGRV 7(0$ /DFRQVHUYDFLyQH[VLWXGHODGLYHUVLGDGELROyJLFD&HQWURVGH5HFXSHUDFLyQGH(VSHFLHV &UtDHQFDXWLYLGDG%DQFRVGHJHUPRSODVPD 7(0$ /RVGDxRVSURGXFLGRVSRUODIDXQDVLOYHVWUHHQ&DQWDEULD(VSHFLHVFDXVDQWHV\WLSRVGH GDxRVSURGXFLGRV,QVWUXPHQWRV\KHUUDPLHQWDVGHSUHYHQFLyQ\FRPSHQVDFLyQ CVE-2019-3750 7(0$ i Pág. 12540 boc.cantabria.es 33/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,, 7(0$ /D IORWD SHVTXHUD GH &DQWDEULD 0RGDOLGDGHV GH SHVFD $UWHV \ DSDUHMRV GH SHVFD 1RUPDWLYDGHJHVWLyQ 7(0$ /D SHVFD PDUtWLPD SURIHVLRQDO HQ &DQWDEULD 1RUPDWLYD UHJXODGRUD /LPLWDFLRQHV HQ VX HMHUFLFLR5pJLPHQVDQFLRQDGRU 7(0$ /D SHVFD PDUtWLPD GH UHFUHR HQ &DQWDEULD 1RUPDWLYD UHJXODGRUD /LPLWDFLRQHV HQ VX HMHUFLFLR5pJLPHQVDQFLRQDGRU 7(0$ =RQDV GH SURGXFFLyQ PDULVTXHUD HQ &DQWDEULD 1RUPDWLYD UHJXODGRUD \ FODVLILFDFLyQ *HVWLyQGHODV]RQDVGHSURGXFFLyQHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /DVIORUDFLRQHVDOJDOHVQRFLYDV1RUPDWLYDUHJXODGRUD3ULQFLSDOHVHVSHFLHVSURGXFWRUDVGH WR[LQDV HQ &DQWDEULD *HVWLyQ GH ORV HSLVRGLRV Wy[LFRV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ (OSULQFLSLRGHSUHFDXFLyQDSOLFDGRDODJHVWLyQGHUHFXUVRVSHVTXHURV\PDULVTXHURV 7(0$ ÈUHDVPDULQDVSURWHJLGDV2EMHWLYRV\GHILQLFLyQ&ULWHULRVGHDFWXDFLyQ\JHVWLyQ 7(0$ (O PDULVTXHR HQ &DQWDEULD HVSHFLHV DUWHV DSDUHMRV \ ~WLOHV LPSRUWDQFLD HFRQyPLFD 5HJXODFLyQPDULVTXHUDHQ&DQWDEULD 7(0$ (VSHFLHVGHLQWHUpVPDULVTXHURHQ&DQWDEULDHOHUL]R'LVWULEXFLyQELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVPDULVTXHURHQ&DQWDEULDODDOPHMD'LVWULEXFLyQELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVPDULVTXHURHQ&DQWDEULDHOSHUFHEH'LVWULEXFLyQELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVPDULVTXHURHQ&DQWDEULDODRVWUD'LVWULEXFLyQELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVPDULVTXHURHQ&DQWDEULDODQDYDMD'LVWULEXFLyQELRORJtD\JHVWLyQ 7(0$ (VSHFLHV GH LQWHUpV PDULVTXHUR HQ &DQWDEULD UHFXUVRV FRPSOHPHQWDULRV DO PDULVTXHR 'LVWULEXFLyQELRORJtD\JHVWLyQ 7(0$ (O PDULVTXHR D IORWH HQ &DQWDEULD 5HJXODFLyQ 3ULQFLSDOHV HVSHFLHV $XWRUL]DFLRQHV &RPHUFLDOL]DFLyQGHOPDULVTXHRDIORWH 7(0$ (OFXOWLYRGHPROXVFRVHQ&DQWDEULD5HJXODFLyQKLVWRULD\SULQFLSDOHVHVSHFLHVFXOWLYDGDV 7(0$ /DV SHVTXHUtDV HQ &DQWDEULD (VSHFLHV GH LPSRUWDQFLD HFRQyPLFD FULWHULRV SDUD VX RUGHQDFLyQ\FRPHUFLDOL]DFLyQGHORVSURGXFWRV 7(0$ (VSHFLHVGHLQWHUpVSHVTXHURODVDUGLQD'HVDUUROORGHODSHVTXHUtDELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVSHVTXHURODFDEDOOD'HVDUUROORGHODSHVTXHUtDELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVSHVTXHURODPHUOX]DVXU\FLJDOD'HVDUUROORGHODSHVTXHUtDELRORJtD\ JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVSHVTXHURHOFKLFKDUUR'HVDUUROORGHODSHVTXHUtDELRORJtD\JHVWLyQ 7(0$ (VSHFLHVGHLQWHUpVSHVTXHURHOERFDUWH'HVDUUROORGHODSHVTXHUtDELRORJtD\JHVWLyQ 7(0$ (O SODQ GH JHVWLyQ GH OD DQJXLOD HQ &DQWDEULD 5HJXODFLyQ GH OD SHVFD GH OD DQJXOD HQ &DQWDEULD i Pág. 12541 boc.cantabria.es CVE-2019-3750 34/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /DDFXLFXOWXUDHQ&DQWDEULD(VSHFLHVFXOWLYDGDV=RQDVGHLQWHUpVSDUDODDFXLFXOWXUD 7(0$ /DUHFRJLGDGHDUULED]yQHQ&DQWDEULD3ULQFLSDOHVHVSHFLHVH[SORWDGDV5pJLPHQMXUtGLFR 5pJLPHQVDQFLRQDGRU 7(0$ $UUDQTXH GH DOJDV HQ &DQWDEULD 3ULQFLSDOHV HVSHFLHV H[SORWDGDV 5pJLPHQ MXUtGLFR 5pJLPHQVDQFLRQDGRU 7(0$ (QWLGDGHV DVRFLDWLYDV SURIHVLRQDOHV GHO VHFWRU &RIUDGtDV GH 3HVFDGRUHV )HGHUDFLyQ GH &RIUDGtDV2UJDQL]DFLRQHVGHSURGXFWRUHV\FRRSHUDWLYDVPDULVTXHUDV 7(0$ (O)RQGR(XURSHR0DUtWLPR\GHOD3HVFD )(03 6XDSOLFDFLyQHQOD&RPXQLGDGDXWyQRPD GH&DQWDEULD 7(0$ &RPHUFLDOL]DFLyQ GH ORV SURGXFWRV GH OD SHVFD HQ &DQWDEULD 1RUPDWLYD \ FRQWURO 7UD]DELOLGDG 7(0$ /D LQGXVWULD GH OD WUDQVIRUPDFLyQ \ FRPHUFLDOL]DFLyQ GH ORV SURGXFWRV GH OD SHVFD HQ &DQWDEULD,PSRUWDQFLDHFRQyPLFD %/248(,,, 7(0$ /D/H\GH&DQWDEULDGHGHPD\RGH&RQVHUYDFLyQGHOD1DWXUDOH]D 7(0$ /D/H\GHGHGLFLHPEUHGHO3DWULPRQLR1DWXUDO\GHOD%LRGLYHUVLGDG 7(0$ /HJLVODFLyQVREUHHVSHFLHVDPHQD]DGDV(O/LVWDGRGH(VSHFLHV6LOYHVWUHVHQ5pJLPHQGH 3URWHFFLyQ (VSHFLDO \ GHO &DWiORJR (VSDxRO GH (VSHFLHV $PHQD]DGDV 5HDO 'HFUHWR GH GH IHEUHUR (O &DWiORJR 5HJLRQDO GH (VSHFLHV $PHQD]DGDV 'HFUHWR GHGHGLFLHPEUH 7(0$ &RQYHQLR GH5DPVDU 3ULQFLSDOHVFDUDFWHUtVWLFDV \ HYROXFLyQ GHO&RQYHQLR $SOLFDFLyQ HQ (VSDxD\HQ&DQWDEULD3ODQ(VWUDWpJLFR(VSDxROSDUDOD&RQVHUYDFLyQ\HO8VRUDFLRQDOGH ORV+XPHGDOHV 7(0$ /DV'LUHFWLYDV(XURSHDV+iELWDWV&((\$YHV&( 7(0$ (O5HJODPHQWRGHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHRFWXEUHGH VREUH OD SUHYHQFLyQ \ OD JHVWLyQ GH OD LQWURGXFFLyQ \ SURSDJDFLyQ GH HVSHFLHV H[yWLFDV LQYDVRUDV(O&DWiORJR(VSDxROGH(VSHFLHV([yWLFDV,QYDVRUDV 7(0$ /D/H\GH&DQWDEULDGHGHMXOLRGH&D]D 7(0$ /D/H\GH&DQWDEULDGHGHDEULOGH3HVFDHQ$JXDV&RQWLQHQWDOHV 7(0$ /D/H\GHGHQRYLHPEUHGH0RQWHV 7(0$ /D/H\GHGHGLFLHPEUHGH3DUTXHV1DFLRQDOHV(O3ODQ'LUHFWRUGHOD5HGGH 3DUTXHV1DFLRQDOHV 5HDO'HFUHWRGHGHRFWXEUH 7(0$ /H\GHGHPDU]RGH3HVFD0DUtWLPDGHO(VWDGR$QWHSUR\HFWRGH/H\GH3HVFD 0DUtWLPD0DULVTXHR\$FXLFXOWXUDGH&DQWDEULD 7(0$ ,QIUDFFLRQHV\VDQFLRQHVHQPDWHULDGHSHVFDPDUtWLPD5pJLPHQVDQFLRQDGRUHQPDWHULD GHSHVFDPDUtWLPDHQDJXDVH[WHULRUHV i Pág. 12542 boc.cantabria.es CVE-2019-3750 35/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7tWXORV SURIHVLRQDOHV GH SHVFD $WULEXFLRQHV (VSHFLDO UHIHUHQFLD DO 3DWUyQ &RVWHUR 3ROLYDOHQWH\HO3DWUyQ/RFDOGH3HVFD([SHGLFLyQUHYDOLGDFLyQUHQRYDFLyQ\UHJLVWURGH WtWXORVSURIHVLRQDOHV 7(0$ 7tWXORV SURIHVLRQDOHV GH OD PDULQD PHUFDQWH (VSHFLDO UHIHUHQFLD DO 3DWUyQ 3RUWXDULR 0DULQHUR GH PiTXLQDV \ 0DULQHUR GH SXHQWH 3DWUyQ SURIHVLRQDO GH HPEDUFDFLRQHV GH UHFUHR $WULEXFLRQHV GHO 3DWUyQ FRVWHUR SROLYDOHQWH \ HO 3DWUyQ ORFDO GH SHVFD HQ HPEDUFDFLRQHVPHUFDQWHV 7(0$ 7LWXODFLRQHV QiXWLFDV SDUD HO JRELHUQR GH ODV HPEDUFDFLRQHV GH UHFUHR /RV 7tWXORV \ OD /LFHQFLDGHUHFUHR$WULEXFLRQHV3UiFWLFDV\FXUVRVGHIRUPDFLyQ&XUVRGHIRUPDFLyQGH UDGLRRSHUDGRU/DVDFWLYLGDGHVGHIRUPDFLyQ 7(0$ $FWLYLGDGHV VXEDFXiWLFDV 1RUPDWLYD UHJXODGRUD 5pJLPHQ VDQFLRQDGRU 3UR\HFWRV QRUPDWLYRVHQHVWXGLR 7(0$ /D3ROtWLFD3HVTXHUD&RP~Q 7(0$ 2UGHQDFLyQ GHO VHFWRU SHVTXHUR /D UHQRYDFLyQ GH OD IORWD SHVTXHUD 0RGHUQL]DFLRQHV D ERUGR GH ORV EXTXHV SHVTXHURV \ VHOHFWLYLGDG &HQVR GH OD )ORWD 3HVTXHUD 2SHUDWLYD 3DUDOL]DFLyQ GHILQLWLYD \ OD SDUDOL]DFLyQ WHPSRUDO GH ODV DFWLYLGDGHV SHVTXHUDV /D SHVFD FRVWHUDDUWHVDQDO(VWDEOHFLPLHQWR\FDPELRGHSXHUWREDVHGHORVEXTXHVSHVTXHURV 7(0$ 3ULPHUDYHQWDGHORVSURGXFWRVSHVTXHURV0RGDOLGDGHV5HTXLVLWRVGHORVFRQFHVLRQDULRV 1RWD GH YHQWD 'RFXPHQWR GH WUD]DELOLGDG 'HFODUDFLyQ GH UHFRJLGD 'RFXPHQWR GH WUDQVSRUWH'RFXPHQWDFLyQQHFHVDULDSDUDHOWUDQVSRUWHGHSURGXFWRVSHVTXHURV 7(0$ /DVHVWUDWHJLDVPDULQDV0DUFRGHDFFLyQFRPXQLWDULDSDUDODSROtWLFDGHOPHGLRPDULQR/H\ GHGHGLFLHPEUHGHSURWHFFLyQGHOPHGLRPDULQR 7(0$ /H\GHGHMXOLRGH6HJXULGDG$OLPHQWDULD\1XWULFLyQ\OD/H\GHGH RFWXEUH*HQHUDOGH6DOXG3~EOLFD$XWRULGDG(XURSHDGH6HJXULGDG$OLPHQWDULD$(6$1 7(0$ 3ULQFLSLRV\UHTXLVLWRVJHQHUDOHVGHODOHJLVODFLyQDOLPHQWDULD 7(0$ &RQWURO RILFLDO GH DOLPHQWRV 2UJDQL]DFLyQ GH ORV FRQWUROHV RILFLDOHV 5HTXLVLWRV GH ODV DXWRULGDGHVFRPSHWHQWHV3ODQQDFLRQDOGHFRQWURORILFLDOGHODFDGHQDDOLPHQWDULD3ODQGH VHJXULGDGDOLPHQWDULDGH&DQWDEULD1RUPDWLYDDSOLFDEOH 7(0$ /DERUDWRULRVGH&RQWURORILFLDO)XQFLRQHV'HVLJQDFLyQGHORVODERUDWRULRVGHFRQWURORILFLDO /DERUDWRULRVGHUHIHUHQFLDQDFLRQDOHV\HXURSHRVDFWLYLGDGHV\IXQFLRQHV 7(0$ 6LVWHPDV GH FRQWURO GH OD FDOLGDG HQ ORV ODERUDWRULRV 3DSHO GH (1$& (YDOXDFLyQ GH OD FRQIRUPLGDG\DFUHGLWDFLyQ1RUPD81((1,62 7(0$ $QiOLVLV PLFURELROyJLFR HQ OD FDGHQD DOLPHQWDULD 0pWRGRV JHQHUDOHV 0pWRGRV RILFLDOHV UHFRQRFLGRV 5HJODPHQWR 2WURV PpWRGRV GH HQVD\R SDUD FRQWURO GH DJHQWHV SDWyJHQRVHQDOLPHQWRV&RQWUROHVGHFDOLGDG 7(0$ $QiOLVLVLQVWUXPHQWDOHV3ULQFLSDOHVDSOLFDFLRQHVGHODFDGHQDDOLPHQWDULD 7(0$ 3URFHGLPLHQWRVGHHQVD\RGHDOLPHQWRV&RQFHSWRVJHQHUDOHVGHYDOLGDFLyQGHPpWRGRV $VHJXUDPLHQWR GH OD FDOLGDG GH ORV HQVD\RV 'LVHxR GH YDOLGDFLyQ \ UHJLVWURV REWHQLGRV ,QFHUWLGXPEUH i Pág. 12543 boc.cantabria.es CVE-2019-3750 36/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 &$3,7È1'(/$0$5,1$0(5&$17( 0$7(5,$6(63(&Ë),&$6 %/248(,/(*,6/$&,Ï1 i Pág. 12544 7(0$ &RQYHQLR GH )RUPDFLyQ 7LWXODFLyQ \ *XDUGLD SDUD OD JHQWH GH PDU 67&: $UWLFXODGR\(QPLHQGDVGH0DQLODGHDODQH[RGHO&RQYHQLR67&:'LVSRVLFLRQHV JHQHUDOHV (O FDSLWiQ \ OD VHFFLyQ GH SXHQWH 6HFFLyQ GH PiTXLQDV 6HUYLFLR GH UDGLRFRPXQLFDFLRQHV \ UDGLRRSHUDGRUHV 5HTXLVLWRV HVSHFLDOHV GH IRUPDFLyQ SDUD HO SHUVRQDO GH GHWHUPLQDGRV WLSRV GH EXTXHV )XQFLRQHV GH HPHUJHQFLD VHJXULGDG HQ HO WUDEDMRSURWHFFLyQDWHQFLyQPpGLFD\VXSHUYLYHQFLD7LWXODFLyQDOWHUQDWLYD\*XDUGLDV 7(0$ &RQYHQLR,QWHUQDFLRQDOVREUH1RUPDVGH)RUPDFLyQ7LWXODFLyQ\*XDUGLDSDUDHOSHUVRQDO GHORVEXTXHVSHVTXHURV 67&:) 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHUHJXODQODVWLWXODFLRQHVSURIHVLRQDOHV GH OD PDULQD PHUFDQWH 'LVSRVLFLRQHV *HQHUDOHV 7tWXORV SURIHVLRQDOHV GH OD PDULQD PHUFDQWH 3DWUyQ 3RUWXDULR 2SHUDGRU *HQHUDO GHO 6LVWHPD 0XQGLDO GH 6RFRUUR \ 6HJXULGDG0DUtWLPD2SHUDGRU5HVWULQJLGRGHO6LVWHPD0XQGLDOGH6RFRUUR\6HJXULGDG 0DUtWLPD5HTXLVLWRVGHIRUPDFLyQ 7(0$ 2UGHQ)20GHGHVHSWLHPEUHGHUHJXODFLyQGHSURJUDPDVGHIRUPDFLyQGH WtWXORVSURIHVLRQDOHV\FHUWLILFDGRVGHHVSHFLDOLGDGFRPSOHWDH[FHSWRDUWtFXORDUWLFXOR DQH[R,DQH[R,\DQH[R,±5HVROXFLyQGHGHMXQLRGHGHOD'*00SRUOD TXHVHPRGLILFDOD2UGHQ)205HVROXFLyQGHGHVHSWLHPEUHGHGH '*00VREUHFXUVRVGHUHYDOLGDFLyQFRQIRUPHD67&:±5HVROXFLyQGHGHIHEUHURGH GH'*00VREUHODUHYDOLGDFLyQGHFHUWLILFDGRVGHVXILFLHQFLDGHOFRQYHQLR67&: 7(0$ 2UGHQ)20GHGHVHSWLHPEUHGHUHJXODFLyQGHSURJUDPDVGHIRUPDFLyQGH WtWXORVSURIHVLRQDOHV\FHUWLILFDGRVGHHVSHFLDOLGDGDUWtFXORV\\DQH[R,,\,± 5HVROXFLyQGHGHQRYLHPEUHGHGHOD'LUHFFLyQ*HQHUDOGHOD0DULQD0HUFDQWH SRUODTXHVHGHWHUPLQDQODVFRQGLFLRQHVGHREWHQFLyQGHORVFHUWLILFDGRVGHVXILFLHQFLDGH ORVPDULQHURVGHOD0DULQD0HUFDQWH 7(0$ 5HDO'HFUHWRGHGHHQHURSRUHOTXHVHUHJXODQORVWtWXORVSURIHVLRQDOHVGHO VHFWRUSHVTXHUR±2UGHQ$30GHGHPDU]RGHGHVDUUROORGHO5HDO'HFUHWR 7(0$ 2UJDQLVPRV 3~EOLFRV PDUtWLPRV $GPLQLVWUDFLyQ 0DUtWLPD ± 6RFLHGDG (VWDWDO GH 6DOYDPHQWR\6HJXULGDG0DUtWLPD±2UJDQL]DFLyQ0DUtWLPD,QWHUQDFLRQDO±RUJDQL]DFLyQ ,QWHUQDFLRQDOGHO7UDEDMR±8QLyQ,QWHUQDFLRQDOGH7HOHFRPXQLFDFLRQHV±$JHQFLD(XURSHD GH6HJXULGDG0DUtWLPD 7(0$ 1DYHJDFLyQGHUHFUHR\GHSRUWLYD5HDO'HFUHWRGHGHRFWXEUHSRUHOTXHVH UHJXODQ ODV WLWXODFLRQHV QiXWLFDV SDUD HO JRELHUQR GH ODV HPEDUFDFLRQHV GH UHFUHR 'LVSRVLFLRQHV JHQHUDOHV 7LWXODFLRQHV GH UHFUHR 3URFHGLPLHQWR \ SUXHEDV SDUD OD REWHQFLyQGHORVWtWXORV boc.cantabria.es CVE-2019-3750 37/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ i Pág. 12545 7(0$ 7H[WR5HIXQGLGRGHOD/H\GH3XHUWRVGHO(VWDGR\GHOD0DULQD0HUFDQWH 75/3(00 DSUREDGR SRU 5HDO 'HFUHWR /HJLVODWLYR GH GH VHSWLHPEUH 'LVSRVLFLRQHV JHQHUDOHV 7tWXORSUHOLPLQDU 2EMHWRGHODOH\3XHUWRV\0DULQD0HUFDQWH0DULQD0HUFDQWH ±([SORWDFLyQQDYLHUD\UpJLPHQGHODVQDYHJDFLRQHV /LEURVHJXQGR %XTXHV\HPSUHVDV QDYLHUDV 5pJLPHQ GH SROLFtD /LEUR WHUFHUR 5HJODPHQWR GH H[SORWDFLyQ \ SROLFtD GH SXHUWRVGHO(VWDGR)XQFLRQHVGHSROLFtDHVSHFLDO\0HGLGDVTXHJDUDQWL]DQODDFWLYLGDG SRUWXDULD\ODQDYHJDFLyQ 7(0$ /RVHVSDFLRVPDUtWLPRVHQHO'HUHFKRGHO0DU(VSDFLRVPDUtWLPRVGH6XSHUILFLH$JXDV LQWHULRUHV0DU7HUULWRULDO$OWD0DU 7(0$ /H\ GH GH MXOLR GH 1DYHJDFLyQ 0DUtWLPD /10 'LVSRVLFLRQHV JHQHUDOHV 7tWXOR SUHOLPLQDU 2UGHQDFLyQ DGPLQLVWUDWLYD GH OD QDYHJDFLyQ 7tWXOR , ÈPELWR GH DSOLFDFLyQGHODVQRUPDVGHSROLFtD5pJLPHQGHHVWDQFLDHQDJXDVLQWHULRUHVPDUtWLPDV\ HQSXHUWR5pJLPHQJHQHUDOGHQDYHJDFLyQPDUtWLPD'HUHFKRGHSDVRLQRFHQWHSRUHOPDU WHUULWRULDO'HUHFKRGHSHUVHFXFLyQ\GHYLVLWD\%XTXHVGH(VWDGRH[WUDQMHURV9HKtFXORV GHODQDYHJDFLyQ 7tWXOR,, %XTXHVHPEDUFDFLRQHV\DUWHIDFWRVQDYDOHV'RFXPHQWDFLyQ GHORVEXTXHVQDFLRQDOHV\6HJXULGDGGHORVEXTXHV\GHODVVRFLHGDGHVGHFODVLILFDFLyQ 6XMHWRVGHODQDYHJDFLyQ 7tWXOR,,, $UPDGRU&RQGRPLQLRQDYDO\'RWDFLyQ 7(0$ /H\GHGHMXOLRGH1DYHJDFLyQ0DUtWLPD&RQWUDWRVGHXWLOL]DFLyQGHOEXTXH 7tWXOR ,9 &RQWUDWR GH DUUHQGDPLHQWR GH EXTXH &RQWUDWR GH IOHWDPHQWR &RQWUDWR GH SDVDMH&RQWUDWRGHUHPROTXH\&RQWUDWRGHDUUHQGDPLHQWRQiXWLFR&RQWUDWRVDX[LOLDUHV GH OD QDYHJDFLyQ 7tWXOR 9 &RQWUDWR GH JHVWLyQ QDYDO &RQWUDWR GH FRQVLJQDFLyQ GH EXTXHV&RQWUDWRGHSUDFWLFDMH\&RQWUDWRGHPDQLSXODFLyQSRUWXDULD 7(0$ /H\GHGHMXOLRGH1DYHJDFLyQ0DUtWLPD$FFLGHQWHVGHODQDYHJDFLyQ 7tWXOR 9, $ERUGDMH $YHUtD JUXHVD 6DOYDPHQWR %LHQHV QDXIUDJDGRV R KXQGLGRV \ 5HVSRQVDELOLGDG FLYLO SRU FRQWDPLQDFLyQ /LPLWDFLyQ GH OD UHVSRQVDELOLGDG 7tWXOR 9,, 'LVSRVLFLRQHVJHQHUDOHVFUpGLWRVOLPLWDEOHVVXPDVPi[LPDVGHLQGHPQL]DFLyQ\IRQGRGH OLPLWDFLyQ &RQWUDWR GH VHJXUR PDUtWLPR 7tWXOR 9,,, 'LVSRVLFLRQHV JHQHUDOHV GLVSRVLFLRQHVFRPXQHVDORVGLVWLQWRVWLSRVGHVHJXURPDUtWLPR\GLVSRVLFLRQHVHVSHFLDOHV GHDOJXQDVFODVHVGHVHJXURV 7(0$ /H\ GH GH PDU]RGH 3HVFD 0DUtWLPDGHO (VWDGR 7tWXOR SUHOLPLQDU 2EMHWR \ ILQHVGHOD/H\7tWXOR,'HODSHVFDPDUtWLPDHQDJXDVH[WHULRUHV&DStWXOR,ÈPELWRGH DSOLFDFLyQ&DStWXOR,,,0HGLGDVGHSURWHFFLyQ\UHJHQHUDFLyQGHORVUHFXUVRVSHVTXHURV 5HVHUYDV PDULQDV ]RQDV GH DFRQGLFLRQDPLHQWR PDULQR ]RQDV GH UHSREODFLyQ PDULQD &DStWXOR,9*HVWLyQGHODVDFWLYLGDGHVSHVTXHUDV6HFFLRQHVD&DStWXOR9,&RQWURO HLQVSHFFLyQGHODDFWLYLGDGGHSHVFDPDUtWLPD 7(0$ /H\GHGHPDU]RGH3HVFD0DUtWLPDGHO(VWDGR7tWXOR,,2UGHQDFLyQGHOVHFWRU SHVTXHUR&DStWXOR,3ULQFLSLRVJHQHUDOHV&DStWXOR,,/RVDJHQWHVGHOVHFWRUSHVTXHUR 6HFFLRQHVD&DStWXOR,,,'HODIORWDSHVTXHUD$UWtFXOR5HJLVWURJHQHUDOGHOD IORWDSHVTXHUD&DStWXOR,9(VWDEOHFLPLHQWRGHSXHUWRVEDVH\FDPELRVGHEDVH 7(0$ /H\ GH GH PDU]R GH 3HVFD 0DUtWLPD GHO (VWDGR 7tWXOR 9 ,QIUDFFLRQHV \ VDQFLRQHV &DStWXOR , 2EMHWR \ SULQFLSLRV JHQHUDOHV &DStWXOR ,, 'H ODV LQIUDFFLRQHV DGPLQLVWUDWLYDVHQPDWHULDGHSHVFDPDUtWLPDHQDJXDVH[WHULRUHV&DStWXOR,,,,QIUDFFLRQHV HQ PDWHULD GH RUGHQDFLyQ GHO VHFWRU SHVTXHUR \ GH OD FRPHUFLDOL]DFLyQ GH SURGXFWRV SHVTXHURV&DStWXOR,9'HODVVDQFLRQHVDUWtFXORV\ 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGHPHGLGDVILVFDOHV\DGPLQLVWUDWLYDV7tWXOR ,,0HGLGDVDGPLQLVWUDWLYDV&DStWXOR,,QIUDFFLRQHV\VDQFLRQHVHQPDWHULDGHSHVFD 7(0$ 2UGHQGHGHMXQLRGHSRUODTXHVHUHJXODODSHVFDPDUtWLPDSURIHVLRQDOGHQWUR GHDJXDVLQWHULRUHV boc.cantabria.es CVE-2019-3750 38/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 2UGHQGHGHRFWXEUHGHSRUODTXHVHDSUXHEDQODVQRUPDVGHVHJXULGDGSDUDHO HMHUFLFLRGHODVDFWLYLGDGHVVXEDFXiWLFDV&DStWXOR,'LVSRVLFLRQHVJHQHUDOHV$UWtFXORV \&DStWXOR,,%XFHRSURIHVLRQDO$UWtFXORV\ %/248(,,7(&12/2*Ë$0$5,1$<1$9$/ 7(0$ /H\GHGHQRYLHPEUHGHSUHYHQFLyQGH5LHVJRV/DERUDOHV&DStWXOR,2EMHWR iPELWR GH DSOLFDFLyQ \ GHILQLFLRQHV $UWtFXORV \ &DStWXOR ,, 3ROtWLFD HQ PDWHULD GH SUHYHQFLyQGHULHVJRVSDUDSURWHJHUODVHJXULGDG\ODVDOXGHQHOWUDEDMR$UWtFXORV\ &DStWXOR,,,'HUHFKRV\REOLJDFLRQHV$UWtFXORV\&DStWXOR,9 6HUYLFLRVGHSUHYHQFLyQ$UWtFXORELV3UHVHQFLDGHORVUHFXUVRVSUHYHQWLYRV 7(0$ 5HDO'HFUHWRGHGHPD\RVREUHGLVSRVLFLRQHVPtQLPDVGHVHJXULGDG\VDOXG UHODWLYDVDODXWLOL]DFLyQSRUORVWUDEDMDGRUHVGHHTXLSRVGHSURWHFFLyQLQGLYLGXDO$UWtFXORV D(QUHODFLyQDORVDQH[RV,\,,GHOSUHVHQWH5HDO'HFUHWRTXpHTXLSRVGHSURWHFFLyQ LQGLYLGXDO\HQTXpVLWXDFLRQHVUHODFLRQDGDVFRQODVDFWLYLGDGHVSURSLDVGHOVHFWRUPDUtWLPR HQ JHQHUDO HQ WUDEDMRV SRUWXDULRV \ HQ OD UHSDUDFLyQ \ FRQVWUXFFLyQ GH EXTXHV VRQ QHFHVDULRVHTXLSRVGHSURWHFFLyQLQGLYLGXDO 7(0$ 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHHVWDEOHFHQODVGLVSRVLFLRQHVPtQLPDV GH VHJXULGDG \ VDOXG SDUD OD XWLOL]DFLyQ SRU ORV WUDEDMDGRUHV GH ORV HTXLSRV GH WUDEDMR $UWtFXORVD$QH[R,'LVSRVLFLRQHVPtQLPDVDSOLFDEOHVDORVHTXLSRVGHWUDEDMR$QH[R ,,'LVSRVLFLRQHVUHODWLYDVDODXWLOL]DFLyQGHORVHTXLSRVGHWUDEDMR 7(0$ 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHHVWDEOHFHQODVGLVSRVLFLRQHVPtQLPDV GHVHJXULGDG\VDOXGHQHOWUDEDMRDERUGRGHORVEXTXHVGHSHVFD 7(0$ 5LHVJRV SURIHVLRQDOHV 'DxRV GHULYDGRV GHO WUDEDMR &RQFHSWR GH SHOLJUR \ ULHVJR $FFLGHQWHVGHWUDEDMR±,QYHVWLJDFLyQGHDFFLGHQWHVFRPRWpFQLFDSUHYHQWLYD$QiOLVLV\ HYDOXDFLyQJHQHUDOGHOULHVJRGHDFFLGHQWHV(QIHUPHGDGSURIHVLRQDO\RWUDVSDWRORJtDV GHULYDGDVGHOWUDEDMR±3UHYHQFLyQ\SURWHFFLyQ±7LSRVGHWpFQLFDVGHSUHYHQFLyQ 7(0$ 1RUPDV GH VHxDOL]DFLyQ HQ VHJXULGDG 3URWHFFLyQ FROHFWLYD H LQGLYLGXDO ± 3ODQHV GH HPHUJHQFLD\DXWRSURWHFFLyQ(TXLSRVGHSULPHUDLQWHUYHQFLyQ 7(0$ (VIHUDWHUUHVWUH3ULQFLSDOHVHOHPHQWRVFRRUGHQDGDV'HILQLFLyQGHHMHVSRORVHFXDGRU PHULGLDQRV SDUDOHORV WUySLFRV FtUFXORV SRODUHV 0HULGLDQR FHUR \ PHULGLDQR GHO OXJDU /DWLWXG \ ORQJLWXG 0DJQHWLVPR /D $JXMD 0DJQpWLFD OD FRUUHFFLyQ WRWDO \ IRUPDV GH FDOFXODUODGHFOLQDFLyQPDJQpWLFDHOGHVYtR 7(0$ 1DYHJDFLyQ FRVWHUD )RUPDV GH FRQWDU ORV UXPERV WLSRV GH UXPER FODVHV GH UXPER DEDWLPLHQWRGHULYDPDUFDFLyQGHPRUD)RUPDVGHREWHQHUXQDSRVLFLyQWRPDQGRFRPR UHIHUHQFLD OD FRVWD /R[RGUyPLFD /D OR[RGUyPLFD HQ OD FDUWD PHUFDWRULDQD 'DGD XQD VLWXDFLyQGHVDOLGD\XQDGHOOHJDGDFiOFXORGHOUXPER\GLVWDQFLDRUWRGUyPLFRV&iOFXOR GHXQDVLWXDFLyQGHOOHJDGDSDUWLHQGRGHXQDVLWXDFLyQGHVDOLGD\XQUXPER\GLVWDQFLD &DOFXORDQDOtWLFRGHODHVWLPD&DVRVSDUWLFXODUHV 7(0$ 1DYHJDFLyQ FRQ 5DGDU 4Xp HV \ SDUD TXp VLUYH )XQFLRQHV EiVLFDV GHO 5DGDU HQ QDYHJDFLyQ 'HILQLFLyQ GH 5DGDU 8QLGDGHV ItVLFDV TXH FRPSRQHQ HO UDGDU $MXVWHV QHFHVDULRV SDUD XQD ySWLPD YLVXDOL]DFLyQ PRGRV GH SUHVHQWDFLyQ GH OD SDQWDOOD /LPLWDFLRQHVGHO5DGDU i Pág. 12546 boc.cantabria.es CVE-2019-3750 39/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ i Pág. 12547 7(0$ $,64XpHV\SDUDTXpVLUYH,QIRUPDFLyQTXHSURSRUFLRQD7LSRV2EOLJDWRULHGDGYHQWDMDV H LQFRQYHQLHQWHV FRQ UHVSHFWR DO 5DGDU &RUUHGHUD HYROXFLyQ \ WLSRV 3ULQFLSLRV GH IXQFLRQDPLHQWR GH ORV SULQFLSDOHV WLSRV GH FRUUHGHUD 1RUPDV GH IXQFLRQDPLHQWR LQVWDODFLyQ D ERUGR &RHILFLHQWH GH FRUUHGHUD (FRVRQGDV \ 6RQDUHV (YROXFLyQ \ WLSRV 3ULQFLSLRV GH IXQGDPHQWR PDQGRV \ FRQWUROHV QRUPDV GH IXQFLRQDPLHQWR $MXVWHV \ HUURUHV 7(0$ 6LVWHPDVGHQDYHJDFLyQSRUVDWpOLWH*36\'*36IXQGDPHQWRVGHVFULSFLyQUHFHSWRUHV SUHFLVLyQHUURUHV6LVWHPD*DOLOHR6LVWHPD*ORQDVV 7(0$ 0DUHDV7HRUtDGHODVPDUHDV&ODVLILFDFLyQGHODVPDUHDV&LFORVGHODVPDUHDV'DWXP $QRPDOtDV&iOFXORVGHPDUHDV$QXDULRGHPDUHDV,QIOXHQFLDGHODSUHVLyQDWPRVIpULFD &RUULHQWHVGHPDUHD 7(0$ 6WDQGDUG0DULQH1DYLJDWLRQDO9RFDEXODU\&DUDFWHUtVWLFDVEiVLFDVGHODVFRPXQLFDFLRQHV PDUtWLPDVHQLQJOpV3URFHGLPLHQWRGHGHOHWUHR OHWUDV\Q~PHURV 0HVVDJHPDUNHUVLQ FRPPXQLFDWLRQ 7(0$ 6WDQGDUG0DULQH1DYLJDWLRQDO9RFDEXODU\3DODEUDVLQGLFDGRUDV GHVRFRUURXUJHQFLD\ VHJXULGDG 5HSHWLFLyQ IRUPD GH GHFLU UXPERV SRVLFLRQHV GLVWDQFLDV YHORFLGDG KRUDV 8VRGHWpUPLQRVDPELJXRV 7(0$ 6WDQGDUG 0DULQH 1DYLJDWLRQDO 9RFDEXODU\ 3RVLFLyQ UHODWLYD D ERUGR 'LPHQVLRQHV SULQFLSDOHVGHOEXTXH3DUWHVGHOEXTXHPiVLPSRUWDQWHVRUGHQHVDOWLPyQyUGHQHVDOD PiTXLQDGLPHQVLRQHVSULQFLSDOHVGHOEXTXHFDERVXVDGRVHQHODPDUUH 7(0$ 6WDQGDUG0DULQH1DYLJDWLRQDO9RFDEXODU\7pUPLQRVXVDGRVHQPHWHRURORJtDPDUHDV 7(0$ 0HWHRURORJtD 'HILQLFLyQ 9DULDEOHV PHWHRUROyJLFDV SULQFLSDOHV 8QLGDGHV HPSOHDGDV HQ PHWHRURORJtD ,QVWUXPHQWRV GH PHGLGD 2EVHUYDFLyQ H LQWHUSUHWDFLyQ GHO EDUyPHWUR \ WHUPyPHWURLQWHUSUHWDFLyQGHODVSHFWRGHOFLHORSDUDHOSURQyVWLFRIRUPDFLyQ\WLSRVGH QXEHV 7(0$ 3UHVLyQ DWPRVIpULFD 3UHVLyQ QRUPDO %RUUDVFDV \ DQWLFLFORQHV IUHQWHV IRUPDFLyQ GHO YLHQWR FLUFXODFLyQ JHQHUDO GHO YLHQWR HQ HO +HPLVIHULR QRUWH YLHQWR UHDO \ DSDUHQWH WpUPLQRVUHODFLRQDGRVFRQHOYLHQWREULVDVFRVWHUDVHVFDODXVDGDSDUDGHILQLUODLQWHQVLGDG GHOYLHQWR\ODPDU5HODFLyQHQWUHLQWHQVLGDGGHOYLHQWR\HVWDGRGHODPDU 7(0$ 2FHDQRJUDItD3URSLHGDGHVGHODJXDGHPDU&RUULHQWHV&LUFXODFLyQRFHiQLFD2ODV7LSRV GHRODVIRUPDFLyQGHRODV\WHRUtDGH2ODV 7(0$ 7UD]DGR GH OD OtQHD GH HMHV 6X LQVWDODFLyQ %RFLQDV 3URSXOVRUHV HQ EXTXHVGH SHVFD 7LPRQHVHQEXTXHVGHSHVFD 7(0$ &RPEXVWLEOHV&RPEXVWLyQHOHPHQWRVFRPEXVWLEOHV\FRPEXUHQWHV3URSLHGDGHVGHORV FRPEXVWLEOHV&RQVXPRHVSHFtILFR3RGHUFDORUtILFR9LVFRVLGDG0RWRUHVGHGRVWLHPSRV \ FXDWUR WLHPSRV ,QVWDODFLyQ \ DOLQHDFLyQ GH ORV PRWRUHV D ERUGR 0RQWDMH GHO PRWRU 1LYHODFLyQGHODEDQFDGD6XSOHPHQWRVDVLHQWREDQFDGD 7(0$ 6LVWHPD+LGUiXOLFRHQHOEXTXHGHSHVFD(TXLSRVTXHORFRPSRQHQ&LUFXLWRVKDELWXDOHV (TXLSRVGHOEXTXHDOLPHQWDGRVSRUHVWHVLVWHPD 7(0$ 6LVWHPD(OpFWULFRHQHOEXTXHGHSHVFD(TXLSRVTXHORFRPSRQHQ&LUFXLWRVKDELWXDOHV (TXLSRVGHOEXTXHDOLPHQWDGRVSRUHVWHVLVWHPD%DODQFHHOpFWULFR)XHQWHVGHHQHUJtD SULQFLSDOHV\HPHUJHQFLD 7(0$ 6LVWHPDGHDJXDVDODGDGHOEXTXHGHSHVFD5HIULJHUDFLyQGHPRWRUHVSRUDJXDVDODGD $FKLTXH\FRQWUDLQFHQGLRVHQHOEXTXHGHSHVFD(TXLSRVTXHORVFRPSRQHQ&LUFXLWRV KDELWXDOHV boc.cantabria.es CVE-2019-3750 40/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ i Pág. 12548 7(0$ 6LVWHPDGHYHQWLODFLyQ\HVFDSHHQHOEXTXHGHSHVFD6LVWHPDGHFRPEXVWLEOH(TXLSRV TXHORFRPSRQHQ&LUFXLWRVKDELWXDOHV 7(0$ 6LVWHPD GH UHIULJHUDFLyQ GH ODV ERGHJDV \ WDQTXHV GH SHVFD 'HVFULSFLyQ GH IXQFLRQDPLHQWR(TXLSRVTXHORFRPSRQHQ&LUFXLWRVKDELWXDOHV9LYHURVGHSHVFD 7(0$ 0DQWHQLPLHQWRV GHO PRWRU GHO EXTXH 0DQWHQLPLHQWR GH ORV VHUYLFLRV GHO EXTXH 0DQWHQLPLHQWRGHODHVWUXFWXUDGHOEXTXH3ODQGHPDQWHQLPLHQWRVDERUGR3ODQLILFDFLyQ \SUHFDXFLRQHVHQORVWUDEDMRVDUHDOL]DUHQODPDU3ODQLILFDFLyQGHYDUDGDVHQVHFR\ UHQRYDFLyQGHFHUWLILFDGRV 7(0$ &RQVWUXFFLyQQDYDOHQEXTXHVGHSHVFD\SRUWXDULRV0DGHUD3ROLpVWHUUHIRU]DGRFRQILEUD GHYLGULRDFHURDOXPLQLR9HQWDMDVHLQFRQYHQLHQWHVGHFDGDXQRGHHOORV&RQVWUXFFLyQ\ PDQWHQLPLHQWRGHFDGDXQRGHHOORV 7(0$ 7LSRORJtD GHO EXTXH SHVTXHUR &DUDFWHUtVWLFDV GH OD GLVSRVLFLyQ JHQHUDO GHO EXTXH GH SHVFDVHJ~QHOWLSRGHSHVFDDUHDOL]DU(TXLSRV\VHUYLFLRVTXHLQVWDODVHJ~QHOWLSRGH SHVFD 7LSRORJtD GHO EXTXH SRUWXDULR &DUDFWHUtVWLFDV GH OD GLVSRVLFLyQ JHQHUDO \ GH ORV HTXLSRV\VHUYLFLRVVHJ~QHOWLSR 7(0$ $UTXHR GH EXTXHV GH SHVFD $UTXHR 75% $UTXHR 751 &RQYHQLR GH /RQGUHV GHO DxR $UTXHR *7 $UTXHR 17 5HJODPHQWR 8( $SOLFDFLyQ GHO DUTXHR HQ HO EXTXHGHSHVFD\SRUWXDULR 7(0$ (VWDELOLGDG&yGLJRLQWHUQDFLRQDOGHHVWDELOLGDGVLQDYHUtD &yGLJR,6 DGRSWDGRSRU 5HVROXFLyQ 06& GH OD 20, ,QWURGXFFLyQ &ULWHULRV REOLJDWRULRV 3DUWH $ &XHVWLRQHVJHQHUDOHV&ULWHULRVJHQHUDOHV\&ULWHULRVHVSHFLDOHVSDUDGHWHUPLQDGRVWLSRV GH EXTXHV 5HFRPHQGDFLRQHV DSOLFDEOHV D GHWHUPLQDGRV WLSRV GH EXTXHV \ RWUDV GLUHFWULFHV 3DUWH % &XHVWLRQHV JHQHUDOHV &ULWHULRV UHFRPHQGDGRV GH SUR\HFWR SDUD GHWHUPLQDGRV WLSRV GH EXTXHV 2ULHQWDFLRQHV SDUD HODERUDU OD LQIRUPDFLyQ VREUH HVWDELOLGDG&iOFXORVGHHVWDELOLGDGHIHFWXDGRVSRUORVLQVWUXPHQWRVGHHVWDELOLGDG 7(0$ (VWDELOLGDGGHOEXTXHGHSHVFD\SRUWXDULR3ULQFLSDOHVFDUDFWHUtVWLFDVGHHVWDELOLGDGGH HVWH WLSR GH EXTXHV (VWDELOLGDG GH HVWH WLSR GH EXTXHV GXUDQWH VXV QDYHJDFLRQHV \ PDQLREUDV 7(0$ (VWDELOLGDGHQDYHUtDV0HGLRVGHDFWXDFLyQDQWHYtDVGHDJXD(VWDELOLGDGHQYDUDGDV\ SXHVWDVDIORWH 7(0$ (VWDELOLGDG7UDQVYHUVDO(VWDELOLGDG/RQJLWXGLQDO3ODQRGHIRUPDV7DEODVKLGURVWiWLFDV\ SDQWRFDUHQDV 0pWRGRV VLPSOLILFDGRV GH FiOFXORV GH HVWDELOLGDG DSOLFDGRV D EXTXHV GH SHTXHxRSRUWH/LEURGHHVWDELOLGDG 7(0$ 'LQiPLFD\PDQLREUDGHOEXTXH&DXVDVGHORVHIHFWRVHYROXWLYRVGHOEXTXH$QiOLVLVVREUH OD DFFLyQ GHO WLPyQ SUHVLyQ ODWHUDO GH ODV SDODV FRUULHQWH GH H[SXOVLyQ \ FRUULHQWH GH DVSLUDFLyQ(IHFWRVHYROXWLYRVFRPELQDGRVGHWLPyQ\KpOLFH 7(0$ 'LQiPLFD\PDQLREUDGHOEXTXH,QHUFLDVGHOEXTXH&XUYDVGHHYROXFLyQ&RPSRUWDPLHQWR GHOEXTXHHQDJXDVVRPHUDV\SURIXQGDV&RPSRUWDPLHQWRGHOEXTXHHQWUHRODV 7(0$ 7HFQRORJtDSHVTXHUD3RWHQFLDGHDUUDVWUHGHORVEXTXHV(OHPHQWRVEiVLFRVHQHODUWHGH DUUDVWUH3URFHGHUGHORVFDEOHVGHDUUDVWUH'HFOLQDFLyQ\GLYHUJHQFLD/RQJLWXGGHFDEOH D ODUJDU 'LiPHWUR GH ORV FDEOHV GH DUUDVWUH 5HVLVWHQFLD GH ORV FDEOHV GH DUUDVWUH ± 5LHVJRVODERUDOHVGHHVWHRILFLRGHSHVFD 7(0$ 0pWRGRV GH FRQVHUYDFLyQ GHO SHVFDGR &RQJHODFLyQ 7HPSHUDWXUDV \ WLHPSRV GH FRQJHODFLyQ 'HVKLGUDWDFLyQ 'HVHFDFLyQ 6DOD]yQ $KXPDGR (VWHULOL]DFLyQ &RQVHUYDV6XESURGXFWRV boc.cantabria.es CVE-2019-3750 41/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7HFQRORJtD SHVTXHUD $UWHV \ DSDUHMRV $Q]XHOR $SDUHMRV GH DQ]XHOR ± &XUULFiQ ± 3DODQJUH 7LSRV GH SDODQJUH ± (OHPHQWRV GHO SDODQJUH 0DTXLQLOODV GH SDODQJUH ± 0DQLREUDGHSDODQJUH±5LHVJRVODERUDOHVGHHVWHRILFLRGHSHVFD 7(0$ 7HFQRORJtDSHVTXHUD$UWHV\DSDUHMRV1DVDV±7LSRVGHQDVDV±0DQLREUDGHODUJDGRGH QDVDV±$OPDGUDEDV±(OHPHQWRV\PDQLREUDGHODDOPDGUDED±5LHVJRVODERUDOHVGHHVWH RILFLRGHSHVFD 7(0$ 7HFQRORJtDSHVTXHUD$UWHV\DSDUHMRV5HGHV±0DWHULDOHV\FDUDFWHUtVWLFDVGHODVUHGHV ±5HSDUDFLRQHVGHUHGHV±$UWHVGHUHGHVGHHQPDOOHFDODGDVDGLIHUHQWHVDOWXUDV 7(0$ 7HFQRORJtDSHVTXHUD$UWHVGHFHUFR\VXVHOHPHQWRV&DUDFWHUtVWLFDVGHODUWHGHFHUFR± &HUFR FRQ MDUHWD 0DQLREUDV GHO DUWH GH FHUFR ± &HUFR FRQ ERWH DX[LOLDU ± 5LHVJRV ODERUDOHVGHHVWHRILFLRGHSHVFD %/248(,,,6(*85,'$'&217$0,1$&,Ï1<&2081,&$&,21(6 7(0$ 5HDFFLyQ DO IXHJR GH ORV PDWHULDOHV &ODVLILFDFLyQ &DUJD GH IXHJR 3RGHU FDORUtILFR GH DOJXQRVPDWHULDOHV,QFRPEXVWLELOLGDGGHPDWHULDOHVDERUGR3URSLHGDGHVGHODUHVLVWHQFLD DOIXHJR6LVWHPDVJHQHUDOHVGHH[WLQFLyQ3URWHFFLyQGHOSHUVRQDO 7(0$ /XFKD FRQWUDLQFHQGLRV &RQVWUXFFLyQ 3UHYHQFLyQ GHWHFFLyQ \ H[WLQFLyQ GH LQFHQGLRV &DStWXOR,,GHO62/$6(YDFXDFLyQ6LVWHPDVSRUWiWLOHVGHH[WLQFLyQ 7(0$ /XFKDFRQWUDLQFHQGLRV6LVWHPDVILMRVGHH[WLQFLyQGHLQFHQGLRVSRUDJXDSRUDVSHUVLyQ GHDJXDDSUHVLyQ\SRUQHEXOL]DFLyQSRUJDVHVGHH[WLQFLyQ6LVWHPDVDXWRPiWLFRVGH URFLDGRUHV%RPEDVILMDVFRQWUDLQFHQGLRVGHHPHUJHQFLD&yGLJR66&, 7(0$ &RQVWUXFFLyQ (VWUXFWXUD FRPSDUWLPHQWDGR \ HVWDELOLGDG LQVWDODFLRQHV GH PiTXLQDV H LQVWDODFLRQHVHOpFWULFDV &DStWXOR,,62/$6 *HQHUDOLGDGHV(VWUXFWXUDGHORVEXTXHV &RPSDUWLPHQWDGR \ HVWDELOLGDG LQWHJULGDG GH HVWDQTXLGDG H LQWHJULGDG D OD LQWHPSHULH $VLJQDFLyQ GH ODV OtQHDV GH FDUJD GH FRPSDUWLPHQWDGR SDUD ORV EXTXHV GH SDVDMH \ *HVWLyQGHODHVWDELOLGDG 7(0$ 6HJXULGDG PDUtWLPD &yGLJR LQWHUQDFLRQDO GH GLVSRVLWLYRV GH VDOYDPHQWR &yGLJR ,'6 DGRSWDGR SRU 5HVROXFLyQ 06& GH OD 20, 'LVSRVLFLRQHV JHQHUDOHV 'LVSRVLWLYRV LQGLYLGXDOHVGHVDOYDPHQWR6HxDOHVYLVXDOHV 7(0$ 6HJXULGDG PDUtWLPD &yGLJR LQWHUQDFLRQDO GH GLVSRVLWLYRV GH VDOYDPHQWR &yGLJR ,'6 DGRSWDGRSRU5HVROXFLyQ06& GHOD20,(PEDUFDFLRQHVGHVXSHUYLYHQFLD%RWHV GHUHVFDWH'LVSRVLWLYRVGHSXHVWDDIORWH\GHHPEDUFR 7(0$ )RUPDFLyQ D ERUGR HQ VHJXULGDG *HVWLyQ GH OD VHJXULGDG RSHUDFLRQDO GH ORV EXTXHV &DStWXOR ,; 62/$6 5HJODV &yGLJRLQWHUQDFLRQDO GH JHVWLyQ GH OD VHJXULGDG &yGLJR ,*6 DSUREDGR SRU OD 5HVROXFLyQ $ GH OD 20, ,PSODQWDFLyQ 3DUWH $ &HUWLILFDFLyQ\YHULILFDFLyQ 3DUWH% \$SpQGLFH CVE-2019-3750 i Pág. 12549 boc.cantabria.es 42/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ &RQYHQLRLQWHUQDFLRQDOGH7RUUHPROLQRVSDUDODVHJXULGDGGHORVEXTXHVSHVTXHURV 6)9 PRGLILFDGR SRU HO 3URWRFROR GH 7RUUHPROLQRV GH UHODWLYR DO &RQYHQLR 6)9 $UWLFXODGRV\5HJODVSDUDODFRQVWUXFFLyQ\HOHTXLSRGHORVEXTXHVSHVTXHURV $QH[R 'LVSRVLFLRQHVJHQHUDOHV&RQVWUXFFLyQLQWHJULGDGGHHVWDQTXLGDG\HTXLSR(VWDELOLGDG\ QDYHJDELOLGDG ,QVWDODFLRQHV GH PiTXLQDV H LQVWDODFLRQHV HOpFWULFDV \ HVSDFLRV GH PiTXLQDV VLQ GRWDFLyQ SHUPDQHQWH 3UHYHQFLyQ GHWHFFLyQ \ H[WLQFLyQ GH LQFHQGLRV \ HTXLSR FRQWUD LQFHQGLRV 3URWHFFLyQ GH OD WULSXODFLyQ 'LVSRVLWLYRV GH VDOYDPHQWR &RQVLJQDV SDUD FDVRV GH HPHUJHQFLD OODPDGDV \ HMHUFLFLRV SHULyGLFRV 5DGLRFRPXQLFDFLRQHV $SDUDWRV \ PHGLRV QiXWLFRV GH D ERUGR \ $SpQGLFH $FXHUGR GH &LXGDG GHO &DER GH VREUH OD LPSODQWDFLyQ GH ODV GLVSRVLFLRQHV GHO 3URWRFROR GH 7RUUHPROLQRVGHUHODWLYRDO&RQYHQLRLQWHUQDFLRQDOGH7RUUHPROLQRVSDUDODVHJXULGDG GHORVEXTXHVSHVTXHURV 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHGHWHUPLQDQODVQRUPDVGHVHJXULGDG DFXPSOLUSRUORVEXTXHVSHVTXHURVGHHVORUDLJXDORVXSHULRUDPHWURV5HDO'HFUHWR GH GH DEULO SRU HO TXH VH GHWHUPLQDQ ODV QRUPDV GH VHJXULGDG \ GH SUHYHQFLyQGHODFRQWDPLQDFLyQDFXPSOLUSRUORVEXTXHVSHVTXHURVPHQRUHVGHPHWURV GHHVORUD / 'LVSRVLFLRQHVJHQHUDOHV1RUPDVWpFQLFDVPDUFRGHVHJXULGDG\SUHYHQFLyQ GH OD FRQWDPLQDFLyQ ,QVSHFFLRQHV UHFRQRFLPLHQWRV FHUWLILFDFLRQHV \ UpJLPHQ VDQFLRQDGRU\$QH[RV 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHGHFODUDQGHDSOLFDFLyQDWRGRVORV EXTXHV\HPEDUFDFLRQHVPHUFDQWHVQDFLRQDOHVORVSUHFHSWRVGHO&RQYHQLR,QWHUQDFLRQDO SDUDOD6HJXULGDGGHOD9LGD+XPDQDHQHO0DU\VXSURWRFRORGH$SOLFDFLyQ DORVEXTXHVGHDJXDVDEULJDGDV\SRUWXDULRVGHOD2UGHQGHGHMXQLRGHVREUH QRUPDVFRPSOHPHQWDULDVGHDSOLFDFLyQDO&RQYHQLR,QWHUQDFLRQDOSDUDOD6HJXULGDGGHOD 9LGD +XPDQD HQ HO 0DU \ VX 3URWRFROR GH D ORV EXTXHV \ HPEDUFDFLRQHV PHUFDQWHVQDFLRQDOHV 7(0$ 0$532/ &RQYHQLR ,QWHUQDFLRQDO SDUD SUHYHQLU OD FRQWDPLQDFLyQ SRU ORV EXTXHV 0$532/ $UWLFXODGR 3URWRFROR GH TXH HQPLHQGD HO &RQYHQLR 0$532/ $QH[R,*HQHUDOLGDGHV5HFRQRFLPLHQWRV\FHUWLILFDFLyQ3UHVFULSFLRQHVDSOLFDEOHVDORV HVSDFLRV GH PiTXLQDV GH WRGRV ORV EXTXHV &RQVWUXFFLyQ (TXLSR \ &RQWURO GH ODV GHVFDUJDVRSHUDFLRQDOHVGHKLGURFDUEXURV 7(0$ 0$532/5HJODVSDUDSUHYHQLUODFRQWDPLQDFLyQSRUODVEDVXUDVGHORVEXTXHV $QH[R9 0$532/ *HQHUDOLGDGHV\$SpQGLFH'LUHFWULFHVGHSDUDODLPSODQWDFLyQGHODQH[R 9 GHO &RQYHQLR 0$532/ DSUREDGDV SRU 5HVROXFLyQ 0(3& GH OD 20, ,QWURGXFFLyQ *HVWLyQ GH EDVXUDV *HVWLyQ GH UHVLGXRV GH FDUJDV VyOLGDV D JUDQHO )RUPDFLyQLQVWUXFFLyQHLQIRUPDFLyQ,QVWDODFLRQHVSRUWXDULDVGHUHFHSFLyQGHEDVXUDV\ 0HMRUDGHOFXPSOLPLHQWRGHODQH[R9GHOFRQYHQLR0$532/7H[WR5HIXQGLGRGHOD/H\ GH 3XHUWRV GHO (VWDGR \ GH OD 0DULQD0HUFDQWH DSUREDGRSRU5HDO 'HFUHWR/HJLVODWLYR GH GH VHSWLHPEUH 6HUYLFLR GH UHFHSFLyQGH GHVHFKRV JHQHUDGRV SRU EXTXHV $UWtFXORV \ 5HDO 'HFUHWR GH GH GLFLHPEUH VREUH LQVWDODFLRQHV SRUWXDULDVGHUHFHSFLyQGHGHVHFKRVJHQHUDGRVSRUORVEXTXHV\UHVLGXRVGHFDUJD2UGHQ )20 GH GH PD\R UHODWLYD D OD QRWLILFDFLyQ \ HQWUHJD GH GHVHFKRV JHQHUDGRVSRUORVEXTXHV 7(0$ 0$532/5HJODVSDUDSUHYHQLUODFRQWDPLQDFLyQDWPRVIpULFDRFDVLRQDGDSRUORVEXTXHV $QH[R9,0$532/ *HQHUDOLGDGHV5HFRQRFLPLHQWRFHUWLILFDFLyQ\PHGLRVGHFRQWURO 3UHVFULSFLRQHVSDUDHOFRQWUROGHODVHPLVLRQHVGHORVEXTXHVUHJODVVREUHODHILFLHQFLD HQHUJpWLFDGHORVEXTXHV\DSpQGLFHV i Pág. 12550 boc.cantabria.es CVE-2019-3750 43/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ i Pág. 12551 7(0$ 6HJXULGDG PDUtWLPD \ SURWHFFLyQ GHO EXTXH 0DQWHQLPLHQWR \ VXSHUYLVLyQ HQ OD LPSODQWDFLyQGHXQSODQGHSURWHFFLyQGHOEXTXH3ODQGHSURWHFFLyQGHOEXTXHSURSyVLWR HOHPHQWRVHVWUXFWXUDSURFHGLPLHQWRVFRQH[RV\PDQWHQLPLHQWRGHUHJLVWURVLQFOXLGRVORV UHODFLRQDGRVFRQODSLUDWHUtD\ORVURERVDPDQRDUPDGD3URFHGLPLHQWRVSDUDLPSODQWDUHO SODQGHSURWHFFLyQ\QRWLILFDFLyQGHVXFHVRVTXHDIHFWHQDODSURWHFFLyQ&RQRFLPLHQWRGH ORV QLYHOHV GH SURWHFFLyQ PDUtWLPD PHGLGDV GH SURWHFFLyQ FRUUHVSRQGLHQWHV \ SURFHGLPLHQWRVDSOLFDEOHVDERUGR\HQHOHQWRUQRGHLQVWDODFLRQHVSRUWXDULDV 7(0$ 6HJXULGDG PDUtWLPD \ SURWHFFLyQ GHO EXTXH (YDOXDFLyQ GH ORV ULHVJRV DPHQD]DV \ OD YXOQHUDELOLGDGGHOEXTXH(YDOXDFLyQGHULHVJRVLQVWUXPHQWRVGHHYDOXDFLyQ\GRFXPHQWRV SDUDHYDOXDUODSURWHFFLyQLQFOXLGDOD'HFODUDFLyQGH3URWHFFLyQ 7(0$ 6HJXULGDG PDUtWLPD \ SURWHFFLyQ GHO EXTXH ,QVSHFFLRQHV SHULyGLFDV GHO EXTXH SDUD DVHJXUDUVHGHTXHVHDSOLFDQ\PDQWLHQHQODVPHGLGDVDGRSWDGDV3URWHFFLyQ\YLJLODQFLD (MHUFLFLRV\SUiFWLFDVSUHVFULWRVHQORVFRQYHQLRVFyGLJRV\FLUFXODUHVSHUWLQHQWHVGHOD 20,HQSDUWLFXODUORVUHODFLRQDGRVFRQODSLUDWHUtD\ORVURERVDPDQRDUPDGD 7(0$ %~VTXHGD\VDOYDPHQWR0DQXDOHV20,GHE~VTXHGD\VDOYDPHQWR$VSHFWRRUJDQL]DWLYR *OREDO GH XQ 6$5 3ODQLILFDFLyQ GH XQ VHUYLFLR 6$5 6HOHFFLyQ GH ORV PHGLRV TXH FRPSRQJDQODVXQLGDGHV6$5&RPXQLFDFLRQHV6$5)RUPDWRQRUPDOL]DGRGHQRWLILFDFLyQ GHFRQWLQJHQFLDV 6,75(3 0pWRGRVGHE~VTXHGD 7(0$ +RPEUHDODJXD$FFLRQHVLQPHGLDWDV$FFLRQHVUHODFLRQDGDVFRQODPDQLREUD$FFLRQHV D FDGD WLSR GH VLWXDFLyQ ,QPHGLDWD GLIHULGD SHUVRQD GHVDSDUHFLGD 2SHUDFLRQHV +HOLFySWHUR%XTXH 3UHSDUDFLyQ GHO EXTXH 6HxDOHV EXTXHKHOLFySWHUR 7UDQVERUGR GH SHUVRQDVGHVGHXQEXTXHDOKHOLFySWHUR2SHUDFLRQHVGHDWHUUL]DMH\VXVSHQVLyQ&DUJDV VXVSHQGLGDV 7(0$ 6LVWHPD0XQGLDOGH6RFRUUR\6HJXULGDG0DUtWLPD*HQHUDOLGDGHV]RQDVIXQFLRQHVGHO 60660 PHGLRV \ GLVSRVLWLYRV XVDGRV HQ HO 60660 HO VLVWHPD GH OODPDGD GLJLWDO FRQFHSWREiVLFR\IXQFLRQDPLHQWR HOQ~PHURGHLGHQWLILFDFLyQGHOVHUYLFLRPyYLOPDUtWLPR SURFHGLPLHQWRVRSHUDFLRQDOHVDOHUWDVGHVRFRUURDFXVHGHUHFLERWUDQVPLVLyQGHDOHUWD GHVRFRUURGHRWUREXTXH 7(0$ 6LVWHPD0XQGLDOGH6RFRUUR\6HJXULGDG0DUtWLPD7LSRVGHFRPXQLFDFLRQHVHQHOVHUYLFLR PyYLO PDUtWLPR &RUUHVSRQGHQFLD S~EOLFD 7LSRV GH HVWDFLRQHV HQ HO VHUYLFLR PyYLO PDUtWLPR &RQRFLPLHQWRV HOHPHQWDOHV GH IUHFXHQFLDV \ EDQGDV GH IUHFXHQFLDV &DUDFWHUtVWLFDVGHODVIUHFXHQFLDV'LIHUHQWHVPHFDQLVPRVGHSURSDJDFLyQ3DUWHVGHOD FRPXQLFDFLyQSRUUDGLRSURFHGLPLHQWRVRSHUDFLRQDOHVGHPDQHMRGH9+)+)0)\/6' SURFHGLPLHQWRVRSHUDFLRQDOHVSDUDODVFRPXQLFDFLRQHVGHVRFRUURXUJHQFLD\VHJXULGDG 7(0$ &RPXQLFDFLRQHV SRU VDWpOLWH (O VLVWHPD ,QPDUVDW FRQFHSWR JHQHUDO ,QPDUVDW & HO VLVWHPD GH OODPDGD LQWHQVLILFDGD D JUXSRV /,* HO 6KLS 6HFXULW\ $OHUW 6\VWHP 66$6 SURFHGLPLHQWRV RSHUDFLRQDOHV SDUD FRPXQLFDFLRQHV D WUDYpV GH ,QPDUVDW (O VHUYLFLR PXQGLDO GH UDGLRDYLVRV QiXWLFRV 1$9$5($6 \ 0(7$5($6 HO VLVWHPD 1$97(; SURFHGLPLHQWRVRSHUDFLRQDOHVGH1$97(; 7(0$ (O6LVWHPD&263$6±6$56$7&RQFHSWRJHQHUDO\FRQILJXUDFLyQVDWpOLWHVHVWDFLRQHV \ UDGLREDOL]DV )XQFLRQDPLHQWR PDQWHQLPLHQWR DFWLYDFLyQ \ FRPSRQHQWHV GH OD UDGLREDOL]D 5HVSRQGHGRUHV GH 5DGDU 6$57 5HVSRQGHGRUHV $,66$57 HTXLSRV SRUWiWLOHVGH9+)9+)HQEDQGDDpUHD 7(0$ 6LVWHPD0XQGLDOGH6RFRUUR\6HJXULGDG0DUtWLPD3DUWHVSULQFLSDOHVGHOVLVWHPDDERUGR \GHVXVHTXLSRVIDOORVPiVFRPXQHVGHORVHTXLSRVPDWHULDO\PDQWHQLPLHQWRWLSRVGH DQWHQDV GH FRPXQLFDFLRQHV GH ORV EXTXHV IXHQWHV GH HQHUJtD GH ORV HTXLSRV GH UDGLRFRPXQLFDFLyQEDWHUtDVSDUDHTXLSRVGHUDGLR boc.cantabria.es CVE-2019-3750 44/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 &,(1&,$6$0%,(17$/(6 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ 1RUPDWLYD \ SULQFLSLRV JHQHUDOHV GH JHVWLyQ GHO 0HGLR $PELHQWH HQ OD 8QLyQ (XURSHD 'LVWULEXFLyQ GH FRPSHWHQFLDV 3URJUDPDV GH $FFLyQ &RPXQLWDULRV HQ PDWHULD GH 0HGLR $PELHQWH 7(0$ (O 0HGLR $PELHQWH HQ OD &RQVWLWXFLyQ (VSDxROD 'LVWULEXFLyQ GH FRPSHWHQFLDV HVWDWDOHV DXWRQyPLFDV\ORFDOHVHQODUHJXODFLyQSODQLILFDFLyQ\JHVWLyQGHOPHGLRDPELHQWH 7(0$ (GXFDFLyQ DPELHQWDO (VWUDWHJLD GH HGXFDFLyQ DPELHQWDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD $\XGDV S~EOLFDV SDUD HO PHGLR DPELHQWH HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ /D5HGGH$XWRULGDGHV$PELHQWDOHV)XQGDPHQWRV\OtQHDGHDFWXDFLyQ 7(0$ /RV)RQGRVHXURSHRV3URJUDPDVRSHUDWLYRV\VXDSOLFDFLyQHQ&DQWDEULD 7(0$ 'HVDUUROOR 6RVWHQLEOH $JHQGD 5HG /RFDO GH 6RVWHQLELOLGDG HQ OD &RPXQLGDG $XWyQRPDGH&DQWDEULD,QGLFDGRUHV$PELHQWDOHV 7(0$ /D&XPEUHGH5tR3ULQFLSDOHV&RQYHQLRV,QWHUQDFLRQDOHVHQPDWHULDGHPHGLRDPELHQWH 7(0$ $FFHVR D OD LQIRUPDFLyQ DPELHQWDO 1RUPDWLYD UHJXODGRUD )XHQWHV GH LQIRUPDFLyQ DPELHQWDO 7(0$ (FRVLVWHPD &RQFHSWR \ GLQiPLFD 3ULQFLSDOHV HFRVLVWHPDV GH OD &RPXQLGDG $XWyQRPD GH&DQWDEULD,GHQWLILFDFLyQFDUDFWHUtVWLFDVHYROXFLyQQDWXUDO\HVWDGRGHFRQVHUYDFLyQ 7(0$ 5DVJRV JHROyJLFRV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &DUDFWHUtVWLFDV GH ODV SULQFLSDOHVXQLGDGHVOLWROyJLFDV 7(0$ *HRPRUIRORJtD\XQLGDGHVILVLRJUiILFDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5LHVJRV JHROyJLFRVHQHOWHUULWRULRFiQWDEUR 7(0$ /RVYDOOHVFiQWDEURVGHOLQWHULRU&DUDFWHUtVWLFDVQDWXUDOHV\FRQGLFLRQDQWHVItVLFRV 7(0$ (O HVSDFLR XUEDQR \ HO HVSDFLR UXUDO HQ &DQWDEULD DFWLYLGDGHV TXH ORV FDUDFWHUL]DQ HYROXFLyQKLVWyULFD\WHQGHQFLDDFWXDO 7(0$ (OPHGLRXUEDQR\ODSURWHFFLyQDPELHQWDO/D$JHQGDORFDO i Pág. 12552 boc.cantabria.es CVE-2019-3750 7(0$ (O SREODPLHQWR HQ &DQWDEULD $UWLFXODFLyQ WHUULWRULDO GLVWULEXFLyQ HQ FRPDUFDV \ VXV UHODFLRQHVFRQHOPHGLRItVLFR\VRFLDO 45/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (O OLWRUDO FiQWDEUR &DUDFWHUtVWLFDV QDWXUDOHV \ FRQGLFLRQDQWHV ItVLFRV 'LVWULEXFLyQ GH UHFXUVRVQDWXUDOHV\ELyWLFRV)HQyPHQRVGHSUHVLyQDQWUySLFD 7(0$ /D ELRGLYHUVLGDG /D SURWHFFLyQ GH OD IORUD \ OD IDXQD HQ &DQWDEULD &DWHJRUtDV GH HVSHFLHVDPHQD]DGDV 7(0$ /D SURWHFFLyQ GH ORV (VSDFLRV 1DWXUDOHV 3URWHJLGRV \ VX PDUFR OHJLVODWLYR )LJXUDV GH 3URWHFFLyQ \ GH 2UGHQDFLyQ HQ HO PDUFR GH OD /H\ GH GH GLFLHPEUH GH 3DWULPRQLR1DWXUDO\%LRGLYHUVLGDG 7(0$ (VSDFLRV 1DWXUDOHV 3URWHJLGRV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 3ODQLILFDFLyQ /H\GHGHPD\RGH&RQVHUYDFLyQGHOD1DWXUDOH]DGH&DQWDEULD 7(0$ 5HGHFROyJLFDHXURSHD1DWXUD\VXPDUFRQRUPDWLYR2EMHWLYRV6XWUDQVSRVLFLyQDO RUGHQDPLHQWRLQWHUQRHVSDxRO$SOLFDFLyQHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /D SUREOHPiWLFD DPELHQWDO DVRFLDGD D OD H[SORWDFLyQ GH ORV UHFXUVRV PLQHURV /D UHVWDXUDFLyQGHH[SORWDFLRQHVH[WUDFWLYDVDFLHORDELHUWR 7(0$ 0RQWHV \ WHUUHQRV IRUHVWDOHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &RQFHSWR FDUDFWHUtVWLFDV\DSURYHFKDPLHQWR5HJXODFLyQQRUPDWLYD 7(0$ 6XHORV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 3URGXFWLYLGDG SRWHQFLDO HGiILFD 'LVWULEXFLyQGHORVXVRVGHO6XHORHQ&DQWDEULD 7(0$ &RQWDPLQDFLyQ GH ORV VXHORV /HJLVODFLyQ DSOLFDEOH $FWLYLGDGHV SRWHQFLDOPHQWH FRQWDPLQDQWHV GHO VXHOR &ULWHULRV \ HVWiQGDUHV SDUD OD GHFODUDFLyQ GH VXHORV FRQWDPLQDGRV 7(0$ 0XHVWUHRGHVXHORV7pFQLFDVSDUDODGHVFRQWDPLQDFLyQGHVXHORV 7(0$ (VWUXFWXUDV \ H[SORWDFLRQHV DJUDULDV HQ &DQWDEULD (O &yGLJR GH %XHQDV 3UiFWLFDV $JUDULDV 7(0$ ,QIUDHVWUXFWXUDV H[LVWHQWHV HQ &DQWDEULD &DVRV GHO WUDQVSRUWH \ ODV FRPXQLFDFLRQHV &RQILJXUDFLyQDFWXDOHKLVWyULFDGHODVUHGHVUHJLRQDOHV\VXVUHODFLRQHVFRQHOUHVWRGHO WHUULWRULR 7(0$ *HQHUDFLyQWUDQVSRUWH\GLVWULEXFLyQGHHQHUJtDHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD (QHUJtDVUHQRYDEOHV6XDSURYHFKDPLHQWRHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD %/248(,, 7(0$ 3ROtWLFD GH UHVLGXRV GH OD 8QLyQ (XURSHD 3ULQFLSLRV \ QRUPDWLYD HXURSHD QDFLRQDO \ DXWRQyPLFD'LVWULEXFLyQGHFRPSHWHQFLDVHQPDWHULDGHJHVWLyQGHUHVLGXRV(O&DWiORJR (XURSHRGH5HVLGXRV 7(0$ /H\GHGHMXOLRGHUHVLGXRV\VXHORVFRQWDPLQDGRV 7(0$ 3ODQGH*HVWLyQGH5HVLGXRV6yOLGRVHQ&DQWDEULD 7(0$ (QYDVHV\UHVLGXRVGHHQYDVHVQRUPDWLYDUHJXODGRUD 7(0$ 0DUFRMXUtGLFRGHODSURGXFFLyQ\JHVWLyQGHUHVLGXRVSHOLJURVRV&DUDFWHUL]DFLyQ i Pág. 12553 boc.cantabria.es CVE-2019-3750 7(0$ 5HVLGXRV 8UEDQRV )UDFFLRQHV TXH FRPSRQHQ ORV 5HVLGXRV 8UEDQRV $OWHUQDWLYDV GH JHVWLyQ7pFQLFDVGHWUDWDPLHQWR\HOLPLQDFLyQGHUHVLGXRVXUEDQRV 46/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /D JHVWLyQ \ WUDWDPLHQWR GH ORV UHVLGXRV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD ,QVWDODFLRQHV S~EOLFDV SDUD OD JHVWLyQ \ WUDWDPLHQWR GH ORV UHVLGXRV HQ OD &RPXQLGDG $XWyQRPDGH&DQWDEULD 7(0$ /HJLVODFLyQUHJXODGRUD\DOWHUQDWLYDVGHJHVWLyQGHORVDFHLWHVXVDGRV3&% V\3&7 V 7(0$ 3LODV\DFXPXODGRUHV5HVLGXRVGHHTXLSRVHOpFWULFRV\HOHFWUyQLFRV5HJXODFLyQJHVWLyQ \WUDWDPLHQWR 7(0$ /HJLVODFLyQUHJXODGRUD\DOWHUQDWLYDVGHJHVWLyQGHORVUHVLGXRVELRVDQLWDULRVHVSHFLDOHV 7(0$ /RVUHVLGXRVGHGHPROLFLyQ\GHODFRQVWUXFFLyQ3URGXFFLyQFODVLILFDFLyQ\DOWHUQDWLYDVGH JHVWLyQ 7(0$ /H\ GH GH QRYLHPEUH GHO 3ODQ GH *HVWLyQ GH 5HVLGXRV 6yOLGRV 8UEDQRV 'HFUHWRGHGHPDU]RSRUHOTXHVHUHJXODHOFRQWUROLQVSHFFLyQ\YLJLODQFLDGH ORVUHVLGXRVVyOLGRVXUEDQRV 7(0$ 5HVLGXRV DJURJDQDGHURV 0(5 \ HQYDVHV ILWRVDQLWDULRV 1RUPDWLYD SUREOHPiWLFD \ DOWHUQDWLYDV 7(0$ 1RUPDWLYD UHJXODGRUD \ DOWHUQDWLYDV GH JHVWLyQ GH 9HKtFXORV IXHUD GH XVR 1HXPiWLFRV IXHUDGHXVR\5HVLGXRVYROXPLQRVRV 7(0$ 9HUWLGR GH UHVLGXRV /HJLVODFLyQ &ODVHV GH YHUWHGHURV \ UHTXLVLWRV TXH KDQ GH FXPSOLU 3ULQFLSDOHVYDULDEOHVDFRQVLGHUDUHQODVHOHFFLyQGHHPSOD]DPLHQWRVGHORVGLVWLQWRVWLSRV GHYHUWHGHURV 7(0$ 9HUWHGHURVFRQWURODGRV&DUDFWHUtVWLFDV8ELFDFLyQGHORVYHUWHGHURVFRQWURODGRV)DFWRUHV DFRQVLGHUDU/L[LYLDGRV$SURYHFKDPLHQWRGHELRJiV 7(0$ 9HUWLGRVDOPDUHQHOiPELWRGHOOLWRUDOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD'HFUHWR SRUHOTXHVHDSUXHEDHOUHJODPHQWRGHYHUWLGRVGHODWLHUUDDOPDU 7(0$ /H\ GH &DQWDEULD GH GH QRYLHPEUH GH $EDVWHFLPLHQWR \ 6DQHDPLHQWR GH $JXDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /DHYDOXDFLyQGHOLPSDFWRDPELHQWDO1RUPDWLYDHXURSHDQDFLRQDO\DXWRQyPLFDUHODWLYDD OD HYDOXDFLyQ GH LPSDFWR DPELHQWDO /H\ GH GH GLFLHPEUH GH HYDOXDFLyQ DPELHQWDO/H\GH&DQWDEULDGHGHGLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGR 7(0$ (YDOXDFLyQDPELHQWDOHVWUDWpJLFD)XQGDPHQWRVREMHWLYRV\QRUPDWLYDUHJXODGRUD 7(0$ (YDOXDFLyQ GH LPSDFWR DPELHQWDO GH SUR\HFWRV )XQGDPHQWRV REMHWLYRV \ QRUPDWLYD UHJXODGRUD 7(0$ &RPSUREDFLyQDPELHQWDO2EMHWLYRV\QRUPDWLYDUHJXODGRUD 7(0$ 'HVFULSFLyQGHOSUR\HFWR\YDORUDFLyQGHDOWHUQDWLYDVHQORVHVWXGLRVGHLPSDFWRDPELHQWDO 7(0$ ,QYHQWDULRDPELHQWDOGHORVHVWXGLRVGHLPSDFWRDPELHQWDO1LYHOHVGHGHWDOOH9DULDEOHVD LQFOXLU/DHVFDODFDUWRJUiILFD 7(0$ (YDOXDFLyQDPELHQWDOGHODVGLIHUHQWHVDFWLYLGDGHVHFRQyPLFDV&DVRGHODVH[SORWDFLRQHV DJUDULDVSXHUWRVPDUtWLPRVLQGXVWULDLQIUDHVWUXFWXUDV\WXULVPR 7(0$ (PSUHVD \ *HVWLyQ $PELHQWDO $XGLWRUtDV DPELHQWDOHV /D QRUPD ,62 6LVWHPD FRPXQLWDULRGHJHVWLyQ\DXGLWRUtDPHGLRDPELHQWDOHV (0$6 /DHWLTXHWDHFROyJLFD i Pág. 12554 boc.cantabria.es CVE-2019-3750 7(0$ 0HWRGRORJtDVGHHYDOXDFLyQGHLPSDFWRDPELHQWDO,GHQWLILFDFLyQ\YDORUDFLyQGHLPSDFWRV 0HGLGDVSUHYHQWLYDVFRUUHFWRUDV\FRPSHQVDWRULDV3URJUDPDGH9LJLODQFLD$PELHQWDO 47/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 6LVWHPDVGHFDOLGDGHQODERUDWRULRVGHHQVD\R$FUHGLWDFLyQHQORVODERUDWRULRVGHHQVD\R \FDOLEUDFLyQVHJ~Q1RUPD81((1,62,(& %/248(,,, 7(0$ (O FOLPD GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'LQiPLFD DWPRVIpULFD (VWUXFWXUD \ FRPSRVLFLyQGHODDWPyVIHUD 7(0$ &DPELR FOLPiWLFR SURWHFFLyQ GH OD FDSD GH R]RQR FRQWDPLQDFLyQ DWPRVIpULFD D ODUJD GLVWDQFLD &RQYHQLRV LQWHUQDFLRQDOHV \ VX DSOLFDFLyQ HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ (VWUDWHJLDGH$FFLyQFRQWUDHOFDPELRFOLPiWLFRHQ&DQWDEULD 7(0$ /D &RQWDPLQDFLyQ GHO $LUH &DUDFWHUtVWLFDV GHO PHGLR ItVLFR DWPRVIpULFR 3ULQFLSDOHV FRQWDPLQDQWHVGHODLUH(IHFWRVVREUHHOPHGLRDPELHQWH\ODVDOXGKXPDQD)XHQWHVGH FRQWDPLQDFLyQDWPRVIpULFDHQ&DQWDEULD 7(0$ &RQWURO GH HPDQDFLRQHV LQGXVWULDOHV 1RUPDWLYD DSOLFDEOH HQ HPLVLyQ 0RGHORV GH GLVSHUVLyQ7HFQRORJtDVSUHYHQWLYDV\FRUUHFWLYDVHQHPLVLRQHVDODDWPyVIHUD 7(0$ 5HGHVGHYLJLODQFLDGHODFDOLGDGGHODLUHODUHGGH&DQWDEULD1RUPDWLYDVREUHLQPLVLyQ 6LVWHPDVGHPXHVWUHR\PpWRGRVGHHVWXGLR*DUDQWtDGHFDOLGDG GHODHYDOXDFLyQGHOD FDOLGDGGHODLUHDPELHQWH 7(0$ /H\GHGHQRYLHPEUHGHFDOLGDGGHODLUH\SURWHFFLyQGHODDWPyVIHUD5HDO 'HFUHWRGHGHHQHURGHPHMRUDGHFDOLGDGGHODLUH\5HDO'HFUHWR GHGHHQHURTXHDFWXDOL]DHOFDWiORJRGHDFWLYLGDGHVSRWHQFLDOPHQWHFRQWDPLQDGRUDV GHODDWPyVIHUD 7(0$ (O UXLGR 0DJQLWXGHV FDUDFWHUtVWLFDV /HJLVODFLyQ DSOLFDEOH )XHQWHV GH FRQWDPLQDFLyQ DF~VWLFD\PHGLGDVFRUUHFWRUDV(TXLSRVGHPHGLGD 7(0$ 3UHYHQFLyQ\&RQWURO,QWHJUDGRGHOD&RQWDPLQDFLyQ,QFRUSRUDFLyQGHOD'LUHFWLYD,33&DO GHUHFKRLQWHUQRHVSDxRO 7(0$ (O5HJLVWUR(VWDWDOGH(PLVLRQHV\)XHQWHV&RQWDPLQDQWHV0HWRGRORJtD\IXQFLRQDPLHQWR GH(3(5 7(0$ &DUDFWHUtVWLFDVSULQFLSDOHVGHODKLGURORJtDGH&DQWDEULD0RUIRORJtD\FRQILJXUDFLyQGHOD UHGKLGURJUiILFD'LVWULEXFLyQGHFXHQFDVKLGURJUiILFDV 7(0$ 3ULQFLSDOHVXQLGDGHVKLGURJHROyJLFDV3RWHQFLDOSDUDHODEDVWHFLPLHQWR5HODFLyQHQWUHODV DJXDVVXSHUILFLDOHV\ODVVXEWHUUiQHDV9XOQHUDELOLGDGDODFRQWDPLQDFLyQ 7(0$ $XWRGHSXUDFLyQGHODVDJXDVHQFXUVRVIOXYLDOHV&DXGDOHVHFROyJLFRV 7(0$ /H\GH$JXDV'RPLQLR3~EOLFR+LGUiXOLFR\VXSURWHFFLyQ 7(0$ (O 3ODQHDPLHQWR +LGUROyJLFR GH &DQWDEULD HQ HO PDUFR GHO 3ODQ +LGUROyJLFR 1DFLRQDO $SOLFDFLyQ 7(0$ 6DQHDPLHQWR \ GHSXUDFLyQ GH ODV DJXDV UHVLGXDOHV 7LSRV GH WUDWDPLHQWRV 6DQHDPLHQWR GH DJXDV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD $QWHFHGHQWHV VLVWHPDV \ FRPSHWHQFLDVGHJHVWLyQ i Pág. 12555 boc.cantabria.es CVE-2019-3750 7(0$ &RQWDPLQDFLyQGHDJXDV3DUiPHWURVGHILQLGRUHVGHODFRQWDPLQDFLyQ&DUDFWHUtVWLFDVGH ODVDJXDVUHVLGXDOHVXUEDQDVDJUtFRODVHLQGXVWULDOHV 48/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /RGRVGHGHSXUDFLyQ&DUDFWHUtVWLFDV\DOWHUQDWLYDVGHWUDWDPLHQWR5HJXODFLyQQRUPDWLYD 7(0$ &DOLGDG GH ODV DJXDV GH DEDVWHFLPLHQWR /HJLVODFLyQ 7UDWDPLHQWR GH ODV DJXDV GH DEDVWHFLPLHQWR9LJLODQFLDVDQLWDULD 7(0$ $EDVWHFLPLHQWR GH DJXDV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD $QWHFHGHQWHV UHFXUVRVVLVWHPDV\FRPSHWHQFLDVGHJHVWLyQ 7(0$ 3ODQLILFDFLyQ \ SROtWLFD WHUULWRULDO \ PHGLRDPELHQWDO HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD/HJLVODFLyQDSOLFDEOH5HODFLRQHVHQWUHRUGHQDFLyQGHOWHUULWRULR\XUEDQLVPR 7(0$ /D FRQIRUPDFLyQ GHO WHUULWRULR GH OD &RPXQLGDG DXWyQRPD GH &DQWDEULD 3ULQFLSDOHV XQLGDGHVWHUULWRULDOHV 7(0$ /D/H\GH&DQWDEULDGH2UGHQDFLyQWHUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO6XHOR 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGHO3DLVDMH 7(0$ /D SURWHFFLyQ GHO SDLVDMH FRQFHSWRV EiVLFRV SDUD VX GHVFULSFLyQ \ FDUDFWHUL]DFLyQ 9DORUDFLyQFDOLGDG\IUDJLOLGDGYLVXDOGHOWHUULWRULR 7(0$ /D/H\GH&RVWDV\VXLQIOXHQFLDHQODSODQLILFDFLyQGHOHVSDFLROLWRUDO\FRVWHUR 7(0$ (O 3ODQ GH 2UGHQDFLyQ GHO /LWRUDO GH &DQWDEULD 5HJXODFLyQ QRUPDWLYD SULQFLSLRV LQVSLUDGRUHVFRQWHQLGRVHLQVWUXPHQWRVTXHORDUWLFXODQ 7(0$ /H\GHGHRFWXEUHGHO3DWULPRQLR&XOWXUDOGH&DQWDEULD CVE-2019-3750 7(0$ 6LVWHPDV GH ,QIRUPDFLyQ *HRJUiILFD 'HILQLFLyQ FRQFHSWR \ HYROXFLyQ WHPSRUDO 3ULQFLSDOHVHVWUXFWXUDVGHGDWRV$SOLFDFLyQDODJHVWLyQGHOPHGLRDPELHQWH i Pág. 12556 boc.cantabria.es 49/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 ,1*(1,(52$*5Ï1202 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ 0HWHRURORJtD GH &DQWDEULD 5pJLPHQ GH SUHFLSLWDFLRQHV 'LVWULEXFLyQ \ HVWDFLRQDOLGDG /D UHODFLyQDJXDVXHORSODQWD$VSHFWRVILVLROyJLFRV%DODQFHKtGULFR5pJLPHQ3OXYLDOGHORVUtRV \VXDIRUR$JXDVIUHiWLFDV&RQWUROGHODFDOLGDGGHODJXD 7(0$ (GDIRORJtD \ VXHORV GH &DQWDEULD 'LVWULEXFLyQ GH OD VXSHUILFLH VHJ~Q XVRV DJUDULRV &DUDFWHUL]DFLyQDJURQyPLFDGHGLFKRVVXHORV(QPLHQGDVRUJiQLFDV\FDOL]DV/DHURVLyQHQ &DQWDEULD/DFDUWRJUDItDFRPREDVHGHODRUGHQDFLyQGHORVUHFXUVRVDJUDULRV 7(0$ 6HFWRUHV HFRQyPLFRV ,PSRUWDQFLD GHO VHFWRU SULPDULR HQ (VSDxD (VSHFLDO UHIHUHQFLD D &DQWDEULD&DUDFWHUtVWLFDVGHODSREODFLyQHQ&DQWDEULD3REODFLyQDFWLYDDJUDULD(OPHGLR UXUDOVXHVWUXFWXUD\SUREOHPiWLFD(OHPSOHRUXUDO 7(0$ 3URGXFFLRQHVDJUDULDVGH&DQWDEULD3URGXFFLyQDJUtFROD3URGXFFLyQJDQDGHUD3URGXFFLyQ IRUHVWDO0DSDGHXVRVDJUDULRV0DFURPDJQLWXGHVDJUDULDV/DUHQWDDJUDULD 7(0$ /D JDQDGHUtD GH YDFXQR GH FDUQH HQ &DQWDEULD &DUDFWHUtVWLFDV WLSRV \ UD]DV 3ULQFLSDOHV SURGXFFLRQHV7pFQLFDVGHSURGXFFLyQ3UREOHPiWLFD\SHUVSHFWLYDVGHIXWXUR 7(0$ /DJDQDGHUtDGHYDFXQRGHOHFKHHQ&DQWDEULD*DQDGHUtDLQWHQVLYDYHUVXVJDQDGHUtDOLJDGD D OD WLHUUD &DUDFWHUtVWLFDV WLSRV 3ULQFLSDOHV SURGXFFLRQHV 7pFQLFDV GH SURGXFFLyQ 3UREOHPiWLFD\SHUVSHFWLYDVGHIXWXUR 7(0$ /DH[SORWDFLyQJDQDGHUDGHRYLQR\FDSULQR7LSRVGHH[SORWDFLyQ\UD]DV/DJDQDGHUtDGH RYLQR \ FDSULQR HQ &DQWDEULD &DUDFWHUtVWLFDV WLSRV \ UD]DV 3ULQFLSDOHV SURGXFFLRQHV 7pFQLFDVGHSURGXFFLyQ3UREOHPiWLFD\SHUVSHFWLYDVGHIXWXUR 7(0$ /RV SDVWRV FRPXQDOHV 5HIHUHQFLD KLVWyULFD 5pJLPHQ MXUtGLFR 6LWXDFLyQ HQ &DQWDEULD 6XSHUILFLH\GLVWULEXFLyQ5HJXODFLyQGHVXDSURYHFKDPLHQWR1RUPDWLYD 7(0$ /DVH[SORWDFLRQHVGHJDQDGHUtDDOWHUQDWLYDVDORVUXPLDQWHV3RUFLQR&XQLFXOWXUD$YLFXOWXUD \$SLFXOWXUD7LSRVGHH[SORWDFLyQ\UD]DV 7(0$ 6LVWHPDV GH DOLPHQWDFLyQ GH OD YDFD OHFKHUD &XUYD GH ODFWDFLyQ 1HFHVLGDGHV 5DFLRQDPLHQWR 7(0$ 7pFQLFDVGHSURGXFFLyQGHSUDGRV\SUDGHUDV(VSHFLHV\PH]FODV0DQHMR0HFDQL]DFLyQ ([LJHQFLDVPHGLRDPELHQWDOHV3URGXFFLRQHV\UHQGLPLHQWRV 7(0$ &XOWLYRV IRUUDMHURV PRQRILWRV R GH PH]FOD VHQFLOOD 6LVWHPDV GH LPSODQWDFLyQ \ PHMRUD ([LJHQFLDVPHGLRDPELHQWDOHV,PSRUWDQFLDHQ&DQWDEULD i Pág. 12557 boc.cantabria.es CVE-2019-3750 7(0$ $OLPHQWDFLyQ GHO JDQDGR YDFXQR GH FDUQH &XUYD GH FUHFLPLHQWR 1HFHVLGDGHV \ UDFLRQDPLHQWR 50/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 6LVWHPDV GH FRQVHUYDFLyQ GH IRUUDMHV +HQLILFDFLyQ HQVLODGR \ GHVKLGUDWDFLyQ VLVWHPDV SDUiPHWURVGHFDOLGDGPDTXLQDULDXWLOL]DGD 7(0$ 7pFQLFDVGHSURGXFFLyQGHFHUHDOHV\OHJXPLQRVDVHVSHFLHV\YDULHGDGHVODERUHVFXOWXUDOHV \SURGXFFLyQ,PSRUWDQFLD\SRWHQFLDOHQ&DQWDEULD 7(0$ 7pFQLFDVGHHODERUDFLyQGHOHFKH\SURGXFWRVOiFWHRV0DWHULDVSULPDV2SHUDFLRQHVEiVLFDV 7LSRVGHSURGXFWRVFDUDFWHUtVWLFDV\SURFHVRVSURSLRVGHREWHQFLyQ 7(0$ 7pFQLFDVGHHODERUDFLyQGHFDUQHV\GHULYDGRV0DWHULDVSULPDV2SHUDFLRQHVEiVLFDV7LSRV GHSURGXFWRVFDUDFWHUtVWLFDV\SURFHVRVSURSLRVGHREWHQFLyQ 7(0$ 7pFQLFDV GH SURGXFFLyQ GH FRQVHUYDV VHPLFRQVHUYDV \ VDOD]RQHV GH SHVFDGR 0DWHULDV SULPDV 2SHUDFLRQHV EiVLFDV 7LSRV GH SURGXFWRV FDUDFWHUtVWLFDV \ SURFHVRV SURSLRV GH REWHQFLyQ 7(0$ 3URGXFWRVSDUDODDOLPHQWDFLyQDQLPDO7LSRV\FDUDFWHUtVWLFDV7HFQRORJtD,QFLGHQFLDHQOD SURGXFFLyQDJUDULD(OVHFWRUSURGXFWRUHQ(VSDxD\HQ&DQWDEULD6XSUREOHPiWLFD 7(0$ 0HMRUD GH OD SURGXFFLyQ GH YDFXQR GH OHFKH )DFWRUHV TXH LQWHUYLHQHQ 2EMHWLYRV GH VHOHFFLyQ6HOHFFLyQSURJUHVR\PHMRUDJHQpWLFD3URJUDPDSDUD&DQWDEULD 7(0$ 0HMRUD GH YDFXQR GH FDUQH )DFWRUHV TXH LQWHUYLHQHQ 2EMHWLYRV GH VHOHFFLyQ 3UXHED GH SURJHQLH\VLVWHPDVDOWHUQDWLYRV&UX]DPLHQWREDVHVPRWLYRV\VLVWHPDV 7(0$ 0HMRUDJHQpWLFDDQLPDO0pWRGRVGHVHOHFFLyQ\UHVSXHVWDV6HOHFFLyQIDPLOLDU6HOHFFLyQSRU SDULHQWHV3UXHEDGHGHVFHQGHQFLD,QIRUPDFLyQGHDVFHQGLHQWHV 7(0$ 7pFQLFDVGHSURGXFFLyQGHSDWDWDSDUDFRQVXPR\VLHPEUDYDULHGDGHVODERUHVFXOWXUDOHV\ SURGXFFLyQ(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ 7pFQLFDVGHSURGXFFLyQGHODYLGYDULHGDGHVODERUHVFXOWXUDOHV\SURGXFFLyQ'HUHFKRVGH SURGXFFLyQ3HUVSHFWLYDVGHIXWXUR(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ 7pFQLFDVGHSURGXFFLyQGHFXOWLYRVKRUWtFRODVSULQFLSDOHVFXOWLYRVHQ&DQWDEULDYDULHGDGHV ODERUHV FXOWXUDOHV \ SURGXFFLyQ &XOWLYRV IRU]DGRV ,QVWDODFLRQHV 7pFQLFDV GH FXOWLYR ,PSRUWDQFLDHQ&DQWDEULD 7(0$ 7pFQLFDVGHSURGXFFLyQGHFXOWLYRVIUXWtFRODVSULQFLSDOHVFXOWLYRVHQ&DQWDEULDYDULHGDGHV ODERUHVFXOWXUDOHV\SURGXFFLyQ&RPHUFLDOL]DFLyQ 7(0$ $OWHUQDWLYDV GH ODERUHR /DERUHR GH FRQVHUYDFLyQ 7pFQLFDV GH ODERUHR PtQLPR ODERUHR \ VLHPEUDGLUHFWD 7(0$ 0HGLRVGH'HIHQVD)LWRVDQLWDULD&DUDFWHUL]DFLyQHLPSRUWDQFLDHQODDJULFXOWXUDHVSDxROD 1RUPDWLYD GH FRPHUFLDOL]DFLyQ GH ORV SURGXFWRV ILWRVDQLWDULRV HQ OD 8QLyQ (XURSHD 5HJODPHQWR&(GHGHRFWXEUH6LWXDFLyQDFWXDO\SUREOHPiWLFDGHOPHUFDGR GH PHGLRV GH GHIHQVD ILWRVDQLWDULD 0pWRGRV GH OXFKD ELROyJLFD 3UREOHPiWLFD GH OD FRQWDPLQDFLyQSRUSODJXLFLGDVORVOtPLWHVPi[LPRVGHUHVLGXRV 7(0$ 3URGXFFLyQHFROyJLFD$JULFXOWXUDJDQDGHUtD\DSLFXOWXUDHFROyJLFDV3ULQFLSLRV1RUPDWLYD 6LWXDFLyQGHODSURGXFFLyQHFROyJLFD\ODFRPHUFLDOL]DFLyQGHVXVSURGXFWRVHQ&DQWDEULD &RPSDUDWLYDFRQODVLWXDFLyQHQ(VSDxD(XURSD\HOPXQGR i Pág. 12558 boc.cantabria.es CVE-2019-3750 7(0$ )HUWLOL]DQWHV7LSRV\WpFQLFDVGHIHUWLOL]DFLyQ&RQVXPRHQODDJULFXOWXUDHVSDxROD1RUPDWLYD TXH UHJXOD OD FRPHUFLDOL]DFLyQ GH ORV IHUWLOL]DQWHV HQ (VSDxD /LPLWDFLRQHV HFRQyPLFDV \ PHGLRDPELHQWDOHVSDUDVXHPSOHRXVRUDFLRQDOGHORVIHUWLOL]DQWHV 51/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,, 7(0$ &RQILJXUDFLyQ GH OD 3ROtWLFD $JUDULD &RP~Q 3$& 3ULQFLSLRV REMHWLYRV H LQVWUXPHQWRV 2UJDQL]DFLRQHV&RPXQHVGH0HUFDGRIRQGRVILQDQFLHURVRWURVLQVWUXPHQWRV/RVSULPHURV DxRVGHOD3$&\ODVSROtWLFDVDJUDULDVQDFLRQDOHV 7(0$ /DSROtWLFDGHSUHFLRV\PHUFDGRVHQOD8QLyQ(XURSHD/D2UJDQL]DFLyQ&RP~QGH0HUFDGRV GH ORV SURGXFWRV DJUDULRV 2&0$ 7LSRV \ PHFDQLVPRV 3ULQFLSDOHV SURGXFWRV UHJXODGRV 5pJLPHQGHSUHFLRV5pJLPHQGHLQWHUYHQFLRQHV5pJLPHQGHFRPHUFLRH[WHULRU5pJLPHQGH D\XGDV5pJLPHQGHFRQWURO 7(0$ (O)RQGR(XURSHR$JUtFRODGH*DUDQWtD )($*$ \HO)RQGR(XURSHR$JUtFRODGH'HVDUUROOR 5XUDO )($'(5 2WURVLQVWUXPHQWRVILQDQFLHURV/DGLVWULEXFLyQQDFLRQDO\VHFWRULDOGHOJDVWR GHOD3$& 7(0$ /DVSULQFLSDOHVUHIRUPDVGHOD3$&-XVWLILFDFLyQ\QXHYDVRULHQWDFLRQHV5HIRUPDGH /DUHIRUPDGHOD3$&\OD5RQGD8UXJXD\GHO*$77\ODVPHGLGDVGHDFRPSDxDPLHQWROD $JHQGD/DVPHGLGDVGHFDUiFWHUKRUL]RQWDOODRULHQWDFLyQGHOGHVDUUROORUXUDO\HOPDUFR ILQDQFLHUR5HIRUPDGHOD3$&GH/RVSLODUHVGHOD3$&ODFRQGLFLRQDOLGDGPRGXODFLyQ \GHVDFRSODPLHQWRGHODVD\XGDV5HIRUPDGHHO©FKHTXHRªGHOD3$& 7(0$ /DJHVWLyQ\FRQWUROGHORVIRQGRVGHOD3$&/DUHJXODFLyQEiVLFDVREUHODILQDQFLDFLyQGHOD 3$& /D JHVWLyQ GH ORV IRQGRV GH OD 3$& \ ODV UHODFLRQHV &RPLVLyQ(VWDGRV 0LHPEURV 2UJDQLVPRV3DJDGRUHV(OFRQWUROFRPXQLWDULRGHORVJDVWRVGHOD3$&\ODOLTXLGDFLyQGH FXHQWDV(OFRQWUROHQHOiPELWRQDFLRQDOGHORVJDVWRVGHOD3$&(OÏUJDQRGH&RQFLOLDFLyQ 7(0$ (O6LVWHPD,QWHJUDGRGH*HVWLyQ\&RQWURO6LVWHPiWLFDGHORVFRQWUROHVDGPLQLVWUDWLYRV\GH FDPSR HQ ORV VHFWRUHV DJUtFROD \ JDQDGHUR /RV HOHPHQWRV GH FRQWURO ,QFUHPHQWR GH ORV FRQWUROHV 7(0$ (O )RQGR (VSDxRO GH *DUDQWtD $JUDULD )(*$ 1RUPDWLYD UHJXODGRUD (VWUXFWXUD &RPSHWHQFLDV (O 2UJDQLVPR 3DJDGRU GH ORV JDVWRV GH OD 3$& HQ &DQWDEULD 1RUPDWLYD UHJXODGRUD(VWUXFWXUD\IXQFLRQDPLHQWR5HODFLRQHVFRQHO)(*$ 7(0$ 5HIRUPDGHOD3$&(OSULPHUSLODUGHOD3$&(OQXHYRVLVWHPDGHSDJRVGLUHFWRV (OUpJLPHQGHSDJREiVLFR%HQHILFLDULRV(VWDEOHFLPLHQWRGHORVGHUHFKRV\UHJLRQDOL]DFLyQ \FRQYHUJHQFLD/DUHVHUYDQDFLRQDOGHSDJREiVLFR$SOLFDFLyQGHUpJLPHQGHSDJREiVLFR HQ (VSDxD \ HQ &DQWDEULD ±VHFWRUHV LQWHJUDGRV FRPSOHPHQWR D MyYHQHV \ UpJLPHQ VLPSOLILFDGRGHSHTXHxRVDJULFXOWRUHV 7(0$ /DSROtWLFDGHGHVDUUROORUXUDOHQHOSHUtRGR , (O)($'(5FRPRIRQGRHXURSHR HVWUXFWXUDO \ GH LQYHUVLyQ (6, (O 5HJODPHQWR GHO 3DUODPHQWR (XURSHR \ GHO &RQVHMR GH GH GLFLHPEUH GH &RRUGLQDFLyQ FRQ RWURV IRQGRV FRPXQLWDULRV /D ILQDQFLDFLyQ GHO GHVDUUROOR UXUDO /DV SULRULGDGHV FRPXQLWDULDV GH GHVDUUROOR UXUDO \ ORV 3URJUDPDVGH'HVDUUROOR5XUDO$SOLFDFLyQHQ(VSDxD\HQ&DQWDEULD 7(0$ /D SROtWLFD GH GHVDUUROOR UXUDO HQ HO SHUtRGR ,,, (VWUDWHJLDV DVFHQGHQWHV GH GHVDUUROORORFDOHQHOPDUFRGHO)($'(5\VXWUDWDPLHQWRHQHO3URJUDPDGH'HVDUUROOR5XUDO GH&DQWDEULD(OGHVDUUROORORFDOSDUWLFLSDWLYR '/3 (VWUDWHJLDVJUXSRVGHDFFLyQ ORFDO\D\XGDVDO'/3/DFRRSHUDFLyQSDUDODLQQRYDFLyQJUXSRVRSHUDWLYRVSUR\HFWRVSLORWR \RWURV i Pág. 12559 boc.cantabria.es CVE-2019-3750 7(0$ /DSROtWLFDGHGHVDUUROORUXUDOHQHOSHUtRGR ,, 3URJUDPDGH'HVDUUROOR5XUDOGH &DQWDEULD $\XGDV D OD PRGHUQL]DFLyQ GH H[SORWDFLRQHV SODQHV GH PHMRUD \ SULPHUDLQVWDODFLyQGHMyYHQHV,QYHUVLRQHVFROHFWLYDV/DVH[SORWDFLRQHV3ULRULWDULDV 52/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /DSROtWLFDGHGHVDUUROORUXUDOHQHOSHUtRGR ,9 3URJUDPDGH'HVDUUROOR5XUDOGH &DQWDEULD $JURDPELHQWH \ FOLPD =RQDV FRQ OLPLWDFLRQHV QDWXUDOHV DJULFXOWXUD HFROyJLFD$\XGDVDLQGXVWULDVDJURDOLPHQWDULDV 7(0$ (OVHFWRUGHFHUHDOHVROHDJLQRVDVSURWHDJLQRVDV\OHJXPLQRVDV$QWHFHGHQWHVHYROXFLyQ\ SHUVSHFWLYDV 6LWXDFLyQ DFWXDO HQ &DQWDEULD (O PHUFDGR FRPXQLWDULR FDUDFWHUtVWLFDV SULQFLSDOHVGHODUHJXODFLyQ\VXUHODFLyQFRQOD2&0~QLFD3HULRGR 7(0$ (O VHFWRU GH IUXWDV \ KRUWDOL]DV IUHVFDV $QWHFHGHQWHV HYROXFLyQ \ SHUVSHFWLYDV 6LWXDFLyQ DFWXDOHQ&DQWDEULD(OPHUFDGRFRPXQLWDULRGHOVHFWRUGHIUXWDV\KRUWDOL]DVIUHVFDVSDJRV GLUHFWRVFDUDFWHUtVWLFDVSULQFLSDOHVGHODUHJXODFLyQ\VXUHODFLyQFRQOD2&0~QLFD3HULRGR 7(0$ (OVHFWRUYLWLYLQtFROD$QWHFHGHQWHVHYROXFLyQ\SHUVSHFWLYDV6LWXDFLyQDFWXDOHQ&DQWDEULD (OPHUFDGRFRPXQLWDULRGHOVHFWRUYLWLYLQtFRODSDJRVGLUHFWRVFDUDFWHUtVWLFDVSULQFLSDOHVGH OD UHJXODFLyQ \ VX UHODFLyQ FRQ OD 2&0 ~QLFD 3HULRGR (O UpJLPHQ FRPXQLWDULR DSOLFDEOHDORVYLQRVGHFDOLGDG&DUDFWHUtVWLFDV5HTXLVLWRV'LVSRVLFLRQHVYLJHQWHV6LWXDFLyQ HQ&DQWDEULD 7(0$ (OVHFWRUOiFWHR$QWHFHGHQWHVHYROXFLyQ\SHUVSHFWLYDV6LWXDFLyQDFWXDOHQ&DQWDEULD(O PHUFDGR FRPXQLWDULR GHO VHFWRU OiFWHR SDJRV GLUHFWRV FDUDFWHUtVWLFDV SULQFLSDOHV GH OD UHJXODFLyQ\VXUHODFLyQFRQOD2&0~QLFD3HULRGR 7(0$ (OVHFWRUGHYDFXQRGHFDUQH$QWHFHGHQWHVHYROXFLyQ\SHUVSHFWLYDV6LWXDFLyQDFWXDOHQ &DQWDEULD (O PHUFDGR FRPXQLWDULR GH OD FDUQH GH YDFXQR SDJRV GLUHFWRV FDUDFWHUtVWLFDV SULQFLSDOHVGHODUHJXODFLyQ\VXUHODFLyQFRQOD2&0~QLFD3HULRGR 7(0$ (O VHFWRU RYLQR \ FDSULQR $QWHFHGHQWHV HYROXFLyQ \ SHUVSHFWLYDV 6LWXDFLyQ DFWXDO HQ &DQWDEULD (O PHUFDGR FRPXQLWDULR GH OD FDUQH GH RYLQR \ FDSULQR SDJRV GLUHFWRV FDUDFWHUtVWLFDVSULQFLSDOHVGHODUHJXODFLyQ\VXUHODFLyQFRQOD2&0~QLFD3HULRGR 7(0$ /RV VHFWRUHV JDQDGHURV LQWHQVLYRV SRUFLQR KXHYRV \ DYHV $QWHFHGHQWHV HYROXFLyQ \ SHUVSHFWLYDV 6LWXDFLyQ DFWXDO HQ &DQWDEULD (O PHUFDGR FRPXQLWDULR FDUDFWHUtVWLFDV SULQFLSDOHVGHODUHJXODFLyQ\VXUHODFLyQFRQOD2&0~QLFD3HULRGR 7(0$ /DV QRUPDV FRPXQLWDULDV VREUH OD FRPSHWHQFLD DSOLFDEOH D OD DJULFXOWXUD 5HODFLyQ FRQ OD 3$&$\XGDVHVWDWDOHVHQDJULFXOWXUD\GHVDUUROORUXUDOODVGLUHFWULFHVVREUHD\XGDVHVWDWDOHV DOVHFWRUDJUDULR\IRUHVWDOHO5HJODPHQWRVREUHSHTXHxDV\PHGLDQDVHPSUHVDVDJUDULDV /DVD\XGDVGHmínimis 7(0$ /DSROtWLFDIRUHVWDOFRPXQLWDULD6LWXDFLyQDFWXDO\SHUVSHFWLYDV)RPHQWRGHODIRUHVWDFLyQ\ FRQVHUYDFLyQGHPDVDVIRUHVWDOHV 7(0$ /D SROtWLFD SHVTXHUD FRP~Q 33& $QWHFHGHQWHV \ HYROXFLyQ 5pJLPHQ GH FXRWDV \ GH FDSWXUDV /D 2&0 GHO VHFWRU GH OD SHVFD &DUDFWHUtVWLFDV SULQFLSDOHV GH OD UHJXODFLyQ (O )RQGR(XURSHR0DUtWLPRGHOD3HVFD )(03 7(0$ /DGHIHQVDGHODFDOLGDGGLIHUHQFLDGDGHORVSURGXFWRVDJURDOLPHQWDULRVODVGHQRPLQDFLRQHV GH RULJHQ SURWHJLGDV ODV LQGLFDFLRQHV JHRJUiILFDV SURWHJLGDV 'HILQLFLyQ FDUDFWHUtVWLFDV UHTXLVLWRV /HJLVODFLyQ YLJHQWH /DV HVSHFLDOLGDGHV WUDGLFLRQDOHV JDUDQWL]DGDV &RQFHSWR UHTXLVLWRV/HJLVODFLyQYLJHQWH i Pág. 12560 boc.cantabria.es CVE-2019-3750 7(0$ /DOHJLVODFLyQDOLPHQWDULDHQ(VSDxDHO&yGLJR$OLPHQWDULRHVSDxRO&RQFHSWR\HVWUXFWXUD &DOLGDGHQORVDOLPHQWRVGHILQLFLyQSULQFLSLRV\QRUPDV/DVHJXULGDGDOLPHQWDULD(OFRQWURO GHFDOLGDGHQORVDOLPHQWRV(OFRQWUROYROXQWDULRRUJDQLVPRVGHFHUWLILFDFLyQ(ODXWRFRQWURO DQiOLVLVGHSHOLJURV\SXQWRVFUtWLFRVGHFRQWURO'LVSRVLFLRQHVYLJHQWHV5HIHUHQFLDHVSHFtILFD D&DQWDEULD 53/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ (O SDTXHWH KLJLHQH (O 5HJODPHQWR &( GH GH DEULO 5HTXLVLWRV SDUD ORV RSHUDGRUHVGHODVHPSUHVDVDOLPHQWDULDVHQODSURGXFFLyQSULPDULD5HTXLVLWRVSDUDHOUHVWR GHRSHUDGRUHVGHODFDGHQDDOLPHQWDULD/DKLJLHQH\ODWUD]DELOLGDGHQODSURGXFFLyQSULPDULD DJUtFROD 5HJLVWUR GH 2SHUDGRUHV *XtDV GH %XHQDV 3UiFWLFDV GH +LJLHQH 3URJUDPD GH FRQWURORILFLDOGHODSURGXFFLyQSULPDULDDJUtFROD 7(0$ $JULFXOWXUD \ PHGLR DPELHQWH /HJLVODFLyQ HXURSHD \ QDFLRQDO DSOLFDEOH HQ PDWHULD PHGLRDPELHQWDO D OD DFWLYLGDG DJUDULD %XHQDV SUiFWLFDV DJUtFRODV (TXLOLEULR DJULFXOWXUD PHGLRDPELHQWH/DDJULFXOWXUD\ORVELHQHVS~EOLFRVPHGLRDPELHQWDOHV6RVWHQLELOLGDGGHOD DJULFXOWXUD3URGXFFLyQLQWHJUDGD 7(0$ /D DJULFXOWXUD \ HO FDPELR FOLPiWLFR (O SURWRFROR GH .\RWR \ VX FXPSOLPLHQWR HQ (VSDxD )XHQWHV GH HPLVLyQ GH JDVHV GH HIHFWR LQYHUQDGHUR *(, HQ OD DJULFXOWXUD 0DJQLWXG LPSRUWDQFLD UHODWLYD \ HYROXFLyQ GH ODV HPLVLRQHV *(, GHO VHFWRU DJUDULR HQ (VSDxD /DV HQHUJtDV UHQRYDEOHV \ OD DJULFXOWXUD (O DFXHUGR GH 3DUtV /D FRQIHUHQFLD GH %RQQ VREUH FDPELRFOLPiWLFR 7(0$ /D VDQLGDG YHJHWDO HQ (VSDxD /H\ GH 6DQLGDG 9HJHWDO 'LVWULEXFLyQ GH FRPSHWHQFLDV 2UJDQL]DFLyQDGPLQLVWUDWLYD&RPLWp)LWRVDQLWDULR1DFLRQDO3XQWRVGH,QVSHFFLyQ)URQWHUL]RV GHVDQLGDGYHJHWDO 3,) (VWUXFWXUDRUJiQLFDIXQFLRQDO\ORFDOL]DFLyQJHRJUiILFD 7(0$ (OXVRVRVWHQLEOHGHORVSURGXFWRVILWRVDQLWDULRV'LUHFWLYD&(GHGHRFWXEUH\ 5HDO'HFUHWRGHGHVHSWLHPEUH(O3ODQGH$FFLyQ1DFLRQDOGHXVRVRVWHQLEOH GHORVSURGXFWRVILWRVDQLWDULRV,PSOHPHQWDFLyQGHOD*HVWLyQ,QWHJUDGDGH3ODJDVHQ(VSDxD 3URJUDPDV GH YLJLODQFLD GH OD FRPHUFLDOL]DFLyQ \ HO XVR GH ORV SURGXFWRV ILWRVDQLWDULR (/ 5232 %/248(,,, 7(0$ 'LVHxR\FRQVWUXFFLyQGHDORMDPLHQWRVSDUDHOJDQDGRJHQHUDOLGDGHVFRQWUROGHDPELHQWH FDUDFWHUtVWLFDVFRQVWUXFWLYDVVHUYLFLRV 7(0$ 'LVHxR\FRQVWUXFFLyQGHDORMDPLHQWRVSDUDHOJDQDGRYDFXQRYDFXQROHFKHURYDFXQRGH FUtDFHEDGHURV'HVFULSFLyQGHORVGLIHUHQWHVPRGHORV\GLPHQVLRQDGR 7(0$ &RQFHQWUDFLyQ SDUFHODULD QRUPDWLYD UHJXODGRUD HVWDWDO \ DXWRQyPLFD HO SURFHVR GH FRQFHQWUDFLyQSDUFHODULD(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ &DPLQRV UXUDOHV GLVHxR \ FRQVWUXFFLyQ 'RFXPHQWRV GHO SUR\HFWR FDUDFWHUtVWLFDV FRQVWUXFWLYDVPDWHULDOHV\PDTXLQDULDHPSOHDGD 7(0$ 2EUDV SDUD UHJDGtR 3HTXHxRV HPEDOVHV \ UHGHV GH GLVWULEXFLyQ 0DWHULDOHV \ FULWHULRV GH GLVHxR 7(0$ 3UR\HFWRVGHLQIUDHVWUXFWXUDUXUDO5HGDFFLyQGHSUR\HFWRV(YDOXDFLyQGH,PSDFWR$PELHQWDO 6XSHUYLVLyQGHSUR\HFWRV3ODQGHVHJXULGDG\VDOXG'LUHFFLyQGHREUDV&HUWLILFDFLRQHVGH REUDVLQFLGHQFLDVHQODVREUDV5HFHSFLyQOLTXLGDFLyQJDUDQWtDGHODVREUDV 7(0$ &RQWDELOLGDG DJUDULD &RQWDELOLGDG JHQHUDO \ DQDOtWLFD 0pWRGRV FRQWDEOHV 3DWULPRQLR \ EDODQFH%DODQFHWLSRGHODHPSUHVDDJUDULD$QiOLVLVILQDQFLHURGHOEDODQFH i Pág. 12561 boc.cantabria.es CVE-2019-3750 7(0$ 9DORUDFLyQ GH ILQFDV U~VWLFDV H LQVWDODFLRQHV DJUDULDV 0pWRGRV FOiVLFRV GH YDORUDFLyQ 0pWRGRV PRGHUQRV GH YDORUDFLyQ (O PHUFDGR GH ILQFDV &DUDFWHUtVWLFDV GHO PHUFDGR GH ILQFDVHQ&DQWDEULD)LMDFLyQGHOSUHFLRHQHOPHUFDGR 54/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 0LFURHFRQRPtD (FXDFLyQ IXQGDPHQWDO GHO EHQHILFLR HPSUHVDULDO 3ULQFLSDOHV LQGLFDGRUHV PLFURHFRQyPLFRV GH XQD H[SORWDFLyQ 2ULHQWDFLRQHV WpFQLFRHFRQyPLFDV GH ODV H[SORWDFLRQHV5HG&RQWDEOH$JUDULD&DUDFWHUtVWLFDVJHQHUDOHVGHODH[SORWDFLyQWLSR9DORU GHORVELHQHV\VHUYLFLRVREWHQLGRV&RVWHVGHSURGXFFLyQEDODQFHHFRQyPLFR5HVXOWDGRV GH H[SORWDFLyQ \ GLVWULEXFLyQ GH ORV PLVPRV ,QWHUUHODFLyQ GH UHVXOWDGRV PLFUR \ PDFURHFRQyPLFRV 7(0$ 6LVWHPDVGHLQIRUPDFLyQJHRJUiILFD)XQFLRQHVGHXQ6,*YHFWRULDO\GHXQ6,*UiVWHU ÈUHDV GH DSOLFDFLyQ HQ OD DJURQRPtD \ PHGLRV GH WUDQVPLVLyQ /D IRWRJUDPHWUtD \ OD WHOHGHWHFFLyQ GH VDWpOLWHV DSOLFDGDV D OD DJULFXOWXUD )XQGDPHQWRV 6,*3$& $SOLFDFLyQ DO FRQWUROGHD\XGDVGHOD3$& 7(0$ /D PHMRUD JHQpWLFD YHJHWDO 3ODQWDV DXWyJDPDV \ DOyJDPDV PHWRGRORJtDV \ WLSRV GH VHOHFFLyQ&UX]DPLHQWRV/DPHMRUDJHQpWLFDHQ&DQWDEULD 7(0$ 'LVHxR \ FRQVWUXFFLyQ GH LQGXVWULDV DJURDOLPHQWDULDV JHQHUDOLGDGHV HPSOD]DPLHQWR FDUDFWHUtVWLFDV FRQVWUXFWLYDV LQVWDODFLRQHV EiVLFDV QRUPDWLYD (O UHJLVWUR GH LQGXVWULDV DJURDOLPHQWDULDVIRUHVWDOHV\SHVTXHUDVGH&DQWDEULD 7(0$ 'LVHxR\FRQVWUXFFLyQGHLQGXVWULDVOiFWHDVSURGXFFLyQGHOHFKHOtTXLGDSDVWHXUL]DGD\8+7 GHVFULSFLyQGHORVSURFHVRV\ODVLQVWDODFLRQHVGLVWULEXFLyQ1RUPDWLYDHVSHFtILFD 7(0$ 'LVHxR \ FRQVWUXFFLyQ GH LQGXVWULDV OiFWHDV TXHVHUtDV GHVFULSFLyQ GHO SURFHVR \ ODV LQVWDODFLRQHVGLVWULEXFLyQ1RUPDWLYDHVSHFtILFD 7(0$ 'LVHxR \ FRQVWUXFFLyQ GH PDWDGHURV GH YDFXQR PDTXLQDULD GLVWULEXFLyQ 1RUPDWLYD HVSHFtILFD 7(0$ 6HFWRUYLWLYLQtFROD'RFXPHQWRVTXHDFRPSDxDQHOWUDQVSRUWHGHORVSURGXFWRVYLWLYLQtFRODV 5HJLVWURV'HFODUDFLRQHVREOLJDWRULDV 7(0$ 5HVLGXRVJDQDGHURV\GHLQGXVWULDVDJUDULDV'HSXUDFLyQYHUWLGR\HOLPLQDFLyQ3UREOHPiWLFD \DFWXDFLRQHV 7(0$ 0DTXLQDULD \ HTXLSRV 7LSRV \ FDUDFWHUtVWLFDV 0HFDQL]DFLyQ GH OD DJULFXOWXUD HVSDxROD \ FiQWDEUD+RPRORJDFLyQ\UHTXLVLWRVSDUDODFRPHUFLDOL]DFLyQGHODPDTXLQDULDHQ(VSDxD(O 5HJLVWUR2ILFLDOGH0DTXLQDULD$JUtFROD/tQHDVGHD\XGD 7(0$ 2UGHxR PHFiQLFR SDUD JDQDGR YDFXQR /D LQVWDODFLyQ GH RUGHxR PHFiQLFR 6LVWHPDV GH RUGHxR1RUPDWLYDHLQVWDODFLRQHV 7(0$ /DUHIULJHUDFLyQGHODOHFKH&XUYDGHHQIULDPLHQWR(OWDQTXHUHIULJHUDGRU&RQWUROGHFDOLGDG GHODOHFKHHQJUDQMD 7(0$ /D IRUPDFLyQ SURIHVLRQDO DJUDULD UHJODGD \ QR UHJODGD (O VLVWHPD HGXFDWLYR DFWXDO \ OD IRUPDFLyQSURIHVLRQDO/DGLIXVLyQGHOFRQRFLPLHQWRHQHOPHGLRUXUDO\DJUDULR6LWXDFLyQGH OD IRUPDFLyQ\ GH OD WUDQVIHUHQFLD GHO FRQRFLPLHQWRDJUDULR HQ &DQWDEULD /RV VLVWHPDV GH DVHVRUDPLHQWRDODVH[SORWDFLRQHV 7(0$ 3ROtWLFD GH LQYHVWLJDFLyQ GHVDUUROOR H LQQRYDFLyQ WHFQROyJLFD DJUDULD \ DOLPHQWDULD 3ODQLILFDFLyQSURJUDPDFLyQRUJDQL]DFLyQ\GLIXVLyQGHODLQYHVWLJDFLyQDJUDULD3URJUDPDV\ RUJDQL]DFLyQ/DLQQRYDFLyQWHFQROyJLFD\VXGLIXVLyQHQODDJULFXOWXUD 7(0$ /DFRPHUFLDOL]DFLyQDJUDULDSHVTXHUD\DOLPHQWDULD,QWHUGHSHQGHQFLDV(VFDORQHV\FLUFXLWRV FRPHUFLDOHVHQ(VSDxD\HQ&DQWDEULD3HFXOLDULGDGHVVHFWRULDOHV/DWUDQVSDUHQFLDGHORV PHUFDGRV/DLQIRUPDFLyQGHSUHFLRV7LSLILFDFLyQ\QRUPDOL]DFLyQ i Pág. 12562 boc.cantabria.es CVE-2019-3750 7(0$ /D LQYHVWLJDFLyQ DJUDULD HQ &DQWDEULD (QWLGDGHV LQYHVWLJDGRUDV /tQHDV GH LQYHVWLJDFLyQ 3ULQFLSDOHVSUR\HFWRVGHLQYHVWLJDFLyQ 55/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ $VRFLDFLRQLVPRDJUDULR\SHVTXHUR)yUPXODVDVRFLDWLYDV&RRSHUDWLYDV5pJLPHQMXUtGLFR 6RFLHGDGHV DJUDULDV GH WUDQVIRUPDFLyQ /DV DJUXSDFLRQHV GH SURGXFWRUHV DJUDULRV 2WUDV ILJXUDVDVRFLDWLYDV/D/H\GHIRPHQWRGHODLQWHJUDFLyQGHFRRSHUDWLYDV\GHRWUDVHQWLGDGHV DVRFLDWLYDV GH FDUiFWHU DJURDOLPHQWDULR 5HODFLRQHV FRQWUDFWXDOHV DJULFXOWXUDLQGXVWULDV DJURDOLPHQWDULDV6LWXDFLyQHQ&DQWDEULD 7(0$ /RV6HJXURV$JUDULRV&DUDFWHUtVWLFDV2EMHWLYRV(OVLVWHPDGHVHJXURVDJUDULRVFRPELQDGRV /RV3ODQHV$QXDOHVGHVHJXURVDJUDULRVILQHV\FRQWHQLGRV1LYHOHVGHLPSODQWDFLyQGHORV VHJXURVDJUDULRV6LWXDFLyQHQ&DQWDEULD 7(0$ /DVSULQFLSDOHVOH\HVDJUDULDV\SHVTXHUDVHVSDxRODV , /D/H\GH6HPLOODV\3ODQWDVGH 9LYHUR\GHUHFXUVRVILWRJHQpWLFRV/D/H\GH3URWHFFLyQGH2EWHQFLRQHV9HJHWDOHV/D/H\ GH 3HVFD 0DUtWLPD GHO (VWDGR /D /H\ GH ODV 2UJDQL]DFLRQHV ,QWHUSURIHVLRQDOHV $JURDOLPHQWDULDV CVE-2019-3750 7(0$ /DVSULQFLSDOHVOH\HVDJUDULDV\SHVTXHUDVHVSDxRODV ,, /D/H\GH5HIRUPD\'HVDUUROOR $JUDULR/D/H\GH0RGHUQL]DFLyQGHODV([SORWDFLRQHV$JUDULDV/D/H\GH$UUHQGDPLHQWRV 5~VWLFRV/D/H\GH0RQWHV\OD/H\GH0RQWHV9HFLQDOHVHQ0DQR&RP~Q i Pág. 12563 boc.cantabria.es 56/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 ,1*(1,(52'(&$0,126&$1$/(6<38(5726 0$7(5,$6(63(&Ë),&$6 %/248(,&$55(7(5$6<75$163257(6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12564 /D UHG GH FDUUHWHUDV GHO (VWDGR \ OD UHG GH FDUUHWHUDV GH &DQWDEULD DQWHV GHO (VWDGR $XWRQyPLFR (YROXFLyQ KLVWyULFD /DV WUDQVIHUHQFLDV HQ &DQWDEULD 5HDO 'HFUHWR GH GH IHEUHUR /D UHG GH FDUUHWHUDV GHO (VWDGR 5,*( HQ &DQWDEULD \ OD UHG $XWRQyPLFD GH &DQWDEULD &DWDORJDFLyQ FODVLILFDFLyQ \ GLDJQyVWLFRGHODVUHGHV5HGHV0XQLFLSDOHVGHFDUUHWHUDVHQ&DQWDEULD /H\GH&DUUHWHUDV3ULQFLSLRVTXHODLQIRUPDQ\DQiOLVLVGHVXFRQWHQLGR (O 5HJODPHQWR *HQHUDO GH &DUUHWHUDV GHO (VWDGR 5HDO 'HFUHWR GH GHVHSWLHPEUH /D/H\GHGHGLFLHPEUHGH&DUUHWHUDVGH&DQWDEULD3ULQFLSLRVTXHOD LQIRUPDQ\DQiOLVLVGHVXFRQWHQLGR $QiOLVLV \ FDUDFWHUtVWLFDV GHO WUiILFR (VWXGLR GH WUiILFR HQFXHVWDV \ DIRURV (O WUiILFR\ODVYtDV&DSDFLGDG1LYHOHVGHVHUYLFLR 3ODQLILFDFLyQ GH FDUUHWHUDV 2EMHWLYRV (VWXGLRV EiVLFRV &RQWHQLGR 3ODQHV 3URJUDPDV3ODQGHFDUUHWHUDVGH&DQWDEULD (VWXGLRV\ SUR\HFWRVGHFDUUHWHUDV&ODVLILFDFLyQ2EMHWR FRQWHQLGR\DOFDQFHGH FDGDXQRGHHOORV1RUPDWLYD7UDPLWDFLyQ\DSUREDFLyQ &DUDFWHUtVWLFDVJHRPpWULFDVGHODVFDUUHWHUDV3ODQWDDO]DGRVHFFLyQWUDQVYHUVDO LQWHUVHFFLRQHV \ HQODFHV 1RUPDV DFWXDOHV 3UREOHPDV HQ UHODFLyQ FRQ OD FRPRGLGDG\VHJXULGDG$PELHQWDFLyQ\HVWpWLFD0pWRGRVGHHVWXGLRGHOWUD]DGR /DDXWRPDWL]DFLyQHQFDUWRJUDItD&iOFXORPHFDQL]DGRGHOWUD]DGR$XWRPDWL]DFLyQ GH OD UHSUHVHQWDFLyQ JUiILFD 0HWRGRORJtD FRODERUDWLYD SDUD OD FUHDFLyQ \ JHVWLyQ GHXQSUR\HFWRGHFRQVWUXFFLyQ (VWXGLRV JHROyJLFRV \ JHRWpFQLFRV HQ OD WpFQLFD GH FDUUHWHUDV 2EOLJDWRULHGDG 5HFRQRFLPLHQWRV JHROyJLFRV \ JHRWpFQLFRV (O HVWXGLR JHRWpFQLFR HODERUDFLyQ \ PHWRGRORJtD 3UREOHPDV KDELWXDOHV HQ REUDV OLQHDOHV FDXVDV \ PHGLGDV GH WUDWDPLHQWR 2EUDVGHH[SODQDFLyQ(YROXFLyQ3UR\HFWR\HMHFXFLyQGHREUDVGHWLHUUD'UHQDMH VXSHUILFLDO\VXEWHUUiQHR1RUPDV\HVSHFLILFDFLRQHV$XVFXOWDFLyQ\H[SORWDFLyQ 2EUDV GH SDVR 3XHQWHV \ YLDGXFWRV %DVHV GH GLVHxR 0pWRGRV FRQVWUXFWLYRV \ PHGLRVDX[LOLDUHV1RUPDVDSOLFDEOHVDVXSUR\HFWR\FRQVWUXFFLyQ,QVWDODFLRQHV ([SORWDFLyQFRQVHUYDFLyQHLQVSHFFLyQ boc.cantabria.es CVE-2019-3750 57/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12565 7~QHOHV HQ FDUUHWHUDV +LVWRULD \ GHVDUUROOR (VWXGLRV SUHYLRV 3UR\HFWR \ FRQVWUXFFLyQ,QVWDODFLRQHV([SORWDFLyQ 3UR\HFWRV \ FRQVWUXFFLyQ GH ILUPHV )LUPHV IOH[LEOHV \ ILUPHV UtJLGRV 0DWHULDOHV XWLOL]DGRV 'LPHQVLRQDPLHQWR 1RUPDWLYD &ULWHULRV GH VHOHFFLyQ &DSDV JUDQXODUHV &DSDV HVWDELOL]DGDV \ EDVHV WUDWDGDV 7UDWDPLHQWRV VXSHUILFLDOHV 0H]FODVELWXPLQRVDV3DYLPHQWRVGHKRUPLJyQ 5HFRQRFLPLHQWR GH ILUPHV &DUDFWHUtVWLFDV VXSHUILFLDOHV GH ORV SDYLPHQWRV 5HVLVWHQFLD DO GHVOL]DPLHQWR \ JHRPHWUtD VXSHUILFLDO 5HQRYDFLyQ VXSHUILFLDO \ UHIXHU]RGHILUPHV0pWRGRVGHDXVFXOWDFLyQ\SUR\HFWR1RUPDWLYD &RQVWUXFFLyQGHFDUUHWHUDV6LVWHPDVGHFRQVWUXFFLyQ2UJDQL]DFLyQGHODVREUDV 6HJXLPLHQWR&RQWUROJHRPpWULFRFXDQWLWDWLYR\FXDOLWDWLYR0DTXLQDULD5HODFLRQHV HQWUH OD $GPLQLVWUDFLyQ \ ODV (PSUHVDV FRQVWUXFWRUDV DVSHFWRV UHOHYDQWHV 6HxDOL]DFLyQGHREUDV 2UJDQL]DFLyQ GH OD FRQVHUYDFLyQ GH FDUUHWHUDV 7LSRV GH RSHUDFLRQHV 9LDOLGDG LQYHUQDO 6HxDOL]DFLyQ EDOL]DPLHQWR EDUUHUDV GH VHJXULGDG ,OXPLQDFLyQ \ VHPiIRURV 3ODQWDFLRQHV HTXLSRV \ PDTXLQDULD 0pWRGRV GH JHVWLyQ 3ODQHV \ SURJUDPDV ([SORWDFLyQ GH FDUUHWHUDV 2UGHQDFLyQ \ UHJXODFLyQ GH OD FLUFXODFLyQ 5HJXODFLyQ GHO WUiILFR 'HIHQVD GH OD FDUUHWHUD OLPLWDFLRQHV D OD SURSLHGDG =RQDV GH LQIOXHQFLD\GLVWDQFLDVDSOLFDEOHVDODUHGGHFDUUHWHUDVGHO(VWDGR\DODUHGGH FDUUHWHUDVGH&DQWDEULD 6HJXULGDG YLDO (VWXGLRV \ HVWDGtVWLFDV GH DFFLGHQWHV )DFWRUHV FRQGLFLRQDQWHV 0HGLGDVGHVHJXULGDGËQGLFHVGHSHOLJURVLGDG$QiOLVLVGHFRVWHV /DV FDUUHWHUDV \ HO PHGLR XUEDQR 7UDPRV 8UEDQRV \ 7UDYHVtDV HQ OD UHG GH FDUUHWHUDVDXWRQyPLFDV5HODFLRQHVFRQODOHJLVODFLyQGHO6XHOR&RPSHWHQFLDVHQ OD UHG $XWRQyPLFD \ HQ ODV UHGHV 0XQLFLSDOHV GH &DQWDEULD GH OD $GPLQLVWUDFLyQ $XWRQyPLFDGH&DQWDEULD\GHODV&RUSRUDFLRQHV/RFDOHV\RWUDV(QWLGDGHV /H\GHGHMXOLRGHRUGHQDFLyQGHORVWUDQVSRUWHVWHUUHVWUHV3ULQFLSLRV TXHODLQIRUPDQ\DQiOLVLVGHVXFRQWHQLGR /DSROtWLFDGHWUDQVSRUWHVHQ(VSDxD\VXUHODFLyQFRQRWUDVSROtWLFDVVHFWRULDOHV 3ULQFLSDOHV GLVSRVLFLRQHV YLJHQWHV VREUH OD PDWHULD 2UGHQDFLyQ GHO WHUULWRULR (QHUJtD 7XULVPR 0HGLR DPELHQWH 3ULQFLSLRV \ QRUPDWLYD PiV GHVWDFDEOH GH OD 8QLyQ (XURSHD HQ PDWHULD GH SROtWLFD GH WUDQVSRUWHV 5HGHV WUDQVHXURSHDV GH WUDQVSRUWH (O WUDQVSRUWH LQWHUXUEDQR GH YLDMHURV \ GH PHUFDQFtDV SRU FDUUHWHUD &DUDFWHUtVWLFDV(YROXFLyQ/RVWUDQVSRUWHVHVSHFLDOHV1RUPDWLYDYLJHQWH /DV HVWDFLRQHV GH DXWREXVHV &RVWHV \ WDULIDV (YROXFLyQ /RV DSDUFDPLHQWRV GH GLVXDVLyQ/RVLQWHUFDPELDGRUHVPRGDOHV1RUPDWLYDYLJHQWH (VWDFLRQHV GH PHUFDQFtDV 1RUPDWLYD YLJHQWH /DV HVWDFLRQHV GH FDPELR PRGDO /DVHVWDFLRQHVGHFRQWHQHGRUHV /DOLEHUDOL]DFLyQGHOWUDQVSRUWHIHUURYLDULR1RUPDWLYDHXURSHD(OQXHYRPRGHORGH OD/H\GHGHVHSWLHPEUHGHO6HFWRU)HUURYLDULRFRQFHSWRVEiVLFRVGH IXQFLRQDPLHQWR GHO VLVWHPD /RV HQWHV $',) )(9( 5(1)(2SHUDGRUD ,QIUDHVWUXFWXUDVIHUURYLDULDVHQ&DQWDEULD /RV WUDQVSRUWHV PDUtWLPRV \ DpUHRV &DUDFWHUtVWLFDV (YROXFLyQ 1RUPDWLYD DSOLFDEOH boc.cantabria.es CVE-2019-3750 58/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7UDQVSRUWHV SRU WXEHUtD \ SRU FDEOH ,QVWDODFLRQHV &DUDFWHUtVWLFDV (YROXFLyQ 6LWXDFLyQDFWXDO\SHUVSHFWLYDV1RUPDWLYDYLJHQWH /DGHPDQGDGHOWUDQVSRUWH(ODVWLFLGDGHV)DFWRUHVFXDOLWDWLYRVGHODGHPDQGD(O SUREOHPDGHODVSXQWDV&RVWHV3XQWRGHYLVWDHFRQyPLFRSULYDGR3XQWRGHYLVWD HFRQyPLFR VRFLDO &RVWHV GH FRQJHVWLyQ DFFLGHQWHV LQFLGHQFLD VREUH HO PHGLR DPELHQWH 0RGRV GH PRYLOLGDG VRVWHQLEOH &DUULOHV %LFL 'LVHxR PDWHULDOHV VHxDOL]DFLyQ 3ODQ GH PRYLOLGDG FLFOLVWD GH &DQWDEULD 3HDWRQHV ,WLQHUDULRV VHJXURV $FFHVLELOLGDG1RUPDWLYDGHDFFHVLELOLGDG %/248(,,+,'52/2*Ë$(+,'5È8/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12566 7H[WRUHIXQGLGRGHOD/H\GH$JXDV\5HJODPHQWRGHO'RPLQLR3~EOLFR+LGUiXOLFR 'RPLQLR 3~EOLFR +LGUiXOLFR DJXDV S~EOLFDV \ SULYDGDV 8WLOL]DFLyQ GHO 'RPLQLR 3~EOLFR +LGUiXOLFR VHUYLGXPEUHV XVRV FRPXQHV \ SULYDWLYRV FRQFHVLRQHV \ DXWRUL]DFLRQHV UHJLVWUR GH DJXDV 3URWHFFLyQ GHO 'RPLQLR 3~EOLFR +LGUiXOLFR ]RQDVGHVHUYLGXPEUH\GHSROLFtD 'LUHFWLYD0DUFRGH$JXDV2EMHWLYRVPHGLRDPELHQWDOHV7LSRVGHPDVDGHDJXD FDUDFWHUL]DFLyQ GH PDVDV GH DJXD SUHVLRQHV H LPSDFWRV (VWDGR HFROyJLFR SRWHQFLDO HFROyJLFR \ GHVLJQDFLyQ GH PDVDV DUWLILFLDOHV \ PX\ PRGLILFDGDV &DUDFWHUtVWLFDVGHODGHPDUFDFLyQKLGURJUiILFD5HFXSHUDFLyQGHFRVWHV3URJUDPD GHPHGLGDV3ODQHVKLGUROyJLFRVGHGHPDUFDFLyQ'LUHFWLYDVUHODFLRQDGDV /HJLVODFLyQGHDJXDVHQUHODFLyQDODFDOLGDGGHODJXD9HUWLGRVDOGRPLQLRS~EOLFR KLGUiXOLFR \ YHUWLGRV DO OLWRUDO OHJLVODFLyQ GH DSOLFDFLyQ 'HFODUDFLyQ GH YHUWLGRV $XWRUL]DFLRQHV GH YHUWLGRV HQ &DQWDEULD 5HJODPHQWR GHO 6HUYLFLR 3~EOLFR GH 6DQHDPLHQWR\'HSXUDFLyQGH$JXDV5HVLGXDOHVGH&DQWDEULD'HFUHWR GHGHPDU]R /D 5HG 1DWXUD /XJDUHV GH ,PSRUWDQFLD &RPXQLWDULD /,& /RV /,&V HQ &DQWDEULD /DV]RQDVK~PHGDV,QYHQWDULR/DGHOLPLWDFLyQGH]RQDVK~PHGDV0HFDQLVPRV GH SURWHFFLyQ \ FRQVHUYDFLyQ GH ODV ]RQDV K~PHGDV 5HKDELOLWDFLyQ R UHVWDXUDFLyQ'LUHFWLYDVGH+iELWDWV\GH$YHV (O UpJLPHQ HFRQyPLFR ILQDQFLHUR GH OD /H\ GH $JXDV &DQRQ GH RFXSDFLyQ R XWLOL]DFLyQ (O FDQRQ GH FRQWURO GH YHUWLGRV &DQRQ GH UHJXODFLyQ \ WDULID GH XWLOL]DFLyQ GHO DJXD 'LVWULEXFLyQ HQWUH ORV EHQHILFLDULRV &DQRQ SRU XWLOL]DFLyQ GH ODVDJXDVFRQWLQHQWDOHVSDUDODSURGXFFLyQGHHQHUJtDHOpFWULFD 2EMHWLYRV JHQHUDOHV GH OD SODQLILFDFLyQ KLGUROyJLFD /D /H\ GH $JXDV \ VXV 5HJODPHQWRV HQ UHODFLyQ FRQ OD SODQLILFDFLyQ KLGUROyJLFD (O SURFHVR GH SODQLILFDFLyQKLGUROyJLFR\GLVHxRGHO3URJUDPDGH0HGLGDV&RQWHQLGRQRUPDWLYR GH ORV 3ODQHV +LGUROyJLFRV (O 3ODQ +LGUROyJLFR 1DFLRQDO /D /H\ GHO 3ODQ +LGUROyJLFR1DFLRQDO boc.cantabria.es CVE-2019-3750 59/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12567 (YDOXDFLyQ GH UHFXUVRV H[LVWHQWHV UHFXUVRV HQ UpJLPHQ QDWXUDO UHFXUVRV GLVSRQLEOHV \ UHFXUVRV OLEUHV /DV GHPDQGDV /D GHPDQGD PHGLRDPELHQWDO %DODQFHV KLGUiXOLFRV /RV VLVWHPDV GH H[SORWDFLyQ GH UHFXUVRV 0RGHORV GH RSWLPL]DFLyQ \ VLPXODFLyQ GH UHFXUVRV 5DVJRV GHO EDODQFH KLGUiXOLFR QDFLRQDO \ GH&DQWDEULD +LGURORJtD&LFORKLGUROyJLFR/DUHGGHDIRURVHO6$,+HO6$,&$ODUHG,&$\OD UHGGHFRQWUROGHODVDJXDVVXEWHUUiQHDV/RV6,*\VXDSOLFDFLyQDODJHVWLyQGH ORVUHFXUVRVKLGUiXOLFRV 5HJXODFLyQ*DUDQWtDGHODUHJXODFLyQ&ULWHULRVGHJDUDQWtD0RGHORVPDWHPiWLFRV GHUHJXODFLyQ/H\HVGHGLVWULEXFLyQGHDSRUWDFLRQHV +LGURORJtDGHODVDJXDVVXEWHUUiQHDV8WLOL]DFLyQ\DSURYHFKDPLHQWRGHODVDJXDV VXEWHUUiQHDVUpJLPHQGHH[SORWDFLyQ0DVDVGHDJXDVXEWHUUiQHDVHQULHVJRGH QR DOFDQ]DU HO EXHQ HVWDGR FXDQWLWDWLYR R TXtPLFR 7pFQLFDV GH LQYHVWLJDFLyQ KLGURJHROyJLFD\HYDOXDFLyQGHUHFXUVRV 8VRV GH DJXD HQ DEDVWHFLPLHQWR D SREODFLRQHV 3URJQRVLV GH OD GHPDQGD GH DEDVWHFLPLHQWR 'RWDFLRQHV 3pUGLGDV HQ OD UHG GH GLVWULEXFLyQ &DSWDFLRQHV GH DJXDV VXSHUILFLDOHV \ VXEWHUUiQHDV WLSRV 3HUtPHWURV GH SURWHFFLyQ GH FDSWDFLRQHV /D*HVWLyQGHODJXDHQ&DQWDEULD,QIUDHVWUXFWXUDHQPDWHULDGHDEDVWHFLPLHQWRGH &DQWDEULD/RV3ODQHV+LGUiXOLFRV(OELWUDVYDVH/DDXWRYtDGHODJXD 7pFQLFDV HVSHFLDOHV H LQGLUHFWDV SDUD LQFUHPHQWDU OD HILFDFLD GH ORV UHFXUVRV GHO DJXD$FWXDFLRQHVVREUHODRIHUWDGHUHFXUVRV5HXWLOL]DFLyQGHDJXDVUHVLGXDOHV $FWXDFLRQHVVREUHODGHPDQGDVROXFLRQHVOHJDOHVWpFQLFDV\GHJHVWLyQ &RQGLFLRQHV GH SRWDELOLGDG GHO DJXD 7pFQLFDV GH SRWDELOL]DFLyQ GHVDODFLyQ \ WpFQLFDV GH WUDWDPLHQWR GH DJXDV LQGXVWULDOHV 3UHWUDWDPLHQWRV \ SRVWUDWDPLHQWRV QHFHVDULRV(VWDFLRQHVGHWUDWDPLHQWRGHDJXDSRWDEOH /H\GH&DQWDEULDGHGHQRYLHPEUHGH$EDVWHFLPLHQWR\6DQHDPLHQWR GH $JXDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 3ULQFLSLRV LQIRUPDGRUHV DQiOLVLVGHVXFRQWHQLGR 'HFUHWR GH GH PD\R SRU HO TXH VH DSUXHED GHILQLWLYDPHQWH HO 3ODQ *HQHUDOGH$EDVWHFLPLHQWR\6DQHDPLHQWRGH&DQWDEULD'HFUHWRGH GHPD\RSRUHOTXHVHDSUXHEDHO5HJODPHQWRGH5pJLPHQ(FRQyPLFR)LQDQFLHUR GHO DEDVWHFLPLHQWR \ VDQHDPLHQWR GH DJXDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'HSXUDFLyQ GH DJXDV UHVLGXDOHV &RQWURO H tQGLFH GH FRQWDPLQDFLyQ $XWRGHSXUDFLyQ HQ FXUVRV QDWXUDOHV 7HFQRORJtD GH OD GHSXUDFLyQ ILVLFRTXtPLFD SUHWUDWDPLHQWR \ WUDWDPLHQWRV SULPDULRV 7HFQRORJtD GH HOLPLQDFLyQ ELROyJLFD GH QXWULHQWHVWUDWDPLHQWRVVHFXQGDULRV7HFQRORJtDGHOWUDWDPLHQWRWHUFLDULRILOWUDFLyQ \ HVWHULOL]DFLyQ 7UDWDPLHQWRV DYDQ]DGRV GH HOLPLQDFLyQ GH QXWULHQWHV IyVIRUR \ QLWUyJHQR7UDWDPLHQWR\YDORUL]DFLyQGHIDQJRV(VWDFLRQHVGHSXUDGRUDVGHDJXDV UHVLGXDOHV 'HSXUDFLyQGHSHTXHxRVQ~FOHRV)RVDVpSWLFD7DQTXHGHGHFDQWDFLyQGLJHVWLyQ 3R]RV\]DQMDVILOWUDQWHV/HFKRVEDFWHULDQRV/DJXQDMH6LVWHPDVGHDSOLFDFLyQDO WHUUHQR boc.cantabria.es CVE-2019-3750 60/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 3UREOHPDV GH FRQWDPLQDFLyQ HQ UHODFLyQ FRQ ORV HIOXHQWHV LQGXVWULDOHV 5HXWLOL]DFLyQ GH HIOXHQWHV LQGXVWULDOHV (YDOXDFLyQ GH OD FDUJD FRQWDPLQDQWH SRU VHFWRU LQGXVWULDO &DWHJRUL]DFLyQ GHO VHFWRU LQGXVWULDO &DUDFWHUtVWLFDV GH ORV HIOXHQWHV6HOHFFLyQGHSDUiPHWURVFRQWDPLQDQWHVDHIHFWRVGHHVWDEOHFLPLHQWRGH QLYHOHV GH HPLVLyQ 7HFQRORJtDV GLVSRQLEOHV SDUD UHGXFLU OD FRQWDPLQDFLyQ GH HIOXHQWHV0HGLGDVLQWHUQDV\WUDWDPLHQWRGHHIOXHQWHV /RVHIHFWRVGHOVHFWRUJDQDGHURHQODFDOLGDGGHODVDJXDV(YDOXDFLyQFXDQWLWDWLYD \ FXDOLWDWLYD GH ORV FRQWDPLQDQWHV 0HGLGDV GH FRQWURO \ WUDWDPLHQWR GH OD FRQWDPLQDFLyQ(IHFWRGHORVYHUWLGRVHQORVFDXFHVS~EOLFRVVXEVXHOR\UHGHVGH FROHFWRUHV/HJLVODFLyQDSOLFDEOH (QHUJtD$SURYHFKDPLHQWRVKLGUiXOLFRVFRQYHQFLRQDOHV&HQWUDOHVGHDFXPXODFLyQ R GH ERPEHR \ GH XVRV P~OWLSOHV &HQWUDOHV WpUPLFDV FRQYHQFLRQDOHV &HQWUDOHV QXFOHDUHV&HQWUDOHVWHUPRVRODUHV2EUDVFLYLOHVGHFDUiFWHUKLGURHOpFWULFR 2WURV XVRV GHO DJXD (O DJXD HQ OD LQGXVWULD (YDOXDFLyQ GH QHFHVLGDGHV 5HIULJHUDFLyQGHODVFHQWUDOHVWpUPLFDVGHFRPEXVWLyQ&DORUDGLVLSDU&DXGDOGH UHIULJHUDFLyQ\GHGLOXFLyQ1DYHJDFLyQIOXYLDO8VRVUHFUHDWLYRV /DV REUDV KLGUiXOLFDV &RQFHSWR \ QDWXUDOH]D MXUtGLFD GH ODV REUDV KLGUiXOLFDV FRPSHWHQFLDV SDUD OD HMHFXFLyQ JHVWLyQ \ H[SORWDFLyQ GH ODV REUDV KLGUiXOLFDV S~EOLFDVSUHUURJDWLYDVGHODVREUDVKLGUiXOLFDVGHLQWHUpVJHQHUDOFRRUGLQDFLyQGH FRPSHWHQFLDV FRQFXUUHQWHV GHFODUDFLyQ GH XWLOLGDG S~EOLFD \ GHFODUDFLyQ GH LQWHUpVJHQHUDO&RQWUDWRGHFRQFHVLyQGHREUDVKLGUiXOLFDV 3UHVDV*HQHUDOLGDGHV&ULWHULRVGHSUR\HFWR&ODVLILFDFLyQ3UHVDVGHIiEULFD\GH PDWHULDOHVVXHOWRVÏUJDQRVGHGHVDJHGHODSUHVD 1RUPDWLYD GH VHJXULGDG GH SUHVDV HPEDOVHV \ EDOVDV 5pJLPHQ FRPSHWHQFLDO *HVWLyQGHVHJXULGDGGHODVSUHVDV,QYHQWDULRGHSUHVDV\HPEDOVHV3ODQHVGH HPHUJHQFLD\UHYLVLRQHVGHVHJXULGDGGHODVSUHVDV (OPHGLRDPELHQWHHQODH[SORWDFLyQGHORVUHFXUVRVKtGULFRV(XWURIL]DFLyQGHODV PDVDVGHDJXD5LTXH]DIDXQtVWLFDËQGLFHVGHGLYHUVLGDG&DXGDOHVHFROyJLFRV &DQDOHV \ FRQVWUXFFLRQHV HQ FDUJD 5HYHVWLPLHQWRV MXQWDV \ REUDV VLQJXODUHV 5HGHV GH GLVWULEXFLyQ GH DJXD SRWDEOH 5HGHV GH VDQHDPLHQWR (PLVDULRV VXEPDULQRV'HSyVLWRV&RQVWUXFFLyQH[SORWDFLyQ\FRQVHUYDFLyQ $YHQLGDV\VHTXtDV3UHYLVLyQ\FiOFXORGHPi[LPDVFUHFLGDV&DUDFWHUL]DFLyQGH VHTXtDV/DVHTXtDPHWHRUROyJLFDKLGUROyJLFD\RSHUDFLRQDOSODQHVHVSHFLDOHVGH DOHUWD \ HYHQWXDO VHTXtD 5HDO 'HFUHWR GH GH MXOLR GH HYDOXDFLyQ \ JHVWLyQ GH ULHVJRV GH LQXQGDFLyQ PDSDV GH SHOLJURVLGDG \ GH ULHVJR GH LQXQGDFLyQ \ SODQHV GH JHVWLyQ GH ULHVJR GH LQXQGDFLyQ 2EUDV IOXYLDOHV HQ JHQHUDO 3URWHFFLyQ FRUUHFFLyQ \ UHJXODUL]DFLyQ GH FDXFHV (QFDX]DPLHQWRV 'HIHQVDGHSREODFLRQHV (VWDFLRQHV GH ERPEHR &RQFHSWRV EiVLFRV 7LSRV GH ERPEDV &DUDFWHUtVWLFDV VHOHFFLyQ WUDQVLWRULRV 3URWHFFLyQ \ WLSRV GH HVWDFLRQHV (VWDFLRQHV GH VREUHSUHVLyQ(OHPHQWRVFRQVWUXFWLYRV,QJHQLHUtDGHLPSXOVLRQHV7UD]DGRWLSRV\ FiOFXOR )tVLFD GH FXHQFDV 3UHFLSLWDFLyQ PHGLD GH &DQWDEULD &iOFXOR GH DSRUWDFLyQ GH FXHQFDV )XQFLyQ GH WUDQVIHUHQFLD OOXYLDFDXGDO (YDSRWUDQVSLUDFLyQ 7LHPSR GH FRQFHQWUDFLyQ/DPLQDFLyQGHFDXGDOHV&iOFXORGHDSRUWDFLyQGHDJXDVSOXYLDOHV i Pág. 12568 boc.cantabria.es CVE-2019-3750 61/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,,, &267$638(572685%$1,602<&2175$7$&,Ï1$'0,1,675$7,9$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12569 /D/H\GH&RVWDVGH\VX5HJODPHQWR([SRVLFLyQGHPRWLYRV-XVWLILFDFLyQ GHVXSURPXOJDFLyQ(VWUXFWXUD/DV6HQWHQFLDVGHO7ULEXQDO&RQVWLWXFLRQDOVREUH OD/H\\HO5HJODPHQWRGH&RVWDV3ULQFLSDOHV)XQGDPHQWRV-XUtGLFRV\FDPELRV LQWURGXFLGRV 8WLOL]DFLyQ GHO GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH 'LVSRVLFLRQHV *HQHUDOHV 5pJLPHQ GH XWLOL]DFLyQ HQ SOD\DV 3UR\HFWRV \ REUDV HQ HO GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH &RQWHQLGR GHO SUR\HFWR (VWXGLRV FRPSOHPHQWDULRV 5HVHUYDV $GVFULSFLRQHV $XWRUL]DFLRQHV \ &RQFHVLRQHV 9HUWLGRV HQ HO GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH /LPLWDFLRQHV D OD SURSLHGDG VREUH ORV WHUUHQRV FRQWLJXRV D OD ULEHUDGHOPDU5pJLPHQFRPSHWHQFLDO ,QJHQLHUtDGHFRVWDV'LQiPLFDOLWRUDO7UDQVSRUWHVOLWRUDOHV*HRPRUIRORJtD2EUDV GH GHIHQVD \ UHJHQHUDFLyQ GH FRVWDV \ SOD\DV FULWHULRV GH GLVHxR 2EUDV GH GUDJDGRV REMHWLYRV PpWRGRV \ WLSRV GH GUDJDV &ULWHULRV GH VHOHFFLyQ ,PSDFWR DPELHQWDO 5HDO 'HFUHWR /HJLVODWLYR GH GH VHSWLHPEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GH 3XHUWRV GHO (VWDGR \ GH OD 0DULQD 0HUFDQWH 3ULQFLSLRVLQIRUPDGRUHV$QiOLVLVGHVXFRQWHQLGR /H\GH&DQWDEULDGHGHQRYLHPEUHGH3XHUWRVGH&DQWDEULD'HFUHWRV GHWUDQVIHUHQFLDVHQPDWHULDGHSXHUWRVDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 3ODQGHSXHUWRVHLQVWDODFLRQHVSRUWXDULDVGH&DQWDEULD 2EUDVPDUtWLPDVH[WHULRUHV7LSRVGHHVWUXFWXUDVGHSURWHFFLyQ(OHPHQWRVGHORV GLTXHV2ODGHFiOFXORHQIXQFLyQGHOWLSRGHREUD 2EUDVSRUWXDULDVGHDWUDTXH\DPDUUH&DUDFWHUtVWLFDV\FODVLILFDFLyQ&RQFHSFLyQ \GLPHQVLRQDPLHQWRJHQHUDO7LSRORJtDHVWUXFWXUDO 3XHUWRV SDUD OD IORWD GHSRUWLYD \ GH UHFUHR 6X HVTXHPD HQ SODQWD 2EUDV H LQVWDODFLRQHV'LVWULEXFLyQGHVX]RQDGHVHUYLFLR(VWXGLRHFRQyPLFR/RVSXHUWRV SHVTXHURV2UJDQL]DFLyQGHODVLQVWDODFLRQHV /D FRQWDPLQDFLyQ )XHQWHV \ DJHQWHV 1LYHOHV GH HPLVLyQ \ GH LQPLVLyQ /RV HVWiQGDUHV R QRUPDV GH PHGLR DPELHQWH 5HVLGXRV VyOLGRV XUEDQRV H LQGXVWULDOHV&RPSRVLFLyQ3ODQHV\SURJUDPDVGHJHVWLyQ/HJLVODFLyQDSOLFDEOH (OLPSDFWRDPELHQWDOFULWHULRVGHHYDOXDFLyQ/H\GHGHGLFLHPEUHGH HYDOXDFLyQ DPELHQWDO /H\ GH GH GLFLHPEUH GH FRQWURO DPELHQWDO LQWHJUDGRGH&DQWDEULD 5HDO 'HFUHWR /HJLVODWLYR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO WH[WRUHIXQGLGRGHOD/H\GHSUHYHQFLyQ\FRQWUROLQWHJUDGRVGHODFRQWDPLQDFLyQ ([SURSLDFLyQ IRU]RVD &RQFHSWR \ IXQGDPHQWR 3URFHGLPLHQWR JHQHUDO 3URFHGLPLHQWRVHVSHFLDOHV 8UEDQLVPRHYROXFLyQKLVWyULFD/DVHQWHQFLDGHO7ULEXQDO&RQVWLWXFLRQDO GHGHPDU]R5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVH DSUXHEDHO7H[WRUHIXQGLGRGHOD/H\GH6XHOR\5HKDELOLWDFLyQ8UEDQD /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ 8UEDQtVWLFRGHO6XHOR9LVLyQGHFRQMXQWR\UpJLPHQWUDQVLWRULR boc.cantabria.es CVE-2019-3750 62/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 7(0$ 2UGHQDFLyQGHOWHUULWRULR5HODFLyQHQWUHODRUGHQDFLyQGHOWHUULWRULR\HOXUEDQLVPR 9DORUHV\XVRVGHOVXHOR6XHORU~VWLFR ,QVWUXPHQWRV GH SODQHDPLHQWR WHUULWRULDO \ XUEDQtVWLFR HQ OD /H\ GH &DQWDEULD GHGHMXQLR (O 3ODQ *HQHUDO GH 2UGHQDFLyQ 8UEDQD REMHWR \ GHWHUPLQDFLRQHV )RUPDFLyQ DSUREDFLyQ \ YLJHQFLD 5HYLVLyQ \ VXVSHQVLyQ 0RGLILFDFLyQ GH ORV SODQHV 3XEOLFLGDG(OSODQHDPLHQWRHQORVSHTXHxRVPXQLFLSLRV/DFODVLILFDFLyQGHOVXHOR 3ODQ GH 2UGHQDFLyQ GHO /LWRUDO 3ODQ (VSHFLDO GH OD %DKtD GH 6DQWDQGHU 3ODQ HVSHFLDOGHOD5HGGH6HQGDV\&DPLQRVGHO/LWRUDO 1RUPDV8UEDQtVWLFDV5HJLRQDOHVGH&DQWDEULD /D LQVWUXFFLyQ GH +RUPLJyQ (VWUXFWXUDO (+( DSUREDGD SRU HO 5HDO 'HFUHWR GHGHMXOLR$QiOLVLVGHVXFRQWHQLGR /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV\HO5HDO 'HFUHWR GH GH HQHUR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ3ULQFLSLRVTXHORLQIRUPDQDQiOLVLVGHVXFRQWHQLGR6X DSOLFDFLyQDODVREUDVS~EOLFDVFRQWUDWDGDV (O 5HDO 'HFUHWR GH GH RFWXEUH SRU HO TXH VH HVWDEOHFHQ ODV FRQGLFLRQHV PtQLPDV GH VHJXULGDG \ VDOXG HQ ODV REUDV GH FRQVWUXFFLyQ %UHYH UHIHUHQFLDDOD/H\GHGHQRYLHPEUHGHRUGHQDFLyQGHODHGLILFDFLyQ /D/H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFR3ULQFLSLRVTXH ODLQIRUPDQ\DQiOLVLVJOREDOGHVXFRQWHQLGR'HORVUHTXLVLWRVSDUDFRQWUDWDUFRQ OD$GPLQLVWUDFLyQ'HORVSOLHJRV\GHODVDFWXDFLRQHVSUHYLDVDODOLFLWDFLyQ 'H OD DGMXGLFDFLyQ \ HMHFXFLyQ GHO FRQWUDWR GH REUDV 3URFHGLPLHQWRV GH DGMXGLFDFLyQ GH OD HMHFXFLyQ \ PRGLILFDFLyQ GHO FRQWUDWR UHVROXFLyQ SDJR GHO SUHFLR\H[WLQFLyQGHOFRQWUDWR 'H OD HMHFXFLyQ GHO FRQWUDWR GH REUDV FODVLILFDFLyQ GHO FRQWUDWLVWD UHYLVLRQHV GH SUHFLRV UHFHSFLyQ 3HQDOLGDGHV 6XEFRQWUDWDFLyQ 'H ODV REUDV SRU $GPLQLVWUDFLyQ&RQWUDWRVPHQRUHVGHREUDV 'HORVFRQWUDWRVGHVHUYLFLRVGHODVDFWXDFLRQHVDGPLQLVWUDWLYDVSUHSDUDWRULDVGH ORV SURFHGLPLHQWRV GH DGMXGLFDFLyQ GH OD HMHFXFLyQ \ PRGLILFDFLyQ 3DJR GHO SUHFLR UHYLVLyQ GH SUHFLRV H[WLQFLyQ GHO FRQWUDWR UHFHSFLyQ 6XEVDQDFLyQ GH HUURUHV\UHVSRQVDELOLGDGHVHQODHODERUDFLyQGHSUR\HFWRVGHFRQVWUXFFLyQ 'HORVFRQWUDWRVGHFRQFHVLyQGHVHUYLFLRV\GHOFRQWUDWRGHVXPLQLVWURV$VSHFWRV HVHQFLDOHV GH OD OHJLVODFLyQ GH HVWRV FRQWUDWRV &RQWUDWRV GH FRQFHVLyQ GH REUD S~EOLFD(QFRPLHQGDVGHJHVWLyQ i Pág. 12570 boc.cantabria.es 63/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 ,1*(1,(52'(0217(6 0$7(5,$6(63(&Ë),&$6 %/248(, i Pág. 12571 7(0$ /D /H\ GH GH QRYLHPEUH GH 0RQWHV \ VXV PRGLILFDFLRQHV ÈPELWR GH DSOLFDFLyQ3ULQFLSLRVJHQHUDOHV&RQFHSWRGHPRQWH&ODVLILFDFLyQ\UpJLPHQMXUtGLFRGH ORVPRQWHV(O&DWiORJRGHPRQWHVGHXWLOLGDGS~EOLFD 7(0$ /D /H\ GH GH QRYLHPEUH GH 0RQWHV \ VXV PRGLILFDFLRQHV 5HFXSHUDFLyQ SRVHVRULD \ GHVOLQGH GH PRQWHV S~EOLFRV 5pJLPHQ GH ORV PRQWHV SULYDGRV *HVWLyQ IRUHVWDO VRVWHQLEOH 3ODQLILFDFLyQ IRUHVWDO 2UGHQDFLyQ GH PRQWHV $SURYHFKDPLHQWRV IRUHVWDOHV 7(0$ /D /H\ GH GH QRYLHPEUHGH 0RQWHV \VXV PRGLILFDFLRQHV&RQVHUYDFLyQ \ SURWHFFLyQ GH PRQWHV 8VRV GHO VXHOR 5HVWDXUDFLyQ KLGUROyJLFRIRUHVWDO ,QFHQGLRV IRUHVWDOHV6DQLGDG\JHQpWLFDIRUHVWDO5pJLPHQVDQFLRQDGRUHQPDWHULDGHPRQWHV 7(0$ ,QFHQGLRVIRUHVWDOHVQRUPDWLYDHVWDWDO(O'HFUHWRGHGHIHEUHURSRUHOTXH VHDSUXHEDHO3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD VREUH,QFHQGLRV)RUHVWDOHV2UGHQ'(6GHGHDJRVWRSRUODTXHVHHVWDEOHFHQ QRUPDVVREUHXVRGHOIXHJR\PHGLGDVSUHYHQWLYDVHQUHODFLyQFRQORVLQFHQGLRVIRUHVWDOHV 7(0$ /D/H\GHGHGLFLHPEUHGHO3DWULPRQLR1DWXUDO\GHOD%LRGLYHUVLGDG3ULQFLSLRV LQVSLUDGRUHV LQVWUXPHQWRV SDUD HO FRQRFLPLHQWR \ OD SODQLILFDFLyQ FDWDORJDFLyQ FRQVHUYDFLyQ\UHVWDXUDFLyQGHKiELWDWV\HVSDFLRVFRQVHUYDFLyQGHODELRGLYHUVLGDGXVR VRVWHQLEOH 7(0$ 'LUHFWLYD&((GHO&RQVHMRGHGHPD\RGHUHODWLYDDODFRQVHUYDFLyQGH ORVKiELWDWVQDWXUDOHV\GHODIDXQD\IORUDVLOYHVWUHV2EMHWLYRV\SULQFLSDOHVFRQWHQLGRV 7(0$ 'LUHFWLYD &( GHO 3DUODPHQWR (XURSHR \ GHO &RQVHMR GH GH QRYLHPEUH GH UHODWLYDDODFRQVHUYDFLyQGHODVDYHVVLOYHVWUHV2EMHWLYRV\SULQFLSDOHVFRQWHQLGRV 7(0$ /D/H\GH&DQWDEULDGHGHMXOLRGH&D]D2EMHWLYRV\SULQFLSDOHVFRQWHQLGRV 7(0$ (O5HJODPHQWRGHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHRFWXEUHGH VREUH OD SUHYHQFLyQ \ OD JHVWLyQ GH OD LQWURGXFFLyQ \ SURSDJDFLyQ GH HVSHFLHV H[yWLFDV LQYDVRUDV(O&DWiORJR(VSDxROGH(VSHFLHV([yWLFDV,QYDVRUDV 7(0$ (O 3ODQ (VWUDWpJLFR 5HJLRQDO GH *HVWLyQ \ &RQWURO GH (VSHFLHV ([yWLFDV ,QYDVRUDV 2EMHWLYRV\SULQFLSDOHVFRQWHQLGRV 7(0$ /D/H\GH&DQWDEULDGHGHDEULOGH3HVFDHQ$JXDV&RQWLQHQWDOHV2EMHWLYRV\ SULQFLSDOHVFRQWHQLGRV boc.cantabria.es CVE-2019-3750 64/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ /D/H\GH&DQWDEULDGHGHPD\RGH&RQVHUYDFLyQGHOD1DWXUDOH]D2EMHWLYRV \SULQFLSDOHVFRQWHQLGRV 7(0$ (O /LVWDGR GH (VSHFLHV 6LOYHVWUHV HQ 5pJLPHQ GH 3URWHFFLyQ (VSHFLDO \ GHO &DWiORJR (VSDxROGH(VSHFLHV$PHQD]DGDV 5HDO'HFUHWRGHGHIHEUHUR 7(0$ (O&DWiORJR5HJLRQDOGH(VSHFLHV$PHQD]DGDV 'HFUHWRGHGHGLFLHPEUH &DWHJRUtDV\HIHFWRV 7(0$ /D/H\GHGHGLFLHPEUHGH3DUTXHV1DFLRQDOHV(O3ODQ'LUHFWRUGHOD5HGGH 3DUTXHV1DFLRQDOHV 5HDO'HFUHWRGHGHRFWXEUH /D/H\GH&DQWDEULDGHGHMXOLRGH6XEYHQFLRQHVGH&DQWDEULD 7(0$ 7(0$ /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HDO 'HFUHWR GH GH HQHUR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH ORV 6HUYLFLRV GH 3UHYHQFLyQ'LVSRVLFLRQHVPtQLPDVHQPDWHULDGHVHJXULGDG\VDOXGHQODVREUDV 7(0$ /H\ GH GH QRYLHPEUH GH &RQWUDWRV GHO 6HFWRU 3~EOLFR 7LWXOR 3UHOLPLQDU 2EMHWLYRV\iPELWRGHDSOLFDFLyQGHOD/H\\WLSRVGHFRQWUDWRVGHO6HFWRU3XEOLFR 7(0$ 'H OD HODERUDFLyQ GH SUR\HFWRV GH REUD 'RFXPHQWRV TXH OR LQWHJUDQ \ GRFXPHQWRV FRQWUDFWXDOHV'HODHMHFXFLyQGHSUR\HFWRVGHREUDUHSODQWHRSUHYLR\FRPSUREDFLyQGHO UHSODQWHRPHGLFLRQHV\FHUWLILFDFLRQHVYDORUDFLyQ\OLTXLGDFLyQ 7(0$ (VWUDWHJLD 1DFLRQDO GH OD %LRGLYHUVLGDG (VWUDWHJLD )RUHVWDO (VSDxD 3ODQ )RUHVWDO (VSDxRO 7(0$ (O 3ODQ )RUHVWDO GH &DQWDEULD 2EMHWLYRV (MHV \ SURJUDPDV GH DFWXDFLyQ 3ULQFLSDOHV PHGLGDV 7(0$ &RQYHQLR 0DUFR GH ODV 1DFLRQHV 8QLGDV VREUH &DPELR &OLPiWLFR /RV ERVTXHV FRPR VXPLGHURV GH FDUERQR ,PSDFWR GHO FDPELR FOLPiWLFR VREUH ORV HFRVLVWHPDV IRUHVWDOHV $SOLFDFLyQHQ(VSDxD 7(0$ 3ODQ (VWUDWpJLFR GH 3UHYHQFLyQ \ /XFKD FRQWUD ,QFHQGLRV )RUHVWDOHV HQ &DQWDEULD $QWHFHGHQWHViPELWRGHDSOLFDFLyQREMHWLYRVHMHV\SULQFLSDOHVPHGLGDV 7(0$ 5HDO'HFUHWRGHGHPDU]RVREUHFRPHUFLDOL]DFLyQGHORVPDWHULDOHVIRUHVWDOHV GHUHSURGXFFLyQ\VXDSOLFDFLyQHQ&DQWDEULD 7(0$ 5HDO 'HFUHWR GH GH GLFLHPEUH SDUD DVHJXUDU OD OHJDOLGDG GH OD FRPHUFLDOL]DFLyQGHPDGHUD\SURGXFWRVGHODPDGHUD7LSRVGH$JHQWHVOD'HFODUDFLyQ 5HVSRQVDEOH\6LVWHPDGH'LOLJHQFLD'HELGD6XDSOLFDFLyQHQ&DQWDEULD 7(0$ 'HFUHWRGHGHIHEUHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHO2SHUDWLYRGH /XFKD &RQWUD ORV ,QFHQGLRV )RUHVWDOHV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'LVSRVLFLRQHVJHQHUDOHVSHUVRQDOGHORSHUDWLYRRUJDQL]DFLyQGHOSHUVRQDOGHORSHUDWLYR PHGLRV\UHFXUVRVGHORSHUDWLYR\RSHUDWLYLGDG i Pág. 12572 boc.cantabria.es CVE-2019-3750 65/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,, i Pág. 12573 7(0$ &DUDFWHUtVWLFDV ERWiQLFRHFROyJLFRVHOYtFRODV GH ODV HVSHFLHV GH FRQtIHUDV GH PD\RU LQWHUpVIRUHVWDOHQ&DQWDEULD 7(0$ &DUDFWHUtVWLFDV ERWiQLFRHFROyJLFRVHOYtFRODV GH ODV HVSHFLHV GH IURQGRVDV GH PD\RU LQWHUpVIRUHVWDOHQ&DQWDEULD 7(0$ %DVHVVHOYtFRODVGHODJHVWLyQGHPRQWHVDUERODGRV&ODVLILFDFLyQGHODVPDVDVIRUHVWDOHV VHJ~QVXFRPSRVLFLyQHVSHFtILFD0pWRGRVGHEHQHILFLRGHILQLFLyQFODVHV\FULWHULRVGH VHOHFFLyQ )RUPDV SULQFLSDOHV GH PDVD 7UDWDPLHQWRV VHOYtFRODV FODVHV VLJQLILFDGRV \ FRQFHSWR 7(0$ &XLGDGRV GH ODV PDVDV DUEyUHDV /LPSLDV FODUHRV FODUDV SRGDV ODERUHR GHO VXHOR )HUWLOL]DQWHV +HUELFLGDV \ VHOYtFLGDV &RQRFLPLHQWR GH OD PDTXLQDULD \ SURGXFWRV D HPSOHDU 7(0$ 0HMRUDJHQpWLFDIRUHVWDO%DVHVGHODPHMRUDYDULDFLyQVHOHFFLyQ\KHUHGDELOLGDGGHODV HVSHFLHV IRUHVWDOHV 3URJUDPDV \ FLFORV GH PHMRUD 3ULQFLSLRV SDUD OD UHSURGXFFLyQ YHJHWDWLYDGHODVHVSHFLHVIRUHVWDOHV 7(0$ 9LYHURV IRUHVWDOHV (VWDEOHFLPLHQWR GH YLYHURV IRUHVWDOHV 7pFQLFDV GH FXOWLYR GH SODQWD IRUHVWDO&XOWLYRDUDt]GHVQXGD\HQFRQWHQHGRU0DWHULDOGHEDVH\FRPHUFLDOL]DFLyQGHO PDWHULDOIRUHVWDOGHUHSURGXFFLyQ([WUDFFLyQHPEDODMH\WUDQVSRUWHGHSODQWDIRUHVWDO 7(0$ 5HSREODFLyQIRUHVWDO'HILQLFLyQ\DQWHFHGHQWHVKLVWyULFRV'LVHxR(OHFFLyQGHHVSHFLHV 7UDWDPLHQWRGHODYHJHWDFLyQSUHH[LVWHQWH3UHSDUDFLyQGHOVXHOR 7(0$ 5HSREODFLyQ IRUHVWDO 3ULQFLSDOHV PpWRGRV GH UHSREODFLyQ &XLGDGRV FXOWXUDOHV D ODV UHSREODFLRQHV2EUDVDFFHVRULDV0DTXLQDULDHPSOHDGDHQUHSREODFLyQIRUHVWDO 7(0$ (O VLVWHPD SDVWRUDO &UHDFLyQ \ FXLGDGRV FXOWXUDOHV GH SDVWL]DOHV $SURYHFKDPLHQWR GH SDVWL]DOHVJDQDGHUtDH[WHQVLYDHQ&DQWDEULDUD]DVDXWyFWRQDVHQ&DQWDEULD 7(0$ (OHPHQWRV GH KLGURORJtD GH VXSHUILFLH ,QIOXHQFLD GH OD YHJHWDFLyQ HQ HO UpJLPHQ KLGUROyJLFR(OFRPSOHMRItVLFRGHODFXHQFD&iOFXORGHHVFRUUHQWtDV&DXGDOHVPi[LPRV (YDOXDFLyQGHODHURVLyQHQODVXSHUILFLH/H\HV\PRGHORVGHWUDQVSRUWHSDUDHOFiOFXORGH FDXGDOHVVyOLGRV 7(0$ 5HVWDXUDFLyQKLGUROyJLFRIRUHVWDOGHFXHQFDV$FFLRQHVELROyJLFDVHQODUHVWDXUDFLyQGH FXHQFDVKLGUROyJLFDV'LVHxR\FiOFXORGHHVWUXFWXUDVWUDQVYHUVDOHV'LVHxR\FiOFXORGH HVWUXFWXUDVORQJLWXGLQDOHV 7(0$ ,QFHQGLRVIRUHVWDOHVFODVHVFDXVDV\IDFWRUHVTXHLQIOX\HQHQVXSURSDJDFLyQ3UHGLFFLyQ GHO ULHVJR GH LQFHQGLR \ VX SHOLJURVLGDG ËQGLFHV PHWHRUROyJLFRV 9XOQHUDELOLGDG GHO WHUULWRULR\PRGHORVGHFRPEXVWLEOHVIRUHVWDOHV$QiOLVLVGHODVLWXDFLyQHQ&DQWDEULD 7(0$ 3UHYHQFLyQ \ GHWHFFLyQ GH LQFHQGLRV IRUHVWDOHV 2EMHWLYRV VLVWHPDV \ PHGLGDV $FWXDFLRQHVGLULJLGDVDOKRPEUH\DOPHGLR([WLQFLyQGHLQFHQGLRVIRUHVWDOHV3ULQFLSLRV HVWUDWHJLDV WiFWLFDV \ PHGLRV GLVSRQLEOHV SDUD OD H[WLQFLyQ 5HJHQHUDFLyQ GH iUHDV DIHFWDGDVSRULQFHQGLRVIRUHVWDOHV 7(0$ (QIHUPHGDGHV \ SODJDV IRUHVWDOHV GH PD\RU WUDVFHQGHQFLD HQ &DQWDEULD 0HGLGDV FXOWXUDOHVSURILOiFWLFDVELROyJLFDV\WHUDSpXWLFDV boc.cantabria.es CVE-2019-3750 66/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ i Pág. 12574 7(0$ (O DSURYHFKDPLHQWR IRUHVWDO )DVHV PHGLRV \ PpWRGRV GH DSURYHFKDPLHQWR ,PSDFWRV JHQHUDGRVSRUHODSURYHFKDPLHQWRIRUHVWDO0HGLGDVSUHYHQWLYDV\FRUUHFWRUDVSDUDHYLWDU WDOHVLPSDFWRV 7(0$ &DPLQRVIRUHVWDOHVSODQLILFDFLyQ7LSRV7UD]DGR6HFFLyQWUDQVYHUVDO\SHUILOORQJLWXGLQDO 0RYLPLHQWRGHWLHUUDV0DTXLQDULDHPSOHDGDHQVXFRQVWUXFFLyQ 7(0$ &DPLQRVIRUHVWDOHV)LUPHV0DWHULDOHV(VWDELOL]DFLyQGHVXHORV(OHPHQWRV\GLVHxRGH ODUHGGHGUHQDMH3DVRVFDQDGLHQVHV,PSDFWRVDVRFLDGRVDODFRQVWUXFFLyQGHFDPLQRV IRUHVWDOHVPHGLGDVSUHYHQWLYDVFRUUHFWRUDV 7(0$ 0HGLFLRQHVHQiUEROHV3URFHGLPLHQWRV\DSDUDWRVXWLOL]DGRVHQODPHGLFLyQGHGLiPHWURV HVSHVRU GH FRUWH]D HGDGHV \ DOWXUDV &XELFDFLyQ FRQ DSDUDWRV GH iUEROHV HQ SLH 'HILQLFLyQ GH FUHFLPLHQWRV HQ PDVDV IRUHVWDOHV (VWLPDFLyQ GH SURGXFWLYLGDGHV PDGHUDEOHV 7DEODV GH SURGXFFLyQ &RQVWUXFFLyQ \ HPSOHR GH WDEODV GH SURGXFFLyQ 0RGHORVGLQiPLFRV 7(0$ $QiOLVLVGHODVPDVDVIRUHVWDOHVLQYHQWDULRFXDQWLWDWLYR,QYHQWDULRSRUFRQWHRSLHDSLH ,QYHQWDULRSRUPXHVWUHR7LSRVGHPXHVWUHR3REODFLyQ\PXHVWUD9DULDEOHV\WDPDxRGH PXHVWUD3DUFHODVGHPXHVWUHR(UURUHVGHPXHVWUHR\UDQJRGHYDOLGH]GHORVUHVXOWDGRV 7(0$ 2UGHQDFLyQGHPRQWHV3ODQLILFDFLyQ&RQWHQLGR3ODQ*HQHUDO&DUDFWHUtVWLFDVVHOYtFRODV \ GDVRFUiWLFDV D GHWHUPLQDU FULWHULR GH FRQWDELOLGDG GHWHUPLQDFLyQ GH OD VXSHUILFLH D UHJHQHUDU 3ODQ (VSHFLDO $SURYHFKDPLHQWRV PHMRUDV \ SODQHV GH XVR EDODQFH HFRQyPLFR 7(0$ 0pWRGRVGHRUGHQDFLyQGHPRQWHV'LYLVLyQSRUFDELGDPpWRGRGHRUGHQDFLyQSRUURGDOHV &RQGLFLRQHV GH DSOLFDFLyQ HVSHFLHV D ODV TXH VH DSOLFD YHQWDMDV H LQFRQYHQLHQWHV FDUDFWHUtVWLFDVVHOYtFRODV\GDVRFUiWLFDVHQFDGDXQRGHORVGRV 7(0$ 0pWRGRVGHRUGHQDFLyQGHPRQWHV0pWRGRVGHWUDPRVSHUPDQHQWHVWUDPR~QLFR\WUDPR PyYLOPpWRGRVSDUDPDVDVLUUHJXODUHV&RQGLFLRQHVGHDSOLFDFLyQHVSHFLHVDODVTXHVH DSOLFDYHQWDMDVHLQFRQYHQLHQWHVFDUDFWHUtVWLFDVVHOYtFRODV\GDVRFUiWLFDVHQFDGDXQRGH HOORV 7(0$ /DLQGXVWULDWUDQVIRUPDGRUDGHODPDGHUD,PSRUWDQFLDHFRQyPLFDGHOVHFWRUIRUHVWDO/D &HUWLILFDFLyQ)RUHVWDO(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ 9DORUDFLyQIRUHVWDO\DPELHQWDO)yUPXODV\FULWHULRV9DORUDFLyQHFRQyPLFDLQWHJUDOGHORV VLVWHPDVIRUHVWDOHVFRQIRUPHDO7HUFHU,QYHQWDULR)RUHVWDO1DFLRQDO(FRQRPtDDPELHQWDO \HFROyJLFD 7(0$ 0DWHULDOHV EiVLFRV GH FRQVWUXFFLyQ +RUPLJyQ SURSLHGDGHV DSOLFDFLRQHV \ QRUPDWLYD WpFQLFD $FHUR HVWUXFWXUDO SURSLHGDGHV DSOLFDFLRQHV \ QRUPDWLYD WpFQLFD 0DGHUD HVWUXFWXUDOSURSLHGDGHVDSOLFDFLRQHV\QRUPDWLYDWpFQLFD 7(0$ /RV ERVTXHV FRPR VXPLGHURV GH FDUERQR ,PSDFWR GHO FDPELR FOLPiWLFR VREUH ORV HFRVLVWHPDVIRUHVWDOHV$SOLFDFLyQHQ(VSDxD 7(0$ (GDIRORJÕD ғ IRUHVWDO(OVXHOR3HUILOGHXQVXHOR\KRUL]RQWHV3URSLHGDGHVItVLFDVGHORV VXHORV(ODJXDHQHOVXHOR/DPDWHULDRUJiQLFDGHOVXHOR\ORVSURFHVRVGHKXPLILFDFLyQ \PLQHUDOL]DFLyQ3URFHVRVJHQHғWLFRV\GHHYROXFLRғQHQORVVXHORV3ULQFLSDOHVVXHORVGH &DQWDEULD boc.cantabria.es CVE-2019-3750 67/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ %/248(,,, i Pág. 12575 7(0$ %LRJHRJUDItDGH&DQWDEULD8QLGDGHVDPELHQWDOHV3ULQFLSDOHVHFRVLVWHPDVGLVWULEXFLyQ\ FDUDFWHUtVWLFDVSULQFLSDOHV 7(0$ /RVERVTXHVLEpULFRV/RVERVTXHVHQHOSDLVDMHYHJHWDOGH(VSDxD'HVFULSFLyQGHORV VLVWHPDVIRUHVWDOHVDUERODGRVHQ&DQWDEULD3UREOHPDVGHULYDGRVGHVXJHVWLyQGHOPDUFR RUJDQL]DWLYRGHODHVWUXFWXUDGHODSURSLHGDGIRUHVWDO\GHODGHPDQGDVRFLDOSDUDHORFLR \UHFUHR 7(0$ 0DWRUUDOHV'LVWULEXFLyQ\VLJQLILFDFLyQVHULDOGHORVPDWRUUDOHVHQ&DQWDEULD,PSRUWDQFLD HFROyJLFD6XDSURYHFKDPLHQWR 7(0$ 3ULQFLSDOHVSDVWRVQDWXUDOHVHQ&DQWDEULD'HILQLFLyQWLSRORJtD\FDUDFWHUtVWLFDV(VWDGR GHFRQVHUYDFLyQ,PSRUWDQFLDHFROyJLFD$SURYHFKDPLHQWRGHORVSDVWRV\SUREOHPDVGH JHVWLyQ 7(0$ 3ULQFLSDOHVHVSHFLHVGHIORUDH[yWLFDLQYDVRUDHQ&DQWDEULD&DUDFWHUtVWLFDVHFROyJLFDV\ GLVWULEXFLyQHQ&DQWDEULD9tDVGHHQWUDGDSUREOHPiWLFDDPELHQWDOJHVWLyQ\PpWRGRVGH FRQWURO 7(0$ 3ULQFLSDOHVHVSHFLHVGHIDXQDH[yWLFDLQYDVRUDHQ&DQWDEULD&DUDFWHUtVWLFDVHFROyJLFDV\ GLVWULEXFLyQHQ&DQWDEULD9tDVGHHQWUDGDSUREOHPiWLFDDPELHQWDOJHVWLyQ\PpWRGRVGH FRQWURO 7(0$ /RVGDxRVSURGXFLGRVSRUODIDXQDVLOYHVWUHHQ&DQWDEULD(VSHFLHVFDXVDQWHV\WLSRVGH GDxRVSURGXFLGRV,QVWUXPHQWRV\KHUUDPLHQWDVGHSUHYHQFLyQ\FRPSHQVDFLyQ 7(0$ /DFD]DHQ&DQWDEULD2UGHQDFLyQ\3ODQLILFDFLyQ&LQHJpWLFD3ULQFLSDOHVHVSHFLHVGHFD]D HQ&DQWDEULD3UREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQ 7(0$ /D5HVHUYD5HJLRQDOGH&D]D6DMD$QWHFHGHQWHV'HVFULSFLyQ\YDORUHVTXHPRWLYDURQVX GHFODUDFLyQ3ODQHDPLHQWRRUGHQDFLyQ\JHVWLyQGHVXDFWLYLGDG 7(0$ (OORERHQ&DQWDEULD%LRORJtD\HFRORJtD'LVWULEXFLyQ\HVWDGRGHFRQVHUYDFLyQGHVXV SREODFLRQHV3UREOHPiWLFDGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ /DSHVFDIOXYLDOHQ&DQWDEULD2UGHQDFLyQ\SODQLILFDFLyQ(VSHFLHVREMHWRGHSHVFDPiV LPSRUWDQWHV3UREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQ 7(0$ (O VDOPyQ DWOiQWLFR HQ &DQWDEULD %LRORJtD \ HFRORJtD 'LVWULEXFLyQ \ HVWDGR GH FRQVHUYDFLyQGHVXVSREODFLRQHV3UREOHPiWLFDGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ /D 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV 3ULQFLSDOHV FDUDFWHUtVWLFDV'HVFULSFLyQSUREOHPiWLFDGHFRQVHUYDFLyQ 7(0$ /D 5HG 1DWXUD HQ &DQWDEULD $QWHFHGHQWHV 2EMHWLYRV 9DORUHV GH FRQVHUYDFLyQ 'HVFULSFLyQ\FDUDFWHUtVWLFDV&RQGLFLRQDQWHVGHVXJHVWLyQ 7(0$ 3DUTXH 1DFLRQDO GH ORV 3LFRV GH (XURSD $QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRVGHSODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ *HVWLyQ GH (VSHFLHV 3URWHJLGDV HQ &DQWDEULD 'LIHUHQWHV FDWHJRUtDV GH SURWHFFLyQ GH HVSHFLHV\HIHFWRVMXUtGLFRV&RQGLFLRQDQWHVGHJHVWLyQ boc.cantabria.es CVE-2019-3750 68/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ /RV3DUTXHV1DWXUDOHVHQ&DQWDEULD$QWHFHGHQWHV'HVFULSFLyQ9DORUHVTXHPRWLYDURQ VXGHFODUDFLyQ$VSHFWRVVRFLRHFRQyPLFRV\FRQGLFLRQDQWHVGHJHVWLyQ,QVWUXPHQWRVGH SODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ ÈUHDV1DWXUDOHVGH(VSHFLDO,QWHUpV\0RQXPHQWRV1DWXUDOHVGH&DQWDEULD$QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHVGHJHVWLyQ,QVWUXPHQWRVGHSODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ =RQDVGH(VSHFLDO3URWHFFLyQSDUDODV$YHVHQ&DQWDEULD'HVFULSFLyQ\FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ =RQDV(VSHFLDOHVGH&RQVHUYDFLyQ)OXYLDOHVGH&DQWDEULD'HVFULSFLyQ\FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ =RQDV(VSHFLDOHVGH&RQVHUYDFLyQ/LWRUDOHVGH&DQWDEULD'HVFULSFLyQ\FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ =RQDV(VSHFLDOHVGH&RQVHUYDFLyQGH0RQWDxDGH&DQWDEULD'HVFULSFLyQ\FDUDFWHUtVWLFDV SULQFLSDOHV2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (VSHFLHV GH IORUD DPHQD]DGD GH &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV 'LVWULEXFLyQ 2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (VSHFLHV GH IDXQD DPHQD]DGD GH &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV 'LVWULEXFLyQ 2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (O XVR S~EOLFR HQ OD 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV \ JHVWLyQ0RWLYDFLyQ\WLSRORJtDGHYLVLWDQWHV&ULWHULRVGHFDOLGDGGHODYLVLWDDORVHVSDFLRV QDWXUDOHVSURWHJLGRV 7(0$ /DFRQVHUYDFLyQH[VLWXGHODGLYHUVLGDGELROyJLFD&HQWURVGH5HFXSHUDFLyQGH(VSHFLHV &UtDHQFDXWLYLGDG%DQFRVGHJHUPRSODVPD 7(0$ 3DVRV SDUD SHFHV \ HVFDODV VDOPRQHUDV 'LIHUHQWHV WLSRORJtDV \ FDUDFWHUtVWLFDV IXQGDPHQWDOHV&RQGLFLRQDQWHVGHGLVHxR\FRQVWUXFFLyQ CVE-2019-3750 7(0$ i Pág. 12576 boc.cantabria.es 69/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2, &8(532)$&8/7$7,92683(5,25 ,1*(1,(52,1'8675,$/ 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ /H\GHGHMXOLRGH,QGXVWULD 7(0$ 5HDO'HFUHWRGHGHPD\RSRUHOTXHVHDSUXHEDHO5HJLVWUR,QWHJUDGR,QGXVWULDO 7(0$ ,QVWDODFLyQ DPSOLDFLyQ \ WUDVODGR GH LQGXVWULDV 5HDO 'HFUHWR GH GH VHSWLHPEUH VREUHOLEHUDOL]DFLyQLQGXVWULDO 7(0$ /H\GHGHGLFLHPEUHGHO6HFWRU(OpFWULFRHVWUXFWXUDFRQWHQLGRDVSHFWRVUHOHYDQWHV 7(0$ 5HDO'HFUHWRGHGHGLFLHPEUHSRUHOTXHVHUHJXODQODVDFWLYLGDGHVGHWUDQVSRUWH GLVWULEXFLyQ FRPHUFLDOL]DFLyQ VXPLQLVWUR \ SURFHGLPLHQWRV GH DXWRUL]DFLyQ GH LQVWDODFLRQHV GH HQHUJtD HOpFWULFD $XWRUL]DFLRQHV SDUD OD FRQVWUXFFLyQ PRGLILFDFLyQ DPSOLDFLyQ H[SORWDFLyQ \ FLHUUHGHODVLQVWDODFLRQHVHOpFWULFDV3URFHGLPLHQWRVGHREWHQFLyQ 7(0$ $XWRUL]DFLyQGHLQVWDODFLRQHVGHSURGXFFLyQWUDQVSRUWH\GLVWULEXFLyQHOpFWULFDVHQOD&RPXQLGDG $XWyQRPDGH&DQWDEULD'HFUHWRGHGHHQHUR 7(0$ ([SURSLDFLyQ \ VHUYLGXPEUH HQ LQVWDODFLRQHV HOpFWULFDV 8WLOLGDG S~EOLFD 3URFHGLPLHQWR GH H[SURSLDFLyQ(IHFWRV$OFDQFH\OLPLWDFLRQHV 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHUHJXODODDFWLYLGDGGHSURGXFFLyQHOpFWULFDD SDUWLUGHIXHQWHVGHHQHUJtDUHQRYDEOHVFRJHQHUDFLyQ\UHVLGXRV 7(0$ 5HDO 'HFUHWR GH GH RFWXEUH SRU HO TXH VH UHJXODQ ODV FRQGLFLRQHV DGPLQLVWUDWLYDV WpFQLFDV\HFRQyPLFDVGHODVPRGDOLGDGHVGHVXPLQLVWURGHHQHUJtDHOpFWULFDFRQDXWRFRQVXPR\ GHSURGXFFLyQFRQDXWRFRQVXPR5HDO'HFUHWRGHGHDEULOSRUHOTXHVHUHJXODQODV FRQGLFLRQHVDGPLQLVWUDWLYDVWpFQLFDV\HFRQyPLFDVGHODXWRFRQVXPRGHHQHUJtDHOpFWULFD 7(0$ /LPLWDFLRQHV \ DVSHFWRV D WHQHU HQ FXHQWD HQ OD FRQVWUXFFLyQ GH OtQHDV HOpFWULFDV D WUDYpV GH FDUUHWHUDVPRQWHVHVSDFLRVQDWXUDOHVSURWHJLGRVFRVWDVELHQHVGHSDWULPRQLRFXOWXUDOHWF 7(0$ 5HJODPHQWR (OHFWURWpFQLFR GH %DMD 7HQVLyQ 5HDO 'HFUHWR GH GH DJRVWR \ VXV LQVWUXFFLRQHV WpFQLFDV FRPSOHPHQWDULDV ÈPELWR GH DSOLFDFLyQ LQVWDODGRUHV KDELOLWDGRV 'RFXPHQWDFLyQ\SXHVWDHQVHUYLFLRGHODVLQVWDODFLRQHV,QVWDODFLRQHVGHS~EOLFDFRQFXUUHQFLD\ ORFDOHVFRQULHVJRGHLQFHQGLR\H[SORVLyQ 7(0$ &RQGLFLRQHVWpFQLFDVHQLQVWDODFLRQHVWpUPLFDVHQORVHGLILFLRV5HDO'HFUHWRGHGH MXOLR i Pág. 12577 boc.cantabria.es CVE-2019-3750 7(0$ 5HJODPHQWRGHLQVWDODFLRQHVGHDOWDWHQVLyQ5HDO'HFUHWRGHGHPD\R 70/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ /H\GHGHRFWXEUHGHO6HFWRUGH+LGURFDUEXURV 7(0$ 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHED HO 5HJODPHQWR WpFQLFR GH GLVWULEXFLyQ\XWLOL]DFLyQGHFRPEXVWLEOHVJDVHRVRV\VXVLQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV ,&*D 7(0$ 5HDO'HFUHWRGHGHGLFLHPEUHSRUHOTXHVHUHJXODQODVDFWLYLGDGHVGHWUDQVSRUWH GLVWULEXFLyQFRPHUFLDOL]DFLyQVXPLQLVWUR\SURFHGLPLHQWRVGHDXWRUL]DFLyQGHLQVWDODFLRQHVGHJDV QDWXUDO 7(0$ 5HJODPHQWR GH LQVWDODFLRQHV SHWUROtIHUDV 5HDO 'HFUHWR GH GH RFWXEUH 5HDO 'HFUHWRGHGHRFWXEUH,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV 7(0$ 5HDO'HFUHWRGHGHGLFLHPEUHSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHHTXLSRVD SUHVLyQ\VXVLQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV 7(0$ $XWRUL]DFLyQ GH FDOGHUDV FDOGHUDV GH UHFXSHUDFLyQ GH OHMtDV QHJUDV 2SHUDGRUHV LQGXVWULDOHV GH FDOGHUDV OLEURV GH UHJLVWUR ,QVWUXFFLyQ 7pFQLFD &RPSOHPHQWDULD ,7& (3 GHO 5HJODPHQWR GH DSDUDWRVD3UHVLyQ 7(0$ &HQWUDOHV *HQHUDGRUDV GH HQHUJtD HOpFWULFD ,QVWUXFFLyQ 7pFQLFD &RPSOHPHQWDULD ,7& (3 GHO 5HJODPHQWRGHDSDUDWRVD3UHVLyQ 7(0$ 'HSyVLWRV FULRJpQLFRV %RWHOODV GH HTXLSRV GH UHVSLUDFLyQ DXWyQRPRV ,QVWUXFFLRQHV 7pFQLFDV &RPSOHPHQWDULDV,7&(3H,7&(3GHO5HJODPHQWRGHDSDUDWRVD3UHVLyQ 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHDSUXHEDHO5HJODPHQWRGH$OPDFHQDPLHQWR GH3URGXFWRV4XtPLFRV\VXV,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV0,($34D 7(0$ 5HDO 'HFUHWR GH GH MXQLR SRU HO TXH VH DSUXHED HO 5HJODPHQWR VREUH DOPDFHQDPLHQWRGHIHUWLOL]DQWHVDEDVHGHQLWUDWRDUPyQLFRFRQXQFRQWHQLGRHQQLWUyJHQRLJXDOR LQIHULRUDOSRUFLHQWRHQPDVD 7(0$ 5HJODPHQWRGHDSDUDWRVGHHOHYDFLyQ\PDQXWHQFLyQGHORVPLVPRV5HDO'HFUHWRGH GHQRYLHPEUH2UGHQPLQLVWHULDOGH0,($(0 7(0$ 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH DSUXHED OD ,QVWUXFFLyQ 7pFQLFD &RPSOHPHQWDULD ,7& 0,($(0 $VFHQVRUHV GHO 5HJODPHQWR GH DSDUDWRV GH HOHYDFLyQ \ PDQXWHQFLyQ 7(0$ 5HDO 'HFUHWR GH GH MXQLR SRU HO TXH VH DSUXHED OD ,QVWUXFFLyQ 7pFQLFD &RPSOHPHQWDULD ,7& 0,($(0 *U~DVWRUUH GHVPRQWDEOHV SDUD REUD GHO 5HJODPHQWR GH DSDUDWRVGHHOHYDFLyQ\PDQXWHQFLyQ 7(0$ 5HJODPHQWRGHVHJXULGDGSDUDSODQWDVHLQVWDODFLRQHVIULJRUtILFDV5HDO'HFUHWRGHGH IHEUHUR,QVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV 7(0$ 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR VREUH LQVWDODFLRQHVQXFOHDUHV\UDGLDFWLYDV5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHDSUXHED HO 5HJODPHQWR VREUH LQVWDODFLyQ \ XWLOL]DFLyQ GH DSDUDWRV GH UD\RV ; FRQ ILQHV GH GLDJQyVWLFR PpGLFR i Pág. 12578 boc.cantabria.es CVE-2019-3750 7(0$ 5HJODPHQWRGHWDOOHUHVGHUHSDUDFLyQGHDXWRPyYLOHV5HDO'HFUHWRGHGHHQHUR 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR *HQHUDO GH 9HKtFXORV 71/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ /H\GHGHGLFLHPEUHGH0HWURORJtD 7(0$ /H\GHGHMXQLRGH$UWHVDQtDHQ&DQWDEULD2UGHQ,1'GHGHDEULOSRUOD TXHVHDSUXHEDHO5HSHUWRULRGH$FWLYLGDGHV$UWHVDQDVGH&DQWDEULD 7(0$ 3ODQGH6RVWHQLELOLGDG(QHUJpWLFDGH&DQWDEULD 7(0$ 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH WUDQVSRQH OD 'LUHFWLYD 8( GHO 3DUODPHQWR (XURSHR \ GHO &RQVHMR GH GH RFWXEUH UHODWLYD D OD HILFLHQFLD HQHUJpWLFD HQ OR UHIHUHQWH D DXGLWRUtDV HQHUJpWLFDV DFUHGLWDFLyQ GH SURYHHGRUHV GH VHUYLFLRV \ DXGLWRUHV HQHUJpWLFRV\SURPRFLyQGHODHILFLHQFLDGHOVXPLQLVWURGHODHQHUJtD 7(0$ 5HDO 'HFUHWR GH GH DEULO SRU HO TXH VH SUXHED HO SURFHGLPLHQWR EiVLFR SDUD OD FHUWLILFDFLyQGHODHILFLHQFLDHQHUJpWLFDGHORVHGLILFLRV %/248(,, 7(0$ /D OHJLVODFLyQ \ HO GHVDUUROOR HQ WUDQVSRUWHV /H\ GH GH MXOLR GH 2UGHQDFLyQ GH ORV 7UDQVSRUWHV7HUUHVWUHV\VXVPRGLILFDFLRQHVSRVWHULRUHV /277 5HJODPHQWRGHOD/277 5277 DSUREDGRSRU5HDO'HFUHWRGHGHVHSWLHPEUH\VXVPRGLILFDFLRQHVSRVWHULRUHV 7(0$ /277 \ 5277 , &RQGLFLRQHV SDUD HO HMHUFLFLR GHO WUDQVSRUWH \ GH ODV DFWLYLGDGHV DX[LOLDUHV \ FRPSOHPHQWDULDV GH ORV PLVPRV &RQGLFLRQHV SUHYLDV GH FDUiFWHU SHUVRQDO SDUD HO HMHUFLFLR SURIHVLRQDO7tWXORVKDELOLWDQWHV5HTXLVLWRVJHQHUDOHVSDUDHOHMHUFLFLRGHODDFWLYLGDG 7(0$ /277 \ 5277 ,, &ODVLILFDFLyQ GH ORV VHUYLFLRV \ DFWLYLGDGHV GHO WUDQVSRUWH SRU FDUUHWHUD 7UDQVSRUWHV S~EOLFRV UHJXODUHV GH YLDMHURV 7UDQVSRUWHV S~EOLFRV UHJXODUHV SHUPDQHQWHV GH YLDMHURVGHXVRJHQHUDO7UDQVSRUWHVUHJXODUHVWHPSRUDOHV\GHXVRHVSHFLDO 7(0$ /277\5277 ,,, 7UDQVSRUWHS~EOLFRGLVFUHFLRQDOGHPHUFDQFtDV\GHYLDMHURVDXWRUL]DFLRQHV\ UpJLPHQMXUtGLFR 7(0$ /277 \ 5277 ,9 $FWLYLGDGHV DX[LOLDUHV \ FRPSOHPHQWDULDV GHO WUDQVSRUWH $JHQFLDV GH WUDQVSRUWH GH PHUFDQFtDV $JHQFLDV GH YLDMH 7UDQVLWDULRV $OPDFHQLVWDV \ GLVWULEXLGRUHV $UUHQGDPLHQWRGHYHKtFXORV(VWDFLRQHVGHWUDQVSRUWH 7(0$ 5HDO'HFUHWR GH GH QRYLHPEUH SRU HO TXHVHUHJXODQ ODV FRQGLFLRQHVEiVLFDV GH DFFHVLELOLGDG \ QR GLVFULPLQDFLyQ SDUD HO DFFHVR \ XWLOL]DFLyQ GH ORV PRGRV GH WUDQVSRUWH SDUD SHUVRQDVFRQGLVFDSDFLGDG 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGHWUDQVSRUWHGHSHUVRQDVSRUFDEOH&ODVLILFDFLyQ GH ODV LQVWDODFLRQHV 2EMHWR \ iPELWR GH DSOLFDFLyQ 5pJLPHQ DGPLQLVWUDWLYR GH LQVWDODFLyQ \ H[SORWDFLyQ6HJXULGDGGHODVLQVWDODFLRQHV\GHORVXVXDULRV CVE-2019-3750 7(0$ 7UDQVSRUWH GH 9LDMHURV SRU &DUUHWHUD HQ &DQWDEULD , /H\ GH &DQWDEULD GH GH QRYLHPEUH GH 7UDQVSRUWH GH 9LDMHURV SRU &DUUHWHUD 2EMHWR iPELWR GH DSOLFDFLyQ REMHWLYRV FODVLILFDFLyQ GH ORV VHUYLFLRV GH WUDQVSRUWH GH YLDMHURV SRU FDUUHWHUD &RPSHWHQFLDV GHQWUR GH OD FRPXQLGDGDXWyQRPD&RRUGLQDFLyQHLQWHJUDFLyQGHVHUYLFLRVUHFXUVRVS~EOLFRV i Pág. 12579 boc.cantabria.es 72/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 7UDQVSRUWH GH 9LDMHURV SRU &DUUHWHUD HQ &DQWDEULD ,, 7UDQVSRUWH XUEDQR FRRUGLQDFLyQ GH VHUYLFLRVXUEDQRVHLQWHUXUEDQRV6HUYLFLRVFRQFRQGLFLRQHVHVSHFLDOHVGHSUHVWDFLyQ7UDVSRUWHV S~EOLFRV UHJXODUHV WHPSRUDOHV 7UDQVSRUWHV S~EOLFRV UHJXODUHV GH XVR HVSHFLDO 7UDQVSRUWHV WXUtVWLFRV 7(0$ 7UDQVSRUWHGH 9LDMHURV SRU &DUUHWHUD HQ &DQWDEULD ,,, 7UDQVSRUWH GHSHUVRQDV HQ YHKtFXORV GH WXULVPR OLFHQFLD GH DXWRWD[L YHKtFXORV DIHFWRV D ODV OLFHQFLDV FRQGLFLRQHV GH SUHVWDFLyQ GHO VHUYLFLR(VWDFLRQHVGHWUDQVSRUWHGHYLDMHURVSRUFDUUHWHUD 7(0$ 7UDQVSRUWH GH PHUFDQFtDV TXH UHTXLHUHQ SUHFDXFLRQHV HVSHFLDOHV 7UDQVSRUWHV HVSHFLDOHV 7UDQVSRUWHVGHPHUFDQFtDVSHUHFHGHUDV7UDQVSRUWHVGHPHUFDQFtDVSHOLJURVDV 7(0$ (VWDFLRQHV GH PHUFDQFtDV 1RUPDWLYD YLJHQWH /DV HVWDFLRQHV GHFDPELR PRGDO /DV HVWDFLRQHV GHFRQWHQHGRUHV 7(0$ 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH UHJXOD FXDOLILFDFLyQ LQLFLDO \ OD IRUPDFLyQ FRQWLQXDGHORVFRQGXFWRUHVGHGHWHUPLQDGRVYHKtFXORVGHVWLQDGRVDOWUDQVSRUWHSRUFDUUHWHUD 7(0$ $FXHUGRHXURSHRVREUHWUDQVSRUWHLQWHUQDFLRQDOGHPHUFDQFtDVSHOLJURVDVSRUFDUUHWHUD $'5 7(0$ 5HDO'HFUHWRGHGHIHEUHURSRUHOTXHVHUHJXODQODVRSHUDFLRQHVGHWUDQVSRUWHGH PHUFDQFtDVSHOLJURVDVSRUFDUUHWHUDHQWHUULWRULRHVSDxRO 7(0$ /DOLEHUDOL]DFLyQGHOWUDQVSRUWHIHUURYLDULR(OWUDQVSRUWHIHUURYLDULRGHQWURGHOD/H\GH GH VHSWLHPEUH GHO 6HFWRU )HUURYLDULR \ VX UHJODPHQWR GH GHVDUUROOR /RV HQWHV $',) )(9( 5(1)(2SHUDGRUD \ ODV HPSUHVDV IHUURYLDULDV &RQFHSWR GH HPSUHVD IHUURYLDULD REWHQFLyQ GH OLFHQFLDVGHHPSUHVDVIHUURYLDULDV/RVFiQRQHV\WDULIDV(O&RPLWpGH5HJXODFLyQ)HUURYLDULD 7(0$ /DVHJXULGDGHQHOWUDQVSRUWHIHUURYLDULR(O5HDO'HFUHWRGHGHMXQLRSRUHOTXHVH DSUXHEDHO5HJODPHQWRVREUHVHJXULGDGHQODFLUFXODFLyQGHOD5HG)HUURYLDULDGH,QWHUpV*HQHUDO &RQFHSWRV*HQHUDOHV 7(0$ /D5HG1DWXUD/XJDUHVGH,PSRUWDQFLD&RPXQLWDULD /,& /RV/,&VHQ&DQWDEULD 7(0$ 5HDO'HFUHWR/HJLVODWLYRGHGHGLFLHPEUHSRUHOTXHVHDSUXHEDHOWH[WRUHIXQGLGRGHOD /H\GHSUHYHQFLyQ\FRQWUROLQWHJUDGRVGHODFRQWDPLQDFLyQ3ULQFLSLRV9DORUHVOtPLWHVGHHPLVLyQ /RV SHUPLVRV LQWHJUDGRV GH LQVWDODFLyQ /RV LQWHUFDPELRV GH LQIRUPDFLyQ /DV DXWRUL]DFLRQHV DPELHQWDOHVLQWHJUDGDVHQ&DQWDEULDSURFHGLPLHQWR\OHJLVODFLyQ 7(0$ /D/H\GHGHGLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGRGH&DQWDEULD 7(0$ /D/H\GHGHGLFLHPEUHGHHYDOXDFLyQDPELHQWDO(YDOXDFLyQDPELHQWDOGHSUR\HFWRV SURFHGLPLHQWRV\VXLQWHJUDFLyQHQODDXWRUL]DFLyQGHOVHJXLPLHQWR\YLJLODQFLD 7(0$ /HJLVODFLyQ VREUH FDOLGDG GHO DLUH \ SURWHFFLyQ DWPRVIpULFD &DWiORJR GH DFWLYLGDGHV SRWHQFLDOPHQWHFRQWDPLQDQWHVGHODDWPyVIHUD 7(0$ /HJLVODFLyQGHDJXDVHQUHODFLyQFRQODFDOLGDGGHODJXD9HUWLGRVDOGRPLQLRS~EOLFRKLGUiXOLFR\ YHUWLGRVDOOLWRUDOOHJLVODFLyQGHDSOLFDFLyQ'HFODUDFLyQGHYHUWLGRV$XWRUL]DFLRQHVGHYHUWLGRVHQ &DQWDEULD i Pág. 12580 boc.cantabria.es CVE-2019-3750 7(0$ /D /H\ GH GH QRYLHPEUH GHO UXLGR \ VX GHVDUUROOR UHJODPHQWDULR (IHFWRV VREUH OD VDOXG \ HO PHGLR DPELHQWH /D HYDOXDFLyQ SUHYHQFLyQ \ UHGXFFLyQ GHO UXLGR DPELHQWDO 0HGLGDV FRUUHFWRUDV 73/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ /D FRQWDPLQDFLyQ DWPRVIpULFD WLSRV RUtJHQHV \ FDUDFWHUtVWLFDV /D /H\ GH GH QRYLHPEUHGHFDOLGDGGHODLUH\SURWHFFLyQGHODDWPyVIHUD6HFWRUHV\DFWLYLGDGHVFRQWDPLQDQWHV 7(0$ &RQWDPLQDFLyQGHOVXHOR5HDO'HFUHWRGHGHHQHURSRUHOTXHVHHVWDEOHFHODUHODFLyQ GH DFWLYLGDGHV SRWHQFLDOPHQWH FRQWDPLQDQWHV GHO VXHOR \ ORV FULWHULRV \ HVWiQGDUHV SDUD OD GHFODUDFLyQ GH VXHORV FRQWDPLQDGRV 7LSRV GH FRQWDPLQDQWHV 8VRV GHO VXHOR (YDOXDFLyQ GHO ULHVJR1LYHOHVJHQpULFRVGHUHIHUHQFLD7pFQLFDVGHUHFXSHUDFLyQGHVXHORV 7(0$ 3UREOHPDVGHFRQWDPLQDFLyQHQUHODFLyQFRQORVHIOXHQWHVLQGXVWULDOHV5HXWLOL]DFLyQGHHIOXHQWHV LQGXVWULDOHV(YDOXDFLyQGHODFDUJDFRQWDPLQDQWHSRUVHFWRULQGXVWULDO&DWHJRUL]DFLyQGHOVHFWRU LQGXVWULDO &DUDFWHUtVWLFDV GH ORV HIOXHQWHV 6HOHFFLyQ GH SDUiPHWURV FRQWDPLQDQWHV D HIHFWRV GH HVWDEOHFLPLHQWRGHQLYHOHVGHHPLVLyQ7HFQRORJtDVGLVSRQLEOHVSDUDUHGXFLUODFRQWDPLQDFLyQGH HIOXHQWHVPHGLGDVLQWHUQDV\WUDWDPLHQWRGHHIOXHQWHV 7(0$ /H\GHGHMXOLRGHUHVLGXRV\VXHORVFRQWDPLQDGRV 7(0$ 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH UHJXOD OD SURGXFFLyQ \ JHVWLyQ GH ORV UHVLGXRVGHFRQVWUXFFLyQ\GHPROLFLyQ'HFUHWRGHGHRFWXEUHSRUHOTXHVHUHJXODOD SURGXFFLyQ\JHVWLyQGHORVUHVLGXRVGHFRQVWUXFFLyQ\GHPROLFLyQHQOD&RPXQLGDG$XWyQRPDGH &DQWDEULD 7(0$ /DSURWHFFLyQGHOPHGLRPDULQR/H\GHGHGLFLHPEUHGHSURWHFFLyQGHO0HGLR0DULQR %/248(,,, 7(0$ )XQGDPHQWRV GH OD SURWHFFLyQ FLYLO /D /H\ GH GH MXOLR GHO 6LVWHPD 1DFLRQDO GH 3URWHFFLyQ&LYLO\5HDO'HFUHWRGHGHDEULOSRUHOTXHVHDSUXHEDOD1RUPD%iVLFD GH 3URWHFFLyQ &LYLO 5HDO 'HFUHWR GH GH VHSWLHPEUH SRU HO TXH VH UHJXOD OD FRPSRVLFLyQ\UpJLPHQGHIXQFLRQDPLHQWRGHOD&RPLVLyQ1DFLRQDOGH3URWHFFLyQ&LYLO 7(0$ 1RUPDWLYDGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD/H\GH&DQWDEULD GH GH DEULO GHO 6LVWHPD GH 3URWHFFLyQ &LYLO \ *HVWLyQ GH (PHUJHQFLDV GH &DQWDEULD 'HFUHWR GH GH RFWXEUH SRU HO TXH VH HVWDEOHFH OD FRPSRVLFLyQ RUJDQL]DFLyQ \ UpJLPHQ GH IXQFLRQDPLHQWR GH OD &RPLVLyQ GH 3URWHFFLyQ &LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'HFUHWR GH GH HQHUR SRU HO TXH VH UHJXODQ ODV RUJDQL]DFLRQHV GH YROXQWDULDGR GH 3URWHFFLyQ&LYLOGH&DQWDEULD\HO5HJLVWURGH2UJDQL]DFLRQHVGH9ROXQWDULDGRGH3URWHFFLyQ&LYLO 'HFUHWRGHGHPDU]RSRUHOTXHVHFUHDOD(VFXHODGH3URWHFFLyQ&LYLO 7(0$ (O 2UJDQLVPR $XWyQRPR 6HUYLFLR GH (PHUJHQFLDV GH &DQWDEULD 6(0&$ UpJLPHQ MXUtGLFR /RV SDUTXHV GH HPHUJHQFLDV GH &DQWDEULD XELFDFLyQ GHVFULSFLyQ ]RQDV GH LQWHUYHQFLyQ \ PHGLRV PDWHULDOHV'HFLVLyQ&((GHO&RQVHMRGHGHMXOLRUHODWLYDDODFUHDFLyQGHXQQ~PHUR GHOODPDGDGHXUJHQFLD~QLFRHXURSHR CVE-2019-3750 7(0$ 1RUPDWLYDHQPDWHULDGH$XWRSURWHFFLyQ5HDO'HFUHWRGHGHPDU]RSRUHOTXHVH DSUXHED OD 1RUPD %iVLFD GH $XWRSURWHFFLyQ GH ORV FHQWURV HVWDEOHFLPLHQWRV \ GHSHQGHQFLDV GHGLFDGRVDDFWLYLGDGHVTXHSXHGDQGDURULJHQDVLWXDFLRQHVGHHPHUJHQFLD'HFUHWRGH GH DEULO SRU HO TXH VH UHJXOD HO SURFHGLPLHQWR GH &RQWURO $GPLQLVWUDWLYR \ 5HJLVWUR GH ORV 3ODQHVGH$XWRSURWHFFLyQ i Pág. 12581 boc.cantabria.es 74/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 3ODQ 7HUULWRULDO GH (PHUJHQFLDV GH 3URWHFFLyQ &LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'HFUHWR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 3ODQ 7HUULWRULDO GH (PHUJHQFLDV GH &DQWDEULD 3/$7(5&$17 7(0$ 3ODQ (VSHFLDO GH 3URWHFFLyQ &LYLOGH OD &RPXQLGDG$XWyQRPDGH &DQWDEULD VREUH 7UDQVSRUWH GH 0HUFDQFtDV 3HOLJURVDV SRU &DUUHWHUD \ )HUURFDUULO (O 'HFUHWR GH GH IHEUHUR SRU HO TXH VH DSUXHED HO 3ODQ (VSHFLDO GH 3URWHFFLyQ &LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD VREUH7UDQVSRUWHGH0HUFDQFtDV3HOLJURVDVSRUFDUUHWHUD\IHUURFDUULO 75$16&$17 7(0$ 3ODQ (VSHFLDO GH 3URWHFFLyQ &LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD VREUH ,QFHQGLRV )RUHVWDOHV (O 'HFUHWR GH GH IHEUHUR SRU HO TXH VH DSUXHED HO 3ODQ (VSHFLDO GH 3URWHFFLyQ &LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD VREUH ,QFHQGLRV )RUHVWDOHV ,1)2&$17 7(0$ 3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDVREUHLQXQGDFLRQHV(O 'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVHDSUXHEDHO3ODQ(VSHFLDOGH3URWHFFLyQ&LYLO GHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDDQWHHO5LHVJRGH,QXQGDFLRQHV ,181&$17 7(0$ 3ODQHVHVSHFLDOHVGHULHVJRTXtPLFR5HDO'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVH DSUXHEDQ PHGLGDV GH FRQWURO GH ORV ULHVJRV LQKHUHQWHV D ORV DFFLGHQWHV JUDYHV HQ ORV TXH LQWHUYHQJDQVXVWDQFLDVSHOLJURVDV5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHDSUXHED HO3ODQHVWDWDOGHSURWHFFLyQFLYLODQWHHOULHVJRTXtPLFR'HFUHWRGHGHPD\RSRUHO TXHVHGHVLJQDQORVyUJDQRVFRPSHWHQWHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD\GHVDUUROOD HO 5HDO 'HFUHWR GH GH MXOLR TXH DSUXHED PHGLGDV GH FRQWURO GH ORV ULHVJRV LQKHUHQWHV D ORV DFFLGHQWHV JUDYHV HQ ORV TXH LQWHUYHQJDQ VXVWDQFLDV SHOLJURVDV 3ODQHV GH (PHUJHQFLD([WHULRU,QVWDODFLRQHVDIHFWDGDVHQ&DQWDEULD 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO , /RV LQFHQGLRV )tVLFD \ TXtPLFD GHO LQFHQGLR &RQFHSWRV EiVLFRV ÈWRPR PROpFXOD SHVR PROHFXODU SHVR HVSHFtILFR GHQVLGDG GHO YDSRU HYDSRUDFLyQ SUHVLyQ GHO YDSRU \ SXQWR GH HEXOOLFLyQ 5HDFFLRQHVTXtPLFDVHQGRWpUPLFDV\H[RWpUPLFDV&RPEXVWLyQ&ODVLILFDFLyQGHODFRPEXVWLyQHQ IXQFLyQ GH OD YHORFLGDG GH UHDFFLyQ 7HPSHUDWXUDV GH LQIODPDFLyQ IODVKSRLQW \ WHPSHUDWXUD GH DXWRLQIODPDFLyQ&DWDOL]DGRUHVHLQKLELGRUHVOtPLWHVGHLQIODPDELOLGDG\GHH[SORVLYLGDG 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO ,, /RV LQFHQGLRV 7HRUtD VREUH HO IXHJR )XHJRV FRQ OODPD )XHJRV VLQ OODPD &RPEXVWLEOHV &RPEXUHQWHV (QHUJtD GH DFWLYDFLyQ )RFRV GH LJQLFLyQ FRQ VXILFLHQWH HQHUJtD GH DFWLYDFLyQ 3UHYHQFLyQ D DGRSWDU HQ FDGD FDVR /D UHDFFLyQ HQ FDGHQD &DGHQD GH LQFHQGLR /D LJQLFLyQ &DXVDVGHODLJQLFLyQ3UHYHQFLyQGHHVWDSULPHUDIDVHGHODFDGHQD/DSURSDJDFLyQGHOIXHJR 7UDQVPLVLyQ GHO FDORU 3URSDJDFLyQ KRUL]RQWDO \ YHUWLFDO 3URSDJDFLyQ GHO IXHJR HQ HGLILFLRV &RQVHFXHQFLDVGHOLQFHQGLR*DVHV/ODPDV+XPRV&DORU CVE-2019-3750 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO ,,, /RV LQFHQGLRV ([WLQFLyQ GH LQFHQGLRV 7HRUtD GH OD H[WLQFLyQ GH LQFHQGLRV HOLPLQDFLyQ VRIRFDFLyQ HQIULDPLHQWR H LQKLELFLyQ &ODVLILFDFLyQ GH ORV LQFHQGLRV 6HJ~Q QRUPDV 81( $JHQWHV H[WLQWRUHV GHLQFHQGLRVPiVXVXDOHV\VXHPSOHRVHJ~QHOWLSRGHIXHJRDH[WLQJXLU(ODJXD\VXVDGLWLYRV 3URSLHGDGHV H[WLQWRUDV GHO DJXD (QIULDPLHQWR VRIRFDFLyQ \ GLOXFLyQ &RQGXFWLYLGDG HOpFWULFD GHO DJXD &RQGLFLRQHV GH HPSOHR HQ IXHJRV HOpFWULFRV $GLWLYRV SDUD HO DJXD \ VXV SURSLHGDGHV HQ DFWXDFLRQHV DQWH HO IXHJR (VSXPDV &ODVLILFDFLyQ GH HVSXPDV 8VRV \ OLPLWDFLRQHV GH ODV HVSXPDV i Pág. 12582 boc.cantabria.es 75/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO ,9 /RV LQFHQGLRV 3ROYRV TXtPLFRV &ODVLILFDFLyQ 3URSLHGDGHV H[WLQWRUDV GH ORV SROYRV TXtPLFRV $QXODFLyQ GH UDGLDFLyQ LQKLELFLyQ VRIRFDFLyQ \ HQIULDPLHQWR 9HQWDMDV H LQFRQYHQLHQWHV HQ VX XWLOL]DFLyQ 1LHYH FDUEyQLFD 3URSLHGDGHV H[WLQWRUDV VRIRFDFLyQ HQIULDPLHQWR 5HTXLVLWRV GH VHJXULGDGHQHOHPSOHRGHO&29HQWDMDVHLQFRQYHQLHQWHVGHODXWLOL]DFLyQGHO&2 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO 9 /RV LQFHQGLRVIRUHVWDOHV )DFWRUHVTXHLQWHUYLHQHQHQHOLQFHQGLR3UHYHQFLyQ9LJLODQFLD\GHWHFFLyQ 6LVWHPDVGHH[WLQFLyQ0DWHULDOHVSDUDPRGLILFDFLyQGHOFRPEXVWLEOHIRUHVWDO0HGLRVGHH[WLQFLyQ 2SHUDFLRQHVWiFWLFDVGHH[WLQFLyQ 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO 9, 7UDQVSRUWH \ DOPDFHQDPLHQWR GH PHUFDQFtDV SHOLJURVDV 7UDQVSRUWH GH PHUFDQFtDV SHOLJURVDV 3DQHOHV QDUDQMD KRPRORJDFLyQ REOLJDWRULHGDG GH XVR WLSRV UHVSRQVDELOLGDG \ SDQHOHV DGLFLRQDOHV (WLTXHWDV GH SHOLJUR GHVFULSFLyQ REOLJDWRULHGDG GH XVR WLSRV UHVSRQVDELOLGDG HWLTXHWDGR P~OWLSOH ,QVWUXFFLRQHV GH VHJXULGDG GHVFULSFLyQ REOLJDWRULHGDG GH XVR WLSRV UHVSRQVDELOLGDG $'5 \ 5,' (VWUXFWXUD &ODVLILFDFLyQ GH ODV PHUFDQFtDV SHOLJURVDV /LVWD GH PDWHULDV 'RFXPHQWDFLyQ &RQVHMHURV GH 6HJXULGDG (TXLSRV GH SURWHFFLyQ SHUVRQDO SDUD OD LQWHUYHQFLyQHQLQFLGHQWHVFRQPDWHULDVSHOLJURVDV1LYHOHVGHSURWHFFLyQ$FWXDFLyQFRQHTXLSRV GHSURWHFFLyQSHUVRQDO1LYHOGHSURWHFFLyQ,,,6LVWHPDVGH$OLPHQWDFLyQGHDLUHFRPSUREDFLyQGH WUDMHV \ SULQFLSLRV EiVLFRV $GDSWDFLyQ DO 6LVWHPD *OREDOPHQWH $UPRQL]DGR GH FODVLILFDFLyQ \ HWLTXHWDGRGHSURGXFWRVTXtPLFRV 6*$ 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO 9,, 0DWHULDV FRPEXUHQWHV \ R[LGDQWHV \ SHUy[LGRV RUJiQLFRV &ODVLILFDFLyQ ,GHQWLILFDFLyQ 3URSLHGDGHVItVLFRTXtPLFDV8VRVDOPDFHQDPLHQWR\WUDQVSRUWH&ODVH\&DUDFWHUtVWLFDV GHSHOLJURVLGDG(TXLSRVGHSURWHFFLyQ0HGLGDVDDGRSWDU,QFLGHQWHVVLQLQFHQGLR,QFLGHQWHVFRQ LQFHQGLR,QFLGHQWHVFRQLQFHQGLRSHURVLQIXJDGHOUHFLSLHQWH 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO 9,,, *DVHV&ODVLILFDFLyQVHJ~QVXVSURSLHGDGHVItVLFRTXtPLFDV7UDQVSRUWHVSRUFDUUHWHUDIHUURFDUULO \ WXEHUtDV 5LHVJRV GH ORV JDVHV HQ UHFLSLHQWHV FHUUDGRV \ FRQWURO GH ORV JDVHV IXHUD GH ORV UHFLSLHQWHV 1XEHV Wy[LFDV 'LVSHUVLyQ GH QXEHV Wy[LFDV R LQIODPDEOHV &RQFHSWRV SUHYLRV 0RGHORVGHGLVSHUVLyQDWPRVIpULFD0RGHORVSDUDJDVHVQHXWURV\SHVDGRV0HGLGDVSURWHFWRUDV 3URGXFWRV Wy[LFRV \ FRUURVLYRV &ODVLILFDFLyQ ,GHQWLILFDFLyQ ,QWHUYHQFLyQ HQ LQFLGHQWHV FRQ PDWHULDVWy[LFDV0DWHULDVFRUURVLYDVFODVH&DUDFWHUtVWLFDV]RQDVGHVHJXULGDG\DFWXDFLyQ 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO ,; /tTXLGRV LQIODPDEOHV &ODVLILFDFLyQ ,GHQWLILFDFLyQ &DUDFWHUtVWLFDV ItVLFRTXtPLFDV &RQWURO GH ORV ULHVJRV 6LVWHPiWLFD GH LQWHUYHQFLyQ ,QFLGHQWHV FRQ SUHVHQFLD GH H[SORVLYRV 'HILQLFLRQHV \ FRQFHSWRV 0DWHULDOHV H[SORVLYRV DOPDFHQDPLHQWR \ WUDQVSRUWH $FWXDFLRQHV JHQHUDOHV %/(9( %RODGHIXHJR'HVFULSFLyQGHOIHQyPHQR&RQGLFLRQHVSDUDODH[LVWHQFLDGH%/(9((VWLPDFLyQ GHORVHIHFWRV0HGLGDVGHSUHYHQFLyQ CVE-2019-3750 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO ; 5DGLDFWLYLGDG 7LSRV GH UDGLDFLRQHV LRQL]DQWHV )XHQWHV UDGLDFWLYDV &RQFHSWRV EiVLFRV GH SURWHFFLyQ UDGLROyJLFD 8QLGDGHV GH PHGLGD 6HxDOL]DFLyQ $SDUDWRV GH PHGLGD /D LQWHUYHQFLyQ FRQ IXHQWHV UDGLDFWLYDV =RQDV GH SODQLILFDFLyQ SDUD DFFLGHQWHV GH WLSR WpUPLFR 7LSRORJtD GH ORV LQFHQGLRV (IHFWRV GH OD UDGLDFLyQ WpUPLFD &iOFXORGH LQWHQVLGDG \ GRVLV 9DORUHV OtPLWH SDUD ODV ]RQDVGHSODQLILFDFLyQ i Pág. 12583 boc.cantabria.es 76/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ /D OH\ GH GH QRYLHPEUH /D /H\ GH GH GLFLHPEUH GH UHIRUPD GHO PDUFR QRUPDWLYRGHODSUHYHQFLyQGHULHVJRVODERUDOHV5HDO'HFUHWRGHGHHQHURSRUHO TXH GHVDUUROOD HO DUWtFXOR GH OD /H\ HQ PDWHULD GH FRRUGLQDFLyQ GH DFWLYLGDGHV HPSUHVDULDOHV5HDO'HFUHWRGHGHHQHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORV 6HUYLFLRVGH3UHYHQFLyQ 7(0$ 8WLOL]DFLyQGHHTXLSRVGHSURWHFFLyQLQGLYLGXDO&RQFHSWR\SULRULGDGGHXWLOL]DFLyQGHORVHTXLSRV GH SURWHFFLyQ LQGLYLGXDO (3, (O 5HDO 'HFUHWR GH GH PD\R \ OD JXtD WpFQLFD GHO ,QVWLWXWR 1DFLRQDO GH 6HJXULGDG \ 6DOXG HQ HO 7UDEDMR 1RUPDWLYD GHO PHUFDGR ~QLFR HXURSHR UHODWLYD DO GLVHxR \ FRPHUFLDOL]DFLyQ GH ORV (3, 5HDO 'HFUHWR GH GH QRYLHPEUH VREUHFRPHUFLDOL]DFLyQ\OLEUHFLUFXODFLyQLQWUDFRPXQLWDULDGHORV(3,'HILQLFLyQGH(3,\WLSRV 7(0$ 'LVSRVLFLRQHVPtQLPDVGH6HJXULGDG\6DOXGHQORVOXJDUHVGHWUDEDMRHO5HDO'HFUHWR GHGHDEULO\JXtDWpFQLFDGHO,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMRSDUDOD HYDOXDFLyQ \ SUHYHQFLyQ GH ULHVJRV 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH DSUXHEDHO&yGLJR7pFQLFRGHOD(GLILFDFLyQ'RFXPHQWR%iVLFR686HJXULGDGHQOD8WLOL]DFLyQ 1RUPDV\VHxDOL]DFLyQGHVHJXULGDG\VDOXG/DQRUPDLQWHUQDGHVHJXULGDG2EMHWLYRV&RQFHSWR \ WLSRV GH VHxDOL]DFLyQ 2EMHWR \ XWLOL]DFLyQ DGHFXDGD GH OD VHxDOL]DFLyQ GH VHJXULGDG (O 5HDO 'HFUHWRGHGHDEULOVREUHVHxDOL]DFLyQGHVHJXULGDG\VDOXGHQHOWUDEDMR/DJXtD WpFQLFDGHO,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMR CVE-2019-3750 7(0$ +LJLHQH ,QGXVWULDO &RQFHSWRV EiVLFRV 'HILQLFLyQ REMHWLYRV \ UDPDV 7LSRV GH DJHQWHV FRQWDPLQDQWHV &RQFHSWR GH H[SRVLFLyQ GRVLV \ YDORU OtPLWH 1RFLyQ GH VXVWDQFLD \ SUHSDUDGR SHOLJURVR/DHQFXHVWDKLJLpQLFD7R[LFRORJtDODERUDO&ODVLILFDFLyQGHORVDJHQWHVTXtPLFRVVHJ~Q VX HVWDGR \ IRUPD 9tDV GH HQWUDGD HQ HO RUJDQLVPR ,QWHUDFFLyQ FRQ HO RUJDQLVPR 'DxRV GHULYDGRVGHOWUDEDMRDFRUWR\ODUJRSOD]R)DFWRUHVGHWHUPLQDQWHVGHODWR[LFLGDG(IHFWRVDGLWLYRV \VLQpUJLFRV9DORUDFLyQGHOULHVJR i Pág. 12584 boc.cantabria.es 77/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ $1(;2, &8(532)$&8/7$7,92683(5,25 ,1*(1,(5248Ë0,&2 0$7(5,$6(63(&Ë),&$6 %/248(, i Pág. 12585 7(0$ $QiOLVLV IXQFLRQDO RUJiQLFR 'HVFULSFLyQ GH ORV PHFDQLVPRV GH UHDFFLyQ FDUDFWHUtVWLFRVGHODVSULQFLSDOHVIXQFLRQHVRUJiQLFDV 7(0$ $QiOLVLVFXDOLWDWLYR\FXDQWLWDWLYRRUJiQLFR0pWRGRVGHGHWHUPLQDFLyQFXDOLWDWLYD\ FXDQWLWDWLYD GH FDUERQR KLGUyJHQR D]XIUH QLWUyJHQR KDOyJHQRV IyVIRUR \ DUVpQLFR 7(0$ &ULWHULRV GH VHOHFFLyQ GHO PpWRGR \ WpFQLFD DQDOtWLFD &ODVLILFDFLRQHV GH ODV WpFQLFDVDQDOtWLFDVLQVWUXPHQWDOHV(OSURFHVRDQDOtWLFR3DUiPHWURVDQDOtWLFRV\QR DQDOtWLFRV 7(0$ &RQWURO GH FDOLGDG DSOLFDGR D ODERUDWRULRV GH HQVD\R TXtPLFR \ DPELHQWDO &DOLEUDFLyQ GH HTXLSRV GH PHGLGD ,QFHUWLGXPEUH GH FDOLEUDFLyQ 9DOLGDFLyQ GH PpWRGRVLQVWUXPHQWDOHV,QFHUWLGXPEUHGHHQVD\R 7(0$ 6LVWHPDVGHFDOLGDGHQODERUDWRULRVGHHQVD\R$FUHGLWDFLyQHQORVODERUDWRULRVGH HQVD\R\FDOLEUDFLyQVHJ~QQRUPD81((1,62,(&5HTXLVLWRVGHJHVWLyQ \UHTXLVLWRVWpFQLFRV 7(0$ 0HWDOHV \ PHWDOXUJLD 3URSLHGDGHV ItVLFDV \ TXtPLFDV GH ORV PHWDOHV (O HQODFH PHWiOLFR(VWDGRQDWXUDOGHORVPHWDOHV2SHUDFLRQHVPHWDO~UJLFDV$OHDFLRQHV 7(0$ (O KLHUUR 3URSLHGDGHV ItVLFDV \ TXtPLFDV 0HWDOXUJLD GHO KLHUUR $OWRV KRUQRV $FHURV 7(0$ (O DOXPLQLR 3URSLHGDGHV ItVLFDV \ TXtPLFDV 0HWDOXUJLD GHO DOXPLQLR $ILQDGR 6DOHVGHDOXPLQLR 7(0$ (O FREUH 3URSLHGDGHV ItVLFDV \ TXtPLFDV 0HWDOXUJLD GHO FREUH $ILQDGRV $SOLFDFLRQHV&RPSXHVWRVGHOFREUH 7(0$ ,QGXVWULD GHO FHPHQWR 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD DOLPHQWDULD 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD GH IDEULFDFLyQ GH SURGXFWRV TXtPLFRV GH EDVH 0DWHULDV SULPDV 3URFHVRV3URGXFWRV&RQVLGHUDFLRQHVDPELHQWDOHV boc.cantabria.es CVE-2019-3750 78/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ 7(0$ ,QGXVWULD FHUiPLFD 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QVWDODFLRQHV GH FRPEXVWLyQ 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHVDPELHQWDOHV 7(0$ ,QGXVWULD GHO YLGULR 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD IDUPDFpXWLFD 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD WH[WLO 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD DJUtFROD 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD SDSHOHUD 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV &RQVLGHUDFLRQHV DPELHQWDOHV 7(0$ ,QGXVWULD GH OD WUDQVIRUPDFLyQ GH OD PDGHUD 0DWHULDV SULPDV 3URFHVRV 3URGXFWRV&RQVLGHUDFLRQHVDPELHQWDOHV 7(0$ 3ODJXLFLGDV 7LSRV &DUDFWHUtVWLFDV 8VRV HQ DJULFXOWXUD 7R[LFLGDG (IHFWRV PHGLRDPELHQWDOHV/HJLVODFLyQ0pWRGRVGHDQiOLVLV 7(0$ 3OiVWLFRV&ODVLILFDFLyQ8VRV&RQWDPLQDFLyQ 7(0$ 3URFHVDGR GH SROtPHURV 0pWRGRV JHQHUDOHV GH WUDQVIRUPDFLyQ PROGHR H[WUXVLyQ VRSODGR FDODQGUDGR \ WHUPRFRQIRUPDGR 3ROtPHURV FRPSOHMRV 5HFXEULPLHQWRFRQPDWHULDOHVSOiVWLFRV(QFDGDWpFQLFDSULQFLSLRVGHOPpWRGRGH WUDQVIRUPDFLyQVLVWHPDVGHFRQWURO\SDUiPHWURVGHRSHUDFLyQ,GHQWLILFDFLyQGH HTXLSRV GH SURFHVR \ DX[LOLDUHV \ FRPSRQHQWHV $SOLFDFLRQHV 7pFQLFDV GH UHFXSHUDFLyQUHXWLOL]DFLyQ\UHFLFODMH 7(0$ 3ULQFLSDOHV IDPLOLDV GH HODVWyPHURV &DXFKR QDWXUDO &RQVWLWXFLyQ TXtPLFD SURSLHGDGHV \ UHDFWLYLGDG 0pWRGR GH SUHSDUDFLyQ &DXFKR VLQWpWLFR 6tQWHVLV FRPSRVLFLyQ\SURSLHGDGHV)RUPXODFLyQGHXQDPH]FODGHFDXFKR,QJUHGLHQWHV $JHQWHVYXOFDQL]DQWHV(PSOHRGHFDUJDV\SODVWLILFDQWHV2SHUDFLRQHVSUHYLDVD OD SUHSDUDFLyQ GH PH]FODV 7UDQVIRUPDFLyQ \ YXOFDQL]DFLyQ GH ODV PH]FODV GH FDXFKR 7pFQLFDV GH YXOFDQL]DFLyQ 7pFQLFDV GH UHFXSHUDFLyQ UHXWLOL]DFLyQ \ UHFLFODMHGHFDXFKRV 7(0$ 'HWHUJHQWHVWHQVRDFWLYRV'HWHUJHQWHVELRGHJUDGDEOHV&RQWDPLQDFLyQ 7(0$ $ERQRVLQRUJiQLFRV7LSRV8VRVHQDJULFXOWXUD&RQWDPLQDFLyQ/HJLVODFLyQ 7(0$ /D PDWHULD RUJiQLFD GHO VXHOR &DUDFWHUtVWLFDV 0HGLGDV FRUUHFWRUDV GH OD GHILFLHQFLDHQPDWHULDRUJiQLFDHQORVVXHORV1XWULHQWHVHQVXHORV0pWRGRVGH DQiOLVLV CVE-2019-3750 i Pág. 12586 boc.cantabria.es 79/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ %/248(,, i Pág. 12587 7(0$ (ODJXDHQODLQGXVWULD7LSRVGHDJXDVUHVLGXDOHVLQGXVWULDOHV&LFORGHODJXDHQ ODLQGXVWULD7UDWDPLHQWRVGHODJXDHQODLQGXVWULD 7(0$ (O DJXD GH FRQVXPR KXPDQR 9LJLODQFLD VDQLWDULD 3DUiPHWURV LQGLFDGRUHV \ YDORUHVSDUDPpWULFRV/HJLVODFLyQQDFLRQDO\HXURSHD 7(0$ &RUUHFFLRQHV GH ODV FDUDFWHUtVWLFDV ItVLFRTXtPLFDV GHO DJXD GH DEDVWHFLPLHQWR S~EOLFR DJUHVLYLGDG DEODQGDPLHQWR GHVIHUUL]DFLyQ IOXRUDFLyQ SRWDELOL]DFLyQ GH DJXDVVDOREUHVRPDULQDV\GHVPLQHUDOL]DFLyQ 7(0$ 9LJLODQFLDGHODVDJXDV , 7RPDGHPXHVWUDVSDUDHODQiOLVLVPLFURELROyJLFRGH ODVDJXDVGHFRQVXPRS~EOLFRWpFQLFDVGHPXHVWUHRPDWHULDODFRQGLFLRQDPLHQWR \ FRQVHUYDFLyQ 1~PHUR GH WRPDV D HIHFWXDU HQ IXQFLyQ GH OD SREODFLyQ DEDVWHFLGD0LFURELRORJtDGHODVDJXDVGHFRQVXPRKXPDQR7pFQLFDVDQDOtWLFDV 7(0$ 9LJLODQFLDGHODVDJXDV ,, 7RPDGHPXHVWUDVSDUDHODQiOLVLVItVLFRTXtPLFRGH ODVDJXDVGHFRQVXPRS~EOLFRWpFQLFDVGHPXHVWURPDWHULDODFRQGLFLRQDPLHQWR \FRQVHUYDFLyQGHODPXHVWUDHQIXQFLyQGHORVSDUiPHWURVDGHWHUPLQDU7LSRVGH DQiOLVLV\Q~PHURGHWRPDVDHIHFWXDUHQIXQFLyQGHODSREODFLyQDEDVWHFLGD 7(0$ (VWDFLRQHV GH WUDWDPLHQWR GH DJXD SRWDEOH 3UHWUDWDPLHQWR GH DJXDV SRWDEOHV 3URFHVRV GH FRDJXODFLyQ IORFXODFLyQ VHGLPHQWDFLyQ \ ILOWUDFLyQ 5HDFWLYRV DXWRUL]DGRVHQHVWRVWUDWDPLHQWRV/tQHDGHIDQJRV'HVLQIHFFLyQGHORVHIOXHQWHV SDUD OD UHXWLOL]DFLyQ 7UDWDPLHQWRV DYDQ]DGRV SDUD OD UHJHQHUDFLyQ GH DJXDV UHVLGXDOHV 7(0$ (VWDFLRQHV GHSXUDGRUDV GH DJXDV UHVLGXDOHV 3UHWUDWDPLHQWRV 7UDWDPLHQWRV SULPDULRV ,QWURGXFFLyQ D ORV SURFHVRV ELROyJLFRV )DQJRV DFWLYDGRV 3URFHVRV ELROyJLFRVGHFXOWLYRILMR/tQHDGHIDQJRV'HVLQIHFFLyQGHORVHIOXHQWHVSDUDOD UHXWLOL]DFLyQ7UDWDPLHQWRVDYDQ]DGRVSDUDODUHJHQHUDFLyQGHDJXDVUHVLGXDOHV 7(0$ 9HUWLGRVDOOLWRUDOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDOHJLVODFLyQHVWDWDO\ DXWRQyPLFDDSOLFDEOH&RPSHWHQFLDVVREUHYHUWLGRVDOPDUHQHOiPELWRGHOOLWRUDO GHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5HTXLVLWRV\FRQWHQLGRDLQFOXLUHQXQD DXWRUL]DFLyQGHYHUWLGR3URFHGLPLHQWRGHREWHQFLyQ\WUDPLWDFLyQGHDXWRUL]DFLyQ GH YHUWLGRV DO PDU GHVGH WLHUUD HQ HO iPELWR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ 3ULQFLSDOHV QRUPDV \ FRPSHWHQFLDV HQ PDWHULD GH FRVWDV \ PHGLR PDULQR HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 5HJODPHQWR JHQHUDO SDUD HO GHVDUUROOR \ HMHFXFLyQGHOD/H\GH&RVWDV'RPLQLR3~EOLFR0DUtWLPR7HUUHVWUH 7(0$ &DQRQ GH VDQHDPLHQWR GH &DQWDEULD 1RUPDWLYD YLJHQWH SDUD OD DSOLFDFLyQ GHO FDQRQGHVDQHDPLHQWRHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ &RQWDPLQDFLyQ GH DJXDV FRQWLQHQWDOHV 9HUWLGRV LQGXVWULDOHV 9HUWLGRV XUEDQRV 0HGLGDVDQWLFRQWDPLQDQWHV&RQWUROGHODVDJXDV2UJDQLVPRVGHFXHQFD 7(0$ &RQWDPLQDFLyQGHDJXDVVXEWHUUiQHDV$VSHFWRVEiVLFRVHQODFRQWDPLQDFLyQGH ORV DFXtIHURV )RFRV SRWHQFLDOHV GH FRQWDPLQDFLyQ GH ORV DFXtIHURV 0HGLGDV DQWLFRQWDPLQDFLyQ/HJLVODFLyQ boc.cantabria.es CVE-2019-3750 80/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ i Pág. 12588 /H\ GH DJXDV 5HJXODFLyQ GHO GRPLQLR S~EOLFR KLGUiXOLFR 8VRV GHO DJXD &RPSHWHQFLDV 7(0$ 0DUFRMXUtGLFRGHODSURGXFFLyQ\JHVWLyQGHUHVLGXRV/H\GHGHMXOLR GHUHVLGXRV\VXHORVFRQWDPLQDGRV&RPSHWHQFLDVDGPLQLVWUDWLYDV\UpJLPHQGH DXWRUL]DFLRQHV\FRPXQLFDFLRQHV 7(0$ &ODVLILFDFLyQ\FDUDFWHUL]DFLyQGHUHVLGXRV 7(0$ 3ULQFLSDOHVRSHUDFLRQHVGHWUDWDPLHQWRGHUHVLGXRV 7(0$ 7UDVODGRV GH UHVLGXRV 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH UHJXOD HO WUDVODGR GH UHVLGXRV HQ HO LQWHULRU GHO WHUULWRULR GHO (VWDGR 7UDVODGRV WUDQVIURQWHUL]RV6LVWHPDGHLQIRUPDFLyQDPELHQWDOGH&DQWDEULD 6,$&$1 7(0$ 5HVLGXRV GRPpVWLFRV &RPSRVLFLyQ 6LVWHPDV GH UHFRJLGD \ WUDQVSRUWH 2SHUDFLRQHVGHWUDWDPLHQWRGHORVUHVLGXRV 7(0$ 5HFLFODGR GH ORV UHVLGXRV GRPpVWLFRV 5HFRJLGD VHOHFWLYD 3OiVWLFRV 9LGULRV 3DSHO 0HWDOHV &RQGLFLRQHV HFRQyPLFDV GH UHFLFODGR $SURYHFKDPLHQWR GH OD PDWHULD RUJiQLFD GH ORV UHVLGXRV GRPpVWLFRV ,QVWDODFLRQHV GH FRPSRVWDMH &RPSRVW \ PDWHULDO ELRHVWDELOL]DGR FDUDFWHUtVWLFDV \ SURSLHGDGHV XWLOL]DFLyQ HQ DJULFXOWXUD2WUDVDSOLFDFLRQHV 7(0$ (OLPLQDFLyQGHUHVLGXRVPHGLDQWHGHSyVLWRHQYHUWHGHUR9HUWHGHURVFRQWURODGRV &DUDFWHUtVWLFDV 7LSRV GH PDTXLQDULD 8ELFDFLyQ GH YHUWHGHURV FRQWURODGRV )DFWRUHVDFRQVLGHUDU/L[LYLDGRV$SURYHFKDPLHQWRGHELRJiV/HJLVODFLyQHVWDWDO 7(0$ ,QFLQHUDFLyQ GH UHVLGXRV 7LSRV 7HFQRORJtDV 6LVWHPDV GH GHSXUDFLyQ /HJLVODFLyQ5HFRPHQGDFLRQHVHQHOXVRGHODLQFLQHUDFLyQ 7(0$ *HVWLyQ\SURGXFFLyQGHYHKtFXORVDOILQDOGHVXYLGD~WLOQHXPiWLFRVIXHUDGHXVR \DFHLWHVLQGXVWULDOHV 7(0$ *HVWLyQ \ SURGXFFLyQ GH UHVLGXRV GH DSDUDWRV HOpFWULFRV \ HOHFWUyQLFRV SLODV EDWHUtDV\DFXPXODGRUHV\3&%3&7 7(0$ *HVWLyQ \ SURGXFFLyQ GH UHVLGXRV GH FRQVWUXFFLyQ \ GHPROLFLyQ HVFRULDV \ UHVLGXRVVDQLWDULRV\DVLPLODGRV(VSHFLDOUHIHUHQFLDDODOHJLVODFLyQDXWRQyPLFD 7(0$ 3ODQGH5HVLGXRVGH&DQWDEULD 7(0$ &RQWDPLQDFLyQGHVXHORV3DUiPHWURVGHFRQWURO7pFQLFDVGHGHVFRQWDPLQDFLyQ 1RUPDWLYD 7(0$ /DFRQWDPLQDFLyQGHODLUH&RQVLGHUDFLRQHVJHQHUDOHVFDUDFWHUtVWLFDVGHOPHGLR ItVLFR DWPRVIpULFR &RQWDPLQDQWHV SULPDULRV \ VHFXQGDULRV GHO DLUH 3DUWtFXODV 0RQy[LGR GH FDUERQR Ï[LGRV GH QLWUyJHQR 'Ly[LGR GH D]XIUH 'Ly[LGRV GH FDUERQR2]RQR+LGURFDUEXURV2[LGDQWHVIRWRTXtPLFRV/OXYLDiFLGD)XHQWHVGH FRQWDPLQDFLyQ(IHFWRVVREUHHOPHGLRDPELHQWH\ODVDOXGKXPDQD 7(0$ &RQWUROGHODFDOLGDGGHODLUH9DORUHVOtPLWHGHLQPLVLyQ(TXLSRVGHPHGLFLyQGH ODFDOLGDGGHODLUH7RPD\DFRQGLFLRQDPLHQWRGHODPXHVWUD5HGHVGHYLJLODQFLD GHODFRQWDPLQDFLyQDWPRVIpULFD(VWDFLRQHVILMDV\PyYLOHV&ULWHULRVGHXELFDFLyQ GH HVWDFLRQHV (TXLSRV 6LVWHPDV GH FDOLEUDFLyQ 6LVWHPDV GH WUDQVPLVLyQ GH GDWRV/DUHGGHYLJLODQFLDGHODFDOLGDGGHODLUHGH&DQWDEULD boc.cantabria.es CVE-2019-3750 7(0$ 81/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ 7(0$ 6LVWHPDVGHUHGXFFLyQGHHPLVLRQHVHQODLQGXVWULD&LFORQHVILOWURVGHPDQJDV ILOWURVHOHFWURHVWiWLFRVVLVWHPDVGHUHGXFFLyQGHy[LGRVGHQLWUyJHQR 7(0$ 1RUPDWLYD UHIHUHQWH D ODV $FWLYLGDGHV 3RWHQFLDOPHQWH &RQWDPLQDGRUDV GH OD $WPyVIHUD $3&$ /H\ GH GH QRYLHPEUH GH FDOLGDG GHO DLUH \ SURWHFFLyQGHODDWPyVIHUD'HFUHWRGHGHMXQLRSRUHOTXHVHUHJXOD HOFRQWUROGHOD&RQWDPLQDFLyQ$WPRVIpULFD,QGXVWULDOHQOD&RPXQLGDG$XWyQRPD GH&DQWDEULD&DWiORJRGHDFWLYLGDGHV$3&$ 7(0$ &DPELR &OLPiWLFR 3ULQFLSDOHV JDVHV GH HIHFWR LQYHUQDGHUR 3RWHQFLDO GH &DOHQWDPLHQWR *OREDO &RPSURPLVRV QDFLRQDOHV \ HXURSHRV &RPHUFLR GH GHUHFKRVGHHPLVLyQ 7(0$ (OUXLGRFRPRDJHQWHFRQWDPLQDQWH(OUXLGRHQiUHDVXUEDQDV/H\GH GHQRYLHPEUHGHO5XLGR\UHJODPHQWRVGHULYDGRV1RUPDEiVLFDGHHGLILFDFLyQ FRQGLFLRQHVDF~VWLFDV0HGLGDVFRUUHFWRUDV9LEUDFLRQHV 7(0$ /H\GHGHGLFLHPEUHGHHYDOXDFLyQDPELHQWDO 7(0$ /H\ GH GH GLFLHPEUH GH FRQWURO DPELHQWDO LQWHJUDGR GH &DQWDEULD 'HFUHWRGHGHPDU]RSRUHOTXHVHDSUXHEDHOUHJODPHQWRGHOD/H\ GHGHGLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGRGH&DQWDEULD 7(0$ 5HDO'HFUHWR/HJLVODWLYRGHGHGLFLHPEUHSRUHOTXHVHDSUXHEDHOWH[WR UHIXQGLGRGHOD/H\GHSUHYHQFLyQ\FRQWUROLQWHJUDGRVGHODFRQWDPLQDFLyQ/DV DXWRUL]DFLRQHVDPELHQWDOHVGH&DQWDEULDSURFHGLPLHQWR\OHJLVODFLyQ %/248(,,, i Pág. 12589 7(0$ 6LVWHPDVGHRUGHQDFLyQFODVLILFDFLyQ\DOPDFHQDPLHQWRGHSURGXFWRVTXtPLFRV 7pFQLFDV\HTXLSRVGHDOPDFHQDPLHQWR&RQGLFLRQHVGHSUHYHQFLyQGHULHVJRV 6LVWHPDVGHLGHQWLILFDFLyQ\FRQWUROGHH[LVWHQFLDV 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHDSUXHEDHO5HJODPHQWRGH $OPDFHQDPLHQWR GH 3URGXFWRV 4XtPLFRV \ VXV ,QVWUXFFLRQHV 7pFQLFDV &RPSOHPHQWDULDV0,($34D 7(0$ 5HJODPHQWR &( Q GHO 3DUODPHQWR (XURSHR \ GHO &RQVHMR GH GHGLFLHPEUHGHVREUHFODVLILFDFLyQHWLTXHWDGR\HQYDVDGRGHVXVWDQFLDV \ PH]FODV \ SRU HO TXH VH PRGLILFDQ \ GHURJDQ ODV 'LUHFWLYDV &(( \ &(\VHPRGLILFDHO5HJODPHQWR &( Q 7(0$ 3UHYHQFLyQ GH DFFLGHQWHV PD\RUHV HQ OD ,QGXVWULD 4XtPLFD /HJLVODFLyQ &RPSHWHQFLDV 3ODQHV GH HPHUJHQFLD H[WHULRU +LJLHQH LQGXVWULDO +LJLHQH GH FDPSR+LJLHQHDQDOtWLFD+LJLHQHRSHUDWLYD 7(0$ ,QVSHFFLRQHV PHGLRDPELHQWDOHV $XGLWRUtDV DPELHQWDOHV LQWHUQDV \ H[WHUQDV REMHWR \ DOFDQFH 3URFHGLPLHQWR GH UHDOL]DFLyQ GH XQD DXGLWRUtD DPELHQWDO PHWRGRORJtD \ HWDSDV D FXEULU HQ OD UHDOL]DFLyQ GH XQD DXGLWRUtD DPELHQWDO &XHVWLRQDULRV PHGLRDPELHQWDOHV $FUHGLWDFLyQ FHUWLILFDFLyQ \ YDOLGDFLyQ PHGLRDPELHQWDO2UJDQLVPRVTXHORUHDOL]DQ 7(0$ )XQGDPHQWRV GH OD SURWHFFLyQ FLYLO /D /H\ GH GH MXOLR GHO 6LVWHPD 1DFLRQDOGH3URWHFFLyQ&LYLO\HO5HDO'HFUHWRGHGHDEULOSRUHOTXH VHDSUXHEDOD1RUPD%iVLFDGH3URWHFFLyQ&LYLO5HDO'HFUHWRGHGH boc.cantabria.es CVE-2019-3750 82/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ i Pág. 12590 7(0$ 1RUPDWLYDGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD/H\GH &DQWDEULDGHOVLVWHPDGH3URWHFFLyQ&LYLO'HFUHWRGHGHRFWXEUHSRU HOTXHVHHVWDEOHFHODFRPSRVLFLyQRUJDQL]DFLyQ\UpJLPHQGHIXQFLRQDPLHQWRGH OD&RPLVLyQGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD'HFUHWR GHGHHQHURSRUHOTXHVHUHJXODQODVRUJDQL]DFLRQHVGH9ROXQWDULDGR GH3URWHFFLyQ&LYLOGH&DQWDEULD\HOUHJLVWURGHRUJDQL]DFLRQHVGH9ROXQWDULDGR GHSURWHFFLyQ&LYLOGH&DQWDEULD 7(0$ (O2UJDQLVPR$XWyQRPR6HUYLFLRGH(PHUJHQFLDVGH&DQWDEULD 6(0&$ UpJLPHQ MXUtGLFR/RVSDUTXHVGHHPHUJHQFLDVGH&DQWDEULDXELFDFLyQGHVFULSFLyQ]RQDV GHLQWHUYHQFLyQ\PHGLRVPDWHULDOHV'HFLVLyQ&((GHO&RQVHMRGHGH MXOLRUHODWLYDDODFUHDFLyQGHXQQ~PHURGHOODPDGDGHXUJHQFLD~QLFRHXURSHR 7(0$ 1RUPDWLYDHQPDWHULDGH$XWRSURWHFFLyQ5HDO'HFUHWRGHGHPDU]R SRU HO TXH VH DSUXHED OD 1RUPD %iVLFD GH $XWRSURWHFFLyQ GH ORV FHQWURV HVWDEOHFLPLHQWRV\GHSHQGHQFLDVGHGLFDGRVDDFWLYLGDGHVTXHSXHGDQGDURULJHQ DVLWXDFLRQHVGHHPHUJHQFLD'HFUHWRGHGHDEULOSRUHOTXHVHUHJXOD HO SURFHGLPLHQWR GH &RQWURO $GPLQLVWUDWLYR \ 5HJLVWUR GH ORV 3ODQHV GH $XWRSURWHFFLyQ 7(0$ 3ODQ7HUULWRULDOGH(PHUJHQFLDVGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH &DQWDEULD 'HFUHWR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 3ODQ 7HUULWRULDOGH(PHUJHQFLDVGH&DQWDEULD 3/$7(5&$17 7(0$ 3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDVREUH 7UDQVSRUWH GH 0HUFDQFtDV 3HOLJURVDV SRU &DUUHWHUD \ )HUURFDUULO (O 'HFUHWR GHGHIHEUHURSRUHOTXHVHDSUXHEDHO3ODQ(VSHFLDOGH3URWHFFLyQ &LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDVREUH7UDQVSRUWHGH0HUFDQFtDV 3HOLJURVDVSRUFDUUHWHUD\IHUURFDUULO 75$16&$17 7(0$ 3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDVREUH ,QFHQGLRV)RUHVWDOHV(O'HFUHWRGHGHIHEUHURSRUHOTXHVHDSUXHED HO 3ODQ (VSHFLDO GH 3URWHFFLyQ &LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD VREUH,QFHQGLRV)RUHVWDOHV ,1)2&$17 7(0$ 3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDVREUH LQXQGDFLRQHV(O'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVHDSUXHEDHO 3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDDQWHHO 5LHVJRGH,QXQGDFLRQHV ,181&$17 7(0$ 3ODQHVHVSHFLDOHVGHULHVJRTXtPLFR5HDO'HFUHWRGHGHVHSWLHPEUH SRU HO TXH VH DSUXHEDQ PHGLGDV GH FRQWURO GH ORV ULHVJRV LQKHUHQWHV D ORV DFFLGHQWHV JUDYHV HQ ORV TXH LQWHUYHQJDQ VXVWDQFLDV SHOLJURVDV 5HDO 'HFUHWR GHGHMXOLRSRUHOTXHVHDSUXHEDHO3ODQHVWDWDOGHSURWHFFLyQFLYLO DQWHHOULHVJRTXtPLFR'HFUHWRGHGHPD\RSRUHOTXHVHGHVLJQDQORV yUJDQRV FRPSHWHQWHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD \ GHVDUUROOD HO 5HDO'HFUHWRGHGHMXOLRTXHDSUXHEDPHGLGDVGHFRQWUROGHORV ULHVJRV LQKHUHQWHV D ORV DFFLGHQWHV JUDYHV HQ ORV TXH LQWHUYHQJDQ VXVWDQFLDV SHOLJURVDV3ODQHVGH(PHUJHQFLD([WHULRU,QVWDODFLRQHVDIHFWDGDVHQ&DQWDEULD 7(0$ 7LSRORJtD GH ODV HPHUJHQFLDV PiV FRPXQHV FDXVDV FRQVHFXHQFLDV \ JHVWLyQ LQWHJUDO boc.cantabria.es CVE-2019-3750 VHSWLHPEUHSRUHOTXHVHUHJXODODFRPSRVLFLyQ\UpJLPHQGHIXQFLRQDPLHQWRGH OD&RPLVLyQ1DFLRQDOGH3URWHFFLyQ&LYLO 83/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 /Z/ME'EZ>&hE/MEWj>/ 7(0$ ([SRVLFLyQODERUDODDJHQWHVItVLFRV(IHFWRVVREUHODVDOXG(YDOXDFLyQ9DORUHV GHUHIHUHQFLD0HGLGDVGHFRQWURO/HJLVODFLyQ 7(0$ 7R[LFRORJtDODERUDOFODVLILFDFLyQGHORVDJHQWHVTXtPLFRVVHJ~QHVWDGR\IRUPD 9tDVGHHQWUDGDHQHORUJDQLVPR,QWHUDFFLyQFRQHORUJDQLVPR'DxRVGHULYDGRV GHOWUDEDMRDFRUWR\ODUJRSOD]R)DFWRUHVGHWHUPLQDQWHVGHODWR[LFLGDG(IHFWRV DGLWLYRV\VLQpUJLFRV9DORUDFLyQGHOULHVJR 7(0$ $JHQWHVTXtPLFRV&ULWHULRVGHYDORUDFLyQ9DORUHVOtPLWHDPELHQWDOHVFRQFHSWR\ WLSRV 9DORUHV OtPLWH DPELHQWDOHV GH H[SRVLFLyQ SURIHVLRQDO HQ (VSDxD 2WURV OtPLWHVGHUHIHUHQFLD1RUPDWLYDHVSDxROD 7(0$ 9HQWLODFLyQ LQGXVWULDO 9HQWLODFLyQ JHQHUDO 9HQWLODFLyQ ORFDOL]DGD &ULWHULRV GH VHOHFFLyQHLQVWDODFLyQ 7(0$ 3URWHFFLyQSHUVRQDOHQODH[SRVLFLyQODERUDODDJHQWHVItVLFRV\TXtPLFRV7LSRV GHSURWHFWRUHV&ULWHULRVGHVHOHFFLyQ1RUPDWLYDYLJHQWH 3URWHFFLRQHVFROHFWLYDV'HILQLFLyQ\FULWHULRVGHXWLOL]DFLyQ 6HJXULGDG HQ HO ODERUDWRULR TXtPLFR 5LHVJRV HVSHFtILFRV HQ ORV ODERUDWRULRV TXtPLFRV5LHVJRVGHULYDGRVGHODXWLOL]DFLyQGHSURGXFWRVTXtPLFRV6HJXULGDGHQ ODPDQLSXODFLyQGHPDWHULDOHLQVWUXPHQWDO\HQRSHUDFLRQHVEiVLFDV'HUUDPHV\ IXJDVGHSURGXFWRVTXtPLFRVSHOLJURVRV1RUPDVGHVHJXULGDG\VHxDOL]DFLyQ CVE-2019-3750 7(0$ 7(0$ i Pág. 12591 boc.cantabria.es 84/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(1&,(1&,$648Ë0,&$6 0$7(5,$6(63(&Ë),&$6 i Pág. 12592 7(0$ (VWUXFWXUD\FRPSRVLFLyQGHODDWPyVIHUD&DUDFWHUtVWLFDV\FODVLILFDFLyQGHORVFRQWDPLQDQWHV DWPRVIpULFRV 7(0$ (PLVLyQ H LQPLVLyQ GH FRQWDPLQDQWHV )HQyPHQRV JOREDOHV GH FRQWDPLQDFLyQ DWPRVIpULFD 'LVSHUVLyQGHFRQWDPLQDQWHVHQODDWPyVIHUD 7(0$ 7LSRV GH HPLVLRQHV LQGXVWULDOHV 0XHVWUHR GH JDVHV GH HPLVLyQ \ GH SDUWtFXODV 3URFHGLPLHQWRV\HTXLSRV1RUPDWLYDDSOLFDEOH 7(0$ 0XHVWUHR GH FRQWDPLQDQWHV DWPRVIpULFRV HQ LQPLVLyQ &RQFHSWRV EiVLFRV 1RUPDWLYD DSOLFDEOH 7pFQLFDV \ HTXLSRV GH PXHVWUHR ,QGLFDGRUHV ELROyJLFRV GH OD FRQWDPLQDFLyQ DWPRVIpULFD 7(0$ 5HGHV GH PHGLGD GH OD FRQWDPLQDFLyQ DWPRVIpULFD 7LSRV 8QLGDGHV PyYLOHV /D 5HG GH &RQWURO\9LJLODQFLDGHOD&DOLGDGGHO$LUHHQ&DQWDEULD 7(0$ 'LR[LQDV\IXUDQRV&DUDFWHUtVWLFDV\PpWRGRVGHPXHVWUHR 7(0$ 6LVWHPDVGHGHSXUDFLyQGHSDUWtFXODV\VLVWHPDVGHGHSXUDFLyQGHJDVHV 7(0$ (O PRWRU WpUPLFR GH DXWRPRFLyQ 7LSRV GH FRQWDPLQDQWHV \ VLVWHPDV GH UHGXFFLyQ GH OD FRQWDPLQDFLyQ 7(0$ (OUXLGRFRPRDJHQWHFRQWDPLQDQWH1RUPDWLYDFDUDFWHUL]DFLyQ\FRQWURO 7(0$ 1RUPDWLYDDSOLFDEOHHQHOiPELWRGHORVUHVLGXRV3ODQGH5HVLGXRVGH&DQWDEULD 7(0$ ,GHQWLILFDFLyQ FDUDFWHUL]DFLyQ ELROyJLFD \ FDUDFWHUL]DFLyQ TXtPLFD \ FODVLILFDFLyQ GH ORV UHVLGXRVSHOLJURVRVLQHUWHVHLQHUWL]DGRV 7(0$ 7UDWDPLHQWR\JHVWLyQGHUHVLGXRVSHOLJURVRVLQHUWHVHLQHUWL]DGRV0LQLPL]DFLyQGHUHVLGXRV 7(0$ $FHLWHVUHVLGXDOHV3URSLHGDGHVJHVWLyQ\WUDWDPLHQWR 7(0$ 3&%¶V&DUDFWHUtVWLFDVULHVJRV\JHVWLyQ 7(0$ 5HVLGXRVVyOLGRVXUEDQRV&RPSRVLFLyQ 7(0$ *HVWLyQGHUHVLGXRVVyOLGRVXUEDQRVHQYHUWHGHURVFRQWURODGRV3URFHVRVItVLFR±TXtPLFRVHQ XQYHUWHGHUR*DVGHYHUWHGHUR\SURGXFFLyQGHOL[LYLDGRV 7(0$ 5HFXSHUDFLyQ LQWHJUDO GH UHVLGXRV XUEDQRV 5HXWLOL]DFLyQ \ UHFLFODMH ,QVWDODFLRQHV GH UHFXSHUDFLyQ7UDWDPLHQWRELROyJLFRGHUHVLGXRVXUEDQRV 7(0$ 7UDWDPLHQWRWpUPLFRGHUHVLGXRVXUEDQRV,QFLQHUDFLyQVLPSOH,QFLQHUDFLyQFRQUHFXSHUDFLyQ GHHQHUJtD5HFRPHQGDFLyQHQHOXVRGHODLQFLQHUDFLyQ 7(0$ 2WURVUHVLGXRV5HVLGXRVGHGHPROLFLyQ\FRQVWUXFFLyQYHKtFXORVIXHUDGHXVRQHXPiWLFRV HTXLSRV\DSDUDWRVHOHFWUyQLFRVSLODV\DFXPXODGRUHVHOpFWULFRV boc.cantabria.es CVE-2019-3750 %/248(, 7(0$ /H\GH3URWHFFLyQGHO0HGLR$PELHQWH$WPRVIpULFR\VX5HJODPHQWR 85/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 0XHVWUHRHQUHVLGXRV 7(0$ &DUDFWHUtVWLFDV GH IXQFLRQDPLHQWR GH ORV LQVWUXPHQWRV DQDOtWLFRV 3DUiPHWURV GH FDOLGDG 3UHFLVLyQ6HVJR6HQVLELOLGDG/tPLWHGHGHWHFFLyQ,QWHUYDORGHFRQFHQWUDFLyQ6HOHFWLYLGDG 7(0$ (O UXLGR HQ HO DQiOLVLV LQVWUXPHQWDO 5HODFLyQ HQWUH VHxDO \ UXLGR )XHQWHV GH UXLGR 5XLGR TXtPLFR5XLGRLQVWUXPHQWDO'LVSRVLWLYRVGHHOLPLQDFLyQGHOUXLGR 7(0$ &DOLEUDFLyQGHORVPpWRGRVLQVWUXPHQWDOHV&XUYDVGHFDOLEUDGR(PSOHRGHSDWURQHVLQWHUQRV $SOLFDFLRQHV 7(0$ (VSHFWRPHWUtD GH PDVDV DWyPLFD FRQ SODVPD GH DFRSODPLHQWR LQGXFWLYR ,&306 )XQGDPHQWRV (OHPHQWRV GH XQ VLVWHPD ,&306 ,QWHUIHUHQFLDV HVSHFWURVFySLFDV $SOLFDFLRQHV 7(0$ &URPDWURJUDItDGHJDVHV)XQGDPHQWR&RPSRQHQWHVEiVLFRVGHXQFURPDWyJUDIRGHJDVHV &ROXPQDV ,Q\HFWRUHV 'HWHFWRUHV 6LVWHPDV DXWRPDWL]DGRV GH SUHWUDWDPLHQWR GH PXHVWUDV $SOLFDFLRQHV 7(0$ 5LHVJRV HVSHFtILFRV HQ ODERUDWRULRV TXtPLFRV &ODVLILFDFLyQ SHOLJURVLGDG PDQLSXODFLyQ \ DOPDFHQDPLHQWRGHSURGXFWRVTXtPLFRVHQHOODERUDWRULR 7(0$ 5HTXLVLWRV JHQHUDOHV UHODWLYRV D OD FRPSHWHQFLD GH ORV ODERUDWRULRV GH HQVD\R \ FDOLEUDFLyQ 5HTXLVLWRVGHJHVWLyQ5HTXLVLWRVWpFQLFRV 7(0$ &DOLGDG \ DFUHGLWDFLyQ HQ ORV ODERUDWRULRV TXtPLFRV 7LSRV GH QRUPDV 2UJDQLVPRV GH QRUPDOL]DFLyQ6LVWHPDGHFDOLGDG7RPD\SUHSDUDFLyQGHPXHVWUDVGHDFXHUGRDODQRUPD (1 7(0$ /RV UHVXOWDGRV GH DQiOLVLV TXtPLFR 9DOLGDFLyQ ([DFWLWXG 7UD]DELOLGDG 3UHFLVLyQ H LQFHUWLGXPEUH 7(0$ $JHQWHV TXtPLFRV OD HYDOXDFLyQ GH OD H[SRVLFLyQ (VWUDWHJLD GH PXHVWUHR 6LVWHPDV GH PHGLGD GLUHFWD \ GH WRPD GH PXHVWUDV &RQWURO GH FDOLGDG GH ORV HTXLSRV GH PHGLGD \ FDOLEUDFLyQGHORVPXHVWUDGRUHV(OPpWRGRDQDOtWLFR\ODVWpFQLFDVGHDQiOLVLV %/248(,, i Pág. 12593 7(0$ &RQFHSWRV EiVLFRV UHODWLYRV D OD VHJXULGDG \ VDOXG HQ HO WUDEDMR (O WUDEDMR \ OD VDOXG &RQFHSWRGHULHVJRODERUDO3URWHFFLyQ\SUHYHQFLyQ3UHYHQFLyQHQHOGLVHxR&RQGLFLRQHVGH WUDEDMRHQUHODFLyQFRQODVDOXG)DFWRUHVGHULHVJR'DxRVGHULYDGRVGHOWUDEDMR/DVWpFQLFDV SUHYHQWLYDV 6HJXULGDG HQ HO 7UDEDMR +LJLHQH ,QGXVWULDO (UJRQRPtD 3VLFRVRFLRORJtD $SOLFDGD0HGLFLQDGHO7UDEDMR7pFQLFDVGHSDUWLFLSDFLyQ/DLQIRUPDFLyQ\ODFRPXQLFDFLyQ /DIRUPDFLyQ 7(0$ $FWXDFLRQHVGHODV$GPLQLVWUDFLRQHV3~EOLFDVFRPSHWHQWHVHQPDWHULDVDQLWDULD\GHLQGXVWULD /D /H\ GH GH DEULO *HQHUDO GH 6DQLGDG /D /H\ GH GH MXOLR GH ,QGXVWULD5HJODPHQWRVGH6HJXULGDG,QGXVWULDO 7(0$ /DOH\GHGHQRYLHPEUHGHSUHYHQFLyQGHULHVJRVODERUDOHV/D/H\GH GHGLFLHPEUHGHUHIRUPDGHOPDUFRQRUPDWLYRGHODSUHYHQFLyQGHULHVJRVODERUDOHV5HDO 'HFUHWRGHGHHQHURSRUHOTXHGHVDUUROODHODUWtFXORGHOD/H\HQ PDWHULDGHFRRUGLQDFLyQGHDFWLYLGDGHVHPSUHVDULDOHV 7(0$ (O 5HJODPHQWR GH ORV 6HUYLFLRV GH 3UHYHQFLyQ 5HDO 'HFUHWR GH GH HQHUR 0RGLILFDFLRQHVLQWURGXFLGDVSRUHO5HDO'HFUHWRGHGHPD\R boc.cantabria.es CVE-2019-3750 86/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12594 &RQFHSWRGHVDOXG\SUHYHQFLyQ&RQFHSWR\REMHWLYRVGHODPHGLFLQDGHOWUDEDMR3DWRORJtDV GH RULJHQ ODERUDO (SLGHPLRORJtD ODERUDO 9LJLODQFLD GH OD VDOXG 3URWRFRORV GH YLJLODQFLD VDQLWDULDHVSHFtILFD3URPRFLyQGHODVDOXG3ODQLILFDFLyQHLQIRUPDFLyQVDQLWDULD/DVGURJDV HQHOWUDEDMR1RUPDWLYDDSOLFDEOH 7(0$ (O DFFLGHQWH GH WUDEDMR \ OD HQIHUPHGDG SURIHVLRQDO HQ HO VLVWHPD GH OD 6HJXULGDG 6RFLDO 3DUWHGHDFFLGHQWHGHWUDEDMRQRWLILFDFLyQ\WUDPLWDFLyQ 2UGHQGHGHGLFLHPEUHGH SRUODTXHVHHVWDEOHFHPRGHORVSDUDQRWLILFDFLyQGHDFFLGHQWHV\GLFWDLQVWUXFFLRQHVSDUDVX FXPSOLPHQWDFLyQ \ WUDPLWDFLyQ 2UGHQ 0LQLVWHULDO 7$6 GH GH QRYLHPEUH SRU OD TXHVHUHJXODODXWLOL]DFLyQGHO6LVWHPDGH'HFODUDFLyQ(OHFWUyQLFDGH$FFLGHQWHVGH7UDEDMR 'HOW# 7(0$ 5HDO 'HFUHWR GH GH QRYLHPEUH SRU HO TXH VH DSUXHED HO FXDGUR GH HQIHUPHGDGHV SURIHVLRQDOHV HQ HO VLVWHPD GH OD 6HJXULGDG 6RFLDO \ VH HVWDEOHFHQ FULWHULRV SDUDVXQRWLILFDFLyQ\UHJLVWUR2UGHQ7$6GHGHHQHURSRUODTXHVHHVWDEOHFHHO PRGHOR GH SDUWH GH HQIHUPHGDG SURIHVLRQDO VH GLFWDQ QRUPDV SDUD VX HODERUDFLyQ \ WUDQVPLVLyQ\VHFUHDHOFRUUHVSRQGLHQWHILFKHURGHGDWRVSHUVRQDOHV 7(0$ 'LVSRVLFLRQHV PtQLPDV GH 6HJXULGDG \ 6DOXG HQ ORV OXJDUHV GH WUDEDMR HO 5HDO 'HFUHWR GH GH DEULO\ JXtD WpFQLFD GHO ,QVWLWXWR 1DFLRQDO GH 6HJXULGDGH +LJLHQH HQ HO 7UDEDMRSDUDODHYDOXDFLyQ\SUHYHQFLyQGHULHVJRV5HDO'HFUHWRGHGHPDU]R SRUHOTXHVHDSUXHEDHO&yGLJR7pFQLFRGHOD(GLILFDFLyQ'RFXPHQWR%iVLFR686HJXULGDG HQOD8WLOL]DFLyQ 7(0$ 5LHVJRVHOpFWULFRVFDUDFWHUtVWLFDVGHODFRUULHQWHHOpFWULFD(IHFWRVILVLROyJLFRVGHODFRUULHQWH HOpFWULFD )DFWRUHV GH ULHVJR 5HDO 'HFUHWR GH GH MXQLR VREUH GLVSRVLFLRQHV PtQLPDV SDUD OD SURWHFFLyQ GH OD 6DOXG \ 6HJXULGDG GH ORV WUDEDMDGRUHV IUHQWH DO ULHVJR HOpFWULFR$FWXDFLyQHQFDVRGHDFFLGHQWHHOpFWULFR 7(0$ 5LHVJRHQHODOPDFHQDPLHQWR\PDQLSXODFLyQGHSURGXFWRVTXtPLFRVSHOLJURVRV0HGLGDVGH SURWHFFLyQ 5HDO 'HFUHWR GH GH DEULO SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH DOPDFHQDPLHQWRGHSURGXFWRVTXtPLFRV\VXV,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV 7(0$ 7pFQLFDV GH 6HJXULGDG HO FRQFHSWR GHO ULHVJR \ OD WHRUtD GH OD FDXVDOLGDG 7pFQLFDV HVSHFtILFDV7pFQLFDVJHQHUDOHVDQDOtWLFDV\RSHUDWLYDV,QVSHFFLRQHVGHVHJXULGDGFRQFHSWR \REMHWLYRGHODVLQVSHFFLRQHVGHVHJXULGDG,QVSHFFLRQHVSODQLILFDGDV\QRSODQLILFDGDV 7(0$ /DLQYHVWLJDFLyQGHDFFLGHQWHVFRQFHSWR\REMHWLYRV0HWRGRORJtDJHQHUDOGHODLQYHVWLJDFLyQ (O HVWXGLR GH ODV FDXVDV (O LQIRUPH (O DQiOLVLV HVWDGtVWLFR GH ORV DFFLGHQWHV ËQGLFHV HVWDGtVWLFRV(YROXFLyQGHODVLQLHVWUDOLGDGHQ(VSDxD 7(0$ +LJLHQH ,QGXVWULDO &RQFHSWRV EiVLFRV 'HILQLFLyQ REMHWLYRV \ UDPDV 7LSRV GH DJHQWHV FRQWDPLQDQWHV&RQFHSWRGHH[SRVLFLyQGRVLV\YDORUOtPLWH1RFLyQGHVXVWDQFLD\SUHSDUDGR SHOLJURVR/DHQFXHVWDKLJLpQLFD 7(0$ 7R[LFRORJtDODERUDO&ODVLILFDFLyQGHORVDJHQWHVTXtPLFRVVHJ~QVXHVWDGR\IRUPD9tDVGH HQWUDGDHQHORUJDQLVPR,QWHUDFFLyQFRQHORUJDQLVPR'DxRVGHULYDGRVGHOWUDEDMRDFRUWR\ ODUJRSOD]R)DFWRUHVGHWHUPLQDQWHVGHODWR[LFLGDG(IHFWRVDGLWLYRV\VLQpUJLFRV9DORUDFLyQ GHOULHVJR 7(0$ $JHQWHV TXtPLFRV OD HYDOXDFLyQ GH OD H[SRVLFLyQ (VWUDWHJLD GH PXHVWUHR 6LVWHPDV GH PHGLGD GLUHFWD \ GH WRPD GH PXHVWUDV &RQWURO GH FDOLGDG GH ORV HTXLSRV GH PHGLGD \ FDOLEUDFLyQGHORVPXHVWUDGRUHV(OPpWRGRDQDOtWLFR\ODVWpFQLFDVGHDQiOLVLV 7(0$ $JHQWHV TXtPLFRV FULWHULRV GH YDORUDFLyQ 9DORUHV OtPLWHV DPELHQWDOHV &RQFHSWR \ WLSRV 9DORUHVOtPLWHVDPELHQWDOHVGHH[SRVLFLyQSURIHVLRQDOHQ(VSDxD2WURVOtPLWHVGHUHIHUHQFLD /RV7/9GHOD$&*,+1RUPDWLYD(VSDxROD&ULWHULRVELROyJLFRVGHYDORUDFLyQGHODH[SRVLFLyQ boc.cantabria.es CVE-2019-3750 7(0$ 87/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12595 7(0$ &RQWUROGHULHVJRVSRUH[SRVLFLyQDDJHQWHVTXtPLFRV3UHYHQFLyQHQHOGLVHxR(OSULQFLSLRGH VXVWLWXFLyQ (O FRQWUROVREUH OD IXHQWH([WUDFFLyQ ORFDOL]DGD $FWXDFLRQHVVREUH HODPELHQWH 9HQWLODFLyQ JHQHUDO 0HGLGDV SUHYHQWLYDV VREUH ODV SHUVRQDV /D SURWHFFLyQ SHUVRQDO /D YLJLODQFLD HVSHFtILFD GH OD VDOXG 2WUDV PHGLGDV SUHYHQWLYDV RUJDQL]DWLYDV OLPLWDFLyQ GH DFFHVRHWF 7(0$ 5HDO 'HFUHWR GH GH DEULO VREUH OD SURWHFFLyQ GH OD VDOXG \ VHJXULGDG GH ORV WUDEDMDGRUHV FRQWUD ORV ULHVJRV UHODFLRQDGRV FRQ ORV DJHQWHV TXtPLFRV GXUDQWH HO WUDEDMR 2EMHWR \ iPELWR GH DSOLFDFLyQ 'HILQLFLRQHV &RQFHSWR \ XWLOL]DFLyQ GH ORV YDORUHV OtPLWHV YLQFXODQWHV H LQGLFDWLYRV 2EOLJDFLyQ GHO HPSUHVDULR 5HODFLyQ FRQ RWURV 5HDOHV 'HFUHWRV \ 5HJODPHQWRV 7(0$ /HJLVODFLyQ GHO PHUFDGR ~QLFR HXURSHR VREUH VXVWDQFLDV \ SUHSDUDGRV SHOLJURVRV 1RWLILFDFLyQ FODVLILFDFLyQ HQYDVDGR \ HWLTXHWDGR GH VXVWDQFLDV \ SUHSDUDGRV SHOLJURVRV )LFKDGHGDWRVGHVHJXULGDG/LPLWDFLRQHVGHODFRPHUFLDOL]DFLyQ\XVRGHODVVXVWDQFLDV\ORV SUHSDUDGRVSHOLJURVRV/HJLVODFLyQHVSHFtILFDGHORVSURGXFWRVILWRVDQLWDULRV 7(0$ 3UHYHQFLyQ GH ULHVJRV SRU H[SRVLFLyQ D DJHQWHV FDQFHUtJHQRV \ PXWDJpQLFRV &RQFHSWR \ FDWHJRUtDVGHDJHQWHFDQFHUtJHQR\GHDJHQWHPXWDJpQLFR(O5HDO'HFUHWRGH GHPD\R\VXVPRGLILFDFLRQHVSRUHO5HDO'HFUHWRGHGHMXQLR\SRUHO5HDO 'HFUHWRGHGHPDU]R 7(0$ 2UGHQ GH GH RFWXEUH GH SRU OD TXH VH DSUXHED HO 5HJODPHQWR VREUH WUDEDMRV FRQ ULHVJR GH DPLDQWR 2UGHQ GH GH -XOLR GH SRU HO TXH VH PRGLILFD HO DQWHULRU \ VH WUDVSRQH OD 'LUHFWLYD &(( 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH HVWDEOHFHQ ODV GLVSRVLFLRQHV PtQLPDV GH VHJXULGDG \ VDOXG DSOLFDEOHV D ORV WUDEDMRV FRQ ULHVJRGHH[SRVLFLyQDODPLDQWR 7(0$ 3UHYHQFLyQ \ SURWHFFLyQ FRQWUD ULHVJR GH LQFHQGLRV \ H[SORVLyQ &RQFHSWRV EiVLFRV VREUH FDXVDV\SURSDJDFLyQGHORVLQFHQGLRV3ULQFLSLRVJHQHUDOHVGHSUHYHQFLyQ\SURWHFFLyQ5HDO 'HFUHWRGHGHPDU]RSRUHOTXHVHDSUXHEDHO&yGLJR7pFQLFRGHOD(GLILFDFLyQ 'RFXPHQWR%iVLFR6,6HJXULGDGHQFDVRGHLQFHQGLR 7(0$ 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH VHJXULGDGFRQWUDLQFHQGLRVHQORVHVWDEOHFLPLHQWRVLQGXVWULDOHV5HDO'HFUHWRGH GH QRYLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH ,QVWDODFLRQHV GH 3URWHFFLyQ FRQWUD ,QFHQGLRV 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDOUXLGR&DUDFWHUtVWLFDVItVLFDVGHOUXLGR3DUiPHWURVGH PHGLGD7LSRVGHUXLGRODERUDO0HFDQLVPRVGHODDXGLFLyQ5LHVJRVSRUH[SRVLFLyQDOUXLGR (YDOXDFLyQ GHO ULHVJR SRU H[SRVLFLyQ DO UXLGR 0HGLGDV SUHYHQWLYDV 5HDO 'HFUHWR GHGHPDU]RVREUHODSURWHFFLyQGHODVDOXG\ODVHJXULGDGGHORVWUDEDMDGRUHVFRQWUDORV ULHVJRVUHODFLRQDGRVFRQODH[SRVLFLyQDOUXLGR 7(0$ 3UHYHQFLyQ GH ULHVJRV SRU H[SRVLFLyQ D UDGLDFLRQHV LRQL]DQWHV &RQFHSWR \ WLSRV GH UDGLDFLRQHV LRQL]DQWHV ,QWHUDFFLyQ HQ HO RUJDQLVPR 5LHVJRV SRU H[SRVLFLyQ D HVWDV UDGLDFLRQHV 3ULQFLSDOHV DFWLYLGDGHV FRQ HVWH WLSR GH ULHVJRV &RQFHSWRV EiVLFRV GH SURWHFFLyQ UDGLROyJLFD /D UHJODPHQWDFLyQ YLJHQWH VREUH SURWHFFLyQ FRQWUD ODV UDGLDFLRQHV LRQL]DQWHV 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH SURWHFFLyQ VDQLWDULD FRQWUD UDGLDFLRQHV LRQL]DQWHV 5HDO 'HFUHWR GH GH PDU]R VREUH SURWHFFLyQ GH ORV WUDEDMDGRUHV H[WHUQRV FRQ ULHVJR GH H[SRVLFLyQ D UDGLDFLRQHV LRQL]DQWHVSRULQWHUYHQFLyQHQ]RQDFRQWURODGD boc.cantabria.es CVE-2019-3750 D FRQWDPLQDQWHV TXtPLFRV ,QGLFDGRU ELROyJLFR 9DORUHV OtPLWHV ELROyJLFRV HQ (VSDxD 2WURV OtPLWHVGHUHIHUHQFLD/RV%(,GHOD$&*,+ 88/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3UHYHQFLyQ GH ULHVJRV SRU H[SRVLFLyQ D UDGLDFLRQHV QR LRQL]DQWHV &ODVLILFDFLyQ \ FDUDFWHUtVWLFDV ItVLFDV GH ODV SULQFLSDOHV UDGLDFLRQHV QR LRQL]DQWHV XOWUDYLROHWD OX] YLVLEOH UDGLDFLRQHVLQIUDUURMDVPLFURRQGDV\OiVHUHV5LHVJRVSDUDOD VDOXGHYDOXDFLyQGHOULHVJR\ PHGLGDV SUHYHQWLYDV 3UREOHPiWLFD GH ODV UDGLDFLRQHV GH EDMD IUHFXHQFLD ([SRVLFLyQ D FDPSRVHOpFWULFRV\PDJQpWLFRV5HDO'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVH DSUXHED HO 5HJODPHQWR TXH HVWDEOHFH FRQGLFLRQHV GH SURWHFFLyQ GHO GRPLQLR S~EOLFR UDGLRHOpFWULFRUHVWULFFLRQHVDODVHPLVLRQHVUDGLRHOpFWULFDV\PHGLGDVGHSURWHFFLyQVDQLWDULD IUHQWHDHPLVLRQHVUDGLRHOpFWULFDV 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDDJHQWHVELROyJLFRV&RQFHSWRV\GHILQLFLyQGHDJHQWH ELROyJLFR &ODVLILFDFLyQ 9tDV GH HQWUDGD HQ HO RUJDQLVPR (IHFWRV VREUH HO LQGLYLGXR &ODVLILFDFLyQSRUJUXSRVVHJ~QHOULHVJRTXHSUHVHQWDQ0HGLGDVSUHYHQWLYDVGHFRQWHQFLyQ $SOLFDFLyQGHO5HDO'HFUHWRGHGHPD\R\GHOD2UGHQGHGHPDU]RGH TXHORDGDSWDDOSURJUHVRWpFQLFR 7(0$ /DV FRQGLFLRQHV WHUPRKLJURPpWULFDV HQ ORV OXJDUHV GH WUDEDMR 3DUiPHWURV D FRQVLGHUDU (IHFWRVVREUHODVDOXG(TXLSRVGHPHGLGD9DORUHVGHUHIHUHQFLDHQODQRUPDWLYDHVSDxROD (YDOXDFLyQGHOULHVJRHQDPELHQWHVFDOXURVRVËQGLFH:%*70HGLGDVSUHYHQWLYDV(OULHVJR GH HVWUpV SRU IUtR \ VX YDORUDFLyQ (O 7/9 GH OD $&*,+ $SOLFDFLyQ GHO UHJODPHQWR GH VHJXULGDGSDUDSODQWDVHLQVWDODFLRQHVIULJRUtILFDV %/248(,,, i Pág. 12596 7(0$ /H\GH&DQWDEULDGH&RQWURO$PELHQWDO,QWHJUDGR2EMHWLYRVFRQWHQLGR\DOFDQFH 7(0$ /DVDFWLYLGDGHVPROHVWDVLQVDOXEUHVQRFLYDV\SHOLJURVDVHQHOiPELWRPXQLFLSDO2EMHWLYRV\ FRQWHQLGRVEiVLFRV 7(0$ /D 3UHYHQFLyQ \ &RQWURO ,QWHJUDGR GH OD &RQWDPLQDFLyQ /D 'LUHFWLYD ,33& \ HO GHUHFKR LQWHUQRHVSDxRO 7(0$ (O5HJLVWUR(VWDWDOGH(PLVLRQHV\)XHQWHV&RQWDPLQDQWHV0HWRGRORJtD\IXQFLRQDPLHQWR 7(0$ /D HYDOXDFLyQ DPELHQWDO GH SODQHV SURJUDPDV SUR\HFWRV DFWLYLGDGHV H LQVWDODFLRQHV HQ OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 5HVLGXRVLQGXVWULDOHVOiFWHRV3UREOHPiWLFDFDUDFWHUtVWLFDV\WUDWDPLHQWR 7(0$ 5HVLGXRVLQGXVWULDOHVGHODLQGXVWULDFRQVHUYHUD3UREOHPiWLFDFDUDFWHUtVWLFDV\WUDWDPLHQWR 7(0$ 5HVLGXRVLQGXVWULDOHVHQODIDEULFDFLyQGHSDSHO3UREOHPiWLFDFDUDFWHUtVWLFDV\WUDWDPLHQWR 7(0$ 5HVLGXRV LQGXVWULDOHV HQ OD IDEULFDFLyQ GH WUDQVIRUPDGRV PHWiOLFRV 3UREOHPiWLFD FDUDFWHUtVWLFDV\WUDWDPLHQWR 7(0$ 5HDO 'HFUHWR GH GH DEULO SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH DOPDFHQDPLHQWRGHSURGXFWRVTXtPLFRV\VXVLQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV 7(0$ 3UHYHQFLyQ GH DFFLGHQWHV PD\RUHV HQ OD LQGXVWULD TXtPLFD /HJLVODFLyQ &RPSHWHQFLDV 3ODQHV GH HPHUJHQFLD H[WHULRU +LJLHQH LQGXVWULDO +LJLHQH GH FDPSR +LJLHQH DQDOtWLFD +LJLHQHRSHUDWLYD 7(0$ 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHEDQ PHGLGDV GH FRQWURO GH ORV ULHVJRV LQKHUHQWHV D ORV DFFLGHQWHV JUDYHV HQ ORV TXH LQWHUYHQJDQ VXVWDQFLDV SHOLJURVDV 'HFUHWRGHGHDJRVWR'HFUHWRGHGHPDU]R 7(0$ &RQWDPLQDFLyQGHOVXHORSRUPHWDOHVSHVDGRVKLGURFDUEXURV\SHVWLFLGDV boc.cantabria.es CVE-2019-3750 89/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12597 7(0$ 0HWRGRORJtD\WpFQLFDVSDUDODUHFXSHUDFLyQGHVXHORVFRQWDPLQDGRV 7(0$ 0XHVWUHRVHQVXHORV(VWUDWHJLDVGHPXHVWUHR 7(0$ $FWLYLGDGHV SRWHQFLDOPHQWH FRQWDPLQDQWHV GHO VXHOR &ULWHULRV \ HVWiQGDUHV SDUD OD GHFODUDFLyQGHVXHORVFRQWDPLQDGRV 7(0$ (O7H[WR5HIXQGLGRGHOD/H\GH$JXDV\ODFDOLGDGGHODVDJXDVFRQWLQHQWDOHV 7(0$ (O 5HDO 'HFUHWR GH GH IHEUHUR \ ORV FULWHULRV VDQLWDULRV GH FDOLGDG GHO DJXD GH FRQVXPRKXPDQRiPELWRGHDSOLFDFLyQ\FDUDFWHUHVGHODVDJXDVSRWDEOHV 7(0$ /H\ GH&DQWDEULD GH GHQRYLHPEUH GH$EDVWHFLPLHQWR \ 6DQHDPLHQWR GH $JXDV GHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD2EMHWLYRV\FRQWHQLGRGHODOH\ 7(0$ (OWUDWDPLHQWRGHODVDJXDVUHVLGXDOHV2SHUDFLRQHVGHSUHWUDWDPLHQWR7UDWDPLHQWRSULPDULR VHFXQGDULR \ WHUFLDULR 7UDWDPLHQWR GH IDQJRV 2SHUDFLRQHV EiVLFDV \ HTXLSRV XWLOL]DGRV &DUDFWHUtVWLFDVGHFDGDWLSRGHWUDWDPLHQWR 7(0$ /tPLWHVSHUPLWLGRVHQODOHJLVODFLyQVREUHGHSXUDFLyQ\FRQWUROGHFDOLGDGGHDJXDVUHVLGXDOHV 5HXWLOL]DFLyQGHODJXD 7(0$ 9HUWLGRV LQGXVWULDOHV 9HUWLGRV XUEDQRV 0HGLGDV DQWLFRQWDPLQDQWHV 3URFHVRV QDWXUDOHV GH GHSXUDFLyQHQFXUVRVGHDJXD%DODQFHGHR[tJHQR 7(0$ &RQWDPLQDFLyQ GH ODV DJXDV VXEWHUUiQHDV $VSHFWRV EiVLFRV GH OD FRQWDPLQDFLyQ GH ORV DFXtIHURV)RFRVSRWHQFLDOHVGHFRQWDPLQDFLyQGHORVDFXtIHURV0HGLGDVDQWLFRQWDPLQDQWHV /HJLVODFLyQ 7(0$ &RQWDPLQDFLyQRUJiQLFDGHODVDJXDV3DUiPHWURVFDUDFWHUtVWLFRV\WpFQLFDVDQDOtWLFDV 7(0$ &RQWDPLQDFLyQ SRU QLWUyJHQR \ IyVIRUR 0pWRGRV DQDOtWLFRV (IHFWRV GH OD FRQWDPLQDFLyQ SRU QLWUyJHQR\IyVIRUR 7(0$ &RQWDPLQDFLyQ PLFURELROyJLFD GH ODV DJXDV &ROLIRUPHV WRWDOHV FROLIRUPHV IHFDOHV \ HVWUHSWRFRFRVIHFDOHV&DUDFWHUtVWLFDVJHQHUDOHV\SURFHGLPLHQWRVDQDOtWLFRV 7(0$ /H\ GH GH MXOLR GH 6HJXULGDG $OLPHQWDULD \ 1XWULFLyQ \ OD /H\ GH GH RFWXEUH*HQHUDOGH6DOXG3~EOLFD$XWRULGDG(XURSHDGH6HJXULGDG$OLPHQWDULD$(6$1 7(0$ 3ULQFLSLRV\UHTXLVLWRVJHQHUDOHVGHODOHJLVODFLyQDOLPHQWDULD 7(0$ &RQWURO RILFLDO GH DOLPHQWRV 2UJDQL]DFLyQ GH ORV FRQWUROHV RILFLDOHV 5HTXLVLWRV GH ODV DXWRULGDGHV FRPSHWHQWHV 3ODQ QDFLRQDO GH FRQWURO RILFLDO GH OD FDGHQD DOLPHQWDULD 3ODQ GH VHJXULGDGDOLPHQWDULDGH&DQWDEULD1RUPDWLYDDSOLFDEOH 7(0$ /DERUDWRULRV GH &RQWURO RILFLDO )XQFLRQHV 'HVLJQDFLyQ GH ORV ODERUDWRULRV GH FRQWURO RILFLDO /DERUDWRULRVGHUHIHUHQFLDQDFLRQDOHV\HXURSHRVDFWLYLGDGHV\IXQFLRQHV 7(0$ 6LVWHPDV GH FRQWURO GH OD FDOLGDG HQ ORV ODERUDWRULRV 3DSHO GH (1$& (YDOXDFLyQ GH OD FRQIRUPLGDG\DFUHGLWDFLyQ1RUPD81((1,62 7(0$ $QiOLVLV ItVLFR TXtPLFRV HQ OD FDGHQD DOLPHQWDULD 0pWRGRV JHQHUDOHV 0pWRGRV FXDOLWDWLYRV 'HWHUPLQDFLRQHVEiVLFDVGHODFRPSRVLFLyQGHDOLPHQWRV 7(0$ $QiOLVLVLQVWUXPHQWDOHV3ULQFLSDOHVDSOLFDFLRQHVGHODFDGHQDDOLPHQWDULD 7(0$ 3URFHGLPLHQWRV GH HQVD\R GH DOLPHQWRV &RQFHSWRV JHQHUDOHV GH YDOLGDFLyQ GH PpWRGRV $VHJXUDPLHQWR GH OD FDOLGDG GH ORV HQVD\RV 'LVHxR GH YDOLGDFLyQ \ UHJLVWURV REWHQLGRV ,QFHUWLGXPEUH boc.cantabria.es CVE-2019-3750 90/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(1)$50$&,$ 0$7(5,$6(63(&Ë),&$6 i Pág. 12598 7(0$ /H\GHGHMXOLRGH6HJXULGDGDOLPHQWDULD\QXWULFLyQ/H\GHGHRFWXEUH *HQHUDO GH 6DOXG 3~EOLFD $JHQFLD HVSDxROD GH VHJXULGDG DOLPHQWDULD \ QXWULFLyQ $XWRULGDG HXURSHDGHVHJXULGDGDOLPHQWDULD(VWUDWHJLD1$26 7(0$ +LJLHQHGHORVSURGXFWRVDOLPHQWLFLRV/HJLVODFLyQDSOLFDEOH1RUPDVHVSHFtILFDVGHKLJLHQHGH ORVDOLPHQWRVGHRULJHQDQLPDOiPELWRGHDSOLFDFLyQPDUFDGRVDQLWDULR\GHLGHQWLILFDFLyQ 7(0$ $XWRUL]DFLyQ\UHJLVWURGHHPSUHVDVDOLPHQWDULDV\DOLPHQWRV1RUPDWLYDDSOLFDEOH 7(0$ ,QVSHFFLyQ \ DXGLWRUtD (O DFWD GH LQVSHFFLyQ VDQLWDULD \ OD WRPD GH PXHVWUDV GH DOLPHQWRV 1RUPDWLYDDSOLFDEOH 7(0$ *HVWLyQ GH ULHVJRV HQ OD HPSUHVD DOLPHQWDULD *XtDV GH SUiFWLFDV FRUUHFWDV GH KLJLHQH \ VLVWHPD$33&&,PSRUWDQFLDVDQLWDULDGHORVPDQLSXODGRUHVGHDOLPHQWRV 7(0$ 6LVWHPDV GH JHVWLyQ GH OD FDOLGDG DSOLFDEOHV D OD VHJXULGDG DOLPHQWDULD &HUWLILFDFLyQ \ DFUHGLWDFLyQ3ULQFLSDOHVQRUPDV\HVWiQGDUHVUHODFLRQDGRV 7(0$ ,QIRUPDFLyQDOLPHQWDULDIDFLOLWDGDDOFRQVXPLGRU1RUPDWLYDDSOLFDEOH 7(0$ 7UD]DELOLGDG5HTXLVLWRVJHQHUDOHV5HTXLVLWRVHVSHFtILFRV1RUPDWLYDDSOLFDEOH 7(0$ 5HGHV GH DOHUWD DOLPHQWDULDV QDFLRQDOHV \ FRPXQLWDULDV &RQFHSWR 2UJDQL]DFLyQ \ IXQFLRQDPLHQWR(YDOXDFLyQJHVWLyQ\FRPXQLFDFLyQGHOULHVJR 7(0$ &RQWDPLQDFLyQ ELyWLFD GH ORV DOLPHQWRV $FWXDFLRQHV DQWH XQ EURWH GH HQIHUPHGDG GH WUDQVPLVLyQ DOLPHQWDULD 3ULQFLSDOHV SDWyJHQRV HPHUJHQWHV &ULWHULRV PLFURELROyJLFRV /HJLVODFLyQDSOLFDEOH 7(0$ &RQWDPLQDFLyQ DELyWLFD GH ORV DOLPHQWRV 2ULJHQ \ QDWXUDOH]D GH ORV FRQWDPLQDQWHV 3UREOHPiWLFD GH ORV UHVLGXRV GH FRQWDPLQDQWHV HQ ORV SURGXFWRV DOLPHQWLFLRV /HJLVODFLyQ DSOLFDEOH 7(0$ &RQWURO RILFLDO HQ DOLPHQWRV 2UJDQL]DFLyQ GH ORV FRQWUROHV RILFLDOHV 5HTXLVLWRV GH ODV DXWRULGDGHV FRPSHWHQWHV 3ODQ QDFLRQDO GH FRQWURO RILFLDO GH OD FDGHQD DOLPHQWDULD 3ODQ GH VHJXULGDGDOLPHQWDULDGH&DQWDEULD1RUPDWLYDDSOLFDEOH 7(0$ $GLWLYRV DOLPHQWDULRV FRQFHSWR FODVLILFDFLyQ 0HWRGRORJtD JHQHUDO GH HYDOXDFLyQ GH OD WR[LFLGDGGHORVDGLWLYRV,QJHVWDGLDULDDGPLVLEOH,'$/HJLVODFLyQDSOLFDEOH 7(0$ 0DWHULDOHV\REMHWRVHQFRQWDFWRFRQORVDOLPHQWRV&RQGLFLRQHVTXHGHEHQGHUHXQLU&RQWURO VDQLWDULR/HJLVODFLyQDSOLFDEOH 7(0$ &RQGLFLRQHVVDQLWDULDVDSOLFDEOHVDODSURGXFFLyQ\FRPHUFLDOL]DFLyQGHODOHFKHFUXGDOHFKH WUDWDGD WpUPLFDPHQWH \ SURGXFWRV OiFWHRV $SOLFDFLyQ GHO DQiOLVLV GH SHOLJURV \ SXQWRV GH FRQWUROFUtWLFR boc.cantabria.es CVE-2019-3750 %/248(,6$/8'3Ò%/,&$ 91/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12599 7(0$ 1RUPDVVDQLWDULDVDSOLFDEOHVDODSURGXFFLyQGHSURGXFWRVSHVTXHURV$SOLFDFLyQGHODQiOLVLV GHSHOLJURV\SXQWRVGHFRQWUROFUtWLFRHQODVLQGXVWULDVGHODSHVFD(QIHUPHGDGHVSURGXFLGDV SRUHOFRQVXPRGHSHVFDGR 7(0$ 0ROXVFRV \ FUXVWiFHRV 1RUPDV GH FDOLGDG GH ODV DJXDV \ GH OD SURGXFFLyQ GH PROXVFRV (QIHUPHGDGHVSURGXFLGDVSRUHOFRQVXPRGHPDULVFRV 7(0$ +XHYRV\GHULYDGRV&ODVLILFDFLyQ&DUDFWHUtVWLFDVGHIUHVFXUD,QVSHFFLyQKLJLpQLFRVDQLWDULD HQORVFHQWURVGHFODVLILFDFLyQ\WUDQVIRUPDFLyQ$SOLFDFLyQGHODQiOLVLVGHSHOLJURV\SXQWRVGH FRQWUROFUtWLFR1RUPDWLYDDSOLFDEOH 7(0$ 3URGXFWRV DOLPHQWLFLRV GH RULJHQ YHJHWDO 5LHVJRV DVRFLDGRV D VX SURGXFFLyQ \ FRPHUFLDOL]DFLyQ+RQJRV\VHWDVFRPHVWLEOHVSULQFLSDOHVHVSHFLHVFRPHVWLEOHV\YHQHQRVDV 1RUPDWLYDDSOLFDEOH 7(0$ $JXDVGHEHELGDHQYDVDGDV1RUPDWLYDUHJXODGRUD&ODVLILFDFLyQ5HTXLVLWRVGHODVLQGXVWULDV \ GHO SURFHVR GH HQYDVDGR 0DQLSXODFLRQHV SHUPLWLGDV \ SURKLELGDV (WLTXHWDGR 5HJLVWURV DGPLQLVWUDWLYRV$XWRFRQWUROHV 7(0$ (VWDEOHFLPLHQWRV GH HODERUDFLyQ GH FRPLGDV SUHSDUDGDV ,QVSHFFLyQ KLJLpQLFRVDQLWDULD 1RUPDWLYDDSOLFDEOH 7(0$ &RPSOHPHQWRVDOLPHQWLFLRV$GLFLyQGHYLWDPLQDV\PLQHUDOHV\RWUDVVXVWDQFLDVDDOLPHQWRV 1RUPDWLYD DSOLFDEOH 3UHSDUDGRV DOLPHQWLFLRV SDUD UHJtPHQHV GLHWpWLFRV \R HVSHFLDOHV &RQFHSWR\FODVLILFDFLyQ 7(0$ $OLPHQWRVPRGLILFDGRVJHQpWLFDPHQWH1XHYRVDOLPHQWRV1RUPDWLYDOHJDODSOLFDEOH 7(0$ &RQVHUYDFLyQGHORVDOLPHQWRVVLVWHPDVGHFRQVHUYDFLyQSRUHOIUtR5HSHUFXVLRQHVVREUHVX YDORU QXWULWLYR \ RUJDQROpSWLFR $OLPHQWRV VREUH ORV TXH VH HPSOHD ,QVSHFFLyQ KLJLpQLFR VDQLWDULD 7(0$ &RQVHUYDFLyQGHORVDOLPHQWRVVLVWHPDVGHFRQVHUYDFLyQSRUFDORU5HSHUFXVLRQHVVREUHVX YDORU QXWULWLYR \ RUJDQROpSWLFR $OLPHQWRV VREUH ORV TXH VH HPSOHD ,QVSHFFLyQ KLJLpQLFR VDQLWDULD 7(0$ &RQVHUYDFLyQ GH ORV DOLPHQWRV OLRILOL]DFLyQ DKXPDGR WUDWDPLHQWRV TXtPLFRV \ UDGLDFLRQHV LRQL]DQWHV5HSHUFXVLRQHVVREUHVXYDORUQXWULWLYR\RUJDQROpSWLFR$OLPHQWRVVREUHORVTXHVH HPSOHD,QVSHFFLyQKLJLpQLFRVDQLWDULD 7(0$ /DERUDWRULRV GH &RQWURO 2ILFLDO )XQFLRQHV 'HVLJQDFLyQ GH ODERUDWRULRV /DERUDWRULRV GH UHIHUHQFLDQDFLRQDOHV\HXURSHRVDFWLYLGDGHV\IXQFLRQHV 7(0$ 6LVWHPD GH FRQWURO GH OD FDOLGDG HQ ODERUDWRULRV 3DSHO GH OD (1$& (YDOXDFLyQ GH FRQIRUPLGDG\DFUHGLWDFLyQ1RUPD81((1,62 7(0$ $QiOLVLVPLFURELROyJLFRHQODFDGHQDDOLPHQWDULD0pWRGRVRILFLDOHVUHFRQRFLGRV5HJODPHQWR &( 2WURV PpWRGRV GH HQVD\R SDUD FRQWURO GH DJHQWHV SDWyJHQRV HQ DOLPHQWRV &RQWUROHVGHFDOLGDG 7(0$ $QiOLVLV ItVLFRTXtPLFR HQ OD FDGHQD DOLPHQWDULD 0pWRGRV TXtPLFRV JHQHUDOHV 0pWRGRV FXDOLWDWLYRV\FXDQWLWDWLYRV 7(0$ $QiOLVLVLQVWUXPHQWDO3ULQFLSDOHVDSOLFDFLRQHVHQODFDGHQDDOLPHQWDULD 7(0$ 1RUPDWLYDUHJXODGRUDGHORVFULWHULRVVDQLWDULRVGHODFDOLGDGGHODJXDGHFRQVXPRKXPDQR &ULWHULRVKLJLpQLFRVDQLWDULRVGHFDOLGDG\FRQWUROGHODJXDGHFRQVXPRKXPDQR)XQGDPHQWRV \ HQWLGDGHV UHVSRQVDEOHV GHO DXWRFRQWURO OD YLJLODQFLD VDQLWDULD \ HO FRQWURO HQ JULIR GHO FRQVXPLGRU boc.cantabria.es CVE-2019-3750 92/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12600 =RQD GH DEDVWHFLPLHQWR GH DJXD GH FRQVXPR KXPDQR ,QIUDHVWUXFWXUDV TXH HQJORED (O WUDWDPLHQWR GH SRWDELOL]DFLyQ GHO DJXD GH FRQVXPR KXPDQR 1RUPDWLYD UHJXODGRUD GH ODV VXVWDQFLDVSDUDHOWUDWDPLHQWRGHODJXDGHFRQVXPRKXPDQR 7(0$ (O6LVWHPDGH,QIRUPDFLyQ1DFLRQDOGH$JXDGH&RQVXPR+XPDQR 6,1$& 7(0$ $QiOLVLV GH DJXDV GH FRQVXPR KXPDQR 3DUiPHWURV PLFURELROyJLFRV \ ItVLFRTXtPLFRV &ULWHULRVDQDOtWLFRVSDUDODFODVLILFDFLyQGHXQDPXHVWUD³DSWDSDUDHOFRQVXPR´ 7(0$ ,PSRUWDQFLD VDQLWDULD GH OD OHJLRQHORVLV $JHQWH FDXVDO GHVFULSFLyQ GH OD HQIHUPHGDG SREODFLyQ GH ULHVJR \ FDGHQD HSLGHPLROyJLFD ,QVWDODFLRQHV GH ULHVJR 0HGLGDV SUHYHQWLYDV 1RUPDWLYDUHJXODGRUDGHORVFULWHULRVKLJLpQLFRVDQLWDULRVSDUDODSUHYHQFLyQGHODOHJLRQHORVLV 7(0$ $FWXDFLRQHV DQWH OD VRVSHFKD GH EURWH GH OHJLRQHORVLV LQVSHFFLyQ PXHVWUHR \ PHGLGDV GH FRQWURO 7(0$ $JXDV GH EDxR 1RUPDWLYD UHJXODGRUD GH OD JHVWLyQ GH OD FDOLGDG GH ODV DJXDV GH EDxR &RQWUROGHFDOLGDG\HYDOXDFLyQDQXDOGHODFDOLGDGGHODVDJXDVGHEDxR&ODVLILFDFLyQDQXDO \HVWDGRGHODFDOLGDGGHODVDJXDVGHEDxR 7(0$ (OVLVWHPDGHLQIRUPDFLyQQDFLRQDOGHDJXDVGHEDxR\HOGHUHFKRGHDFFHVRDODLQIRUPDFLyQ GHSDUWLFLSDFLyQS~EOLFD\GHDFFHVRDODMXVWLFLDHQPDWHULDGHPHGLRDPELHQWHHVWDEOHFLGRHQ OD/H\GHGHMXOLR 7(0$ 5HDO 'HFUHWR SRU HO TXH VH HVWDEOHFHQ ORV FULWHULRV WpFQLFRVVDQLWDULRV GH ODV SLVFLQDV'HILQLFLRQHV&DOLGDGVDQLWDULDGHODJXD&RQWUROGHODFDOLGDG 7(0$ 5HJODPHQWR VDQLWDULR GH ODV SLVFLQDV GH XVR FROHFWLYR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &XHVWLRQHV UHODFLRQDGDV FRQ OD VHJXULGDG GH ORV XVXDULRV &RQGLFLRQHV GH H[FHSFLyQGHOVHUYLFLRGHVDOYDPHQWR\VRFRUULVPRDFXiWLFR 7(0$ (QIHUPHGDGHVWUDVPLWLGDVSRUYHFWRUHV,PSDFWRYLJLODQFLD\FRQWURO 7(0$ 7LSRV GH ELRFLGDV 3ULQFLSDOHV UHTXLVLWRV GH DXWRUL]DFLyQFRPXQLFDFLyQ GH ELRFLGDV (O 5HJLVWUR 2ILFLDO GH HVWDEOHFLPLHQWRV \ VHUYLFLRV ELRFLGDV GH &DQWDEULD 5HTXLVLWRV GH IRUPDFLyQ/LEURRILFLDOGHPRYLPLHQWRGHELRFLGDV1RUPDWLYDDSOLFDEOH 7(0$ 2EMHWLYRV \ IXQGDPHQWR GH OD QXHYD SROtWLFD HXURSHD VREUH FRPHUFLDOL]DFLyQ GH VXVWDQFLDV TXtPLFDVUHJODPHQWRV5($&+<&/3 7(0$ 'HWHUPLQDQWHVGHODVDOXG&RQFHSWRVGHHTXLGDG\GHVLJXDOGDGHVHQVDOXG'HWHUPLQDQWHV VRFLDOHVGHVDOXG3URPRFLyQ\HGXFDFLyQSDUDODVDOXGSULQFLSLRVPpWRGRV\DSOLFDFLRQHVHQ HOiPELWRGHODVDOXGS~EOLFD 7(0$ (YDOXDFLyQ GH PHGLGDV SODQHV \ SURJUDPDV (YDOXDFLyQ GHO LPSDFWR HQ VDOXG 3ULRUL]DFLyQ SHUWLQHQFLDHILFDFLDHILFLHQFLD\HIHFWLYLGDG 7(0$ 3URJUDPDV GH GHWHFFLyQ SUHQDWDO GH DQRPDOtDV FURPRVyPLFDV 3URJUDPD GH FULEDGRV QHRQDWDOKLSRDFXVLD\HQIHUPHGDGHVHQGRFULQRPHWDEyOLFDV 7(0$ 3URJUDPD GH GHWHFFLyQ SUHFR] GH FiQFHU FULEDGRV GH FiQFHU GH PDPD GH FpUYL[ \ FRORUUHFWDO 7(0$ 3ODQ GH SUHYHQFLyQ \ FRQWURO GHO WDEDTXLVPR HQ &DQWDEULD 0HGLGDV VDQLWDULDV IUHQWH DO WDEDTXLVPR1RUPDWLYDUHJXODGRUDGHODYHQWDHOVXPLQLVWURHOFRQVXPR\ODSXEOLFLGDGGHORV SURGXFWRVGHOWDEDFR 7(0$ (SLGHPLRORJtDGHODVHQIHUPHGDGHVGHWUDQVPLVLEOHV0HGLGDVGHSUHYHQFLyQ\FRQWUROGHORV PHFDQLVPRV GH WUDQVPLVLyQ (QIHUPHGDGHV GH GHFODUDFLyQ REOLJDWRULD QRUPDWLYD DSOLFDEOH OLVWDGR\UpJLPHQGHQRWLILFDFLyQ(QIHUPHGDGHVSUHYHQLEOHVPHGLDQWHYDFXQDFLyQ boc.cantabria.es CVE-2019-3750 7(0$ 93/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (QIHUPHGDGHVQRWUDVPLVLEOHV,PSDFWRHQODVDOXGS~EOLFDVXHSLGHPLRORJtD\HVWUDWHJLDVGH SUHYHQFLyQ 7(0$ 5HVLVWHQFLDV DQWLPLFURELDQDV SODQ QDFLRQDO GH UHVLVWHQFLDV DQWLPLFURELDQDV 5HVLVWHQFLDV DQWLPLFURELDQDV HQ DOLPHQWRV SURJUDPD FRPXQLWDULR GH UHVLVWHQFLDV DQWLPLFURELDQDV ,QIHFFLRQHVUHODFLRQDGDVFRQODDVLVWHQFLDVDQLWDULD9LJLODQFLDHSLGHPLROyJLFDGH,5$6 7(0$ &OLPD\VDOXG3ODQGHDFWXDFLRQHVSUHYHQWLYDVFRQWUDORVHIHFWRVGHOH[FHVRGHWHPSHUDWXUDV VREUHODVDOXG 7(0$ 5DGLDFLRQHVXOWUDYLROHWDV\VDOXG1RUPDWLYDDSOLFDEOH'HFUHWRGHGHPDU]RSRUHO TXHVHUHJXODODDFWLYLGDGGHORVFHQWURVGHEURQFHDGRPHGLDQWHODXWLOL]DFLyQGHUDGLDFLRQHV XOWUDYLROHWDV 7(0$ 3ROLFtDVDQLWDULDPRUWXRULD1RUPDWLYDDSOLFDEOH 7(0$ &RQGLFLRQHV KLJLpQLFRVDQLWDULDV GH ORV HVWDEOHFLPLHQWRV GRQGH VH UHDOL]DQ WpFQLFDV GH WDWXDMH PLFURSLJPHQWDFLyQ SHUIRUDFLyQ FXWiQHD \ RWUDV WpFQLFDV VLPLODUHV GH DUWH FRUSRUDO 1RUPDWLYDGHDSOLFDFLyQ %248(,,25'(1$&,Ï1)$50$&e87,&$ i Pág. 12601 7(0$ /D /H\ *HQHUDO GH 6DQLGDG 'H ORV 3ULQFLSLRV *HQHUDOHV 'H ODV &RPSHWHQFLDV GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV 'H OD (VWUXFWXUD GHO VLVWHPD VDQLWDULR 'H ORV 3URGXFWRV )DUPDFpXWLFRV 7(0$ 7H[WR 5HIXQGLGR GH /D /H\ GH JDUDQWtDV \ XVR UDFLRQDO GH ORV PHGLFDPHQWRV \ SURGXFWRV VDQLWDULRV , 3ULQFLSLRV EiVLFRV (VWUXFWXUD 0HGLFDPHQWRV UHFRQRFLGRV SRU OD /H\ \ VXV FODVHV*DUDQWtDVVDQLWDULDVGHORVPHGLFDPHQWRVHVSHFLDOHV 7(0$ 7H[WR 5HIXQGLGR GH /D /H\ GH JDUDQWtDV \ XVR UDFLRQDO GH ORV PHGLFDPHQWRV \ SURGXFWRV VDQLWDULRV ,, *DUDQWtDV H[LJLEOHV D ORV PHGLFDPHQWRV GH XVR KXPDQR \ YHWHULQDULR HODERUDGRVLQGXVWULDOPHQWH&RQGLFLRQHVGHSUHVFULSFLyQ\GLVSHQVDFLyQGHORVPLVPRV 7(0$ /D$JHQFLD(XURSHDGH0HGLFDPHQWRV/D$JHQFLD(VSDxRODGH0HGLFDPHQWRV\3URGXFWRV 6DQLWDULRV(O&RPLWp7pFQLFRGH,QVSHFFLyQFRPRyUJDQRFRPSOHPHQWDULRGHODDJHQFLD/D 'LUHFFLyQ *HQHUDO FRPSHWHQWH HQ PDWHULD GH )DUPDFLD \ 3URGXFWRV 6DQLWDULRV GHO 0LQLVWHULR GH6DQLGDG&RQVXPR\%LHQHVWDU6RFLDO(VWUXFWXUD\IXQFLRQHV 7(0$ /H\GHFRKHVLyQ\FDOLGDGGHO6LVWHPD1DFLRQDOGH6DOXG3UHVWDFLRQHVGHO6LVWHPD1DFLRQDO GH 6DOXG RUGHQDFLyQ GH ODV SUHVWDFLRQHV 2UJDQL]DFLyQ \ HMHUFLFLR GH ODV FRPSHWHQFLDV GHO (VWDGRHQPDWHULDGHIDUPDFLD 7(0$ /D/H\GH2UGHQDFLyQ6DQLWDULDGH&DQWDEULD'HOVLVWHPDVDQLWDULRS~EOLFRGH&DQWDEULD'H ODV $GPLQLVWUDFLRQHV 3~EOLFDV HQ HO 6LVWHPD 6DQLWDULR 3~EOLFR GH &DQWDEULD $FWXDFLRQHV UHODFLRQDGDVFRQHOXVRGHORVPHGLFDPHQWRV 7(0$ 5HJXODFLyQ GH ODV 2ILFLQDV GH )DUPDFLD , IXQFLRQHV SHUVRQDO \ SODQLILFDFLyQ +RUDULRV \ VHUYLFLRVGHJXDUGLD(VSHFLDOUHIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 5HJXODFLyQ GH ODV RILFLQDV GH )DUPDFLD ,, 5HTXLVLWRV WpFQLFRVDQLWDULRV UpJLPHQ MXUtGLFR \ SURFHGLPLHQWR SDUD OD DXWRUL]DFLyQ WUDQVPLVLyQ WUDVODGRV PRGLILFDFLRQHV \ FLHUUH GH ODV RILFLQDVGHIDUPDFLD(VSHFLDOUHIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 6HUYLFLRVGH)DUPDFLDGH+RVSLWDO5HJXODFLyQ5HTXLVLWRV\IXQFLRQHV(VSHFLDOUHIHUHQFLDD OD &RPXQLGDG $XWyQRPD GH &DQWDEULD *XtD GH EXHQDV SUiFWLFDV GH SUHSDUDFLyQ GH PHGLFDPHQWRVHQVHUYLFLRVGHIDUPDFLDKRVSLWDODULD 'LVSRVLFLRQHV*HQHUDOHV\HVWUXFWXUD boc.cantabria.es CVE-2019-3750 94/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 6HUYLFLRV GH IDUPDFLD HQ OD DWHQFLyQ SULPDULD FHQWURV VRFLRVDQLWDULRV \ SHQLWHQFLDULRV UHJXODFLyQ UHTXLVLWRV \ IXQFLRQHV 'HSyVLWRV GH PHGLFDPHQWRV (VSHFLDO UHIHUHQFLD D OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 9HQWD GLUHFWD GH PHGLFDPHQWRV D SURIHVLRQDOHV VDQLWDULRV 7(0$ )yUPXODV0DJLVWUDOHV\3UHSDUDGRV2ILFLQDOHVGHILQLFLRQHV\UHTXLVLWRV1RUPDVGHFRUUHFWD HODERUDFLyQ\FRQWUROGHFDOLGDGGH)yUPXODV0DJLVWUDOHV\3UHSDUDGRV2ILFLQDOHV)RUPXODULR 1DFLRQDO5HDO)DUPDFRSHD(VSDxROD 7(0$ /D GLVWULEXFLyQ GH PHGLFDPHQWRV GH XVR KXPDQR 5HJXODFLyQ 'LVSRVLFLRQHV *HQHUDOHV 5HTXLVLWRV PDWHULDOHV \ GH SHUVRQDO 2EOLJDFLRQHV $XWRUL]DFLyQ ,QWHUPHGLDFLyQ GH PHGLFDPHQWRV 7(0$ %XHQDVSUiFWLFDVGHGLVWULEXFLyQGHPHGLFDPHQWRVGHXVRKXPDQR 7(0$ 0HGLFDPHQWRVYHWHULQDULRV&RPHUFLDOL]DFLyQSUHVFULSFLyQ\XWLOL]DFLyQ5HJXODFLyQQDFLRQDO\ DXWRQyPLFD )DEULFDFLyQHLPSRUWDFLyQGHPHGLFDPHQWRV5HJXODFLyQ$XWRUL]DFLyQ\UHTXLVLWRV 9HQWDDGLVWDQFLDGHPHGLFDPHQWRVGHXVRKXPDQR\YHWHULQDULR 7(0$ 'LVSRVLWLYRV GH VHJXULGDG GH PHGLFDPHQWRV GH XVR KXPDQR 5HJXODFLyQ (O LGHQWLILFDGRU ~QLFR9HULILFDFLyQ\GHVDFWLYDFLyQ1RWLILFDFLyQGHVRVSHFKDVGHPHGLFDPHQWRVIDOVLILFDGRV 7(0$ )DUPDFRYLJLODQFLD5HJXODFLyQ6LVWHPD(VSDxROGH)DUPDFRYLJLODQFLD 7(0$ (VWXGLRV SRVWDXWRUL]DFLyQ GH WLSR REVHUYDFLRQDO FRQ PHGLFDPHQWRV GH XVR KXPDQR 5HJXODFLyQ 7(0$ (QVD\RVFOtQLFRVFRQPHGLFDPHQWRV5HJXODFLyQ(OFRQVHQWLPLHQWRLQIRUPDGR,QGHPQL]DFLyQ \UHVSRQVDELOLGDG&RPLWpVGHeWLFDGHOD,QYHVWLJDFLyQFRQPHGLFDPHQWRV3URFHGLPLHQWRGH HYDOXDFLyQ\DXWRUL]DFLyQ 7(0$ (QVD\RV FOtQLFRV FRQ PHGLFDPHQWRV 0HGLFDPHQWRV XWLOL]DGRV HQ HQVD\RV FOtQLFRV 1RUPDV GHEXHQDSUiFWLFDFOtQLFD\YHULILFDFLyQGHVXFXPSOLPLHQWR&RPXQLFDFLRQHV9LJLODQFLDGHOD VHJXULGDGGHORVPHGLFDPHQWRVHQLQYHVWLJDFLyQ 7(0$ /D UHFHWD PpGLFD 5HJXODFLyQ 5HTXLVLWRV 7LSRV GH UHFHWDV 'LVSHQVDFLyQ GH UHFHWDV /D RUGHQGHGLVSHQVDFLyQKRVSLWDODULD 7(0$ 0HGLFDPHQWRV VRPHWLGRV D SUHVFULSFLyQ \ GLVSHQVDFLyQ FRQWURODGD PHGLFDPHQWRV GH XVR GLDJQyVWLFR KRVSLWDODULR \ PHGLFDPHQWRV GH (VSHFLDO &RQWURO 0pGLFR 'LVSRQLELOLGDG GH PHGLFDPHQWRVHQVLWXDFLRQHVHVSHFLDOHV 7(0$ 5HFHWDV RILFLDOHV \ UHTXLVLWRV HVSHFLDOHV GH SUHVFULSFLyQ \ GLVSHQVDFLyQ GH HVWXSHIDFLHQWHV SDUDXVRKXPDQR\YHWHULQDULR&RQWUROGHODVUHFHWDVRILFLDOHVGHHVWXSHIDFLHQWHV 7(0$ 3URGXFWRV6DQLWDULRV5HJXODFLyQ&ODVLILFDFLyQ\PDUFDGRGHFRQIRUPLGDG&RPHUFLDOL]DFLyQ GLVWULEXFLyQ\YHQWD)DEULFDFLyQGHSURGXFWRVVDQLWDULRVDPHGLGD 7(0$ 3URGXFWRV FRVPpWLFRV 5HJXODFLyQ 3ULQFLSLRV JHQHUDOHV (WLTXHWDGR &RPXQLFDFLyQ GH HIHFWRVJUDYHV&RQWUROGHOPHUFDGR&RVPHWRYLJLODQFLD 7(0$ 3URGXFWRV FRVPpWLFRV )DEULFDFLyQ LPSRUWDFLyQ \ FRPHUFLDOL]DFLyQ %XHQDV SUiFWLFDV GH IDEULFDFLyQGHFRVPpWLFRV CVE-2019-3750 7(0$ 7(0$ i Pág. 12602 boc.cantabria.es 95/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ /D SXEOLFLGDG GH PHGLFDPHQWRV GHVWLQDGD DO S~EOLFR 3XEOLFLGDG \ SURPRFLyQ FRPHUFLDO GH SURGXFWRVDFWLYLGDGHVRVHUYLFLRVFRQSUHWHQGLGDILQDOLGDGVDQLWDULD 7(0$ /D IXQFLyQ LQVSHFWRUD GH OD $GPLQLVWUDFLyQ HQ PDWHULD IDUPDFpXWLFD /H\ GH JDUDQWtDV \ XVR UDFLRQDO GH ORV PHGLFDPHQWRV \ SURGXFWRV VDQLWDULRV /H\ GH 2UGHQDFLyQ 6DQLWDULD GH &DQWDEULD\/H\GH2UGHQDFLyQ)DUPDFpXWLFDGH&DQWDEULD$OHUWDV\FRQWUROGHO0HUFDGR CVE-2019-3750 7(0$ i Pág. 12603 boc.cantabria.es 96/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(1*(2*5$),ғ$ 0$7(5,$6(63(&,ғ),&$6 %/248(, 7(0$ %LRJHRJUDIÕD ғ (O SDSHO ELRORғJLFR GHO DJXD \ ODV WHPSHUDWXUDV GHO DLUH /RV HFRVLVWHPDV WHUUHVWUHV ORV JUDQGHV ELRPDV &RPXQLGDGHV \ KDғELWDWV ORV IDFWRUHV JHRPRUIRORғJLFRV \ HGDIRORғJLFRV/DVXFHVLRғQHFRORғJLFD 7(0$ /DVDFWLYLGDGHVHFRQRғPLFDVORVUHFXUVRVQDWXUDOHV\HOFRQRFLPLHQWRHOFDPELRWHFQRORғJLFR\ VXVGLPHQVLRQHVWHUULWRULDOHV,QWHUQDFLRQDOL]DFLRғQHFRQRғPLFD\FRPHUFLRPXQGLDO 7(0$ 6LJQLILFDGR\GLQDғPLFDGHODDFWLYLGDGLQGXVWULDO/DVIXHQWHVGHHQHUJÕD ғ /DVPDWHULDVSULPDV 3DLVDMHVLQGXVWULDOHV\UHJLRQHVLQGXVWULDOHV 7(0$ &RPHUFLR\WUDQVSRUWH/RVHVSDFLRVGHLQWHUFDPELR/DSHUYLYHQFLDGHOWUDVSRUWHPDUÕWғ LPR\HO LPSDFWRHVSDFLDOGHORVSXHUWRV 7(0$ /DDFWLYLGDGWXUÕVғ WLFD&DXVDV\IDFWRUHVJHRJUDғILFRVGHODXJHORFDOL]DFLRғQ\GLVWULEXFLRғQGHOD DFWLYLGDGWXUÕVғ WLFD5HSHUFXVLRQHVHLPSDFWRVJHRJUDғILFRVGHOWXULVPR\SUREOHPDғWLFDDFWXDOGHO VHFWRU/DDFWLYLGDGWXUÕVғ WLFD\HO'HVDUUROOR6RVWHQLEOHH,QWHJUDO 7(0$ (O SREODPLHQWR UXUDO (VSDFLRV DJUDULRV WUDGLFLRQDOHV (VSDFLRV DJUDULRV HYROXFLRQDGRV (O HVSDFLRUXUDO\ODVDFWLYLGDGHVDJUDULDV/RVXVRVQRDJUDULRVGHOHVSDFLRUXUDO 7(0$ (O KHFKR XUEDQR \ VX HYROXFLRғQ (O VLVWHPD LQWHUXUEDQR /D FLXGDG HQ OD UHJLRғQ 3ULQFLSDOHV SUREOHPDVXUEDQRV 7(0$ /D SREODFLRғQ IXHQWHV /D SREODFLRғQ PXQGLDO 0RYLPLHQWRV QDWXUDOHV \ PLJUDWRULRV (VWUXFWXUD GHODSREODFLRғQ3UREOHPDғWLFDGHOFUHFLPLHQWRDFWXDOGHODSREODFLRғQ 7(0$ /D VLWXDFLRғQ JHRJUDғILFD GH &DQWDEULD ,PSOLFDFLRQHV ELRJHRJUDғILFDV \ VRFLRHFRQRғPLFDV (VWUXFWXUD\RUJDQL]DFLRғQVRFLDO6XVLJQLILFDGRHQHOFRQWH[WRGH(XURSD\OD3HQÕQ ғ VXOD,EHғULFD *HRPRUIRORJÕғDGH&DQWDEULD0DWHULDOHVIRUPDV\SURFHVRV3ULQFLSDOHVXQLGDGHVH[LVWHQWHVHQ ODUHJLRғQ 7(0$ &DQWDEULD8QLGDGHVGHUHOLHYH/DFRVWDORVUÕR ғ VORVYDOOHVODPRQWDQѺD 7(0$ /RV VXHORV GHO WHUULWRULR GH &DQWDEULD &ODVLILFDFLRғQ \ GLVWULEXFLRғQ HVSDFLDO 3UREOHPDғWLFD DPELHQWDODVRFLDGDDODH[SORWDFLRғQGHORVUHFXUVRVPLQHURV/RVXVRVGHOVXHORHQ&DQWDEULD (YROXFLRғQKLVWRғULFD\FRQILJXUDFLRғQDFWXDO)XHQWHV\PHғWRGRVSDUDHOHVWXGLRGHORVXVRVGHO VXHOR 7(0$ /D KLGURORJÕD ғ GH &DQWDEULD 0RUIRORJÕD ғ \ FRQILJXUDFLRғQ GH OD UHG KLGURJUDғILFD 'LVWULEXFLRғQ GH FXHQFDVKLGURJUDғILFDV'LVWULEXFLRғQGHODVSULQFLSDOHVXQLGDGHVKLGURJHRORғJLFDV i Pág. 12604 boc.cantabria.es CVE-2019-3750 7(0$ &RQVWLWXFLRғQJHRORғJLFDGH&DQWDEULD8QLGDGHVJHRHVWUXFWXUDOHV\VLVWHPDVPRUIRJHQHғWLFRV 97/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (OFOLPDHQ&DQWDEULD5DVJRV\FDUDFWHUtVWLFDVJHQHUDOHV(QFXDGUHFOLPDWROyJLFRGH&DQWDEULD HQHOFRQWH[WRGHOD(VSDxDDWOiQWLFD(OFDPELRFOLPiWLFRHQODUHJLyQ 7(0$ %LRJHRJUDIÕD ғ GH OD &RPXQLGDG $XWRғQRPD GH &DQWDEULD 3ULQFLSDOHV XQLGDGHV DPELHQWDOHV &DUDFWHUtVWLFDV\GLDJQyVWLFR 7(0$ /RV UHFXUVRV ELRғWLFRV HQ &DQWDEULD /D YHJHWDFLRғQ QDWXUDO 'H OD YHJHWDFLRғQ QDWXUDO D OD YHJHWDFLRғQDFWXDO&DUDFWHUL]DFLRғQGHODIDXQDDVRFLDGD+DғELWDWV\HVSHFLHVGHLQWHUHғV 7(0$ /DYHJHWDFLRғQHQ&DQWDEULD9HJHWDFLRғQSRWHQFLDOGLVWULEXFLRғQ\UDVJRVSULQFLSDOHV9HJHWDFLRғQ DFWXDOGLVWULEXFLRғQ\DQDғOLVLVGHODVDOWHUDFLRQHVDQWURғSLFDV)RUPDFLRQHV\DVRFLDFLRQHVWÕS ғ LFDV GH&DQWDEULD 7(0$ (OSREODPLHQWRHQ&DQWDEULD$UWLFXODFLRғQWHUULWRULDOGHOSREODPLHQWR'LVWULEXFLRғQHQFRPDUFDV\ VXVUHODFLRQHVFRQHOPHGLRIÕVғ LFR\VRFLDO 7(0$ (VWUXFWXUD GHPRJUDғILFD GH &DQWDEULD 3ULQFLSDOHV IXHQWHV SDUD HO HVWXGLR GH OD GHPRJUDItD &DUDFWHUHVJHQHUDOHV\SDWURQHVGHGLVWULEXFLRғQHVSDFLDO(YROXFLRғQGHODGHPRJUDIÕD ғ UHJLRQDO HQHOSDVDGR\WHQGHQFLDVIXWXUDV 7(0$ /DHVWUXFWXUDHFRQRғPLFDGH&DQWDEULD&DUDFWHUL]DFLRғQGHORVVHFWRUHVSULPDULRVHFXQGDULR\ WHUFLDULR\GLVWULEXFLyQHVSDFLDO)RUPDFLRғQKLVWRғULFD\WHQGHQFLDVUHFLHQWHV,QFLGHQFLDVGHODV SROÕWғ LFDVVHFWRULDOHVGHOD8QLRғQ(XURSHDVREUHODHFRQRPÕD ғ FDғQWDEUD 7(0$ /DDFWLYLGDGDJUDULDHQ&DQWDEULD)XHQWHV\PHғWRGRVGHDQDғOLVLV&DUDFWHUL]DFLRғQGHOVHFWRUHQ ODHFRQRPÕD ғ UHJLRQDO&DUDFWHUÕVғ WLFDV\GLVWULEXFLRғQHVSDFLDOGHORVGLVWLQWRVWLSRVGHDJULFXOWXUD JDQDGHUÕD ғ \H[SORWDFLRғQIRUHVWDO,QFLGHQFLDWHUULWRULDO\PXOWLIXQFLRQDOLGDG 7(0$ /D LQGXVWULD HQ &DQWDEULD )DFWRUHV GH ORFDOL]DFLRғQ \ GLVWULEXFLRғQ HVSDFLDO HO VXHOR LQGXVWULDO ,QFLGHQFLDWHUULWRULDOGHORVLQVWUXPHQWRVGHSODQLILFDFLRғQ\SROÕWғ LFDVGHSURPRFLRғQLQGXVWULDO 7(0$ (O VHFWRU GH ORV VHUYLFLRV HQ &DQWDEULD )XHQWHV \ PHғWRGRV GH DQDғOLVLV &DUDFWHUL]DFLRғQ GHO VHFWRU HQ OD HFRQRPÕD ғ UHJLRQDO )DFWRUHV GH ORFDOL]DFLRғQ HVSDFLDO /D FLXGDG HVSDFLR GH ORV VHUYLFLRV 7(0$ (OFRPHUFLRHQ&DQWDEULD/DRUJDQL]DFLRғQHVSDFLDOGHOVHFWRUGHODGLVWULEXFLRғQFRPHUFLDO/DV QXHYDVIRUPDVFRPHUFLDOHV\HOWHUULWRULR(OFRPHUFLRH[WHULRUGH&DQWDEULD 7(0$ (O WXULVPR HQ &DQWDEULD )XHQWHV \ PHғWRGRV GH DQDғOLVLV &DUDFWHUL]DFLRғQ GHO VHFWRU HQ OD HFRQRPÕD ғ UHJLRQDO7LSRORJÕD ғ \GLVWULEXFLRғQHVSDFLDOGHODVGLVWLQWDVRIHUWDV 7(0$ /DV LQIUDHVWUXFWXUDV GH WHOHFRPXQLFDFLRQHV HQ &DQWDEULD &DPELRV WHUULWRULDOHV UHODFLRQDGRV FRQODVRFLHGDGGHODLQIRUPDFLyQ3RVLFLyQGH&DQWDEULDHQHOFRQWH[WRQDFLRQDO/DLQFLGHQFLD HVSDFLDOGHODVWHOHFRPXQLFDFLRQHViUHDVXUEDQDV\iUHDVUXUDOHV 7(0$ /DV LQIUDHVWUXFWXUDV GHO WUDQVSRUWH HQ &DQWDEULD 0DUFR FRPSHWHQFLDO \ UHJXODFLRғQ QRUPDWLYD 5HGGHFDUUHWHUDVIHUURFDUULOHVSXHUWRV\DHURSXHUWR(VWXGLRGHODGHPDQGDWUDғILFRV\IOXMRV /DSODQLILFDFLRғQGHODVLQIUDHVWUXFWXUDVGHWUDQVSRUWH i Pág. 12605 7(0$ /DVLQIUDHVWUXFWXUDVKLGUDғXOLFDVHQ&DQWDEULD0DUFRFRPSHWHQFLDO\OHJLVODFLRғQVHFWRULDO2IHUWD \ GHPDQGD GHO DJXD /DV UHGHV GH VDQHDPLHQWR \ ORV VLVWHPDV GH GHSXUDFLRғQ /D JHVWLRғQ LQWHJUDOGHOUHFXUVR CVE-2019-3750 7(0$ /DV UHGHV GH FRPXQLFDFLRQHV HQ &DQWDEULD &RQILJXUDFLRғQ KLVWRғULFD GH ODV UHGHV GH FRPXQLFDFLRQHVUHJLRQDOHV3UREOHPDғWLFDDFWXDO\WHQGHQFLDVGHIXWXUR/HJLVODFLRғQVHFWRULDO\ GLVWULEXFLRғQGHFRPSHWHQFLDV boc.cantabria.es 98/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (O VLVWHPD HQHUJHғWLFR )XHQWHV \ PHғWRGRV GH DQDғOLVLV (YROXFLRғQ KLVWRғULFD GH ORV PRGHORV HQHUJHғWLFRV3UREOHPDVDPELHQWDOHVDVRFLDGRVDOVLVWHPDHQHUJHғWLFR 7(0$ (O VLVWHPD HQHUJHғWLFR FDғQWDEUR UHFXUVRV SURSLRV H LPSRUWDGRV LQIUDHVWUXFWXUDV GH DEDVWHFLPLHQWRJHQHUDFLRғQ\WUDQVSRUWH %/248(,, 7(0$ (O SDLVDMH GH &DQWDEULD 0HғWRGRV SDUD HO DQDғOLVLV \ WUDWDPLHQWR GHO SDLVDMH /DV XQLGDGHV GH SDLVDMH HQ &DQWDEULD \ VX WUDQVIRUPDFLRғQ UHFLHQWH SULQFLSDOHV FDXVDV \ FRQVHFXHQFLDV ,QLFLDWLYDVHXURSHDVVREUHHOSDLVDMH0DUFRFRPSHWHQFLDO\UHJXODFLRғQQRUPDWLYDDXWRQyPLFD OD/H\GHO3DLVDMHGH&DQWDEULD 7(0$ (OOLWRUDOGH&DQWDEULD&DUDFWHUHVQDWXUDOHV\FRQGLFLRQDQWHVIÕVғ LFRV'LVWULEXFLRғQGHUHFXUVRV QDWXUDOHV \ ELRғWLFRV )HQRғPHQRV GH SUHVLRғQ DQWURғSLFD /DV OLPLWDFLRQHV OHJDOHV GHO HVSDFLR PDUÕWғ LPR 7(0$ /RV HVSDFLRV UXUDOHV (O PHGLR UXUDO SODQLILFDFLRғQ \ GHVDUUROOR HQ HO DғPELWR GH OD 8QLRғQ (XURSHD (O HVSDFLR UXUDO FDғQWDEUR 3URFHVRV WHUULWRULDOHV HYROXFLRғQ KLVWRғULFD \ WHQGHQFLDV UHFLHQWHV 7(0$ /RVHVSDFLRVXUEDQRVHQ&DQWDEULD/DFRQVWUXFFLRғQSURJUHVLYDGHODWUDPDXUEDQDHQODUHJLRғQ \VXVLQWHUDFFLRQHVHFRQRғPLFDV\VRFLDOHV(YROXFLRғQGHODPRUIRORJÕD ғ XUEDQD 7(0$ (YROXFLyQKLVWyULFDGHODUHJXODFLyQQRUPDWLYDGHOVXHORHQ(VSDxD3ULQFLSDOHVKLWRV(O5HDO 'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHOWH[WRUHIXQGLGRGHOD/H\ GH6XHOR\5HKDELOLWDFLyQ8UEDQD 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLRғQ7HUULWRULDO\5HғJLPHQ8UEDQÕVғ WLFR GHO6XHOR3ULQFLSLRVLQVSLUDGRUHV9LVLRғQGHFRQMXQWRGHOD/H\ 7(0$ /D RUGHQDFLRғQ GHO WHUULWRULR 5HODFLRQHV HQWUH RUGHQDFLRғQ GHO WHUULWRULR \ XUEDQLVPR /RV LQVWUXPHQWRVGHRUGHQDFLRғQGHOWHUULWRULR(O3ODQ5HJLRQDOGH2UGHQDFLRғQ7HUULWRULDO 7(0$ 3ODQGH2UGHQDFLRғQGHO/LWRUDO'HWHUPLQDFLRQHVEDғVLFDV\WUDPLWDFLRғQ$QWHFHGHQWHVEDODQFH \UHVXOWDGRV&RQWHQLGRVGRFXPHQWDFLRғQ\PHWRGRORJÕD ғ GHO3ODQ 7(0$ (O'HFUHWRGHGHPD\RSRUHOTXHVHDSUXHEDGHILQLWLYDPHQWHHO3ODQ(VSHFLDOGH OD$FWXDFLyQ,QWHJUDO(VWUDWpJLFDGH5HRUGHQDFLyQGHOD%DKtDGH6DQWDQGHU 7(0$ /DV 1RUPDV 8UEDQÕVғ WLFDV 5HJLRQDOHV /RV 3UR\HFWRV 6LQJXODUHV GH ,QWHUHғV 5HJLRQDO /RV 3ODQHV(VSHFLDOHVGH2UGHQDFLRғQGHO7HUULWRULR 7(0$ /D UHGDFFLRғQ \ YDORUDFLRғQ GHO SODQHDPLHQWR XUEDQÕVғ WLFR &RQWHQLGRV GH OD LQIRUPDFLRғQ XUEDQÕVғ WLFD 0HWRGRORJÕD ғ SDUD OD GHWHUPLQDFLRғQ \ MXVWLILFDFLRғQ GH ORV REMHWLYRV \ FULWHULRV GH RUGHQDFLRғQ/DHYDOXDFLRғQDPELHQWDOHVWUDWpJLFDGHOSODQHDPLHQWRXUEDQÕVғ WLFR i Pág. 12606 boc.cantabria.es CVE-2019-3750 7(0$ /D SODQLILFDFLRғQ FRPR SULQFLSLR GH DFWXDFLRғQ H LQVWUXPHQWR GH DFWXDFLRғQ GH ORV SRGHUHV SXғEOLFRV (O SODQHDPLHQWR XUEDQÕVғ WLFR JHQHUDO &ODVHV GH SODQHV SRU VX IXQFLRғQ DOFDQFH \ iPELWR WHUULWRULDO 'HWHUPLQDFLRQHV GHO SODQHDPLHQWR JHQHUDO &ODVLILFDFLRғQ \ FDOLILFDFLRғQ GHO VXHOR 99/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /H\ GH GH DEULO GH &RPDUFDV /H\ GH GH PD\R UHJXODGRUD GH ODV (QWLGDGHV /RFDOHV 0HQRUHV /H\ GH GH GLFLHPEUH SRU OD TXH VH GHWHUPLQD OD FDSLWDOLGDGGHORVSDUWLGRVMXGLFLDOHV 7(0$ &DWHJRUtDV MXUtGLFDV GH SURWHFFLyQ GH ORV (VSDFLRV 1DWXUDOHV 3URWHJLGRV HQ &DQWDEULD /HJLVODFLRғQ DVRFLDGD /D JHVWLRғQ GH ORV HVSDFLRV QDWXUDOHV SURWHJLGRV /RV 3ODQHV GH 2UGHQDFLRғQGHORV5HFXUVRV1DWXUDOHV/RV3ODQHV5HFWRUHVGH8VR\*HVWLyQ 7(0$ (O 3DWULPRQLR &XOWXUDO GH &DQWDEULD /D SURWHFFLyQ GHO 3DWULPRQLR &XOWXUDO LQPXHEOH /H\ GHGHRFWXEUHGH3DWULPRQLR&XOWXUDOGH&DQWDEULD3ULQFLSDOHVUHFXUVRV\DғUHDV SDWULPRQLDOHVGH&DQWDEULD 7(0$ /D FXPEUH GH 5ÕR ғ $JHQGD 3ULQFLSDOHV &RQYHQLRV ,QWHUQDFLRQDOHV HQ PDWHULD GH PHGLR DPELHQWH 7(0$ /HJLVODFLRғQ\QRUPDWLYDHQPDWHULDGHPHGLRDPELHQWH&ODVLILFDFLyQGHORVSULQFLSDOHVWH[WRV OHJLVODWLYRV\GRFXPHQWRVQRUPDWLYRVQDFLRQDOHVUHJLRQDOHV\HXURSHRV 7(0$ 0DUFR OHJDO H LQVWLWXFLRQDO GH OD (YDOXDFLyQ $PELHQWDO (YDOXDFLyQ $PELHQWDO (VWUDWpJLFD GH SODQHV\SURJUDPDV0DUFRFRQFHSWXDO\WUiPLWHDGPLQLVWUDWLYR 7(0$ 0DUFR OHJDO H LQVWLWXFLRQDO GH OD (YDOXDFLyQ $PELHQWDO (YDOXDFLyQ GH ,PSDFWR $PELHQWDO GH SUR\HFWRVDFWLYLGDGHVRLQVWDODFLRQHV0DUFRFRQFHSWXDO\WUiPLWHDGPLQLVWUDWLYR 7(0$ /DFRQWDPLQDFLRғQGHODVDJXDVHQ&DQWDEULD7LSRVGHFRQWDPLQDFLRғQIXHQWHVFRQWDPLQDQWHV\ HIHFWRV/HJLVODFLRғQDSOLFDEOH6LVWHPDVGHWUDWDPLHQWRGHODVDJXDVUHVLGXDOHV 7(0$ 9HUWLGRV DO PDU HQ HO DғPELWR GHO OLWRUDO GH OD &RPXQLGDG $XWRғQRPD GH &DQWDEULD 'HFUHWR GHGHMXQLRSRUHOTXHVHDSUXHEDHO5HJODPHQWRGH9HUWLGRVGHVGH7LHUUDDO/LWRUDO GHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /D/H\GHMXOLRGH&RVWDV\VXLQFLGHQFLDHQODJHVWLRғQPHGLRDPELHQWDO\WHUULWRULDO 7(0$ (OSUREOHPDGHORVUHVLGXRVHQ&DQWDEULDWLSRVSURGXFFLRғQFRPSRVLFLRғQ\JHVWLRғQ/HJLVODFLRғQ DSOLFDEOH/DFRQWDPLQDFLRғQGHORVVXHORVIXHQWHVFRQWDPLQDQWHV\FRQVHFXHQFLDV 7(0$ /D HOLPLQDFLRғQ GH UHVLGXRV PHGLDQWH GHSRғVLWRV GH YHUWHGHURV 3ULQFLSDOHV YDULDEOHV D FRQVLGHUDU HQ OD VHOHFFLRғQ GH HPSOD]DPLHQWRV GH ORV GLVWLQWRV YHUWHGHURV 1RUPDWLYD \ DSOLFDFLRғQHQ&DQWDEULD/L[LYLDGRV$SURYHFKDPLHQWRGHELRJDғV 7(0$ /DFDOLGDGGHODLUHHQ&DQWDEULD&DUDFWHUL]DFLRғQGHORVIRFRVGHHPLVLRғQ\HIHFWRVGHULYDGRV )XHQWHV \ PHғWRGRV SDUD VX HVWXGLR ,QFLGHQFLD WHUULWRULDO 1RUPDWLYD VHFWRULDO DSOLFDEOH /D FRQWDPLQDFLRғQDFXғVWLFD/DFRQWDPLQDFLyQOXPtQLFD 7(0$ (O PHGLR DPELHQWH XUEDQR /RV UHFXUVRV QDWXUDOHV \ OD FLXGDG /D FDOLGDG DPELHQWDO HQ OD FLXGDG3ROÕWғ LFDVHQUHODFLRғQFRQHOPHGLRDPELHQWHXUEDQRHQ&DQWDEULD CVE-2019-3750 7(0$ 3DUWLFLSDFLyQS~EOLFD$SOLFDFLRғQ\GHVDUUROORGHOD$JHQGD/RFDOHQ&DQWDEULD/D5HG/RFDO GH6RVWHQLELOLGDGGH&DQWDEULD i Pág. 12607 boc.cantabria.es 100/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (GXFDFLyQ $PELHQWDO GHILQLFLyQ \ REMHWLYRV (O &HQWUR GH 'RFXPHQWDFLyQ \ 5HFXUVRV SDUD OD (GXFDFLyQ$PELHQWDOGH&DQWDEULD/D(VWUDWHJLD&iQWDEUDGH(GXFDFLyQ$PELHQWDO 7(0$ $FFHVRDODLQIRUPDFLyQDPELHQWDO1RUPDWLYDUHJXODGRUD)XHQWHVGHLQIRUPDFLyQDPELHQWDO %/248(,,, 7(0$ /D UHSUHVHQWDFLyQ GH OD 7LHUUD )LQDOLGDG JHRJUiILFD GH ODV UHSUHVHQWDFLRQHV FDUWRJUiILFDV (OHPHQWRV EiVLFRV GH ORV PDSDV HVFDOD VLJQRV FRQYHQFLRQDOHV UHG GH FRRUGHQDGDV GH VLWXDFLyQVLVWHPDJHRPpWULFRGHSUR\HFFLyQ 7(0$ 6LVWHPDV GH UHSUHVHQWDFLRғQ FDUWRJUDғILFD 3ULQFLSDOHV WLSRV GH SUR\HFFLRQHV FDUWRJUDғILFDV \ XWLOLGDGDVRFLDGD 7(0$ 7pFQLFDV GH H[SUHVLRғQ FDUWRJUDғILFD 0HғWRGRV SDUD OD UHSUHVHQWDFLRғQ GH FDUWRJUDIÕD ғ EDғVLFD 7LSRV GH PDSDV HQ IXQFLRғQ GH VX HVFDOD \ SUHFLVLRғQ (O SURFHGLPLHQWR GH IRUPDFLRғQ GH OD FDUWRJUDIÕD ғ EDғVLFD 7(0$ 7pFQLFDVGHH[SUHVLRғQFDUWRJUDғILFD/DFDUWRJUDIÕD ғ WHPDғWLFD0HғWRGRVSDUDODUHSUHVHQWDFLRғQGH YDULDEOHVWHPDғWLFDV 7(0$ /D VLWXDFLRғQ GH OD FDUWRJUDIÕD ғ HQ (VSDQѺD 0DUFR OHJDO \ QRUPDWLYD HQ PDWHULD GH FDUWRJUDIÕD ғ 3ULQFLSDOHV RUJDQLVPRV SURGXFWRUHV 6HULHV GH FDUWRJUDIÕD ғ EDғVLFD \ WHPDғWLFD /D FDUWRJUDIÕD ғ QDғXWLFD 7(0$ /D SUR\HFFLRғQ 8QLYHUVDO 7UDQVYHUVD 0HUFDWRU 870 &DUDFWHUÕVғ WLFDV SULQFLSDOHV 8VRV \ DSOLFDFLRQHV 7(0$ &RQFHSWRV JHQHUDOHV GH JHRGHVLD 7LSRV GH UHGHV JHRGHғVLFDVWRSRJUDғILFDV \ VX SDSHO HQ OD IRUPDFLRғQ GH FDUWRJUDIÕD ғ (O VLVWHPD JHRGHғVLFR GH UHIHUHQFLD HVSDQѺRO HYROXFLRғQ KLVWRғULFD \ FRQIRUPDFLRғQDFWXDO 7(0$ *HRGHVLD HVSDFLDO (O IXQFLRQDPLHQWR GHO *36 *OREDO 3RVLWLRQLQJ 6\VWHP &RQVWHODFLRQHV H[LVWHQWHV7LSRVGHLQVWUXPHQWDO\PpWRGRV3UHFLVLRQHVVHJ~QLQVWUXPHQWDO\PpWRGRV 7(0$ )RWRJUDPHWUÕD ғ 3ULQFLSLRV \ JHRPHWUÕD ғ EDғVLFD (O GLDJUDPD GH WUDEDMR HQ XQ SUR\HFWR GH IRWRJUDPHWUÕD ғ DHғUHD/DH[SORWDFLRғQPHғWULFDGHXQIRWRJUDPDDLVODGR 7(0$ (O IXQFLRQDPLHQWR GH ORV UHVWLWXLGRUHV GLJLWDOHV (O SURFHVR GH UHVWLWXFLRғQ FDUWRJUDғILFD \ GH JHQHUDFLRғQGHRUWRIRWRJUDIÕD ғ VDHғUHDV 7(0$ 7pFQLFDV \ PpWRGRV GH IRWRLQWHUSUHWDFLyQ 3ULQFLSLRV VXEMHWLYRV SDUD HO UHFRQRFLPLHQWR GH REMHWRVIRUPDVWDPDxRVWRQRVWH[WXUDV\VRPEUDV7pFQLFDVREMHWLYDVSDUDODHVWLPDFLyQGH DOWXUDV \ GLPHQVLRQHV $SOLFDFLRQHV JHRORJtD VXHORV JHRPRUIRORJtD YHJHWDFLyQ XVRV GHO VXHORPHGLRXUEDQR i Pág. 12608 7(0$ )XQGDPHQWRV GH OD WHOHGHWHFFLRғQ HVSDFLDO 3ULQFLSDOHV VLVWHPDV GH REVHUYDFLRғQ SURJUDPDV VDWHғOLWHV\VHQVRUHV(OFRQFHSWRGHUHVROXFLRғQHQWHOHGHWHFFLRғQ&DUDFWHUÕVғ WLFDVDSOLFDFLRQHV\ GLVSRQLELOLGDGGHORVSURGXFWRV CVE-2019-3750 7(0$ ,PiJHQHV GLJLWDOHV GHO WHUULWRULR 5HVROXFLRQHV )RUPDWRV GLJLWDOHV HPSOHDGRV HQ FLHQFLD JHRJUiILFDVHJ~QDSOLFDFLRQHV7pFQLFDVGHFRPSUHVLyQGHLPiJHQHV boc.cantabria.es 101/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ ,QIUDHVWUXFWXUDVGH,QIRUPDFLyQ*HRJUiILFDR,QIUDHVWUXFWXUDVGH'DWRV(VSDFLDOHV'HILQLFLyQ FRPSRQHQWHVVHUYLFLRV(OIXQFLRQDPLHQWRGHOD,'((6HUYLFLRV,'(HQ&DQWDEULD 7(0$ 1RUPDV GH HVWDQGDUL]DFLyQ VREUH OD LQIRUPDFLyQ JHRJUiILFD \ VHUYLFLRV GH LQIRUPDFLyQ JHRJUiILFD 0HWDGDWRV VREUH FRQMXQWRV GH GDWRV HVSDFLDOHV \ VHUYLFLRV GH LQIRUPDFLyQ JHRJUiILFD1RUPDV,62QRUPDVHXURSHDVHLQLFLDWLYDVQDFLRQDOHV 7(0$ (VWDGtVWLFD GHVFULSWLYD 3ULQFLSDOHV HVWDGÕVғ WLFRV GHVFULSWLYRV SDUD XQD YDULDEOH FXDQWLWDWLYD $SOLFDFLRQHVGHGLFKRVHVWDGÕVғ WLFRV\VXVFRQFHSWRVHQODFLHQFLDJHRJUDғILFD\HQFDUWRJUDIÕD ғ 7(0$ 7LSRV GH VHULHV GH GDWRV 'HVFULSFLRғQ GH ODV VHULHV PHGLGDV GH WHQGHQFLD FHQWUDO \ GH GLVSHUVLRғQ\RWURVGHVFULSWRUHV5HGXFFLRғQ\FRPSDUDFLRғQGHVHULHVÕQ ғ GLFHVHWF 7(0$ 7HRUtDGHORVHUURUHVDSOLFDGDDODFLHQFLDJHRJUDғILFD7LSRVGHHUURU)RUPDVGHHYDOXDFLRғQGHO PLVPR3RVWXODGRVGH*DXVV(VWXGLRGHOHUURUEDMRXQDGLVWULEXFLRғQQRUPDOGHSUREDELOLGDG 7(0$ 0pWRGRVGHLQWHUSRODFLRғQGHGDWRVHVSDFLDOHV3ULQFLSDOHVWLSRVGHSURFHGLPLHQWRV9DORUDFLRғQ \FRPSDUDFLRғQGHORVGLVWLQWRVDOJRULWPRV3ULQFLSDOHVDSOLFDFLRQHV 7(0$ 7pFQLFDV GH FRUUHODFLRғQ HQWUH YDULDEOHV JHRJUDғILFDV ,ғQGLFHV GH FRUUHODFLRғQ HQWUH YDULDEOHV FXDQWLWDWLYDV$XWRFRUUHODFLRғQHVSDFLDOGHXQDYDULDEOHJHRJUDғILFD 7(0$ /RV 6LVWHPDV GH ,QIRUPDFLRғQ *HRJUDғILFD \ OD FDUWRJUDIÕD ғ 'HILQLFLRғQ FRQFHSWR HYROXFLRғQ WHPSRUDO\WHQGHQFLDVIXWXUDV3ULQFLSDOHVHVWUXFWXUDVGHGDWRV 7(0$ /RV6LVWHPDVGH,QIRUPDFLRғQ*HRJUDғILFD3ULQFLSDOHVDSOLFDFLRQHVSURGXFFLRғQGHFDUWRJUDғILFD EDғVLFD\GHULYDGDXUEDQLVPR\WHUULWRULRUHGHVGHWUDQVSRUWH\HQHUJÕD ғ LQIRUPDFLRғQDPELHQWDO HWF 7(0$ 6LVWHPDV GH ,QIRUPDFLRғQ *HRJUDғILFD 7RSRORJtD \ RUJDQL]DFLyQ GH GDWRV EDMR HVWUXFWXUDV WRSROyJLFDV (O PRGHOR GH WRSRORJtD DUFRQRGR SULQFLSLRV WLSRV GH WROHUDQFLDV FRQWURO GH HUURUHV 7(0$ 7pFQLFDV GH JHRUUHIHUHQFLDFLRғQ GH OD LQIRUPDFLRғQ JHRJUDғILFD 7LSRV GH WUDQVIRUPDFLRQHV JHRPHғWULFDV\VXVIXQGDPHQWRV)XHQWHVGHHUURU,QGLFDGRUHVHVWDGÕVғ WLFRV\FRQWUROGHFDOLGDG 7(0$ 6LVWHPDV GH,QIRUPDFLRғQ*HRJUDғILFD 3ULQFLSDOHV IXQFLRQHV GH DQDғOLVLV HVSDFLDO \ WHPDғWLFR GH XQ6,* CVE-2019-3750 7(0$ ,QIRUPDFLRғQJHRJUDғILFDGHO*RELHUQRGH&DQWDEULD9XHORVRUWRIRWRJUDIÕD ғ \VHULHVFDUWRJUDғILFDV GLVSRQLEOHV$SOLFDFLRQHV\OLPLWDFLRQHV)RQGRVGHIRWRJUDIÕD ғ DHғUHD\FDUWRJUDIÕD ғ i Pág. 12609 boc.cantabria.es 102/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(1+,6725,$ 0$7(5,$6(63(&Ë),&$6 %/248(,±*(1(5$/ 7(0$ &RQFHSWRGHFXOWXUDHYROXFLyQ&RQFHSWRGH3DWULPRQLRKLVWyULFR\FXOWXUDOHYROXFLyQ 7(0$ /D FXOWXUD \ HO SDWULPRQLR HQ OD &RQVWLWXFLyQ GH &RPSHWHQFLDV HVWDWDOHV DXWRQyPLFDV \ ORFDOHVHQPDWHULDGHFXOWXUD 7(0$ 2UJDQLVPRVFHQWURV\DVRFLDFLRQHVQDFLRQDOHVHLQWHUQDFLRQDOHVTXHLQWHUYLHQHQHQODJHVWLyQGH ODFXOWXUD\SDWULPRQLR 7(0$ /HJLVODFLyQHVSDxRODVREUHSDWULPRQLRKLVWyULFR(YROXFLyQ\VLWXDFLyQDFWXDO 7(0$ 1RUPDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDHQPDWHULDGHFXOWXUD 7(0$ /H\GHSDWULPRQLR&XOWXUDOGH&DQWDEULD 7(0$ )RUPXODVGHSDUWLFLSDFLyQHQODJHVWLyQGHOSDWULPRQLRODVFRPLVLRQHV 7(0$ %LHQHVTXHLQWHJUDQHOSDWULPRQLRFXOWXUDOGH&DQWDEULD&ODVLILFDFLyQFDWHJRUtDVGHSURWHFFLyQ\ PRGDOLGDGHVGHGHFODUDFLyQ 7(0$ /RVELHQHVLQPXHEOHVFDWHJRUtDVGHSURWHFFLyQ\UpJLPHQMXUtGLFR 7(0$ 3DWULPRQLRPXHEOHFDWHJRUtDVGHSURWHFFLyQ\UpJLPHQMXUtGLFR 7(0$ %LHQHVGHLQWHUpVFXOWXUDOELHQHVGHLQWHUpVORFDO\ELHQHVLQYHQWDULDGRV 7(0$ &RQVHUYDFLyQ \ UHVWDXUDFLyQ GHO SDWULPRQLR ,QFLGHQFLD GH ODV QXHYDV WHFQRORJtDV HQ OD FRQVHUYDFLyQ\UHVWDXUDFLyQ 7(0$ &ULWHULRV\UHFRPHQGDFLRQHVLQWHUQDFLRQDOHVSDUDODFRQVHUYDFLyQGHOSDWULPRQLR 7(0$ 0HGLGDVGHIRPHQWRGHODFXOWXUD\FRQVHUYDFLyQGHOSDWULPRQLR 7(0$ 0HGLR $PELHQWH XUEDQLVPR HGXFDFLyQ \ WXULVPR VX SDUWLFLSDFLyQ HQ OD JHVWLyQ \ GLIXVLyQ GHO SDWULPRQLR 7(0$ 'DxRVDOSDWULPRQLRLQIUDFFLRQHVDGPLQLVWUDWLYDV\VDQFLRQHV'HOLWRVFRQWUDHOSDWULPRQLR %/248(,,±086(26$5&+,926<%,%/,27(&$6 7(0$ 0XVHRV&RQFHSWR\UpJLPHQMXUtGLFR 7(0$ &DSWDFLyQGHUHFXUVRVH[WHULRUHVSDUDORVPXVHRV 7(0$ 0XVHRVIXQFLRQHVHYROXFLyQKLVWyULFD&ROHFFLRQHVPXVHRJUiILFDV i Pág. 12610 boc.cantabria.es CVE-2019-3750 7(0$ /H\GH0XVHRVGH&DQWDEULD\QRUPDVGHGHVDUUROOR 103/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ &UHDFLyQ\DXWRUL]DFLyQGHPXVHRV\FROHFFLRQHVHQ&DQWDEULD 7(0$ 0RGHORV GH JHVWLyQ GH PXVHRV )LQDQFLDFLyQ \ JHVWLyQ HQ FDGD XQR GH HOORV 6LWXDFLyQ HQ &DQWDEULD 7(0$ 6LVWHPDGHPXVHRV5HGGHPXVHRV'LUHFWRULRGHPXVHRV 7(0$ 0XVHRORJtD\PXVHRJUDItDGHILQLFLyQ\HYROXFLyQ 7(0$ *HVWLyQGHPXVHRV\FROHFFLRQHV3ODQHVPXVHROyJLFRV\SUR\HFWRVPXVHRJUiILFRV 7(0$ (OSDWULPRQLRHQHOPXVHRDFUHFHQWDPLHQWRGHFROHFFLRQHVFRQVHUYDFLyQ\UHVWDXUDFLyQ 7(0$ 0XVHRV\VRFLHGDG([SRVLFLRQHVWHPSRUDOHV 7(0$ $UFKLYRV&RQFHSWR\5pJLPHQ-XUtGLFR 7(0$ /H\GH$UFKLYRVGH&DQWDEULD\QRUPDVGHGHVDUUROOR 7(0$ ,QVWUXPHQWRVGHGHVFULSFLyQDUFKLYtVWLFD 7(0$ &RQVHUYDFLyQSUHYHQWLYD\UHVWDXUDFLyQGHIRQGRVDUFKLYtVWLFRV 7(0$ %LEOLRWHFDV&RQFHSWR\5pJLPHQ-XUtGLFR 7(0$ /H\GH%LEOLRWHFDVGH&DQWDEULD\QRUPDVGHGHVDUUROOR 7(0$ 3URJUDPDVGHIRPHQWRGHODOHFWXUD 7(0$ %LEOLRWHFDVHVSHFLDOL]DGDV %/248(,,,35(+,6725,$<$548(2/2*Ë$ 7(0$ /DDUTXHRORJtD&LHQFLDLQWHUGLVFLSOLQDU 7(0$ /DDUTXHR]RRORJtD/DHWQRDUTXHRORJtD$UTXHRORJtDS~EOLFD\DUTXHRORJtDGHJHVWLyQ 7(0$ 3URWHFFLyQGHOSDWULPRQLRDUTXHROyJLFRFDWHJRUtDV\UpJLPHQMXUtGLFR 7(0$ 7HQGHQFLDVWHyULFR±PHWRGROyJLFDVHQODLQYHVWLJDFLyQDUTXHROyJLFD 7(0$ 0pWRGRV \ WpFQLFDV GH WUDEDMR GH FDPSR SURVSHFFLyQ H[FDYDFLyQ DUTXHROyJLFD \ DUTXHROyJLFD VXEDFXiWLFD 7(0$ 0pWRGRV\WpFQLFDVGHGDWDFLyQHQ$UTXHRORJtD(ODQiOLVLVHVSDFLDO 7(0$ (VWXGLRVGHPDWHULDOHVDUTXHROyJLFRVFODVLILFDFLyQDQiOLVLVIXQFLRQDOHV 7(0$ (VWXGLRGHPDWHULDOHVDUTXHROyJLFRV/DVLQGXVWULDVOtWLFDV/DVLQGXVWULDVyVHDV 7(0$ (VWXGLRGHPDWHULDOHVDUTXHROyJLFRV/DFHUiPLFD/DLQGXVWULDPHWiOLFD 7(0$ 7pFQLFDVGHHVWXGLRGHO$UWHUXSHVWUH 7(0$ /DSUHKLVWRULD 7(0$ 3DOHRQWRORJtD\DQWURSRORJtDItVLFD 7(0$ +LVWRULDGHODLQYHVWLJDFLyQVREUHSUHKLVWRULD\DUTXHRORJtDHQ&DQWDEULD 7(0$ (OSDOHROtWLFRLQIHULRU(OSDOHROtWLFRPHGLR(OSDOHROtWLFRVXSHULRU 7(0$ $UWHPRELOLDUSDOHROtWLFRHQ&DQWDEULD CVE-2019-3750 7(0$ $UWHUXSHVWUHSDOHROtWLFRHQ&DQWDEULD i Pág. 12611 boc.cantabria.es 104/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ /DVFXHYDV3DWULPRQLRGHOD+XPDQLGDGHQ&DQWDEULD 7(0$ $OWDPLUD 7(0$ (SLSDOHROtWLFR\0HVROtWLFR(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ 1HROtWLFR(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ &DOFROtWLFR\(GDGGH%URQFH(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ (GDGGH+LHUUR(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ /DV*XHUUDV&iQWDEUDV 7(0$ /D&DQWDEULDURPDQD 7(0$ &DQWDEULDGHOD(GDGGH+LHUURKDVWDODDFWXDOLGDG %/248(,9$57(<$548,7(&785$ 7(0$ /RVLQLFLRVGHOFULVWLDQLVPRHQ&DQWDEULD/DVQHFUySROLVPHGLHYDOHV 7(0$ $UTXLWHFWXUDUHOLJLRVDFLYLO\PLOLWDUHQOD(GDG0HGLD(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ ,QLFLRVGHOPRQDFDWR 7(0$ (O%HDWRGH/LpEDQD(O$xR-XELODU/HEDQLHJR 7(0$ /DDUTXLWHFWXUDUHOLJLRVDURPiQLFD(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ (O&DPLQRGH6DQWLDJR(OFDPLQRGHO1RUWH 7(0$ (O*yWLFRHQODVYLOODVGHODFRVWDFiQWDEUD 7(0$ /D+HUPDQGDGGHODVFXDWURYLOODVGHODFRVWDGHODPDU 7(0$ &DPLQRVGHOD(GDG0HGLD0RGHUQD\&RQWHPSRUiQHD(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ )RUWLILFDFLRQHVPLOLWDUHVHQOD(GDG0RGHUQD\&RQWHPSRUiQHD 7(0$ $VWLOOHURVGH&DQWDEULDHYROXFLyQ 7(0$ /DDUTXLWHFWXUDQDYDOFRQFHSWR\HYROXFLyQ 7(0$ /DDUTXHRORJtDLQGXVWULDOHQ&DQWDEULD(VSHFLDOUHIHUHQFLDORVPROLQRV\ODVIHUUHUtDV 7(0$ $QWURSRORJtDFXOWXUDO\HWQRJUDItDHQ&DQWDEULD 7(0$ $UTXLWHFWXUDWUDGLFLRQDOUXUDOHQ&DQWDEULD 7(0$ (O0RGHUQLVPRHQ&DQWDEULD 7(0$ /DHPLJUDFLyQGHFiQWDEURVLQGLDQRV\MiQGDORV 7(0$ /DSLQWXUD\DUWHVSOiVWLFDVHQ&DQWDEULD 7(0$ /DP~VLFDWUDGLFLRQDOHQ&DQWDEULD 7(0$ /DOLWHUDWXUDHQ&DQWDEULD\VXVDXWRUHV CVE-2019-3750 7(0$ 3DWULPRQLRLQPDWHULDOHQ&DQWDEULD i Pág. 12612 boc.cantabria.es 105/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(10(',&,1$ 0$7(5,$6(63(&Ë),&$6 %/248(, 1250$7,9$ 7(0$ /H\ GH GH DEULO *HQHUDO GH 6DQLGDG (O GHUHFKR D OD SURWHFFLyQ GH OD VDOXG (O VLVWHPDGHVDOXG(VWUXFWXUDGHOVLVWHPDVDQLWDULRS~EOLFR 7(0$ /H\GHGHPD\RGHFRKHVLyQ\FDOLGDGGHO6LVWHPD1DFLRQDOGH6DOXG 0RGHORV MXUtGLFRV GH RUJDQL]DFLyQ \ JHVWLyQ VDQLWDULD *HVWLyQ GLUHFWD *HVWLyQ LQGLUHFWD /RV FRQFLHUWRVVDQLWDULRV1XHYDVIRUPDVGHJHVWLyQGHO6LVWHPD1DFLRQDOGH6DOXG 7(0$ /H\ GH GH QRYLHPEUH GH 2UGHQDFLyQ GH ODV 3URIHVLRQHV 6DQLWDULDV , REMHWR \ iPELWRGHDSOLFDFLyQ(MHUFLFLRGHODVSURIHVLRQHVVDQLWDULDV 7(0$ /H\GHGHQRYLHPEUHGH2UGHQDFLyQGHODV3URIHVLRQHV6DQLWDULDV ,, IRUPDFLyQGH ODVSURIHVLRQHVVDQLWDULDV(OGHVDUUROORSURIHVLRQDO\VXUHFRQRFLPLHQWR(OHMHUFLFLRSULYDGRGH ODVSURIHVLRQHVVDQLWDULDV/DSDUWLFLSDFLyQGHORVSURIHVLRQDOHV 7(0$ 5HDO 'HFUHWR GH GH VHSWLHPEUH SRU HO TXH VH HVWDEOHFH OD FDUWHUD GH VHUYLFLRV FRPXQHV GHO 6LVWHPD 1DFLRQDO GH 6DOXG \ HO SURFHGLPLHQWR SDUD VX DFWXDOL]DFLyQ &DUWHUD GH VHUYLFLRVFRPSOHPHQWDULDGHODV&RPXQLGDGHV$XWyQRPDV 7(0$ 5HDO'HFUHWRGHGHIHEUHURSRUHOTXHVHGHWHUPLQD\FODVLILFDODVHVSHFLDOLGDGHVHQ &LHQFLDVGHOD6DOXG\VHGHVDUUROODQGHWHUPLQDGRVDVSHFWRVGHOVLVWHPDGHIRUPDFLyQVDQLWDULD HVSHFLDOL]DGD 7(0$ 'HFUHWR GH GH PD\R SRU HO TXH VH FUHD \ UHJXOD OD &RPLVLyQ GH )RUPDFLyQ &RQWLQXDGDGHODV3URIHVLRQHV6DQLWDULDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ &RPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD HQ PDWHULD VDQLWDULD (O WUDVSDVR GH IXQFLRQHV \ VHUYLFLRV (VSHFLDO UHIHUHQFLD DO 5HDO 'HFUHWR GH GH MXOLR \ DO 5HDO 'HFUHWRGHGHGLFLHPEUH 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GH 2UGHQDFLyQ 6DQLWDULD , 3ULQFLSLRV 6LVWHPD 6DQLWDULR3~EOLFR&DUDFWHUtVWLFDV\RUJDQL]DFLyQIXQFLRQDO\WHUULWRULDO 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH2UGHQDFLyQ6DQLWDULD ,, 'HUHFKRV\GHEHUHV GHORVFLXGDGDQRVHQUHODFLyQFRQODVDOXG\ODDVLVWHQFLDVDQLWDULD/DSDUWLFLSDFLyQ*DUDQWtDV 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH2UGHQDFLyQ6DQLWDULD ,,, &RPSHWHQFLDVGHODV $GPLQLVWUDFLRQHV 3~EOLFDV HQ HO 6LVWHPD 6DQLWDULR 3~EOLFR GH &DQWDEULD (O 3ODQ GH 6DOXG GH &DQWDEULD$FWXDFLRQHVUHODFLRQDGDVFRQODVDOXGS~EOLFD\ODVDOXGODERUDO 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GH 2UGHQDFLyQ 6DQLWDULD ,9 $FWXDFLRQHV UHODFLRQDGDV FRQ OD DVLVWHQFLD VDQLWDULD \ ORV PHGLFDPHQWRV $FWXDFLRQHV UHODFLRQDGDV FRQ OD KLVWRULDFOtQLFD 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GH 2UGHQDFLyQ 6DQLWDULD 9 ,QIUDFFLRQHV \ 6DQFLRQHV /D FRODERUDFLyQ FRQ OD UHG VDQLWDULD GH WLWXODULGDG SULYDGD /D GRFHQFLD \ OD LQYHVWLJDFLyQVDQLWDULDHQHO6LVWHPD$XWRQyPLFRGH6DOXGOD)XQGDFLyQ0DUTXpVGH9DOGHFLOOD QDWXUDOH]DILQHV\RUJDQL]DFLyQ CVE-2019-3750 7(0$ i Pág. 12613 boc.cantabria.es 106/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ $XWRUL]DFLyQ GH &HQWURV 6HUYLFLRV \ (VWDEOHFLPLHQWRV 6DQLWDULRV QRUPDWLYD DSOLFDEOH 'HFUHWR GH&DQWDEULDGHGHPD\RSRUHOTXHVHUHJXODHOSURFHGLPLHQWRGHDXWRUL]DFLyQGH FHQWURVVHUYLFLRV\HVWDEOHFLPLHQWRVVDQLWDULRVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /H\GHGHQRYLHPEUHEiVLFDUHJXODGRUDGHODDXWRQRPtDGHOSDFLHQWH\GHGHUHFKRV \REOLJDFLRQHVHQPDWHULDGHLQIRUPDFLyQ\GRFXPHQWDFLyQFOtQLFD 7(0$ 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH FUHD \ UHJXOD HO 5HJLVWUR GH YROXQWDGHV SUHYLDVGH&DQWDEULD 7(0$ /H\GH&DQWDEULDGHGHMXQLRGHJDUDQWtDVGHWLHPSRVPi[LPRVGHUHVSXHVWDHQOD DWHQFLyQVDQLWDULDHVSHFLDOL]DGDHQHOVLVWHPDS~EOLFRGH&DQWDEULD 7(0$ 'HFUHWR GH &DQWDEULD GH GH HQHUR SRU HO TXH VH UHJXOD HO GHUHFKR D OD VHJXQGD RSLQLyQPpGLFDHQHOiPELWRGHOVLVWHPDVDQLWDULRS~EOLFRGH&DQWDEULD 7(0$ /H\GHGHRFWXEUH*HQHUDOGH6DOXG3~EOLFD 7(0$ /H\GHGHGLFLHPEUHGHPHGLGDVVDQLWDULDVIUHQWHDOWDEDTXLVPR\UHJXODGRUDGHOD YHQWDHOVXPLQLVWURHOFRQVXPR\ODSXEOLFLGDGGHORVSURGXFWRVGHOWDEDFR\/H\GH GHGLFLHPEUHSRUODTXHVHPRGLILFDODDQWHULRU 7(0$ /H\ GH &DQWDEULD GH GH RFWXEUH GH SUHYHQFLyQ DVLVWHQFLD H LQFRUSRUDFLyQ VRFLDO HQ PDWHULDGHGURJRGHSHQGHQFLDV(VWUXFWXUD\FRQWHQLGR 7(0$ 3ROLFtD6DQLWDULD0RUWXRULDQRUPDWLYDDSOLFDEOH 7(0$ 'HFUHWRGHGHPDU]RSRUHOTXHVHUHJXODODDFWLYLGDGGHORVFHQWURVGHEURQFHDGR PHGLDQWHODXWLOL]DFLyQGHUDGLDFLRQHVXOWUDYLROHWDV'HFUHWRGHGHMXQLRSRUHOTXH VH UHJXODQ ODV FRQGLFLRQHV KLJLpQLFRVDQLWDULDV GH ORV HVWDEOHFLPLHQWRV GRQGH VH UHDOL]DQ SUiFWLFDV GH WDWXDMH PLFURSLJPHQWDFLyQ SHUIRUDFLyQ FXWiQHD \ RWUDV WpFQLFDV VLPLODUHV GH DUWH FRUSRUDO 7(0$ 5HJODPHQWDFLyQ VDQLWDULD UHODWLYD D SLVFLQDV 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHEDHO5HJODPHQWR6DQLWDULRGH3LVFLQDVGH8VR&ROHFWLYRGHOD&RPXQLGDG$XWyQRPDGH &DQWDEULD\VXPRGLILFDFLyQPHGLDQWH'HFUHWRGHGHMXOLR5HDO'HFUHWRGH GHVHSWLHPEUHSRUHOTXHVHHVWDEOHFHQORVFULWHULRVWpFQLFRVDQLWDULRVGHODVSLVFLQDV 7(0$ 2UGHQ 66, GH GH PDU]R SRU OD TXH VH PRGLILFDQ ORV DQH[RV , ,, \ ,,, GHO 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH FUHD OD UHG QDFLRQDO GH YLJLODQFLD HSLGHPLROyJLFDUHODWLYRVDODOLVWDGHHQIHUPHGDGHVGHGHFODUDFLyQREOLJDWRULDPRGDOLGDGHVGH GHFODUDFLyQ\HQIHUPHGDGHVHQGpPLFDVGHiPELWRUHJLRQDO 7(0$ 5HJODPHQWDFLyQ WpFQLFRVDQLWDULD SDUD HO DEDVWHFLPLHQWR \ FRQWURO GH FDOLGDG GH ODV DJXDV SRWDEOHVGHFRQVXPRS~EOLFR 7(0$ /H\ GH GH GLFLHPEUH GH 3URPRFLyQ GH OD $XWRQRPtD 3HUVRQDO \ $WHQFLyQ D ODV SHUVRQDVHQVLWXDFLyQGHGHSHQGHQFLD 7(0$ /H\GH&DQWDEULDGHGHPDU]RGH'HUHFKRV\6HUYLFLRV6RFLDOHV 7(0$ /D YLROHQFLD GH JpQHUR GHILQLFLyQ FDUDFWHUtVWLFDV \ DVSHFWRV SVLFROyJLFRV GH ODV YtFWLPDV /H\ 2UJiQLFDGHGHGLFLHPEUHGH0HGLGDVGH3URWHFFLyQ,QWHJUDOFRQWUDOD9LROHQFLDGH *pQHUR 7(0$ /H\ GH &DQWDEULD GH GH DEULO ,QWHJUDO SDUD OD 3UHYHQFLyQ GH OD 9LROHQFLD FRQWUD ODV 0XMHUHV\OD3URWHFFLyQDVXV9tFWLPDV 7(0$ /H\2UJiQLFDGHGHPDU]RSDUDODLJXDOGDGHIHFWLYDGHPXMHUHV\KRPEUHV CVE-2019-3750 i Pág. 12614 (O 6HUYLFLR &iQWDEUR GH 6DOXG 1RUPDWLYD DSOLFDEOH )XQFLRQHV 2UJDQL]DFLyQ 5HFXUVRV KXPDQRV &RQWUDWDFLyQ UpJLPHQ HFRQyPLFRILQDQFLHUR \ FRQWURO 5HVSRQVDELOLGDG SDWULPRQLDO LPSXJQDFLRQHVUHYLVLyQGHRILFLR\UHSUHVHQWDFLyQ\GHIHQVDHQMXLFLR boc.cantabria.es 107/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ %/248(,, (3,'(0,2/2*Ë$<6$/8'3Ò%/,&$ i Pág. 12615 7(0$ /D6DOXG3~EOLFD&RQFHSWR(YROXFLyQKLVWyULFD3ULQFLSLRVGHODVDFWXDFLRQHVGHVDOXGS~EOLFD 3ODQLILFDFLyQFRRUGLQDFLyQLQYHVWLJDFLyQ 7(0$ (MHUFLFLRGHODDXWRULGDGVDQLWDULD0HGLGDVHVSHFLDOHV\FDXWHODUHV 7(0$ (SLGHPLRORJtDREMHWLYRV\ILQHV(SLGHPLRORJtDGHVFULSWLYDHVWXGLRVWDVDVHLQGLFDGRUHV 7(0$ (SLGHPLRORJtD DQDOtWLFD 0HWRGRORJtD (VWXGLR GH FRKRUWHV ULHVJR UHODWLYR ULHVJR DWULEXLEOH (VWXGLRVGHFDVRV\FRQWUROHVRGGVUDWLR 7(0$ 9LJLODQFLDHLQYHVWLJDFLyQHSLGHPLROyJLFD$FWXDFLyQIUHQWHDEURWHVHSLGpPLFRV&RRUGLQDFLyQGH DOHUWDVVDQLWDULDVUHJLRQDOHVQDFLRQDOHVHLQWHUQDFLRQDOHV 7(0$ (SLGHPLRORJtD GH ODV HQIHUPHGDGHV WUDQVPLVLEOHV 0HGLGDV GH SUHYHQFLyQ \ FRQWURO GH ORV PHFDQLVPRV GH WUDQVPLVLyQ (QIHUPHGDGHV GH GHFODUDFLyQ REOLJDWRULD QRUPDWLYD DSOLFDEOH OLVWDGR\UpJLPHQGHQRWLILFDFLyQ 7(0$ (QIHUPHGDGHVLQYDVLYDVTXHJHQHUDQVHSVLV(SLGHPLRORJtDSUHYHQFLyQ\FRQWURO 7(0$ (QIHUPHGDGHVGHWUDQVPLVLyQVH[XDO(SLGHPLRORJtDSUHYHQFLyQ\FRQWURO 7(0$ ,QIHFFLyQSRU9,+\6,'$(SLGHPLRORJtDSUHYHQFLyQ\FRQWURO3ODQ5HJLRQDOVREUHHO6,'$ 7(0$ 7XEHUFXORVLV(SLGHPLRORJtDSUHYHQFLyQ\FRQWURO 7(0$ +HSDWLWLVYtULFDV(SLGHPLRORJtDSUHYHQFLyQ\FRQWURO 7(0$ ,QIHFFLRQHVHLQWR[LFDFLRQHVWUDQVPLWLGDVSRUDOLPHQWRV(SLGHPLRORJtDSUHYHQFLyQ\FRQWURO 7(0$ /HJLRQHORVLV9LJLODQFLDSUHYHQFLyQ\FRQWURO 7(0$ (QIHUPHGDGHV SUHYHQLEOHV PHGLDQWH YDFXQDFLyQ &DOHQGDULR RILFLDO GH YDFXQDFLyQ HQ OD &RPXQLGDGGH&DQWDEULD 7(0$ (QIHUPHGDGHVQRWUDQVPLVLEOHV,PSDFWRHQODVDOXGS~EOLFDVXHSLGHPLRORJtD\HVWUDWHJLDVGH SUHYHQFLyQ 7(0$ (SLGHPLRORJtD\SUHYHQFLyQGHODJULSH 7(0$ (SLGHPLRORJtD\SUHYHQFLyQGHOD]RRQRVLVEUXFHORVLVKLGDWLGRVLV\WULTXLQRVLV 7(0$ (SLGHPLRORJtD\SUHYHQFLyQGHODVOHVLRQHVDFFLGHQWDOHVDJUHVLRQHV\DXWROHVLRQHV 7(0$ 3URPRFLyQ \ HGXFDFLyQ SDUD OD 6DOXG 3ULQFLSLRV PpWRGRV \ DSOLFDFLRQHV HQ HO iPELWR GH OD VDOXGS~EOLFD,PSRUWDQFLDGHODDOLPHQWDFLyQ\HOHMHUFLFLRSDUDODVDOXG(VWUDWHJLD1$26 7(0$ 'HWHUPLQDQWHVGHODVDOXG&RQFHSWRVGHHTXLGDG\GHVLJXDOGDGHVHQVDOXG 7(0$ (YDOXDFLyQ GH PHGLGDV SODQHV \ SURJUDPDV (YDOXDFLyQ GHO LPSDFWR HQ VDOXG 3ULRUL]DFLyQ SHUWLQHQFLDHILFDFLDHILFLHQFLD\HIHFWLYLGDG 7(0$ /DFRPXQLFDFLyQPpGLFRSDFLHQWH7pFQLFDVGHHQWUHYLVWDFOtQLFD(OFRQVHQWLPLHQWRLQIRUPDGR 7(0$ 6LVWHPDVGHLQIRUPDFLyQ+LVWRULDFOtQLFDHOHFWUyQLFD\VLVWHPDVGHUHJLVWUR&RQILGHQFLDOLGDG 7(0$ 6DOXG ODERUDO /D VDOXG S~EOLFD \ OD VDOXG GH ORV WUDEDMDGRUHV 3DWRORJtD ODERUDO 6HUYLFLRV GH 3UHYHQFLyQGHULHVJRVODERUDOHV&RPSHWHQFLDVGHODDGPLQLVWUDFLyQVDQLWDULD 7(0$ (ODJXDGHFRQVXPRKXPDQR\GHRFLR(ODJXDFRPRYHKtFXORGHLQIHFFLyQ(QIHUPHGDGHVPiV IUHFXHQWHV WUDQVPLWLGDV SRU HO DJXD 9LJLODQFLD \ FRQWURO GH OD FDOLGDG GHO DJXD GH FRQVXPR KXPDQR$JXDGH]RQDVGHEDxRSLVFLQDVFDPSLQJVFDPSDPHQWRV\RWUDVDFWLYLGDGHVGHRFLR \WLHPSROLEUH boc.cantabria.es CVE-2019-3750 108/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3HUVSHFWLYDGHVDOXGS~EOLFDGHORVFRQWDPLQDQWHV\UHVLGXRVLQGXVWULDOHVXUEDQRV\VDQLWDULRV (YDOXDFLyQYLJLODQFLD\FRQWURO$JXDVUHVLGXDOHV,PSDFWRHQODVDOXGS~EOLFD*HVWLyQYLJLODQFLD \FRQWURO 7(0$ $VSHFWRV UHODWLYRV D OD VDOXG S~EOLFD HQ UHODFLyQ FRQ ORV DJHQWHV ItVLFRV &DUDFWHUtVWLFDV LPSDFWR YLJLODQFLD \ FRQWURO (O UXLGR \ VX LPSDFWR VREUH OD VDOXG S~EOLFD *HVWLyQ YLJLODQFLD \ FRQWURO 7(0$ (QIHUPHGDGHVWUDQVPLWLGDVSRUYHFWRUHV,PSDFWRYLJLODQFLD\PHGLGDVGHFRQWURO %/248(,,, *(67,Ï13/$1,),&$&,Ï1<352*5$0$6 i Pág. 12616 7(0$ 'HPRJUDItDVDQLWDULD\VXXWLOLGDG$QiOLVLVGHGDWRV 7(0$ ,QGLFDGRUHV GH VDOXG &ODVLILFDFLyQ \ XWLOLGDG /D PRUWDOLGDG 7DVDV EUXWDV \ HVSHFtILFDV WDVDV HVWDQGDUL]DGDV/DPRUELOLGDG 7(0$ 0HWRGRORJtD GH OD LQYHVWLJDFLyQ 7DPDxR \ YDOLGH] GH OD PXHVWUD (VWXGLRV H[SHULPHQWDOHV (QVD\RV FOtQLFRV 9DOLGH] GH PpWRGRV GLDJQyVWLFRV VHQVLELOLGDG HVSHFLILFLGDG YDORU SUHGLFWLYR SRVLWLYR 7(0$ (VWDGtVWLFD VDQLWDULD 3ULQFLSLRV PpWRGRV \ DSOLFDFLRQHV 3DUiPHWURV HVWDGtVWLFRV GH LQWHUpV HQ VDOXGS~EOLFD 7(0$ (FRQRPtD GH OD VDOXG &RQFHSWRV EiVLFRV GH ILQDQFLDFLyQ JHVWLyQ \ SURYLVLyQ GH VHUYLFLRV VDQLWDULRV 7(0$ $FUHGLWDFLyQGHODIRUPDFLyQVDQLWDULDGLSORPDVGHDFUHGLWDFLyQ\DFUHGLWDFLyQDYDQ]DGD 7(0$ 3ODQLILFDFLyQ6DQLWDULD , FRQFHSWR\EDVHVPHWRGROyJLFDV,GHQWLILFDFLyQGHSUREOHPDVGHVDOXG (VWLPDFLyQGHUHFXUVRV\QHFHVLGDGHV 7(0$ 3ODQLILFDFLyQ6DQLWDULD ,, &ULWHULRVGHSULRUL]DFLyQGHSURJUDPDV\DFWLYLGDGHV 7(0$ 3URWRFRORGHLQJUHVRVDQLWDULRLQYROXQWDULR 7(0$ 3ODQGH3UHYHQFLyQ\&RQWUROGHO7DEDTXLVPRHQ&DQWDEULD 7(0$ $ERUGDMHGHODEXVR\DGLFFLyQDODOFRKRO 7(0$ (VWUDWHJLD VREUH 'URJDV GH &DQWDEULD 5HFXUVRV HQ 'URJRGHSHQGHQFLDV HQ &DQWDEULD 7(0$ 3URJUDPDGHIiUPDFRYLJLODQFLDGH&DQWDEULD 7(0$ 3URJUDPDGH6DOXGGHOD,QIDQFLD\DGROHVFHQFLD 36,$& 7(0$ 3ODQGH$WHQFLyQ7HPSUDQDGH&DQWDEULD 7(0$ 3URJUDPDGHGHWHFFLyQSUHQDWDOGHDQRPDOtDVFURPRVRPiWLFDV 7(0$ 3URJUDPDVGHFULEDGRQHRQDWDOGHKLSRDFXVLD\GHHQIHUPHGDGHVHQGRFULQRPHWDEyOLFDV 7(0$ 3URJUDPDV GH 6DOXG GH OD 0XMHU , 6DOXG 6H[XDO \ UHSURGXFWLYD 3URJUDPD GH $WHQFLyQ D OD 0XMHU3URWRFRORGHDWHQFLyQDOHPEDUD]R\HOSXHUSHULR(OIRPHQWRGHODODFWDQFLDPDWHUQDHQ &DQWDEULD 7(0$ 3URJUDPDVGH6DOXGGHOD0XMHU ,, &ULEDGRGHFiQFHUGHPDPD\GHFpUYL[ 7(0$ 3URWRFRORGHDFWXDFLyQVDQLWDULDDQWHORVPDORVWUDWRVHQ&DQWDEULD 7(0$ 3URJUDPDGHGHWHFFLyQSUHFR]GHFiQFHUFRORUUHFWDOHQ&DQWDEULD 7(0$ 3URJUDPDLQWHJUDOGHDWHQFLyQSDOLDWLYDGH&DQWDEULD boc.cantabria.es CVE-2019-3750 109/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3ODQGH6DOXGGH&DQWDEULDGH 7(0$ 3ODQGH$WHQFLyQDOD&URQLFLGDGGH&DQWDEULD 7(0$ 3ODQGH6DOXG0HQWDO 7(0$ 3URPRFLyQGHVDOXG\SUHYHQFLyQGHHQIHUPHGDG&RQFHSWRV)DFWRUHVGHULHVJR(VWUDWHJLDVH LQWHUYHQFLyQVREUHORVIDFWRUHVGHULHVJR 7(0$ *HVWLyQ 6DQLWDULD /D DVLJQDFLyQ GH UHFXUVRV HQ HO 6LVWHPD 1DFLRQDO GH 6DOXG 3URYHHGRUHV \ 3UHVWDGRUHV 7(0$ *HVWLyQ6DQLWDULD/RV*5' 7(0$ &DOLGDG HQ HO 6LVWHPD 1DFLRQDO GH 6DOXG , FDUDFWHUtVWLFDV GH OD DWHQFLyQ VDQLWDULD 'LPHQVLRQHVGHFDOLGDGFLHQWtILFRWpFQLFDHIHFWLYLGDGHILFLHQFLDDFFHVLELOLGDG\VDWLVIDFFLyQGHO XVXDULR 7(0$ &DOLGDG HQ HO 6LVWHPD 1DFLRQDO GH 6DOXG ,, (YDOXDFLyQ GH HVWUXFWXUD SURFHVR \ UHVXOWDGRV 0HMRUD FRQWLQXD GH OD FDOLGDG 0pWRGRV GH HYDOXDFLyQ GH OD FDOLGDG DXGLWRUtDV 7HQGHQFLDV DFWXDOHVGHHYDOXDFLyQGHFDOLGDG 7(0$ &DOLGDGHQHO6LVWHPD1DFLRQDOGH6DOXG ,,, 3URJUDPDVGHFDOLGDGGLVHxRHLPSODQWDFLyQ 7(0$ /DVDWLVIDFFLyQGHOXVXDULR&OLHQWHVLQWHUQRV\H[WHUQRV0HGLFLyQ\WLSRVGHIXHQWHV 7(0$ (YDOXDFLyQGHODVWHFQRORJtDVVDQLWDULDV6LWXDFLyQHQ(VSDxD 7(0$ 0HGLFLQDEDVDGDHQODHYLGHQFLD&RQFHSWR\PpWRGRV CVE-2019-3750 i Pág. 12617 boc.cantabria.es 110/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 0(',&,1$'(/75$%$-2 0$7(5,$6(63(&Ë),&$6 %/248(, 8QLyQ(XURSHD/DVDFWXDFLRQHVHQPDWHULDGH6HJXULGDG\6DOXGHQHO7UDEDMRHQHOiPELWRGH ODVLQVWLWXFLRQHVFRPXQLWDULDV/DVLQVWLWXFLRQHVFRPXQLWDULDVUHODFLRQDGDVFRQHVWDPDWHULD/DV GLUHFWLYDVVREUHGLVSRVLFLRQHVPtQLPDVGHVHJXULGDG\VDOXGHQHOWUDEDMR 7(0$ (O PDUFR MXUtGLFR GH OD 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV HQ (VSDxD DQWHFHGHQWHV /D &RQVWLWXFLyQGH(O(VWDWXWRGHORV7UDEDMDGRUHV/D/H\*HQHUDOGHOD6HJXULGDGVRFLDO/D /H\VREUHLQIUDFFLRQHV\6DQFLRQHVHQHO2UGHQ6RFLDO 7(0$ $FWXDFLRQHVGHODV$GPLQLVWUDFLRQHV3~EOLFDVFRPSHWHQWHVHQPDWHULDGH6HJXULGDG\6DOXGHQ HO7UDEDMRHQ(VSDxD)XQFLRQHV\DFWXDFLRQHVGHOD,QVSHFFLyQGH7UDEDMR\6HJXULGDG6RFLDO (O,QVWLWXWR1DFLRQDOGH6HJXULGDG\6DOXGHQHO7UDEDMR/D5HG(VSDxRODGH6HJXULGDG\6DOXG HQHO7UDEDMR/D&RPLVLyQ1DFLRQDOGH6HJXULGDG\6DOXGHQHO7UDEDMR/D)XQGDFLyQSDUDOD 3UHYHQFLyQGH5LHVJRV/DERUDOHV/D6HJXULGDG6RFLDO\OD0XWXDVGH$FFLGHQWHVGH7UDEDMR\ (QIHUPHGDGHV3URIHVLRQDOHV 7(0$ $FWXDFLRQHV GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV FRPSHWHQWHV HQ PDWHULD 6DQLWDULD 5HDO 'HFUHWR /HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHOWH[WRUHIXQGLGRGHOD/H\*HQHUDO GHOD6HJXULGDG6RFLDO 7(0$ /D/H\GHGHQRYLHPEUH/D/H\GHGHGLFLHPEUHGH5HIRUPDGHO0DUFR 1RUPDWLYRGH3UHYHQFLyQGH5LHVJRV/DERUDOHVSRUODTXHVHPRGLILFDODDQWHULRU5HDO'HFUHWR GH GH HQHUR SRU HO TXH GHVDUUROOD HO DUWtFXOR GH OD /H\ GH GH QRYLHPEUHHQPDWHULDGHFRRUGLQDFLyQGHDFWLYLGDGHVHPSUHVDULDOHV 7(0$ 5HDO'HFUHWRGHGHHQHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORV6HUYLFLRVGH 3UHYHQFLyQ \ PRGLILFDFLRQHV SRVWHULRUHV SRU 5HDO 'HFUHWR GH GH DEULO \ 5HDO 'HFUHWRGHGHPD\R2WUDVPRGLILFDFLRQHV 7(0$ /D LQWHJUDFLyQ GH OD DFWLYLGDG SUHYHQWLYD /D HYDOXDFLyQ GH ULHVJRV /D SODQLILFDFLyQ GH OD SUHYHQFLyQ &DUDFWHUtVWLFDV \ IXQFLRQHV GH ORV VHUYLFLRV GH SUHYHQFLyQ /D RUJDQL]DFLyQ GH ORV UHFXUVRVSDUDODVDFWLYLGDGHVSUHYHQWLYDV)XQFLRQHV\QLYHOHVGHFXDOLILFDFLyQ/RVVHUYLFLRVGH SUHYHQFLyQDMHQRVDODVHPSUHVDV 7(0$ /D DGDSWDFLyQ GH OD QRUPDWLYD GH SUHYHQFLyQ GH ULHVJRV ODERUDOHV DO iPELWR GH ODV $GPLQLVWUDFLRQHV3~EOLFDV/DVH[FHSFLRQHVGHOD/H\GH3UHYHQFLyQ5HDO'HFUHWRGH GH HQHUR GH DGDSWDFLyQ GH OD OHJLVODFLyQ GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV D OD $GPLQLVWUDFLyQ *HQHUDO GHO (VWDGR PRGLILFDGR SRU HO 5HDO 'HFUHWR GH GH GLFLHPEUH 7(0$ (ODFFLGHQWHGHWUDEDMR&RQFHSWRV\GHILQLFLyQOHJDO3DUWHGH$FFLGHQWHGH7UDEDMRQRWLILFDFLyQ \ WUDPLWDFLyQ 2UGHQ 0LQLVWHULDO 7$6 GH GH QRYLHPEUH SRU OD TXH VH UHJXOD OD XWLOL]DFLyQGHOVLVWHPDGH'HFODUDFLyQ(OHFWUyQLFDGH$FFLGHQWHVGH7UDEDMR CVE-2019-3750 7(0$ i Pág. 12618 boc.cantabria.es 111/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ i Pág. 12619 /D HQIHUPHGDG SURIHVLRQDO HQ HO 6LVWHPD GH OD 6HJXULGDG 6RFLDO &XDGUR GH (QIHUPHGDGHV 3URIHVLRQDOHV 5HDO 'HFUHWR GH GH QRYLHPEUH PRGLILFDGR SRU HO 5HDO 'HFUHWR 2UGHQ 7$6 GH GH HQHUR SRU OD TXH VH HVWDEOHFH HO PRGHOR GH 3DUWH GH (QIHUPHGDG 3URIHVLRQDO VH GLFWDQ QRUPDV SDUD VX HODERUDFLyQ \ WUDQVPLVLyQ \ VH FUHD HO FRUUHVSRQGLHQWHILFKHURGHGDWRVSHUVRQDOHV 7(0$ 3URWHFFLyQ GH OD PDWHUQLGDG \ GH ORV PHQRUHV 5LHVJRV ODERUDOHV HVSHFtILFRV SDUD OD PXMHU WUDEDMDGRUDHQHOSHUtRGRGHHPEDUD]RSRVWSDUWR\ODFWDQFLD/HJLVODFLyQYLJHQWHGHSURWHFFLyQ GHODPDWHUQLGDG0HGLGDVSUHYHQWLYDVIUHQWHDORVULHVJRVHVSHFtILFRV5LHVJRVHVSHFtILFRVSDUD ORVPHQRUHVHQUD]yQGHVXWUDEDMR/HJLVODFLyQYLJHQWHGHSURWHFFLyQGHORVPHQRUHV7UDEDMRV SURKLELGRV 7(0$ 6HJXULGDG\6DOXGHQORVOXJDUHVGHWUDEDMR5HDO'HFUHWRGHGHDEULO*XtDWpFQLFD GHO,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMRSDUDODHYDOXDFLyQ\SUHYHQFLyQGH ULHVJRV 7(0$ 8WLOL]DFLyQ GH HTXLSRV GH SURWHFFLyQ LQGLYLGXDO 5HDO 'HFUHWR GH GH PD\R *XtD 7pFQLFDGHO,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMRSDUDVXXWLOL]DFLyQ 7(0$ 0DQLSXODFLyQPDQXDOGHFDUJDV(YDOXDFLyQ\SUHYHQFLyQGHOULHVJR5HDO'HFUHWRGH GHDEULO*XtD7pFQLFDGHO,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMR 7(0$ (OWUDEDMRFRQHTXLSRVTXHLQFOX\HQ3DQWDOODVGH9LVXDOL]DFLyQGH'DWRV5HDO'HFUHWR GHGHDEULO*XtD7pFQLFDGHO,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMR 7(0$ 5HJODPHQWRGHSURWHFFLyQVDQLWDULDFRQWUDUDGLDFLRQHVLRQL]DQWHV5HDO'HFUHWRGH GH MXOLR PRGLILFDGR SRU HO 5HDO 'HFUHWR GH GH QRYLHPEUH 3URWHFFLyQ GH ORV WUDEDMDGRUHVH[WHUQRVFRQULHVJRGHH[SRVLFLyQDUDGLDFLRQHVLRQL]DQWHVSRULQWHUYHQFLyQHQ]RQD FRQWURODGD5HDO'HFUHWRGHGHPDU]R 7(0$ 5HDO 'HFUHWR GH GH DEULO VREUH OD SURWHFFLyQ GH OD VDOXG \ VHJXULGDG GH ORV WUDEDMDGRUHV FRQWUD ORV ULHVJRV UHODFLRQDGRV FRQ ORV DJHQWHV TXtPLFRV GXUDQWH HO WUDEDMR PRGLILFDGR SRU 5HDO 'HFUHWR GH GH MXOLR *XtD 7pFQLFD GHO ,QVWLWXWR 1DFLRQDO GH 6HJXULGDGH+LJLHQHHQHO7UDEDMR 7(0$ 5HDO 'HFUHWR GH GH PD\R VREUH OD SURWHFFLyQ GH ORV WUDEDMDGRUHV FRQWUD ORV ULHVJRVUHODFLRQDGRVFRQODH[SRVLFLyQDDJHQWHVELROyJLFRVGXUDQWHHOWUDEDMR*XtD7pFQLFDGHO ,QVWLWXWR1DFLRQDOGH6HJXULGDGH+LJLHQHHQHO7UDEDMR 7(0$ 5HDO 'HFUHWR GH GH PD\R VREUH OD SURWHFFLyQ GH ORV WUDEDMDGRUHV FRQWUD ORV ULHVJRV UHODFLRQDGRV FRQ OD H[SRVLFLyQ D DJHQWHV FDQFHUtJHQRV GXUDQWH HO WUDEDMR \ VXV PRGLILFDFLRQHVSRUHO5HDO'HFUHWRGHGHMXQLRSRUHO5HDO'HFUHWRGH GHPDU]R\SRUHO5HDO'HFUHWRGHGHMXOLR*XtD7pFQLFDGHO,QVWLWXWR1DFLRQDOGH 6HJXULGDGH+LJLHQHHQHO7UDEDMR 7(0$ 5HDO'HFUHWRGHGHPDU]RSRUHOTXHVHHVWDEOHFHQODVGLVSRVLFLRQHVPtQLPDVGH VHJXULGDG\VDOXGDSOLFDEOHVDORVWUDEDMRVFRQULHVJRGHH[SRVLFLyQDODPLDQWR 7(0$ 5HDO 'HFUHWR GH GH PDU]R VREUH OD SURWHFFLyQ GH OD VDOXG \ OD VHJXULGDG GH ORV WUDEDMDGRUHVFRQWUDORVULHVJRVUHODFLRQDGRVFRQODH[SRVLFLyQDOUXLGR 7(0$ 5HDO'HFUHWRGHGHQRYLHPEUHVREUHODSURWHFFLyQGHODVDOXG\ODVHJXULGDGGH ORV WUDEDMDGRUHV IUHQWH D ORV ULHVJRV GHULYDGRV R TXH SXHGDQ GHULYDUVH GH OD H[SRVLFLyQ D YLEUDFLRQHVPHFiQLFDV\PRGLILFDFLyQLQWURGXFLGDSRUHO5HDO'HFUHWRGHGHPDU]R 7(0$ (SLGHPLRORJtDODERUDOHLQYHVWLJDFLyQHSLGHPLROyJLFD$SOLFDFLRQHVGHODHSLGHPLRORJtDHQVDOXG ODERUDO 7(0$ 7LSRVGHGLVHxRVHSLGHPLROyJLFRV(VWXGLRVH[SHULPHQWDOHV(VWXGLRVREVHUYDFLRQDOHV(VWXGLRV WUDQVYHUVDOHV (VWXGLRV ORQJLWXGLQDOHV SURVSHFWLYRV \ UHWURVSHFWLYRV $SOLFDFLRQHV GH FDGD XQR GHHOORVHQODLQYHVWLJDFLyQHSLGHPLROyJLFD boc.cantabria.es CVE-2019-3750 112/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3ODQLILFDFLyQGLVHxR\UHDOL]DFLyQGHXQHVWXGLRHSLGHPLROyJLFR 7(0$ 3DSHO GH OD HVWDGtVWLFD HQ HSLGHPLRORJtD (VWLPDFLyQ GH LQWHUYDORV GH FRQILDQ]D &RQWUDVWH GH KLSyWHVLV(UURUDOID\HUURUEHWD(OHFFLyQGHODSUXHEDHVWDGtVWLFD 7(0$ (VWDGtVWLFD GHVFULSWLYD 0HGLGDV GH OD IUHFXHQFLD GH OD HQIHUPHGDG SURSRUFLyQ UD]yQ WDVD 3UHYDOHQFLDHLQFLGHQFLD5LHVJRUHODWLYR2GVVUDWLR 7(0$ 7LSRVGHHUURUHVHQLQYHVWLJDFLyQHSLGHPLROyJLFD(UURUDOHDWRULR\HUURUVLVWHPiWLFR)DFWRUHVGH FRQIXVLyQ9DOLGH]LQWHUQD\H[WHUQD 7(0$ 2UGHQ 35( GH GH GLFLHPEUH SRU OD TXH VH DSUXHED OD SDUWH JHQHUDO GHO 3ODQ GH 3UHYHQFLyQGH5LHVJRV/DERUDOHVGHOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD PRGLILFDGD SRU 2UGHQ 35( GH GH PDU]R (VWUXFWXUD RUJDQL]DWLYD GHO VLVWHPD GH SUHYHQFLyQ'HUHFKRVGHFRQVXOWD\SDUWLFLSDFLyQ)XQFLRQHV\UHVSRQVDELOLGDGHVHQPDWHULDGH SUHYHQFLyQGHULHVJRVODERUDOHV 7(0$ 3UREOHPiWLFD GH ODV UDGLDFLRQHV GH EDMD IUHFXHQFLD ([SRVLFLyQ D FDPSRV HOpFWULFRV \ PDJQpWLFRV5HDO'HFUHWRGHGHMXOLRVREUHODSURWHFFLyQGHODVDOXG\ODVHJXULGDG GH ORV WUDEDMDGRUHV FRQWUD ORV ULHVJRV UHODFLRQDGRV FRQ OD H[SRVLFLyQ D FDPSRV HOHFWURPDJQpWLFRV 7(0$ (YROXFLyQ KLVWyULFD GH OD 0HGLFLQD GHO 7UDEDMR (YROXFLyQ GH OD IRUPDFLyQ \ HMHUFLFLR GH OD HVSHFLDOLGDGGH0HGLFLQDGHO7UDEDMRHQ(VSDxD 7(0$ 3ODQHV GH HPHUJHQFLD \ HYDFXDFLyQ 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH DSUXHED OD 1RUPD %iVLFD GH $XWRSURWHFFLyQ GH ORV FHQWURV HVWDEOHFLPLHQWRV \ GHSHQGHQFLDV GHGLFDGRVDDFWLYLGDGHVTXH SXHGDQ GDU RULJHQ DVLWXDFLRQHV GH HPHUJHQFLD \ PRGLILFDFLRQHV SRVWHULRUHV1RUPDWLYDGHUHJXODFLyQHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 3ULPHURV DX[LOLRV 3DXWDV JHQHUDOHV GH DFWXDFLyQ (YDOXDFLyQ GH XQ DFFLGHQWDGR 3DUR FDUGLRUHVSLUDWRULR DOJRULWPR GH DFWXDFLyQ 7pFQLFD GH UHDQLPDFLyQ FDUGLRSXOPRQDU EiVLFD 5&3% (PHUJHQFLDVPpGLFDVREVWUXFFLyQGHODYtDDpUHD %/248(,, i Pág. 12620 (OWUDEDMR\ODVDOXG&RQFHSWRGHULHVJRODERUDO)DFWRUHVGHULHVJR&RQGLFLRQHVGHWUDEDMRHQ UHODFLyQ FRQ OD VDOXG 'DxRV GHULYDGRV GHO WUDEDMR /DV WpFQLFDV SUHYHQWLYDV \ VX iPELWR GH DSOLFDFLyQ 7(0$ 3DWRORJtDGHRULJHQODERUDO$OWHUDFLRQHVRIWDOPROyJLFDV\RWRUULQRODULQJROyJLFDVUHODFLRQDGDVFRQ HOWUDEDMR 7(0$ 3DWRORJtD GH RULJHQ ODERUDO $OWHUDFLRQHV GHO DSDUDWR UHVSLUDWRULR 7R[LFRORJtD GH SROYRV PLQHUDOHV \ ILEUDV /DV HQIHUPHGDGHV SXOPRQDUHV RFXSDFLRQDOHV HWLRSDWRJHQLD FODVLILFDFLyQ GLDJQyVWLFR\SUHYHQFLyQ 7(0$ 3DWRORJtD GH RULJHQ ODERUDO $OWHUDFLRQHV GHO DSDUDWR FDUGLRFLUFXODWRULR )DFWRUHV GH ULHVJR ODERUDOHV &DUGLRSDWtD LVTXpPLFD +LSHUWHQVLyQ DUWHULDO $UULWPLDV 0LRFDUGLRSDWtDV (QIHUPHGDGHVGHORVYDVRVVDQJXtQHRVSHULIpULFRV 7(0$ 3DWRORJtD GH RULJHQ ODERUDO $OWHUDFLRQHV GHO DSDUDWR H[FUHWRU $OWHUDFLRQHV GHO ULxyQ ,QVXILFLHQFLDUHQDOFUyQLFD$OWHUDFLyQGHODVYtDVXULQDULDVGLVIXQFLyQYHVLFDOFiQFHUGHYHMLJD 7(0$ 3DWRORJtDGHRULJHQODERUDO$OWHUDFLRQHVGHODSDUDWRPXVFXORHVTXHOpWLFR3DWRORJtDODERUDOGHOD H[WUHPLGDGVXSHULRU 7(0$ 3DWRORJtD GH RULJHQ ODERUDO $OWHUDFLRQHV GHO VLVWHPD QHUYLRVR 1HXURSDWtDV $OWHUDFLRQHV GHO FRPSRUWDPLHQWR'HPHQFLDV boc.cantabria.es CVE-2019-3750 7(0$ 113/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3DWRORJtDGHRULJHQODERUDO$OWHUDFLRQHVGHODSLHO'HUPDWRVLVSURIHVLRQDOHV&iQFHUGHSLHO 7(0$ 3DWRORJtDGHRULJHQODERUDO$OWHUDFLRQHVKHSiWLFDV+HSDWLWLVWy[LFDKHSDWLWLVLQIHFFLRVDWXPRUHV KHSiWLFRVGHRULJHQSURIHVLRQDO 7(0$ 3DWRORJtDGHRULJHQODERUDO=RRQRVLV(SLGHPLRORJtD\SUHYHQFLyQ 7(0$ 3DWRORJtD GH RULJHQ ODERUDO $OWHUDFLRQHV GHO DSDUDWR PXVFXORHVTXHOpWLFR 3DWRORJtDV GH OD H[WUHPLGDGLQIHULRU\GHODFROXPQDUHODFLRQDGDVFRQHOWUDEDMR 7(0$ 7R[LFRORJtD ODERUDO &ODVLILFDFLyQ GH ORV FRQWDPLQDQWHV TXtPLFRV 9tDV GH HQWUDGD HQ HO RUJDQLVPR ,QWHUDFFLyQ FRQ HO RUJDQLVPR 'DxRV GHULYDGRV GHO WUDEDMR D FRUWR \ ODUJR SOD]R )DFWRUHVGHWHUPLQDQWHVGHODWR[LFLGDG(IHFWRVDGLWLYRV\VLQpUJLFRV9DORUDFLyQGHOULHVJR 7(0$ 3DWRORJtDUHODFLRQDGDFRQHO6tQGURPHGHOHGLILFLRHQIHUPR /DVGURJRGHSHQGHQFLDVHQHOiPELWRODERUDO3URJUDPDVGHSUHYHQFLyQ\DERUGDMH 7(0$ (SLGHPLRORJtD\SUHYHQFLyQGHODVHQIHUPHGDGHVGHWUDQVPLVLyQSDUHQWHUDO 7(0$ 6HJXULGDG HQ HO WUDEDMR &RQFHSWRV \ REMHWLYRV $FFLGHQWHV GH WUDEDMR ,QYHVWLJDFLyQ GH DFFLGHQWHV FRPR WpFQLFD SUHYHQWLYD (VWXGLR GH FDXVDV $QiOLVLV HVWDGtVWLFR GH ORV DFFLGHQWHV ËQGLFHVHVWDGtVWLFRV(YROXFLyQGHODVLQLHVWUDOLGDGHQ(VSDxD 7(0$ 7R[LFRORJtDGHGLVROYHQWHV 7(0$ 7R[LFRORJtDGHPHWDOHV 7(0$ 7R[LFRORJtDGHSODJXLFLGDV 7(0$ 7R[LFRORJtDGHFDQFHUtJHQRVPXWDJpQLFRV\WHUDWyJHQRV 7(0$ $JHQWHVTXtPLFRVFULWHULRVGHYDORUDFLyQ9DORUHVOtPLWHDPELHQWDOHVFRQFHSWR\WLSRV9DORUHV OtPLWHVDPELHQWDOHVGHH[SRVLFLyQSURIHVLRQDOHQ(VSDxD2WURVOtPLWHVGHUHIHUHQFLD/RV7/9GH OD $&*,+ 1RUPDWLYD HVSDxROD &ULWHULRV ELROyJLFRV GH YDORUDFLyQ GH OD H[SRVLFLyQ D FRQWDPLQDQWHVTXtPLFRV,QGLFDGRUELROyJLFR9DORUHVOtPLWHELROyJLFRVHQ(VSDxD2WURVOtPLWHV GHUHIHUHQFLD/RV%(,GHOD$&*,+ 7(0$ $JHQWHV ELROyJLFRV &RQFHSWR \ GHILQLFLyQ &ODVLILFDFLyQ 9tDV GH HQWUDGD HQ HO RUJDQLVPR (IHFWRV VREUH OD VDOXG &ODVLILFDFLyQ SRU JUXSRV VHJ~Q HO ULHVJR TXH SUHVHQWDQ (YDOXDFLyQ \ PHGLGDVGHFRQWURO 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDUXLGR)LVLRORJtDGHODDXGLFLyQ(IHFWRVGHOUXLGRVREUHHO RUJDQLVPR/DVDXGLRPHWUtDV+LSRDFXVLD\VRUGHUDSURIHVLRQDO0HGLGDVSUHYHQWLYDVDDGRSWDU 7(0$ 3UHYHQFLyQ GH ULHVJRV SRU H[SRVLFLyQ D YLEUDFLRQHV &DUDFWHUtVWLFDV ItVLFDV GH ODV YLEUDFLRQHV 7LSRVGHYLEUDFLRQHV(IHFWRVGHODVYLEUDFLRQHVVREUHODVDOXG0HGLGDVSUHYHQWLYDVDDGRSWDU 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDSUHVLRQHVHOHYDGDV%DURWUDXPD0HFDQLVPRGHDFFLyQ (IHFWRV GH OD SUHVLyQ HOHYDGD VREUH HO RUJDQLVPR 9LJLODQFLD GH OD H[SRVLFLyQ 0HGLGDV SUHYHQWLYDVDDGRSWDU 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDUDGLDFLRQHVLRQL]DQWHV&RQFHSWR\WLSRVGHUDGLDFLRQHV LRQL]DQWHV,QWHUDFFLyQHQHORUJDQLVPR5LHVJRVSRUH[SRVLFLyQDHVWDVUDGLDFLRQHV3ULQFLSDOHV DFWLYLGDGHV FRQ HVWH WLSR GH ULHVJRV &RQFHSWRV EiVLFRV GH SURWHFFLyQ UDGLROyJLFD /D UHJODPHQWDFLyQ YLJHQWH VREUH SURWHFFLyQ FRQWUD ODV UDGLDFLRQHV LRQL]DQWHV 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH SURWHFFLyQ VDQLWDULD FRQWUD UDGLDFLRQHV LRQL]DQWHV 5HDO 'HFUHWR GH GH PDU]R VREUH SURWHFFLyQ GH ORV WUDEDMDGRUHVH[WHUQRVFRQULHVJRGHH[SRVLFLyQDUDGLDFLRQHVLRQL]DQWHVSRULQWHUYHQFLyQHQ]RQD FRQWURODGD CVE-2019-3750 7(0$ i Pág. 12621 boc.cantabria.es 114/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDUDGLDFLRQHVQRLRQL]DQWHV&ODVLILFDFLyQ\FDUDFWHUtVWLFDV ItVLFDV GH ODV SULQFLSDOHV UDGLDFLRQHV QR LRQL]DQWHV XOWUDYLROHWD OX] YLVLEOH UDGLDFLRQHV LQIUDUURMDV PLFURRQGDV \ OiVHUHV 5LHVJRV SDUD OD VDOXG HYDOXDFLyQ GHO ULHVJR \ PHGLGDV SUHYHQWLYDV3UREOHPiWLFDGHODVUDGLDFLRQHVGHEDMDIUHFXHQFLD([SRVLFLyQDFDPSRVHOpFWULFRV \ PDJQpWLFRV 5HDO 'HFUHWR GH GH VHSWLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR TXH HVWDEOHFH FRQGLFLRQHV GH SURWHFFLyQ GHO GRPLQLR S~EOLFR UDGLRHOpFWULFR UHVWULFFLRQHVDODVHPLVLRQHVUDGLRHOpFWULFDV\PHGLGDVGHSURWHFFLyQVDQLWDULDIUHQWHDHPLVLRQHV UDGLRHOpFWULFDV 7(0$ /DLOXPLQDFLyQ)LVLRORJtDGHODYLVLyQ&RQGLFLRQHVJHQHUDOHVGHODLOXPLQDFLyQGHORVOXJDUHVGH WUDEDMR(IHFWRVSDUDODVDOXG/DIDWLJDYLVXDO9DORUDFLyQPpGLFD 7(0$ /DV FRQGLFLRQHV WHUPRKLJURPpWULFDV HQ ORV OXJDUHV GH WUDEDMR 3DUiPHWURV D FRQVLGHUDU /D UHJXODFLyQ GH OD WHPSHUDWXUD FRUSRUDO (IHFWRV VREUH OD VDOXG GH ODV WHPSHUDWXUDV H[WUHPDV 0HGLGDVSUHYHQWLYDV 7(0$ (UJRQRPtDFRQFHSWR\REMHWLYRV(OVHUKXPDQR\VXHQWRUQR&RQFHSFLyQ\GLVHxRGHOSXHVWR GH WUDEDMR &DUJD ItVLFD GH WUDEDMR &DUJD PHQWDO GH WUDEDMR /D RUJDQL]DFLyQ GHO WUDEDMR /DV H[LJHQFLDVGHODWDUHD(OWUDEDMRDWXUQRV 7(0$ )DFWRUHV GH ULHVJR SVLFRVRFLDO &RQFHSWR GH ULHVJRV SVLFRVRFLDOHV (O HVWUpV \ VXV IRUPDV &RQVHFXHQFLDVItVLFDV\ILVLROyJLFDVGHOHVWUpV&RQVHFXHQFLDVSVLFROyJLFDV7pFQLFDVGHFRQWURO GHHVWUpV/DDQVLHGDG\ODGHSUHVLyQ(OVtQGURPHGH³EXUQRXW´ %/248(,,, i Pág. 12622 9LJLODQFLDGHODVDOXGGHORVWUDEDMDGRUHV1RUPDWLYDGHDSOLFDFLyQ/RVUHFRQRFLPLHQWRVPpGLFRV SUHYHQWLYRODERUDOHV3URWRFRORVGHYLJLODQFLDVDQLWDULDHVSHFtILFD 7(0$ 7R[LFRORJtDODERUDOGHORVSOiVWLFRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD0DQLSXODFLyQPDQXDOGHFDUJDV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD3DQWDOODVGHYLVXDOL]DFLyQGHGDWRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD&ORUXURGHYLQLORPRQyPHUR 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD3ODJXLFLGDV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD3RVWXUDVIRU]DGDV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD5XLGR 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD0RYLPLHQWRVUHSHWLGRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD5DGLDFLRQHVLRQL]DQWHV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD1HXURSDWtDVSRUSUHVLyQ 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$OYHROLWLVDOpUJLFDH[WUtQVHFD 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD6LOLFRVLV\RWUDVQHXPRFRQLRVLV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$PLDQWR 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$JHQWHVFLWRVWiWLFRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD3ORPR 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$VPDODERUDO 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD'HUPDWRVLVODERUDOHV boc.cantabria.es CVE-2019-3750 7(0$ 115/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$JHQWHVELROyJLFRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$JHQWHVDQHVWpVLFRVLQKDODWRULRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFDÏ[LGRGHHWLOHQR 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$JUDULR CVE-2019-3750 i Pág. 12623 boc.cantabria.es 116/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 0(',&,1$'(3257,9$ 0$7(5,$6(63(&Ë),&$6 %/248(, i Pág. 12624 7(0$ (OGHUHFKRDODSURWHFFLyQGHODVDOXG(OVLVWHPDVDQLWDULRHQ&DQWDEULD 7(0$ 7tWXORV ,, ,,, 9,,, GH OD /H\ GH &DQWDEULD GH GH MXOLR GHO 'HSRUWH \ 'HFUHWR GHGHMXQLRSRUHOTXHVHDSUXHEDODQRUPDWLYDGHGHVDUUROORSURWHFFLyQGHO GHSRUWLVWDHO&HQWUR5HJLRQDOGH0HGLFLQD'HSRUWLYDpWLFD\FRQWUROGHFRPSRUWDPLHQWRV GHSRUWLYRV 7(0$ 7UDWDPLHQWR GH OD VDOXG HQ HO GHSRUWH HQ OD &DUWD (XURSHD GHO 'HSRUWH HO /LEUR %ODQFR GHO 'HSRUWH GH (XURSD \ OD &DUWD ,QWHUQDFLRQDO UHYLVDGD GH OD HGXFDFLyQ ItVLFDODDFWLYLGDGItVLFD\HOGHSRUWHGHOD81(6&2 7(0$ /DPHGLFLQDGHOGHSRUWH+LVWRULD'HILQLFLyQ\iUHDVGHWUDEDMR&DUiFWHUPXOWLGLVFLSOLQDU /D6RFLHGDG(VSDxRODGH0HGLFLQDGHO'HSRUWH 7(0$ %LRHQHUJpWLFD (O PHWDEROLVPR HQHUJpWLFR HQ UHSRVR \ HQ HMHUFLFLR (O PHWDEROLVPR DHUyELFR\DQDHUyELFR 7(0$ )LVLRORJtDGHOHMHUFLFLRPXVFXODUUHVSLUDWRULDFDUGLRFLUFXODWRULD 7(0$ )LVLRORJtDGHOHMHUFLFLRVLVWHPDVQHUYLRVRHQGRFULQROyJLFR\KHPDWROyJLFR 7(0$ $GDSWDFLRQHVILVLROyJLFDVDOPHGLRDPELHQWHFDORUDOWLWXGIUtRMHWODJ 7(0$ ([SORUDFLyQ FOtQLFD GHO GHSRUWLVWD 2EMHWLYRV /D KLVWRULD PpGLFRGHSRUWLYD ([SORUDFLyQ JHQHUDO 7(0$ ([SORUDFLyQEXFRGHQWDORIWDOPROyJLFDGHODSDUDWRUHVSLUDWRULR\GHODSDUDWRORFRPRWRU 7(0$ &LQHDQWURSRPHWUtDXWLOLGDGFOtQLFD&RPSRVLFLyQFRUSRUDO6RPDWRWLSR 7(0$ 9DORUDFLyQELRTXtPLFDGHOGHSRUWLVWD 7(0$ 9DORUDFLyQIXQFLRQDOGHOGHSRUWLVWD%DVHVILVLROyJLFDV(UJRPHWUtD 7(0$ (VSLURPHWUtDHQHOGHSRUWHVLPSOH\IRU]DGDYDULDEOHVHVSLURPpWULFDVHLQWHUSUHWDFLyQ 7(0$ 0HGLGDVHUJRHVSLURPpWULFDVUHOHYDQWHV9DORUDFLyQIXQFLRQDODHUyELFD\DQDHUyELFD 7(0$ (VWDGtVWLFD$SOLFDFLyQDODYDORUDFLyQGHOGHSRUWLVWD5HSUHVHQWDFLyQGHGDWRV 7(0$ &XDOLGDGHV ItVLFDV EiVLFDV UHVLVWHQFLD )XHU]D 9HORFLGDG )OH[LELOLGDG (ODVWLFLGDG &RRUGLQDFLyQ 7(0$ (O HQWUHQDPLHQWR GHSRUWLYR 3ULQFLSLRV JHQHUDOHV 3URJUDPDFLyQ GHO HQWUHQDPLHQWR (O HQWUHQDPLHQWRGHODVFXDOLGDGHVItVLFDV 7(0$ (O FRQWURO PpGLFR GHO HQWUHQDPLHQWR SUXHEDV GH HVIXHU]R \ GH FDPSR &RQWURO GH OD IUHFXHQFLDFDUGtDFD/DFWDWHPLD\HOHFWURPLRJUDItD8WLOLGDGGHSUXHEDV\FRQWUROHV 7(0$ (OHQWUHQDPLHQWRHQVLWXDFLRQHVHVSHFLDOHVQLxRV\DGROHVFHQWHVGLVFDSDFLWDGRV 7(0$ (IHFWRV DGYHUVRV GHO HQWUHQDPLHQWR GHSRUWLYR )DWLJD PXVFXODU 6REUHHQWUHQDPLHQWR 5HDFFLRQHVDGYHUVDVDOHMHUFLFLRItVLFR boc.cantabria.es CVE-2019-3750 117/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3DWRORJtD PpGLFRGHSRUWLYD HQIHUPHGDGHV GHUPDWROyJLFDV LQIHFFLRVDV HQGRFULQROyJLFDV \DOpUJLFDV 7(0$ (FRJUDItD PXVFXORHVTXHOpWLFD $QDWRPtD HFRJUiILFD 'LDJQyVWLFR HFRJUiILFR GH OHVLRQHV GHODSDUDWRORFRPRWRU,QWHUYHQFLRQLVPRHFRJXLDGRGHODSDUDWRORFRPRWRU 7(0$ 3DWRORJtD PpGLFRGHSRUWLYD HQIHUPHGDGHV QHXPROyJLFDV KHPDWROyJLFDV \ QHXUROyJLFDV 3DWRORJtDYDVFXODU 7(0$ 7UDVWRUQRVPHGLRDPELHQWDOHVHQIHUPHGDGHVUHODFLRQDGDVFRQHOFDORUHOIUtRODDOWLWXG\ ODSUHVLyQ 7(0$ 'RSDMH 6XVWDQFLDV \ PpWRGRV GH GRSDMH (IHFWRV /HJLVODFLyQ HQ PDWHULD GH GRSDMH $JHQFLD DQWLGRSDMH 3ULQFLSLRV EiVLFRV \ IXQFLRQHV 1RUPDWLYD LQWHUQDFLRQDO YLJHQWH ,QIUDFFLRQHV 7(0$ (IHFWRV GH OD DFWLYLGDG GHSRUWLYD VREUH OD VDOXG EHQHILFLRVRV \ QHJDWLYRV &RQWUDLQGLFDFLRQHVSDUDODSUiFWLFDGHSRUWLYD 7(0$ 0HGLFLQDGHOGHSRUWHHQODHGDGLQIDQWLO\DGROHVFHQWH\HQSHUVRQDVPD\RUHV 7(0$ 0HGLFLQD GHO GHSRUWH HQ GLVFDSDFLWDGRV 9DORUDFLyQ GH OD GLVFDSDFLGDG (VWDEOHFLPLHQWR GHREMHWLYRVGHPHMRUD 7(0$ 1XWULFLyQ 9DORUDFLyQ QXWULFLRQDO GHO GHSRUWLVWD 0DFURQXWULHQWHV \ PLFURQXWULHQWHV +LGUDWDFLyQGHOGHSRUWLVWD 7(0$ 'LHWD GHO GHSRUWLVWD $OLPHQWDFLyQ HQ ODV GLVWLQWDV IDVHV GHO HQWUHQDPLHQWR \ OD FRPSHWLFLyQ 7(0$ &DUGLRORJtD GHO GHSRUWH ([SORUDFLyQ ItVLFD GHO GHSRUWLVWD (OHFWURFDUGLRJUDPD (FRFDUGLRJUDItD'RSSOHU2WUDVH[SORUDFLRQHV 7(0$ $SWLWXG FDUGLROyJLFD GHO GHSRUWLVWD DUULWPLDV VtQFRSH GHO GHSRUWLVWD FDUGLRSDWtDV FRQJpQLWDVYDOYXORSDWtDVPLRFDUGLRSDWtDV %/248(,, i Pág. 12625 7(0$ %LRPHFiQLFDHQHOGHSRUWH3ULQFLSLRVGHELRPHFiQLFD\DSDUDWR ORFRPRWRU%LRPHFiQLFD DUWLFXODU 7(0$ %LRPHFiQLFDGHODFROXPQDYHUWHEUDO\GHOWyUD[ 7(0$ %LRPHFiQLFDGHODVH[WUHPLGDGHV 7(0$ 3ULQFLSLRV JHQHUDOHV SDUD HO WUDWDPLHQWR PpGLFR GH ODV OHVLRQHV KHULGDV IUDFWXUDV OX[DFLRQHV\WUDV7UDWDPLHQWRGHOGHSRUWLVWDOHVLRQDGR 7(0$ 3DWRORJtDRVWHRDUWLFXODU7LSRVGHOHVLRQHV0HGLRVGLDJQyVWLFRV 7(0$ 3DWRORJtDPXVFXODU7LSRVGHOHVLRQHV0HGLRVGLDJQyVWLFRV 7(0$ 3DWRORJtDWHQGLQRVD7LSRVGHOHVLRQDV0HGLRVGLDJQyVWLFRV 7(0$ /HVLRQHV FUiQHRHQFHIiOLFDV )UDFWXUDV FUDQHDOHV \ IDFLDOHV /HVLRQHV FUDQHDOHV WUDXPiWLFDV/HVLRQHVRGRQWROyJLFDV 7(0$ /HVLRQHV YHUWHEUDOHV WUDXPDWLVPRV D QLYHO FHUYLFDO WRUiFLFR R OXPEDU 2WUDV OHVLRQHV D QLYHOOXPEDU 7(0$ 7UDXPDWLVPRVWRUDFRDEGRPLQDOHVIUDFWXUDV\OX[DFLRQHVFRVWDOHV\H[WHUQDOHV/HVLRQHV YLVFHUDOHV boc.cantabria.es CVE-2019-3750 118/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /HVLRQHV GHO KRPEUR OD FLQWXUD HVFiSXORKXPHUDO \ HO FRGR )UDFWXUDV \ OX[DFLRQHV /HVLRQHVQHXUROyJLFDV2WUDVOHVLRQHV 7(0$ /HVLRQHVGHODQWHEUD]RPXxHFD\PDQR)UDFWXUDV\OX[DFLRQHV2WUDVOHVLRQHV 7(0$ /HVLRQHVGHODSHOYLVFDGHUD\PXVOR 7(0$ /HVLRQHVGHODURGLOODPHQLVFROLJDPHQWRV3DWRORJtDIHPRURSDWHODU 7(0$ /HVLRQHVGHODSLHUQDWRELOOR\SLH 7(0$ /HVLRQHV GHSRUWLYDV HQ OD pSRFD GH FUHFLPLHQWR /HVLRQHV SHGLiWULFDV UHODFLRQDGDV FRQ GHSRUWHV2VWHRFRQGURVLV7UDWDPLHQWRGHORVGHSRUWLVWDVMyYHQHVOHVLRQDGRV 7(0$ 5HKDELOLWDFLyQ \ WUDWDPLHQWR GH OHVLRQHV 7pFQLFDV GLDJQyVWLFDV GH OD UHKDELOLWDFLyQ HQ HO PHGLRGHSRUWLYR&ODVLILFDFLyQGHORVPHGLRVItVLFRV 7(0$ (OHFWURWHUDSLDHQPHGLFLQDGHOGHSRUWH 7(0$ &LQHVLWHUDSLD7pFQLFDVQHXURPXVFXODUHV0DVRWHUDSLDHQPHGLFLQDGHOGHSRUWH 7(0$ 2WUDV WpFQLFDV \ WUDWDPLHQWRV GH UHKDELOLWDFLyQ FULRWHUDSLD WUDWDPLHQWR GHO GRORU \ OD LQIODPDFLyQSULQFLSLRVJHQHUDOHVGHODLQILOWUDFLyQ 7(0$ 9HQGDMHVIXQFLRQDOHV(VWLUDPLHQWRVP~VFXORWHQGLQRVRV 7(0$ 7UDWDPLHQWRUHKDELOLWDGRUGHOHVLRQHVPXVFXODUHV\WHQGLQRVDV 7(0$ 7UDWDPLHQWRUHKDELOLWDGRUGHOHVLRQHVOLJDPHQWRVDV 7(0$ 7UDWDPLHQWRUHKDELOLWDGRUGHOHVLRQHVRVWHRDUWLFXODUHV\GHSDUWHVEODQGDV 7(0$ 7UDWDPLHQWRGHODVOHVLRQHVGHODFROXPQDYHUWHEUDO 7(0$ 5HKDELOLWDFLyQGHQLxRVWUDVOHVLRQHVGHSRUWLYDV5HKDELOLWDFLyQSRUHOGHSRUWH 7(0$ 7UDWDPLHQWRGHXUJHQFLDGHOGHSRUWLVWDOHVLRQDGR %/248(,,, i Pág. 12626 7(0$ /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV $VSHFWRV JHQHUDOHV &RQWHQLGR 5HVSRQVDELOLGDGHV \ VDQFLRQHV 3ULQFLSDOHV GHEHUHV GHO HPSUHVDULR 7(0$ /H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV2EMHWRiPELWRGH DSOLFDFLyQ \ GHILQLFLRQHV 3ROtWLFD HQ PDWHULD GH SUHYHQFLyQ GH ULHVJRV SDUD SURWHJHU OD VHJXULGDG \ VDOXG HQ HO WUDEDMR 'HUHFKRV \ REOLJDFLRQHV 6HUYLFLRV GH 3UHYHQFLyQ FRQVXOWD\SDUWLFLSDFLyQGHORVWUDEDMDGRUHV5HVSRQVDELOLGDGHV\VDQFLRQHV 7(0$ 5HDO 'HFUHWR GH GH HQHUR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH ORV 6HUYLFLRV GH 3UHYHQFLyQ , 'LVSRVLFLRQHV JHQHUDOHV (YDOXDFLyQ GH ORV ULHVJRV \ SODQLILFDFLyQ GH OD DFWLYLGDG SUHYHQWLYD 2UJDQL]DFLyQ GH UHFXUVRV SDUD ODV DFWLYLGDGHV SUHYHQWLYDV 7(0$ 5HDO 'HFUHWR GH GH HQHUR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ ,, $FUHGLWDFLyQGHHQWLGDGHVHVSHFLDOL]DGDVFRPRVHUYLFLRVGH SUHYHQFLyQ DMHQRV D ODV HPSUHVDV $XGLWRUtDV )XQFLRQHV \ QLYHOHV GH FXDOLILFDFLyQ &RODERUDFLyQFRQHO6LVWHPD1DFLRQDOGH6DOXG 7(0$ 2UJDQLVPRVHLQVWLWXFLRQHVLQWHUQDFLRQDOHVFRQFRPSHWHQFLDHQPDWHULDGHSUHYHQFLyQGH ULHVJRVODERUDOHV$JHQFLD(XURSHDSDUDOD6HJXULGDG\6DOXGHQHO7UDEDMR2UJDQL]DFLyQ ,QWHUQDFLRQDOGHO7UDEDMR2WURVRUJDQLVPRVLQWHUQDFLRQDOHVFRPSHWHQWHV boc.cantabria.es CVE-2019-3750 119/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12627 2UJDQLVPRV H LQVWLWXFLRQHV QDFLRQDOHV FRQ FRPSHWHQFLD HQ PDWHULD GH SUHYHQFLyQ GH ULHVJRV ODERUDOHV ,QVWLWXWR 1DFLRQDO GH 6HJXULGDG H +LJLHQH HQ HO 7UDEDMR &RPLVLyQ 1DFLRQDOGH6HJXULGDG\6DOXGHQHO7UDEDMR2WURVRUJDQLVPRVQDFLRQDOHVFRPSHWHQWHV 7(0$ ÏUJDQRVDXWRQyPLFRVFRQFRPSHWHQFLDVHQPDWHULDGH3UHYHQFLyQGH5LHVJRV/DERUDOHV ,QVWLWXWR &iQWDEUR GH 6HJXULGDG \ VDOXG (VWUXFWXUD IXQFLRQHV \ FRPSHWHQFLDV HQ 3UHYHQFLyQGH5LHVJRV/DERUDOHV 7(0$ 5HVSRQVDELOLGDG HQ PDWHULD SUHYHQWLYD 5HVSRQVDELOLGDG GH ORV HPSUHVDULRV DGPLQLVWUDWLYD FLYLO \ SHQDO 5HVSRQVDELOLGDG GH ORV WUDEDMDGRUHV 5HVSRQVDELOLGDG SDWULPRQLDO GH OD $GPLQLVWUDFLyQ 3~EOLFD 5HVSRQVDELOLGDG GH ODV DXWRULGDGHV \ GHO SHUVRQDODOVHUYLFLRGHODV$GPLQLVWUDFLRQHV3~EOLFDV 7(0$ /D,QVSHFFLyQGH7UDEDMR\6HJXULGDG6RFLDOHQPDWHULDGH6HJXULGDG\6DOXG/DERUDO 7(0$ (O 3ODQ GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV &RQFHSWR (OHPHQWRV LQWHJUDQWHV ,QVWUXPHQWRV HVHQFLDOHV 'HFODUDFLyQ GH SULQFLSLRV 6LVWHPD GH JHVWLyQ GH OD SUHYHQFLyQ GHULHVJRVODERUDOHV&RQFHSWRVEiVLFRVGHODHYDOXDFLyQGHULHVJRV\ODSODQLILFDFLyQGH ODDFWLYLGDGSUHYHQWLYD 7(0$ (O KLVWRULDO PpGLFRODERUDO &RQWHQLGRV &XVWRGLD \ FRQVHUYDFLyQ GH ORV GRFXPHQWRV GH VDOXG /D FRQILGHQFLDOLGDG GH ORV GDWRV GH VDOXG HQ OD YLJLODQFLD GH OD VDOXG HQ ORV H[iPHQHVGHVDOXG 7(0$ /H\ GH GH QRYLHPEUH EiVLFD UHJXODGRUD GH OD DXWRQRPtD GHO SDFLHQWH \ GH GHUHFKRV\REOLJDFLRQHVHQPDWHULDGHLQIRUPDFLyQ\GRFXPHQWDFLyQFOtQLFD 7(0$ 2UJDQL]DFLyQ\IXQFLRQHVGHORVVHUYLFLRVVDQLWDULRVGHORVVHUYLFLRVGHSUHYHQFLyQ5HDO 'HFUHWRGHGHMXQLR$FWLYLGDGHVVDQLWDULDV5HFXUVRVKXPDQRV\PDWHULDOHV 3URWHFFLyQGHGDWRV6HJXLPLHQWR\FRQWUROGHODVDFWXDFLRQHV 7(0$ (GXFDFLyQ SDUD OD 6DOXG ,QWHUYHQFLyQ HGXFDWLYD GHVGH OD FRQVXOWD PpGLFD (O FRQVHMR PpGLFR/DFRPXQLFDFLyQPpGLFRSDFLHQWH7pFQLFDVGHHQWUHYLVWDFOtQLFD 7(0$ /H\*HQHUDOGHOD6HJXULGDG6RFLDO,QFDSDFLGDG7HPSRUDO,QFDSDFLGDG3HUPDQHQWH 7(0$ 3URWHFFLyQ GH OD PDWHUQLGDG 1RUPDWLYD DSOLFDEOH 6LWXDFLRQHV GH ULHVJR GXUDQWH HO HPEDUD]R\ODODFWDQFLD$GDSWDFLyQFDPELRGHSXHVWRGHWUDEDMR 7(0$ (VSLURPHWUtD 'HILQLFLyQ 2EMHWLYR 3UiFWLFD GH OD HVSLURPHWUtD 9DORUDFLyQ \ FODVLILFDFLyQ GHODVHVSLURPHWUtDV 7(0$ (OHFWURFDUGLRJUDPD 'HILQLFLyQ 2EMHWLYR 3UiFWLFD GHO HOHFWURFDUGLRJUDPD *HQHUDOLGDGHV GHLQWHUSUHWDFLyQ 7(0$ $JHQWHVItVLFRV&RQFHSWRVIXQGDPHQWDOHV(IHFWRVVREUHODVDOXG(YDOXDFLyQGHULHVJRV $FFLyQSUHYHQWLYD3URWRFRORVGHYLJLODQFLDVDQLWDULDHVSHFtILFD 7(0$ ([SRVLFLyQDUDGLDFLRQHVLRQL]DQWHV3UHYHQFLyQGHOULHVJRGHH[SRVLFLyQ9LJLODQFLDGHOD VDOXGGHORV\ODVWUDEDMDGRUDVSURIHVLRQDOPHQWHH[SXHVWRV 7(0$ /RVHVWLORVGHYLGDFRPRGHWHUPLQDQWHVGHVDOXG)DFWRUHVSVLFRVRFLDOHVHQHOSURFHVRGH VDOXGHQIHUPHGDG 7(0$ (GXFDFLyQ SDUD OD VDOXG 0HWRGRORJtD \ SODQLILFDFLyQ 0HWRGRORJtDV GH LQWHUYHQFLyQ 0HGLRVGHFRPXQLFDFLyQ\HSLGHPLRORJtD 7(0$ 7DEDFRDOFRKRO\GURJDV9LVLyQGHOSURIHVLRQDOVDQLWDULR 7(0$ (SLGHPLRORJtDSUHYHQFLyQ\FRQWUROGHODVHQIHUPHGDGHVFDUGLRYDVFXODUHV 7(0$ /DV GURJRGHSHQGHQFLDV HQ HO PHGLR ODERUDO 'HILQLFLRQHV 3UHYHQFLyQ 7UDWDPLHQWR \ UHLQVHUFLyQ ODERUDO (O DOFRKRO HQ HO PHGLR ODERUDO 3UHYHQFLyQ WUDWDPLHQWR \ UHLQVHUFLyQ ODERUDO(OWDEDFRHQHOPHGLRODERUDO3DWRORJtDDVRFLDGDHOIXPDGRUSDVLYR/XFKDFRQWUD HOKiELWRGHIXPDUHQHOPHGLRODERUDOHVSDFLRVVLQKXPR boc.cantabria.es CVE-2019-3750 7(0$ 120/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3ULPHURVDX[LOLRV\DWHQFLyQGHXUJHQFLDDORVWUDEDMDGRUHV2UJDQL]DFLyQHQHOFHQWURGH WUDEDMR 5HDQLPDFLyQ FDUGLRSXOPRQDU &RQWURO GH KHPRUUDJLDV TXHPDGXUDV WUDXPDWLVPRV &RQFHSWRVEiVLFRV\HOHPHQWRVHVWUDWpJLFRVSDUDODSXHVWDHQPDUFKDGHDFWLYLGDGHVGH HYDOXDFLyQ\PHMRUDGHODFDOLGDG 7(0$ /D/H\2UJiQLFDGHGHGLFLHPEUHGH3URWHFFLyQGH'DWRV3HUVRQDOHV\JDUDQWtD GHORVGHUHFKRVGLJLWDOHV\QRUPDWLYDGHGHVDUUROOR3URWHFFLyQGHGDWRV7LWXODULGDGGHORV ILFKHURV$JHQFLDGH3URWHFFLyQGH'DWRV0RYLPLHQWRGHGDWRV CVE-2019-3750 7(0$ i Pág. 12628 boc.cantabria.es 121/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 0(',&,1$'()$0,/,$<&2081,7$5,$ 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ /H\GHGHDEULO*HQHUDOGH6DQLGDG(OGHUHFKRDODSURWHFFLyQGHODVDOXG(OVLVWHPDGH VDOXG(VWUXFWXUDGHOVLVWHPDVDQLWDULRS~EOLFR 7(0$ /H\GHGHPD\RGHFRKHVLyQ\FDOLGDGGHO6LVWHPD1DFLRQDOGH6DOXG 7(0$ 0RGHORVMXUtGLFRVGHRUJDQL]DFLyQ\JHVWLyQVDQLWDULD*HVWLyQGLUHFWD*HVWLyQLQGLUHFWD/RVFRQFLHUWRV VDQLWDULRV1XHYDVIRUPDVGHJHVWLyQGHO6LVWHPD1DFLRQDOGH6DOXG 7(0$ /H\ GH GH QRYLHPEUH GH 2UGHQDFLyQ GH ODV 3URIHVLRQHV 6DQLWDULDV REMHWR \ iPELWR GH DSOLFDFLyQ(MHUFLFLRGHODVSURIHVLRQHVVDQLWDULDV)RUPDFLyQGHODVSURIHVLRQHVVDQLWDULDV(OGHVDUUROOR SURIHVLRQDO\VXUHFRQRFLPLHQWR(OHMHUFLFLRSULYDGRGHODVSURIHVLRQHVVDQLWDULDV/DSDUWLFLSDFLyQGH ORVSURIHVLRQDOHV 7(0$ 5HDO'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVHHVWDEOHFHODFDUWHUDGHVHUYLFLRVFRPXQHV GHO 6LVWHPD 1DFLRQDO GH 6DOXG \ HO SURFHGLPLHQWR SDUD VX DFWXDOL]DFLyQ &DUWHUD GH VHUYLFLRV FRPSOHPHQWDULDGHODV&RPXQLGDGHV$XWyQRPDV 7(0$ 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH GHWHUPLQD \ FODVLILFD ODV HVSHFLDOLGDGHV HQ &LHQFLDV GH OD 6DOXG \ VH GHVDUUROODQ GHWHUPLQDGRV DVSHFWRV GHO VLVWHPD GH IRUPDFLyQ VDQLWDULD HVSHFLDOL]DGD 7(0$ 'HFUHWRGHGHPD\RSRUHOTXHVHFUHD\UHJXODOD&RPLVLyQGH)RUPDFLyQ&RQWLQXDGDGH ODV3URIHVLRQHV6DQLWDULDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ &RPSHWHQFLDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDHQPDWHULDVDQLWDULD(OWUDVSDVRGHIXQFLRQHV \VHUYLFLRV(VSHFLDOUHIHUHQFLDDO5HDO'HFUHWRGHGHMXOLR\DO5HDO'HFUHWR GHGHGLFLHPEUH 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH2UGHQDFLyQ6DQLWDULD3ULQFLSLRV6LVWHPD6DQLWDULR 3~EOLFR&DUDFWHUtVWLFDV\RUJDQL]DFLyQIXQFLRQDO\WHUULWRULDO'HUHFKRV\GHEHUHVGHORVFLXGDGDQRVHQ UHODFLyQ FRQ OD VDOXG \ OD DVLVWHQFLD VDQLWDULD /D SDUWLFLSDFLyQ *DUDQWtDV &RPSHWHQFLDV GH ODV $GPLQLVWUDFLRQHV3~EOLFDVHQHO6LVWHPD6DQLWDULR3~EOLFRGH&DQWDEULD(O3ODQGH6DOXGGH&DQWDEULD $FWXDFLRQHVUHODFLRQDGDVFRQODVDOXGS~EOLFD\ODVDOXGODERUDO 7(0$ $FWXDFLRQHVUHODFLRQDGDVFRQODDVLVWHQFLDVDQLWDULD\ORVPHGLFDPHQWRV$FWXDFLRQHVUHODFLRQDGDVFRQ 7(0$ /H\GHGHGLFLHPEUHGH3URPRFLyQGHOD$XWRQRPtD3HUVRQDO\$WHQFLyQDODVSHUVRQDV HQVLWXDFLyQGHGHSHQGHQFLD 7(0$ 5HDO'HFUHWRGHGHGLFLHPEUHSRUHOTXHVHUHJXODQODVSUHVWDFLRQHVGHO6LVWHPDSDUD OD$XWRQRPtD\$WHQFLyQDOD'HSHQGHQFLDHVWDEOHFLGDVHQOD/H\GHGHGLFLHPEUH i Pág. 12629 boc.cantabria.es CVE-2019-3750 ODKLVWRULDFOtQLFD,QIUDFFLRQHV\6DQFLRQHV/DFRODERUDFLyQFRQODUHGVDQLWDULDGHWLWXODULGDGSULYDGD /DGRFHQFLD\ODLQYHVWLJDFLyQVDQLWDULDHQHO6LVWHPD$XWRQyPLFRGH6DOXG/D)XQGDFLyQ0DUTXpVGH 9DOGHFLOODQDWXUDOH]DILQHV\RUJDQL]DFLyQ 122/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 5HDO'HFUHWRGHGHIHEUHURSRUHOTXHVHDSUXHEDHOEDUHPRGHYDORUDFLyQGHODVLWXDFLyQ GHGHSHQGHQFLDHVWDEOHFLGRSRUOD /H\GHGHGLFLHPEUHGH3URPRFLyQGHOD$XWRQRPtD 3HUVRQDO\$WHQFLyQDODVSHUVRQDVHQVLWXDFLyQGHGHSHQGHQFLD 7(0$ 'HVDUUROOR GHO 6LVWHPD SDUD OD $XWRQRPtD \ OD $WHQFLyQ D OD 'HSHQGHQFLD HQ &DQWDEULD 2UGHQ 6$1 GH GH PD\R SRU OD TXH VH UHJXODQ ORV SURFHGLPLHQWRV SDUD HO UHFRQRFLPLHQWR GH OD VLWXDFLyQGHGHSHQGHQFLD\GHOGHUHFKRDODVSUHVWDFLRQHVGHOVLVWHPDSDUDODDXWRQRPtD\DWHQFLyQD ODGHSHQGHQFLD 7(0$ 'HVDUUROOR GHO 6LVWHPD SDUD OD $XWRQRPtD \ OD $WHQFLyQ D OD 'HSHQGHQFLD HQ &DQWDEULD 2UGHQ (03 GH GH DEULO SRU OD TXH VH GHVDUUROOD HO FDWiORJR GH VHUYLFLRV GHO 6LVWHPD SDUD OD $XWRQRPtD3HUVRQDO\OD$WHQFLyQDOD'HSHQGHQFLD\VHUHJXODODDSRUWDFLyQHFRQyPLFDGHODVSHUVRQDV XVXDULDVHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 3ODQLILFDFLyQ6DQLWDULD1LYHOHVGHSODQLILFDFLyQ3ODQLILFDFLyQQRUPDWLYDHVWUDWpJLFDWiFWLFD\RSHUDWLYD +HUUDPLHQWDVPHWRGROyJLFDV 7(0$ 0HGLFLQDEDVDGDHQODHYLGHQFLD(ODERUDFLyQGHJXtDVGHSUiFWLFDFOtQLFD9tDVFOtQLFDV)RUPXODFLyQ GH SUHJXQWDV FOtQLFDV 0HWRGRORJtD 3,&2 %XVFDGRUHV \ PRWRUHV GH E~VTXHGD ELEOLRJUiILFDV PiV XVDGRV0DQHMRGHRSHUDGRUHVERROHDQRV&ULWHULRVGHOHFWXUDFUtWLFDGHHQVD\RVFOtQLFRVPHWDQiOLVLV\ UHYLVLRQHV 7(0$ 6DOXGS~EOLFD&RQFHSWR'HWHUPLQDQWHVGHODVDOXG0RGHORV 7(0$ 3ULQFLSLRVGH,QWHUYHQFLyQ&RPXQLWDULD$32& $WHQFLyQ3ULPDULD2ULHQWDGDDOD&RPXQLGDG $FWLYRV HQ6DOXG,QWHUYHQFLRQHVJUXSDOHVFRQRULHQWDFLyQFRPXQLWDULD 7(0$ (GXFDFLyQVDQLWDULD3ULQFLSLRV2EMHWLYRV\DSOLFDFLRQHV0pWRGRVGHHGXFDFLyQVDQLWDULD0RGLILFDFLyQ GHFRPSRUWDPLHQWRVGHVDOXG 7(0$ 3URPRFLyQGHODVDOXG\SUHYHQFLyQGHODHQIHUPHGDG1LYHOHVGHSUHYHQFLyQ\DFWLYLGDGHVSUHYHQWLYDV 7(0$ $WHQFLyQDVLWXDFLRQHVGHYLROHQFLD&RQWUDODVPXMHUHVPDOWUDWRGHSHUVRQDVPD\RUHVDFRVRHVFRODU DFRVR SVLFROyJLFR HQ HO WUDEDMR 3URWRFROR GH DFWXDFLyQ VDQLWDULD DQWH ORV PDORV WUDWRV HQ &DQWDEULD &DStWXORV\ 7(0$ 3ODQGH6DOXGGH&DQWDEULDGH 7(0$ 3ODQGH$WHQFLyQDOD&URQLFLGDGGH&DQWDEULD 7(0$ 3ODQGH6DOXG0HQWDOGH&DQWDEULD/RVSUREOHPDVGHVDOXGPHQWDOFRPROtQHDHVWUDWpJLFD GHO 3ODQ GH 6DOXG GH &DQWDEULD \ 0LVLyQ YLVLyQ \ YDORUHV GHO 3ODQ GH 6DOXG 0HQWDO GH &DQWDEULD 7(0$ 3URJUDPDGH)DUPDFRYLJLODQFLDGH&DQWDEULD8VRDGHFXDGRGHOPHGLFDPHQWRHQ$WHQFLyQ3ULPDULD ,QWHUDFFLRQHVIDUPDFROyJLFDV\UHDFFLRQHVDGYHUVDVDPHGLFDPHQWRV1RWLILFDFLyQGH5$0 7(0$ 3UHVFULSFLyQGHIiUPDFRV9DULDELOLGDG(VWUDWHJLDVGHPHMRUDGHODFDOLGDGGHODSUHVFULSFLyQ %/248(,, 7(0$ +DELOLGDGHVGHUHODFLyQ(QWUHYLVWD&OtQLFD5HVROXFLyQGHFRQIOLFWRVFRQXVXDULRVGLItFLOHV$VHUWLYLGDG\ tQGLFHV$MXVWHRHVWDQGDUL]DFLyQGHWDVDV 7(0$ (VWDGtVWLFDVDQLWDULD ,, 0HGLGDVGHFHQWUDOL]DFLyQ\GHGLVSHUVLyQ$QiOLVLVGHPXHVWUDV\YDULDEOHVHQ $WHQFLyQ3ULPDULD i Pág. 12630 boc.cantabria.es CVE-2019-3750 HPSDWtD 7(0$ (VWDGtVWLFD VDQLWDULD , &RQFHSWR 5HFRJLGD GH GDWRV 3DUiPHWURV HVWDGtVWLFRV 5D]RQHV WDVDV H 123/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ ,QYHVWLJDFLyQ VDQLWDULD 0HWRGRORJtD 7DPDxR \ YDOLGH] GH OD PXHVWUD (VWXGLRV H[SHULPHQWDOHV (QVD\RV FOtQLFRV 9DOLGH] GH PpWRGRV GLDJQyVWLFRV (VWUXFWXUD PHWRGROyJLFD GH XQ WUDEDMR FLHQWtILFR )XHQWHVGHGDWRV 7(0$ (YDOXDFLyQ GH SUXHEDV GLDJQyVWLFDV 9DOLGH] \ )LDELOLGDG 6HQVLELOLGDG HVSHFLILFLGDG YDORUHV SUHGLFWLYRV 7(0$ (SLGHPLRORJtD2EMHWLYRV(SLGHPLRORJtDGHVFULSWLYD(VWXGLRVHLQGLFDGRUHV0HWRGRORJtD(VWXGLRGH FRKRUWHV5LHVJRUHODWLYRULHVJRDWULEXLEOH&DXVDOLGDG 7(0$ 9LJLODQFLDHLQYHVWLJDFLyQHSLGHPLROyJLFD$FWXDFLyQIUHQWHDEURWHVHSLGHPLROyJLFRV(SLGHPLRORJtDGH ODVHQIHUPHGDGHVWUDQVPLVLEOHV3UHYHQFLyQ\FRQWUROGHORVPHFDQLVPRVGHWUDQVPLVLyQ 7(0$ (QIHUPHGDGHV WUDQVPLVLEOHV GH PD\RU LQFLGHQFLD HQ OD SREODFLyQ HVSDxROD 6LVWHPD QDFLRQDO GH YLJLODQFLDHSLGHPLROyJLFD(QIHUPHGDGHVGHGHFODUDFLyQREOLJDWRULD 7(0$ 5HVLVWHQFLDV DQWLPLFURELDQDV 3ODQ 1DFLRQDO GH 5HVLVWHQFLDV $QWLPLFURELDQDV 3URJUDPDV GH RSWLPL]DFLyQGHXVRGHDQWLELyWLFRV352$ 7(0$ 3URJUDPDGHYDFXQDFLRQHVGH&DQWDEULD&DOHQGDULRYDFXQDO 7(0$ 3URJUDPDGHGHWHFFLyQSUHFR]GHFiQFHUFRORUUHFWDOGH&DQWDEULD 7(0$ 3URJUDPDGHGHWHFFLyQSUHFR]GHFiQFHUGHPDPDGH&DQWDEULD 7(0$ 3URJUDPDGHGHWHFFLyQSUHFR]GHFiQFHUGHFpUYL[GH&DQWDEULD 7(0$ 7UDVWRUQRV GH OD DOLPHQWDFLyQ 2EHVLGDG \ WUDVWRUQRV GH OD FRQGXFWD DOLPHQWDULD GHVGH $WHQFLyQ SULPDULD(QIRTXHWHUDSpXWLFR 7(0$ 3ODQ GH 3UHYHQFLyQ \ &RQWURO GHO 7DEDTXLVPR HQ &DQWDEULD -XVWLILFDFLyQ $QiOLVLV GH OD VLWXDFLyQDFWXDO\ÈUHDVGHDFWXDFLyQ 7(0$ $WHQFLyQDOFRQVXPLGRUH[FHVLYRGHDOFRKRO$ERUGDMHHQDWHQFLyQSULPDULD 7(0$ (VWUDWHJLDVREUH'URJDVGH&DQWDEULD&DStWXORV,,,,,,\9, 7(0$ 3URJUDPDLQWHJUDOGHDWHQFLyQSDOLDWLYDGH&DQWDEULD9ROXQWDGHVSUHYLDV 7(0$ $WHQFLyQDOSDFLHQWHWHUPLQDO&XLGDGRVSDOLDWLYRVFRQFHSWRV&RQWUROGHVtQWRPDV 7(0$ 3URJUDPDGHDWHQFLyQDODQFLDQR , 6tQGURPHV*HULiWULFRV3ULQFLSDOHV9DORUDFLyQ*HULiWULFD*OREDO 0DQHMRGHO'RORUFUyQLFRHQHO$QFLDQR$ERUGDMHGH)DFWRUHVGH5LHVJR&DUGLRYDVFXODUHQHODQFLDQR 'HPHQFLDHQHODQFLDQR0DQHMRGH7UDVWRUQRVSVLFRFRQGXFWXDOHVHQHODQFLDQR 7(0$ 3URJUDPD GH DWHQFLyQ DO DQFLDQR ,, (QIHUPHGDGHV DVRFLDGDV DO HQYHMHFLPLHQWR 8WLOL]DFLyQ GH IiUPDFRV'HWHFFLyQ\SUHYHQFLyQGHPDORVWUDWRV 7(0$ 3UREOHPDVGH6DOXG0HQWDOHQ$WHQFLyQ3ULPDULD'HSUHVLyQDQVLHGDGVRPDWL]DFLRQHVWUDVWRUQRVGHO VXHxR&OtQLFDGLDJQyVWLFR\WUDWDPLHQWR 7(0$ 7UDVWRUQRVGHODFRQGXFWDDOLPHQWDULD$QRUH[LD\EXOLPLD 7(0$ 8UJHQFLDVHQ6DOXG0HQWDO3DFLHQWHDJLWDGR,QWR[LFDFLRQHV$EVWLQHQFLDGHWy[LFRV,QWHQWRGHVXLFLGLR 7(0$ ,QIHFFLRQHVHLQWR[LFDFLRQHVSRUDOLPHQWRV(SLGHPLRORJtD\WUDWDPLHQWR 7(0$ &LUXJtDPHQRUHQ$WHQFLyQ3ULPDULD,QIUDHVWUXFWXUDTXLU~UJLFDHQHOFHQWURGHVDOXG3UHSDUDWLYRVGHOD LQWHUYHQFLyQHQFLUXJtDPHQRU3UHRSHUDWRULR\SRVRSHUDWRULR&RPSOLFDFLRQHVGHODFLUXJtDPHQRU 7(0$ (PHUJHQFLDVYLWDOHV$WHQFLyQXUJHQWHGHOSDFLHQWHSROLWUDXPDWL]DGRGHOWUDXPDWLVPRFUDQHRHQFHIiOLFR GHOHVLRQHVSRUTXHPDGXUDVHOHFWURFXFLyQFRQJHODFLyQHKLGURFXFLyQ i Pág. 12631 boc.cantabria.es CVE-2019-3750 7(0$ (QIHUPHGDGHVGHWUDQVPLVLyQVH[XDO(QIRTXHSUHYHQWLYRGLDJQyVWLFR\WHUDSpXWLFR 124/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 6DOXG ODERUDO (QIHUPHGDG \ $FFLGHQWH 3URIHVLRQDO 9LVLyQ GHVGH $WHQFLyQ 3ULPDULD *HVWLyQ \ VHJXLPLHQWR GH ,QFDSDFLGDG 7HPSRUDO 3DWRORJtD ODERUDO SUHYDOHQWH UHXPDWROyJLFD UHVSLUDWRULD LQIHFFLRVDGHUPDWROyJLFDQHXUROyJLFDQHRSODVLDV 7(0$ $ERUGDMHLQWHJUDOGHOWUDWDPLHQWRGHOGRORUHQ$WHQFLyQ3ULPDULD %/248(,,, 7(0$ 'HWHULRURFRJQLWLYR/DHQIHUPHGDGGH$O]KHLPHU\RWUDVGHPHQFLDV(QIRTXHGHVGH$WHQFLyQ3ULPDULD 7(0$ $FFLGHQWHVFHUHEURYDVFXODUHVDJXGRV(WLRSDWRJHQLDFOtQLFDGLDJQyVWLFR\WUDWDPLHQWR&yGLJR,&786 7(0$ &HIDOHDV(WLRSDWRJHQLDFODVLILFDFLyQFOtQLFD\WUDWDPLHQWR 7(0$ 'LDJQyVWLFRGLIHUHQFLDOGHOWHPEORU/DHQIHUPHGDGGH3DUNLQVRQ2WURVSDUNLQVRQLVPRV 7(0$ 6tQGURPHPHWDEyOLFR5LHVJRFDUGLRYDVFXODUHVWUDWLILFDFLyQGHOULHVJR 7(0$ +LSHUWHQVLyQDUWHULDO(WLRSDWRJHQLDFODVLILFDFLyQFOtQLFD\WUDWDPLHQWR 7(0$ 5HDQLPDFLyQFDUGLRSXOPRQDUEiVLFD\DYDQ]DGD([SORUDFLyQIXQFLRQDOFDUGLDFDEiVLFD,QVXILFLHQFLD FDUGLDFD 7(0$ &DUGLRSDWtDLVTXpPLFD3ODQ$&78$ 7(0$ (QIHUPHGDG FDUGLRYDVFXODU 3DWRORJtD YDVFXODU DUWHULDO \ YHQRVD 7UDVWRUQRV GHO ULWPR (QIRTXH GLDJQyVWLFR\WHUDSpXWLFR 7(0$ 3DWRORJtDVGLJHVWLYDVPiVIUHFXHQWHVHQ$WHQFLyQ3ULPDULD(QIHUPHGDGHVGHOHVyIDJRHVWyPDJRH LQWHVWLQR(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ 3DWRORJtDELOLRSDQFUHiWLFD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ +HSDWLWLVYtULFDV+HSDWRSDWtDFUyQLFD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ 3DWRORJtDWXPRUDOGLJHVWLYD$SUR[LPDFLyQGLDJQyVWLFD6HJXLPLHQWR 7(0$ 3DWRORJtDWLURLGHDPiVIUHFXHQWHHQ$WHQFLyQ3ULPDULD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ 'LDEHWHV0HOOLWXV(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR8UJHQFLDVHQHOSDFLHQWHGLDEpWLFR 7(0$ &RPSOLFDFLRQHV GH OD GLDEHWHV PHOOLWXV 5HWLQRSDWtD 1HIURSDWtD 1HXURSDWtD (QIHUPHGDG PDFURYDVFXODU3LHGLDEpWLFR 7(0$ 'LVOLSHPLDV9DORUDFLyQ\WUDWDPLHQWRHQUHODFLyQDOULHVJRDOULHVJRFDUGLRYDVFXODU 7(0$ ([SORUDFLyQ IXQFLRQDO EiVLFD HQ DSDUDWR UHVSLUDWRULR ,QVXILFLHQFLD UHVSLUDWRULD DJXGD ,QVXILFLHQFLD UHVSLUDWRULDFUyQLFD2[LJHQRWHUDSLDGRPLFLOLDULD 7(0$ $VPD(VWDWXVDVPiWLFR(QIHUPHGDGSXOPRQDUREVWUXFWLYDFUyQLFD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ 1HXPRQtD H[WUDKRVSLWDODULD 1HXPRWyUD[ 6$+26 &iQFHU GH SXOPyQ (QIRTXH GLDJQyVWLFR \ WHUDSpXWLFR 7(0$ 7HUDSpXWLFDDQWLWURPEyWLFD(QIRTXHGHVGH$WHQFLyQ3ULPDULD 7(0$ 3DWRORJtDRVWHRDUWLFXODUHQ$WHQFLyQ3ULPDULD$UWURVLV$UWULWLV(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ 2VWHRSRURVLV6tQGURPHVGRORURVRVGHODFROXPQDYHUWHEUDO(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR i Pág. 12632 boc.cantabria.es CVE-2019-3750 7(0$ (QIHUPHGDGHVKHPDWROyJLFDVPiVIUHFXHQWHVHQ$WHQFLyQ3ULPDULD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 125/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3DWRORJtDXUROyJLFDHQ$WHQFLyQ3ULPDULD,QIHFFLRQHVXULQDULDV/LWLDVLV3DWRORJtDSURVWiWLFD5HWHQFLyQ XULQDULD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR 7(0$ 3DWRORJtDQHIUROyJLFD,QVXILFLHQFLDUHQDODJXGD,QVXILFLHQFLDUHQDOFUyQLFD6tQGURPHQHIUyWLFR(QIRTXH GLDJQyVWLFR\WHUDSpXWLFR 7(0$ 3DWRORJtDWXPRUDOQHIURXUROyJLFD$SUR[LPDFLyQGLDJQyVWLFD6HJXLPLHQWR 7(0$ 3DWRORJtD GH 25/ HQ $WHQFLyQ 3ULPDULD 2WLWLV 6LQXVLWLV 9pUWLJR (SLVWD[LV 'LVIRQtD (QIRTXH GLDJQyVWLFR\WHUDSpXWLFR 7(0$ 3DWRORJtD RIWDOPROyJLFD HQ $WHQFLyQ 3ULPDULD 'LDJQyVWLFR GLIHUHQFLDO GHO RMR URMR 3pUGLGD GH YLVLyQ *ODXFRPD 7(0$ (QIHUPHGDGHV LQIHFFLRVDV 7XEHUFXORVLV JULSH 6,'$ (QIRTXH SUHYHQWLYR GLDJQyVWLFR \ WHUDSpXWLFR GHVGHOD$WHQFLyQ3ULPDULD 7(0$ 3UREOHPDVDOHUJROyJLFRVHQ$WHQFLyQ3ULPDULD6KRFNDQDILOiFWLFR 7(0$ 'HUPDWRORJtD OHVLRQHV HOHPHQWDOHV GH OD SLHO \ DIHFFLRQHV GpUPLFDV PiV FRPXQHV HQ $WHQFLyQ CVE-2019-3750 3ULPDULD(QIRTXHGLDJQyVWLFR\WHUDSpXWLFR'HUPDWRVFRSLD i Pág. 12633 boc.cantabria.es 126/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 3('$*2*Ë$ 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ &RQFHSWRGHSHGDJRJtD3UREOHPiWLFDIXQGDPHQWDO\RULHQWDFLRQHVDFWXDOHV 7(0$ ,QVWUXPHQWRVGHPHGLGDHQSHGDJRJtD/DVSUXHEDVREMHWLYDV/DVSUXHEDVDELHUWDV 7(0$ (OHPHQWRVGHHVWDGtVWLFDDSOLFDGRVDODSHGDJRJtD0HGLGDVGHYDULDELOLGDG 7(0$ )LQHV\DOFDQFHVGHODSHGDJRJtD6XLPSOLFDFLyQVRFLDO 7(0$ &RQFHSWRGHHGXFDFLyQ([WHQVLyQ\OtPLWHV 7(0$ 3ULQFLSLRV\OH\HVGHODHGXFDFLyQ 7(0$ /DPDGXUDFLyQ&RQFHSWR0DGXUDFLyQ\DSUHQGL]DMH/DVGLIHUHQFLDVLQGLYLGXDOHV 7(0$ 7HRUtDGHODVHWDSDVHQHOGHVDUUROORGHOQLxR 7(0$ 'HVDUUROORFRJQLWLYRDIHFWLYRSVLFRPRWRU\VRFLDOHQODSULPHUDLQIDQFLDGHDxRV 7(0$ 'HVDUUROORFRJQLWLYRDIHFWLYRSVLFRPRWRU\VRFLDOHQODSULPHUDLQIDQFLDGHDxRV 7(0$ 'HVDUUROORFRJQLWLYRDIHFWLYRSVLFRPRWRU\VRFLDOHQODLQIDQFLDGHDxRV 7(0$ (ODSHJR&RQFHSWRIRUPDFLyQWLSR\HYROXFLyQGHODSHJR 7(0$ 3URFHVRVGLQiPLFRVHQHODSUHQGL]DMHVRFLDO 7(0$ 7pFQLFDVVRFLRPHғWULFDV\VXDSOLFDFLyQHQODHGXFDFLyQ 7(0$ )DPLOLD\FODVHVRFLDOHQHOSURFHVRGHVRFLDOL]DFLyQ 7(0$ /DSHUVRQDOLGDGFRQFHSWR/DPHGLGDGHODSHUVRQDOLGDG/DPRGLILFDFLyQGHODSHUVRQDOLGDG 7(0$ (OSURFHVRGHODDGROHVFHQFLD$VSHFWRVJHQHUDOHV 7(0$ 3UREOHPDVGHGHVDUUROORHQODDGROHVFHQFLD 7(0$ ,QWHUQDOL]DFLyQ H LGHQWLGDG HQ OD DGROHVFHQFLD ,QWHUQDOL]DFLyQ \ SURFHVRV HPRFLRQDOHV HQ OD DGROHVFHQFLD 7(0$ $OWHUDFLRQHVFRPSRUWDPHQWDOHV\FRQGXFWDVDVRFLDOHVHQODDGROHVFHQFLD3URJUDPDVGHSUHYHQFLyQ LQWHUYHQFLyQ\WUDWDPLHQWR 7(0$ /DSHGDJRJtDVRFLDO\VXVFDPSRVGHDFWXDFLyQ 7(0$ /DSUHYHQFLyQHQLQWHUYHQFLyQVRFLRHGXFDWLYD 7(0$ /DRULHQWDFLyQFRPRDFWLYLGDGHGXFDWLYD)LQDOLGDGHVSULQFLSLRVIXQFLRQHV\SURFHVR 7(0$ (ODSUHQGL]DMHVRFLDO/DDGTXLVLFLyQGHODVKDELOLGDGHVVRFLDOHV 7(0$ (ODSUHQGL]DMHVRFLDO(OGHVDUUROORGHODVKDELOLGDGHVPRUDOHV i Pág. 12634 boc.cantabria.es CVE-2019-3750 7(0$ (ODSUHQGL]DMHVRFLDO&RQFHSWR7HRUtDV\3URFHVRV 127/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (ODSUHQGL]DMHVRFLDO/DDGTXLVLFLyQGHODVKDELOLGDGHVFtYLFRSROÕWғ LFDV 7(0$ 'LIHUHQWHVHQIRTXHVGHODGLQiPLFDGHJUXSRV %/248(,, 7(0$ 3ULQFLSLRV EiVLFRV FRPXQHV D ORV GLVWLQWRV PRGHORV GH RULHQWDFLyQ HGXFDWLYD 6XV WpFQLFDV PiV DYDQ]DGDV 7(0$ /DLQWHJUDFLyQGHDOXPQRVFRQQHFHVLGDGHVHGXFDWLYDVHVSHFLDOHVHQODHVFXHODRUGLQDULD3ULQFLSLRV\ PpWRGRVGHODLQWHJUDFLyQHVFRODU 7(0$ /DHGXFDFLyQSDUDODLJXDOGDG&RHGXFDFLyQ(GXFDFLyQQRGLVFULPLQDWRULD(OLPLQDFLyQGHORVSUHMXLFLRV VH[LVWDV\UDFLVWDVHQODHGXFDFLyQ\HOWUDEDMR2ULHQWDFLyQDFDGpPLFRSURIHVLRQDOSDUDODLJXDOGDGGH RSRUWXQLGDGHV 7(0$ (OIUDFDVRHVFRODU$QiOLVLV\SDXWDVGHLQWHUYHQFLyQ 7(0$ 0XOWLGLPHQVLRQDOLGDGGHODUHODFLyQSURIHVRUDOXPQR 7(0$ /DHYDOXDFLyQIRUPDWLYD 7(0$ /D UHODFLyQ GH ORV DOXPQRV HQWUH VÕғ GHQWUR GHO DXOD ,QWHJUDFLyQ HQ HO JUXSR GH ORV DOXPQRV FRQ GLILFXOWDGHV 7(0$ (OSURFHVRGHHQVHxDQ]DDSUHQGL]DMHFRPRSURFHVRGHFRQVWUXFFLyQ\GHLQWHUDFFLyQ 7(0$ /DHYDOXDFLyQGHODSHUVRQDOLGDGDSOLFDGDDODHGXFDFLyQ 7(0$ (ODQiOLVLVGHODVDSWLWXGHV 7(0$ 'LVFDSDFLGDG,PSRUWDQFLDGHODRULHQWDFLyQSHGDJyJLFD 7(0$ /DVDFWLWXGHV$QiOLVLV\PRGLILFDFLyQ 7(0$ 5HOHYDQFLDGHODPRWLYDFLyQHQODHVIHUDGHODHGXFDFLyQ 7(0$ &RQFHSWRGHUHIXHU]R&ODVHVGHUHIXHU]RV3URJUDPDVVLPSOHVGHUHIRU]DPLHQWRSRVLWLYR$GTXLVLFLyQ \PDQWHQLPLHQWR 7(0$ (VWDGRGHO%LHQHVWDUVHUYLFLRVVRFLDOHV\SURIHVLRQDOL]DFLyQGHOSHGDJRJR 7(0$ /DDQLPDFLyQVRFLRFXOWXUDOGHORVMyYHQHVHQODFRPXQLGDG 7(0$ /DDFWXDFLyQGHOSHGDJRJRDQWHODIDPLOLDODLQIDQFLD\ODMXYHQWXG 7(0$ &DPELRVVRFLDOHVTXHDIHFWDQDOPHQRU\ODIDPLOLD 7(0$ /DYLROHQFLDHQHOFRQWH[WRIDPLOLDU 7(0$ /DSURWHFFLyQGHORVGHUHFKRVGHORVPHQRUHVHQFDVRVGHGLYRUFLR\VHSDUDFLyQ 7(0$ (OPHQRUPDOWUDWDGR\RPDOWUDWDQWH 7(0$ (OGHIHQVRUGHOPHQRU)LORVRItDGHSDUWLGD 7(0$ &DXVDVVRFLDOHVGHODGHOLQFXHQFLDLQIDQWLO 7(0$ 9LROHQFLD\HVFXHOD 7(0$ 0HGLRVGHFRPXQLFDFLyQGHPDVDV6XLQIOXHQFLDHQODVRFLHGDG\HQODFXOWXUDFRQWHPSRUiQHDV 7(0$ /DSUHYHQFLyQGHVLWXDFLRQHVGHULHVJR\VLVWHPDHGXFDWLYR i Pág. 12635 boc.cantabria.es CVE-2019-3750 7(0$ 9DORUHV\'HVDUUROOR0RUDO&RQFHSWRFDUDFWHUtVWLFDV\FRPSRQHQWHV,QWHUYHQFLyQ(GXFDWLYD 128/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (GXFDFLyQSDUDOD6DOXG$OLPHQWDFLyQ6H[XDOLGDG'URJRGHSHQGHQFLDV 7(0$ /DHGXFDFLyQSDUDHOFRQVXPR\HOUHVSHWRDOPHGLRDPELHQWH(GXFDFLyQ$PELHQWDO %/248(,,, 7(0$ /D/H\2UJiQLFDGHGHHQHURUHJXODGRUDGHODUHVSRQVDELOLGDGSHQDOGHORVPHQRUHV 7(0$ /DLQWHUYHQFLyQPXOWLGLVFLSOLQDUHQORVSUREOHPDVGHIDPLOLDV\PHQRUHV/RVHTXLSRVWpFQLFRV3DSHOGHO SHGDJRJRRHGXFDGRU 7(0$ 7pFQLFDVGHLQWHUYHQFLyQHQODIDPLOLD7HUDSLDIDPLOLDUEUHYH 7(0$ /D YLROHQFLD GH JpQHUR GHILQLFLyQ FDUDFWHUtVWLFDV \ DVSHFWRV SVLFROyJLFRV GH ODV YtFWLPDV /D /H\ 2UJiQLFDGHGHGLFLHPEUHGH0HGLGDVGH3URWHFFLyQ,QWHJUDOFRQWUDOD9LROHQFLDGH*pQHUR 7(0$ /D/H\GH&DQWDEULDGHGHDEULO,QWHJUDOSDUDOD3UHYHQFLyQGHOD9LROHQFLDFRQWUDODV0XMHUHV \OD3URWHFFLyQDVXV9tFWLPDV 7(0$ 3URWHFFLyQLQIDQWLO(YDOXDFLyQIDPLOLDUHQVLWXDFLRQHVGHULHVJR\GHVDPSDUR 7(0$ (ODEXVRVH[XDOLQIDQWLO(YDOXDFLyQ\SURJUDPDVGHLQWHUYHQFLyQ 7(0$ ,QWHUYHQFLyQVRFLRHGXFDWLYDFRQYtFWLPDVGH9LROHQFLDGH*pQHUR 7(0$ /DDGRSFLyQ\ODVPHGLGDVGHLQWHUYHQFLyQHQODOHJLVODFLyQJHQHUDOGHO(VWDGR 7(0$ /DGHVSURWHFFLyQ,QIDQWLOPDUFROHJDO\SULQFLSLRVGHDFWXDFLyQ 7(0$ 3URFHGLPLHQWRGHLQWHUYHQFLyQHQVLWXDFLRQHVGHGHVSURWHFFLyQ3ODQGHFDVR 7(0$ /RV3URJUDPDVGH,QWHUYHQFLyQ)DPLOLDU3ULQFLSLRV\IXQGDPHQWRVLQVWUXPHQWRVILQDOLGDGHV 7(0$ 3URJUDPDV FHQWUDGRV HQ HO DSR\R D ORV QLxRV QLxDV \ DGROHVFHQWHV 3URJUDPDV GH IRPHQWR D OD UHVLOLHQFLD 7(0$ /D /H\ GH &DQWDEULD GH GH QRYLHPEUH GH FUHDFLyQ GHO ,QVWLWXWR &iQWDEUR GH 6HUYLFLRV 6RFLDOHVFRPSHWHQFLDVIXQFLRQHV\SULQFLSLRVJHQHUDOHVGHDFWXDFLyQ 7(0$ /DVSUHVWDFLRQHVGHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVODFDUWHUDGH6HUYLFLRV6RFLDOHV 7(0$ 0DUFR OHJDO GH ORV VHUYLFLRV VRFLDOHV HQ &DQWDEULD OD /H\ GH &DQWDEULD GH GH PDU]R GH 'HUHFKRV \ 6HUYLFLRV 6RFLDOHV (O 6LVWHPD 3~EOLFR GH 6HUYLFLRV 6RFLDOHV SULQFLSLRV RUJDQL]DFLyQ \ UHFXUVRV 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GH JDUDQWtD GH GHUHFKRV \ DWHQFLyQ D OD LQIDQFLD \ DGROHVFHQFLD 7(0$ /H\GHGHMXOLRGHPRGLILFDFLyQGHOVLVWHPDGHSURWHFFLyQDODLQIDQFLD\DODDGROHVFHQFLD 7(0$ /DVGLIHUHQFLDVVRFLRFXOWXUDOHVHQODHGXFDFLyQ/DUHVSXHVWDHGXFDWLYDDODGLYHUVLGDG/DHGXFDFLyQ LQWHUFXOWXUDO 7(0$ 'LVHxR\HYDOXDFLyQGHSURJUDPDVGHLQWHUYHQFLyQVRFLRHGXFDWLYDGLULJLGRVDFROHFWLYRVHVSHFtILFRV 7(0$ /DV WHFQRORJtDV GH OD LQIRUPDFLyQ \ OD FRPXQLFDFLyQ 7,& \ VXV SRVLELOLGDGHV HQ OD IRUPDFLyQ FRPR UHFXUVRGLGiFWLFR\FRPRJHVWLyQGHFRQRFLPLHQWRV 7(0$ (OGLDJQyVWLFRSHGDJyJLFR&RQFHSWR(QIRTXHV7pFQLFDV/DHYDOXDFLyQGHODFDSDFLGDGLQWHOHFWXDO 7(0$ (O OLGHUD]JR )XQFLRQHV 7LSRORJtDV GH OLGHUD]JR /D LQIOXHQFLD GH ORV OtGHUHV HQ OD RUJDQL]DFLyQ ,QIOXHQFLDVREUHHOJUXSR i Pág. 12636 boc.cantabria.es CVE-2019-3750 GHODVDSWLWXGHVEiVLFDV\GHODVFDUDFWHUtVWLFDVSHUVRQDOHVUHODFLRQDGDVFRQHOSURFHVRHGXFDWLYR 7(0$ 'RFWULQDGHOPHQRUPDGXUR$VSHFWRVpWLFRV\MXUtGLFRV 129/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (OSDSHOGHO$FRJLPLHQWR5HVLGHQFLDOFRPRPHGLGDGHSURWHFFLyQ)XQFLRQHV\WLSRORJtDV 7(0$ 3URJUDPDFLyQSURFHVRV\WpFQLFDVGHHYDOXDFLyQHQHO$FRJLPLHQWR5HVLGHQFLDO 7(0$ /DLQWHUYHQFLyQVRFLRHGXFDWLYDFRQDGROHVFHQWHVLQIUDFWRUHVHQFRQWH[WRUHVLGHQFLDO\PHGLRDELHUWR 7(0$ (O$FRJLPLHQWR)DPLOLDU(YROXFLyQWLSRV\PRGDOLGDGHVGHDFRJLPLHQWR 7(0$ 3ODQLILFDFLyQ\3URJUDPDFLyQGHOD,QWHUYHQFLyQ6RFLDO)DVHVGHOSURFHVRGHSODQLILFDFLyQ7pFQLFDVGH CVE-2019-3750 ODSURJUDPDFLyQ2UJDQL]DFLyQ\JHVWLyQGHORVUHFXUVRV i Pág. 12637 boc.cantabria.es 130/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(13(5,2',602 0$7(5,$6(63(&Ë),&$6 i Pág. 12638 7(0$ +LVWRULDGHORVPHGLRVGHFRPXQLFDFLyQHQ&DQWDEULD 7(0$ /D UDGLR HQ &DQWDEULD 2UtJHQHV HYROXFLyQ VLWXDFLyQ DFWXDO \ SHUVSHFWLYDV IXWXUDV (PLVRUDVHVWUXFWXUD\DXGLHQFLDV(PLVRUDVGHUDGLRPXQLFLSDOHV 7(0$ /DWHOHYLVLyQHQ&DQWDEULD2UtJHQHVGHVDUUROORVLWXDFLyQDFWXDO\SHUVSHFWLYDVIXWXUDV &DGHQDVHVWUXFWXUD\DXGLHQFLDV 7(0$ /D SUHQVD GLDULD HQ &DQWDEULD 2UtJHQHV HYROXFLyQ \ IXWXUR &DEHFHUDV HVWUXFWXUD \ GLIXVLyQ 7(0$ 3XEOLFDFLRQHVQRGLDULDVHQ&DQWDEULD+LVWRULD\FR\XQWXUDDFWXDO&DEHFHUDVHVWUXFWXUDV \GLIXVLyQ 7(0$ /DLQIRUPDFLyQSHULRGtVWLFDHVSHFLDOL]DGDHQ&DQWDEULDHQWRGRVVXVVRSRUWHV2UtJHQHV HYROXFLyQVLWXDFLyQDFWXDO\SHUVSHFWLYDVIXWXUDV 7(0$ (O SHULRGLVPR GLJLWDO HQ &DQWDEULD (YROXFLyQ VLWXDFLyQ DFWXDO \ SUR\HFFLyQ 3RUWDOHV GLJLWDOHVHVWUXFWXUD\GLIXVLyQ 7(0$ /DVDJHQFLDVGHQRWLFLDVHQ&DQWDEULD+LVWRULD\SHUVSHFWLYDV/RVPHGLRVQDFLRQDOHVHQ &DQWDEULD\&DQWDEULDHQORVPHGLRVQDFLRQDOHV 7(0$ /DV HPSUHVDV GH SURGXFFLyQ GH FRQWHQLGRV HQ &DQWDEULD &RPLHQ]RV HYROXFLyQ \ SDQRUDPDIXWXUR5HODFLRQHVFRQORVJDELQHWHVGHFRPXQLFDFLyQ 7(0$ /DSURIHVLyQSHULRGtVWLFDHQ&DQWDEULD'HVDUUROOR\SHUVSHFWLYDVIXWXUDV/D$VRFLDFLyQGH 3HULRGLVWDVGH&DQWDEULD 7(0$ (O VHFWRU IXQGDFLRQDO \ HO WHMLGR DVRFLDWLYR HQ &DQWDEULD (O WHUFHU VHFWRU &RODERUDFLyQ S~EOLFRSULYDGDHQHOiPELWRGHOD$GPLQLVWUDFLyQDXWRQyPLFD 7(0$ (O OLEUR 1DFLPLHQWR \ GHVDUUROOR GH OD LPSUHQWD 6X LQIOXHQFLD HQ HO GHVDUUROOR GH OD FLYLOL]DFLyQ /D SURGXFFLyQ HGLWRULDO HQ &DQWDEULD (YROXFLyQ \ VLWXDFLyQ DFWXDO 3ROtWLFD HGLWRULDOGHO*RELHUQRGH&DQWDEULD 7(0$ /DVHPSUHVDVSHULRGtVWLFDVHQ&DQWDEULD\(VSDxD'HOSHULRGLVWDDXWyQRPRDORVJUDQGHV JUXSRVPXOWLPHGLD 7(0$ /D FRPXQLFDFLyQ GH PDVDV 2UtJHQHV HYROXFLyQ \ VLWXDFLyQ DFWXDO /RV PHGLRV WUDGLFLRQDOHVIUHQWHDODVQXHYDVKHUUDPLHQWDVGHFRPXQLFDFLyQ 7(0$ /DRSLQLyQS~EOLFD\ODRSLQLyQSXEOLFDGD/RVPHGLRVGHFRPXQLFDFLyQFRPRFUHDGRUHVGH RSLQLyQ/DVHQFXHVWDVGHRSLQLyQHQ&DQWDEULD\(VSDxD boc.cantabria.es CVE-2019-3750 %/248(, 131/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /DFRPXQLFDFLyQLQVWLWXFLRQDO&RQFHSWR\HYROXFLyQKLVWyULFD(VWUXFWXUDRUJDQL]DFLyQ\ IXQFLRQDPLHQWR GH XQ JDELQHWH GH FRPXQLFDFLyQ /D FRPXQLFDFLyQ LQVWLWXFLRQDO HQ OD DGPLQLVWUDFLyQS~EOLFD\VXLPSRUWDQFLDHQHOSURFHVRGHFRPXQLFDFLyQ 7(0$ /D 2ILFLQD GH &RPXQLFDFLyQ GHO *RELHUQR GH &DQWDEULD 2UtJHQHV \ HYROXFLyQ 2UJDQL]DFLyQHVWUXFWXUD\IXQFLRQHV 7(0$ /RVJDELQHWHVGHSUHQVDLQVWLWXFLRQDOHV\HPSUHVDULDOHVGH&DQWDEULD+LVWRULDGHVDUUROOR \FR\XQWXUDDFWXDO 7(0$ 'LIHUHQFLDVHQWUHLQIRUPDFLyQRSLQLyQSURSDJDQGDSXEOLFLGDG\UHODFLRQHVS~EOLFDV/D SXEOLFLGDG \ ODV UHODFLRQHV S~EOLFDV DSOLFDGDV D ODV HPSUHVDV LQVWLWXFLRQHV \ DFWLYLGDG SROtWLFD2EMHWLYRV\PHGLRVXWLOL]DGRV 7(0$ /RV JpQHURV SHULRGtVWLFRV GH LQIRUPDFLyQ \ RSLQLyQ \ VX DSOLFDFLyQ D ORV JDELQHWHV GH FRPXQLFDFLyQLQVWLWXFLRQDOHV(OFRPXQLFDGRGHSUHQVDHOGLVFXUVRLQVWLWXFLRQDOODWULEXQD ODUHVSXHVWDSROtWLFD 7(0$ /DFRPXQLFDFLyQSROtWLFD\ORVPHGLRVGHFRPXQLFDFLyQ(VWUDWHJLDVGHFDPSDxD 7(0$ /DUHYROXFLyQGLJLWDOHQHOVHQRGHODDGPLQLVWUDFLyQS~EOLFD/DDGPLQLVWUDFLyQHOHFWUyQLFD 0HGLGDVLPSODQWDGDVHQOD$GPLQLVWUDFLyQFiQWDEUD\UHWRVIXWXURV 7(0$ ,QWHUQHW+LVWRULD\GHVDUUROOR/DFRPXQLFDFLyQHQ,QWHUQHW 7(0$ (ODERUDFLyQGHSiJLQDVZHE\EORJV/DVSiJLQDVZHELQVWLWXFLRQDOHV(GLWRUHVGLVHxR\ FRQWHQLGRV (O SRUWDO LQVWLWXFLRQDO GHO *RELHUQR GH &DQWDEULD 3RVLFLRQDPLHQWR HQ EXVFDGRUHV6(2\6(0 7(0$ 6HJXLPLHQWR\E~VTXHGDGHLQIRUPDFLyQHQ,QWHUQHW)XHQWHV\PRQLWRUL]DFLyQDWUDYpVGH UHGHV VRFLDOHV \ GH VHUYLFLRV GH DJUHJDFLyQ \ GH DOHUWD 9HULILFDFLyQ GH QRWLFLDV \ µIDNH QHZV¶ %/248(,, i Pág. 12639 7(0$ (OGHUHFKRDODLQIRUPDFLyQ\DODOLEHUWDGGHH[SUHVLyQ/tPLWHVIUHQWHDOGHUHFKRDOKRQRU D OD LQWLPLGDG \ D OD SURSLD LPDJHQ (O GHUHFKR GH UHFWLILFDFLyQ eWLFD \ GHRQWRORJtD SURIHVLRQDO 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH(OPRGHORDXWRQyPLFR\HOUHSDUWRGHFRPSHWHQFLDV /RVUHWRVGHOD&DUWD0DJQD 7(0$ (O(VWDWXWRGH$XWRQRPtDGH&DQWDEULD3ULQFLSLRV\DUWLFXODGR3DVDGRSUHVHQWH\IXWXUR GH&DQWDEULDFRPR&RPXQLGDG$XWyQRPD 7(0$ /D LQIRUPDFLyQ SDUODPHQWDULD HQ &DQWDEULD \ (VSDxD 2UtJHQHV HYROXFLyQ \ VLWXDFLyQ DFWXDO(OSDUODPHQWRDELHUWRULHVJRV\RSRUWXQLGDGHV 7(0$ (OHQWRUQRPXOWLPHGLDHQORVJDELQHWHVGHFRPXQLFDFLyQHOVRQLGRODIRWRJUDItD\HOYtGHR (OSHULRGLVWDPXOWLPHGLD 7(0$ (GLFLyQGHIRWRJUDItD\YtGHRHQORVJDELQHWHVGHFRPXQLFDFLyQ2UJDQL]DFLyQGHOWUDEDMR DXGLRYLVXDO3URJUDPDV\DSOLFDFLRQHV$UFKLYR boc.cantabria.es CVE-2019-3750 132/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12640 'RFXPHQWDFLyQ LQIRUPDWLYD HQ XQ JDELQHWH GH FRPXQLFDFLyQ (O VHJXLPLHQWR GH OD LQIRUPDFLyQHQORVGLIHUHQWHVVRSRUWHVPHGLiWLFRV 7(0$ /DVUHGHVVRFLDOHV&RPLHQ]RVHYROXFLyQ\IXWXUR 7(0$ /DFRPXQLFDFLyQHQUHGHVVRFLDOHV&yPRKDFHUSHULRGLVPRHQUHGHVVRFLDOHV*HVWLyQGH SHUILOHVHQLQVWLWXFLRQHVRUJDQL]DFLRQHVSROtWLFDV\VRFLDOHV\PHGLRVGHFRPXQLFDFLyQ 7(0$ (O*RELHUQRGH&DQWDEULDHQODVUHGHVVRFLDOHV/RVSHUILOHVLQVWLWXFLRQDOHV 7(0$ (OµFRPPXQLW\PDQDJHU¶)XQFLRQHVKHUUDPLHQWDV\SULQFLSDOHVKDELOLGDGHV(OFRPPXQLW\ PDQDJHUHQXQJDELQHWHGHFRPXQLFDFLyQLQVWLWXFLRQDO 7(0$ 3HULRGLVPRGHGDWRV\FRPXQLFDFLyQSROtWLFD,QIRJUDItDV\SUHVHQWDFLRQHV(VWUDWHJLDVGH PDUNHWLQJGLJLWDO$SOLFDFLyQDOHQWRUQRGHXQDDGPLQLVWUDFLyQS~EOLFD 7(0$ /DFRPXQLFDFLyQHQVLWXDFLRQHVGHFULVLV*HVWLyQGHFULVLV\HVWUDWHJLDVHQHOiPELWRGHOD DGPLQLVWUDFLyQS~EOLFD 7(0$ /DFRPXQLFDFLyQHQVLWXDFLRQHVGHHPHUJHQFLDV3ODQWHUULWRULDO\SODQHVHVSHFLDOHVGH SURWHFFLyQFLYLO(O2UJDQLVPR$XWyQRPR6HUYLFLRGH(PHUJHQFLDVGH&DQWDEULD 6(0&$ UpJLPHQMXUtGLFR 7(0$ (O VLVWHPD HOHFWRUDO HVSDxRO (OHFFLRQHV JHQHUDOHV DXWRQyPLFDV \ PXQLFLSDOHV /HJLVODFLyQ \ SURFHGLPLHQWR +LVWRULD GH ODV HOHFFLRQHV DXWRQyPLFDV \ PXQLFLSDOHV HQ &DQWDEULD(OHFFLRQHVDO3DUODPHQWR(XURSHR 7(0$ (O *RELHUQR GH &DQWDEULD (VWUXFWXUD \ FRPSRVLFLyQ DFWXDO (O SUHVLGHQWH GH &DQWDEULD HOHFFLyQ\IXQFLRQHV(O&RQVHMRGH*RELHUQR/RVFRQVHMHURVQRPEUDPLHQWR\IXQFLRQHV (VWUXFWXUDGHODVFRQVHMHUtDV 7(0$ 6HFWRU S~EOLFR DXWRQyPLFR 2UJDQL]DFLyQ LQVWLWXFLRQDO GHO *RELHUQR GH &DQWDEULD (YROXFLyQHVWUXFWXUD\FRPSRVLFLyQDFWXDO 7(0$ (O 3DUODPHQWR GH &DQWDEULD 3URFHGLPLHQWR OHJLVODWLYR ,QWHUSHODFLRQHV SUHJXQWDV \ SURSRVLFLRQHVQRGHOH\5HODFLRQHVGHO*RELHUQRFRQODFiPDUDUHJLRQDO 7(0$ /RV SDUWLGRV SROtWLFRV \ ODV RUJDQL]DFLRQHV VLQGLFDOHV \ HPSUHVDULDOHV HQ &DQWDEULD (VWUXFWXUD\FRPSRVLFLyQ(OGLiORJRVRFLDO 7(0$ /RV SUHVXSXHVWRV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7UiPLWH \ SURFHGLPLHQWR OHJLVODWLYRSDUDVXDSUREDFLyQ 7(0$ /DILQDQFLDFLyQDXWRQyPLFD$QiOLVLVGHORVLQJUHVRVTXHUHFLEHOD$GPLQLVWUDFLyQUHJLRQDO (YROXFLyQVLWXDFLyQDFWXDO\UHWRVIXWXURV/H\GH)LQDQ]DVGH&DQWDEULD 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGHO(VWDGRHQ&DQWDEULD(YROXFLyQ\VLWXDFLyQDFWXDO/RV SUR\HFWRVGHO(VWDGRHQ&DQWDEULD\ODVUHLYLQGLFDFLRQHVGHOD&RPXQLGDG$XWyQRPD 7(0$ /D$GPLQLVWUDFLyQGHO(VWDGRHQ&DQWDEULD'HOHJDFLRQHVRUJDQLVPRV\VHUYLFLRVHVWDWDOHV HQ&DQWDEULD(VWUXFWXUD\IXQFLRQHV 7(0$ /D $GPLQLVWUDFLyQ ORFDO HQ &DQWDEULD )LQDQFLDFLyQ FR\XQWXUD DFWXDO \ UHWRVIXWXURV /D )HGHUDFLyQGH0XQLFLSLRVGH&DQWDEULD 7(0$ /D8QLyQ(XURSHDDQWHFHGHQWHV\WUDWDGRVIXQGDFLRQDOHVUHIRUPDV\VLWXDFLyQDFWXDO/DV LQVWLWXFLRQHVFRPXQLWDULDV boc.cantabria.es CVE-2019-3750 7(0$ 133/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3DUWLFLSDFLyQ GH &DQWDEULD HQ ODV LQVWLWXFLRQHV FRPXQLWDULDV ,PSDFWR GH ODV D\XGDV HXURSHDVHQ&DQWDEULD(YROXFLyQVLWXDFLyQDFWXDO\SHUVSHFWLYDVIXWXUDV 7(0$ /DDWHQFLyQFLXGDGDQDHQHOiPELWRGHODDGPLQLVWUDFLyQS~EOLFD$FFHVRDODLQIRUPDFLyQ S~EOLFD \ SDUWLFLSDFLyQ FLXGDGDQD &DPELRV HQ OD FRPXQLFDFLyQ S~EOLFD /D /H\ GH 7UDQVSDUHQFLDGH&DQWDEULD 7(0$ /D QRUPDWLYD GH SURWHFFLyQ GH GDWRV 2EOLJDFLRQHV HQ ODV DGPLQLVWUDFLRQHV S~EOLFDV 3ULYDFLGDG\FLEHUVHJXULGDG'HUHFKRVGLJLWDOHV 7(0$ /RVVtPERORVGHOD&RPXQLGDG$XWyQRPDODEDQGHUDHOKLPQR\HOHVFXGRGH&DQWDEULD 7(0$ (O SURWRFROR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD +RQRUHV \ GLVWLQFLRQHV (O DFWR LQVWLWXFLRQDO3ULQFLSDOHVDFWRVLQVWLWXFLRQDOHVGHO*RELHUQRGH&DQWDEULD %/248(,,, i Pág. 12641 7(0$ 6LWXDFLyQSROtWLFDHFRQyPLFD\VRFLDOGH&DQWDEULD\(VSDxDHQODDFWXDOLGDG3ULQFLSDOHV LQGLFDGRUHVGHFUHFLPLHQWR\HVWDGtVWLFRVDXWRQyPLFRV\QDFLRQDOHV 7(0$ /DHFRQRPtDGH&DQWDEULD(YROXFLyQHQORV~OWLPRVDxRV6HFWRUHVSURGXFWLYRVSHVR \SHUVSHFWLYDVGHIXWXUR 7(0$ (OPHUFDGRGHWUDEDMRHQ&DQWDEULD3REODFLyQDFWLYDRFXSDFLyQ\SDUR'LVWULEXFLyQSRU VHFWRUHV]RQDV\HGDGHV0HGLGDVGHO*RELHUQRGH&DQWDEULDSDUDIRPHQWDUHOHPSOHR 7(0$ (OVHFWRUSULPDULRHQODHFRQRPtDUHJLRQDO(YROXFLyQ\UHWRV3ROtWLFDVGHO*RELHUQRGH &DQWDEULDSDUDLPSXOVDUHOVHFWRU/DLQGXVWULDDJURDOLPHQWDULD 7(0$ /RV SXHUWRV SHVTXHURV GH &DQWDEULD 3DVDGR SUHVHQWH \ IXWXUR *HVWLyQ SRUWXDULD GHO *RELHUQRGH&DQWDEULD3UR\HFWRVHLQYHUVLRQHV 7(0$ (OVHFWRUGHODFRQVWUXFFLyQHQ&DQWDEULD'HVDUUROOR\IXWXUR/DYLYLHQGDHQ&DQWDEULD 3ROtWLFDVGHO*RELHUQRGH&DQWDEULDSDUDLPSXOVDUHOVHFWRU 7(0$ (OVHFWRUVHUYLFLRVHQODHFRQRPtDUHJLRQDO(YROXFLyQVLWXDFLyQDFWXDO\UHWRV3ROtWLFDV GHO*RELHUQRGH&DQWDEULDSDUDLPSXOVDUHOVHFWRU 7(0$ /RVDFWLYRVWXUtVWLFRVGH&DQWDEULD2UtJHQHVFR\XQWXUDDFWXDO\SHUVSHFWLYDVGHIXWXUR &$1785 7(0$ (OVHFWRULQGXVWULDO\HPSUHVDULDOHQ&DQWDEULD'HVDUUROORVLWXDFLyQDFWXDO\UHWRVIXWXURV 3ROtWLFDVGHO*RELHUQRGH&DQWDEULDSDUDLPSXOVDUHOVHFWRU 7(0$ /DVLQIUDHVWUXFWXUDVGHFRPXQLFDFLyQHQ&DQWDEULD/D5HG$XWRQyPLFDGH&DUUHWHUDVODV DXWRYtDVODUHGIHUURYLDULDHOSXHUWRGH6DQWDQGHU\HODHURSXHUWR 7(0$ &DQWDEULD\VXVHVSDFLRVQDWXUDOHV&DUDFWHUtVWLFDV\UHJXODFLyQ$QiOLVLVGHVXVLWXDFLyQ \IXWXUR(OPRQWHFRPRDFWLYRVRFLRHFRQyPLFR/RVLQFHQGLRVIRUHVWDOHV 7(0$ /DJHRJUDItDGH&DQWDEULD'LYLVLyQJHRJUiILFDGHOWHUULWRULR&OLPD8WLOL]DFLyQGHOVXHOR /D&DQWDEULDOLWRUDO\UXUDO 7(0$ /DGHPRJUDItDHQ&DQWDEULD'LPHQVLyQHVWUXFWXUDHYROXFLyQFDUDFWHUtVWLFDVJHQHUDOHV\ GHVDUUROORGHODSREODFLyQGH&DQWDEULD boc.cantabria.es CVE-2019-3750 134/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ (OPHGLRDPELHQWHHQ&DQWDEULD(YROXFLyQSUHVHQWH\IXWXUR(OFLFORGHODJXD6LVWHPDV GHVDQHDPLHQWR\DEDVWHFLPLHQWR(OFDPELRFOLPiWLFR\ODPRYLOLGDGVRVWHQLEOH 7(0$ (OGHVDUUROORXUEDQtVWLFRHQ&DQWDEULD(YROXFLyQ\VLWXDFLyQDFWXDO(O3ODQGH2UGHQDFLyQ GHO/LWRUDO\3ODQ5HJLRQDOGH2UGHQDFLyQGHO7HUULWRULR 7(0$ /DVDQLGDGHQ&DQWDEULD&RPSHWHQFLDVGHO*RELHUQRGH&DQWDEULD\HVWUXFWXUD6LWXDFLyQ DFWXDO\UHWRVIXWXURV3ROtWLFDVDQLWDULDGHO*RELHUQRGH&DQWDEULD 7(0$ (O +RVSLWDO 8QLYHUVLWDULR 0DUTXpV GH 9DOGHFLOOD KLVWRULD HYROXFLyQ VLWXDFLyQ DFWXDO \ SUR\HFWRV 7(0$ /RVVHUYLFLRVVRFLDOHVHQ&DQWDEULD'HVDUUROOR\SROtWLFDVRFLDOGHO*RELHUQRGH&DQWDEULD 7(0$ /D HGXFDFLyQ HQ &DQWDEULD &RPSHWHQFLDV GHO *RELHUQR GH &DQWDEULD \ HVWUXFWXUD 6LWXDFLyQDFWXDO\UHWRVIXWXURV3ROtWLFDHGXFDWLYDGHOJRELHUQRGH&DQWDEULD 7(0$ /D HGXFDFLyQ VXSHULRU HQ &DQWDEULD &HQWURV XQLYHUVLWDULRV S~EOLFRV \ SULYDGRV /D 8QLYHUVLGDG GH &DQWDEULD RUJDQL]DFLyQ \ SRVLFLRQDPLHQWR HQ HO VLVWHPD XQLYHUVLWDULR HVSDxRO3ROtWLFDXQLYHUVLWDULDGHO*RELHUQRGH&DQWDEULD 7(0$ /D RUJDQL]DFLyQ GHO 3RGHU -XGLFLDO \ HO 0LQLVWHULR )LVFDO HQ HO iPELWR WHUULWRULDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &RPSHWHQFLDV GHO *RELHUQR DXWRQyPLFR HQ OD $GPLQLVWUDFLyQGH-XVWLFLD6LWXDFLyQGHODMXVWLFLDHQODUHJLyQ 7(0$ /D ,'L HQ &DQWDEULD \ VX LPSRUWDQFLD HQ OD HFRQRPtD &R\XQWXUD DFWXDO \ UHWRV /RV LQVWLWXWRVGHLQYHVWLJDFLyQ\VXVSUR\HFWRV3ROtWLFDGH,'LGHO*RELHUQRGH&DQWDEULD 7(0$ /DFXOWXUDGH&DQWDEULD6LWXDFLyQDFWXDO\SROtWLFDFXOWXUDOGHO*RELHUQRGH&DQWDEULD(O SDWULPRQLRKLVWyULFRDUWtVWLFR 7(0$ (O SDWULPRQLR UXSHVWUH GH &DQWDEULD &XHYDV 3DWULPRQLR GH OD +XPDQLGDG $OWDPLUD SDVDGRSUHVHQWH\IXWXUR 7(0$ (O GHSRUWH HQ &DQWDEULD 2ULJHQ \ GHVDUUROOR 0RGDOLGDGHV DXWyFWRQDV $PDWHXULVPR \ SURIHVLRQDOLVPR'HSRUWHEDVH,QVWDODFLRQHVGHSRUWLYDV\GHVDUUROORGHODHGXFDFLyQItVLFD HQODFRPXQLGDGDXWyQRPD CVE-2019-3750 7(0$ i Pág. 12642 boc.cantabria.es 135/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(136,&2/2*Ë$ 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ &RQFHSWRGHWUDEDMR$SUR[LPDFLyQWHyULFD\SUiFWLFD )XQFLRQHVSVLFRVRFLDOHVGHOWUDEDMR&RQFHSWRVGHLPSOLFDFLyQ\FRPSURPLVRHQHOWUDEDMR 3DQRUDPDDFWXDOGHODVLWXDFLyQODERUDOHQ(VSDxD3HUVSHFWLYDVIXWXUDV $VSHFWRVPRWLYDGRUHVGHOWUDEDMR3HUILOGHODVRUJDQL]DFLRQHVPiVGHPDQGDGDV&DUDFWHUtVWLFDV GHODWDUHD (VWUDWHJLDV SROtWLFDV \ SURFHGLPLHQWRV RUJDQL]DWLYRV &RRUGLQDFLyQ \ FRKHUHQFLD FRQ RWUDV iUHDV IXQFLRQDOHV /DFXOWXUDFRUSRUDWLYD)DFWRUHV7LSRVGHHQWLGDGHVS~EOLFDV\SULYDGDV 4XLpQHVTXLpQHQODVHPSUHVDV/DVUHODFLRQHVFRQORVGLVWLQWRVFOLHQWHVS~EOLFRV\SULYDGRV 'HVFULSFLyQGHSXHVWRVGHWUDEDMR)XQFLRQHV0HWRGRORJtDV6HJXLPLHQWR *HVWLyQGHOWDOHQWR&DSWDFLyQ\UHWHQFLyQ &DSWDFLyQLQWHUQD\H[WHUQD0HGLRV\SURFHGLPLHQWRVGHFDSWDFLyQ $QiOLVLVGHODFDUWDGHSUHVHQWDFLyQ$QiOLVLVGHFXUULFXOXPVYLWDH )DVHGHSUHVHOHFFLyQ&ULEDFXUULFXODU&ULWHULRV(QWUHYLVWDVWHOHIyQLFDV 3URFHVRGHVHOHFFLyQSURSLDPHQWHGLFKR(QWUHYLVWD3UXHEDV 3UXHEDVSVLFRWpFQLFDV3UXHEDVHVWDQGDUL]DGDV 3UXHEDVSURIHVLRQDOHVHVSHFtILFDV(ODERUDFLyQGHFXHVWLRQDULRV 2WURVLQVWUXPHQWRVHYDOXDWLYRVGHPHGLFLyQ&HQWURVGHHYDOXDFLyQ /DVHOHFFLyQGHSHUVRQDOSDUDSXHVWRVGHDOWDFDWHJRUtD3UHPLVDVEiVLFDV 0DUFRMXUtGLFRODERUDO&RQWUDWRVGHWUDEDMR6XMHWRV5HTXLVLWRV'XUDFLyQ)RUPD &RQWUDWRVWHPSRUDOHV'XUDFLyQGHWHUPLQDGD)RUPDWLYRV$WLHPSRSDUFLDO ,QFRUSRUDFLyQHQODHPSUHVD3URFHGLPLHQWRGHDFRJLGDHLQWHJUDFLyQHQODPLVPD (YDOXDFLyQ GH SRWHQFLDO /D HQWUHYLVWD FRPR KHUUDPLHQWD GH HYDOXDFLyQ GHO SRWHQFLDO 3UR\HFWR SURIHVLRQDOLQGLYLGXDO ,PSRUWDQFLD GH OD IRUPDFLyQ HQ HO iPELWR HPSUHVDULDO *HVWLyQ \ SODQLILFDFLyQ GHO SURFHVR GH IRUPDFLyQ *HVWLyQGHD\XGDV\VXEYHQFLRQHVSDUDODIRUPDFLyQ)XQGDFLyQ(VWDWDOSDUDOD)RUPDFLyQHQHO (PSOHR 'HVDUUROORSURIHVLRQDO3ODQHVGHFDUUHUD/DPRYLOLGDGIXQFLRQDO3ROLYDOHQFLD\PXOWLIXQFLRQDOLGDG $GDSWDFLyQ\UHFRQYHUVLyQSURIHVLRQDO (YDOXDFLyQGHOGHVHPSHxR6XMHWRV0HWRGRORJtD3HULRGLFLGDG+HUUDPLHQWDV/DHQWUHYLVWDFRPR KHUUDPLHQWDEiVLFDGHODHYDOXDFLyQGHOGHVHPSHxR6HJXLPLHQWRVDUHDOL]DU %/248(,, 7(0$ /DUXSWXUDODERUDO/DUXSWXUDODERUDOYROXQWDULD/DUXSWXUDODERUDOLQYROXQWDULD 7(0$ 3URFHVRVGHUHFRORFDFLyQ2EMHWLYRV(QWLGDGHVJHVWRUDVGHODPLVPD2XWVRXUFLQJ 7(0$ &OLPD ODERUDO 0HGLFLyQ GHO FOLPD ODERUDO )DFWRUHV LQWHUYLQLHQWHV HQ OD JHVWLyQ GHO FOLPD ODERUDO &RQWUROGHOFOLPDODERUDO 7(0$ (OLQGLYLGXR\HOJUXSRGHQWURGHODVHPSUHVDV7UDEDMRHQHTXLSR 7(0$ 1HJRFLDFLyQFROHFWLYD5HSUHVHQWDFLyQVLQGLFDO5HODFLRQHVODERUDOHV 7(0$ 1yPLQDV\6HJXULGDG6RFLDO)DFWRUHVGHQWURGHODQyPLQD6LVWHPDGHJHVWLyQ\IXQFLRQDPLHQWR GHOD6HJXULGDG6RFLDO i Pág. 12643 boc.cantabria.es CVE-2019-3750 7(0$ 7(0$ 7(0$ 7(0$ 136/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 6HJXULGDGKLJLHQH\HUJRQRPtDHQHOWUDEDMR,QIOXHQFLDGHOHQWRUQRVREUHODDFWLYLGDGODERUDO 7(0$ 3UHYHQFLyQGHULHVJRVODERUDOHV1RUPDWLYD$SOLFDFLyQ 7(0$ &RQVHFXHQFLDVGHODFDUJDItVLFDGHOWUDEDMR&RQVHFXHQFLDVGHODFDUJDPHQWDOGHOWUDEDMR(VWUpV ODERUDO 7(0$ 3ROtWLFDVDODULDO&ULWHULRVSDUDHOHVWDEOHFLPLHQWRGHVDODULRV6DODULRILMR6DODULRYDULDEOH 7(0$ /D FRPXQLFDFLyQ HQ ODV RUJDQL]DFLRQHV &RPXQLFDFLyQ H[WHUQD &RPXQLFDFLyQ LQWHUQD 0HWRGRORJtD+HUUDPLHQWDV 7(0$ +DELOLGDGHVVRFLDOHVGHQWURGHODVRUJDQL]DFLRQHV'HILQLFLyQ$GTXLVLFLyQ\PHMRUDGHODVPLVPDV 0HQWRULQJ&RDFKLQJ 7(0$ $QiOLVLVGHSUREOHPDV7RPDGHGHFLVLRQHV 7(0$ 6ROXFLyQGHFRQIOLFWRVGHQWURGHODVHPSUHVDV1HJRFLDFLyQ 7(0$ 7pFQLFDVGHUHVROXFLyQGHSUREOHPDVDSOLFDGDVDORVVHUYLFLRVS~EOLFRVGHHPSOHR 7(0$ (OSDSHOGHODPXMHUHQHOPXQGRODERUDO,JXDOGDGGHRSRUWXQLGDGHV7UDEDMRRFLR\WLHPSROLEUH /H\HVGHFRQFLOLDFLyQ 7(0$ 3HUVRQDOGLUHFWLYR3HUILO+DELOLGDGHV)XQFLRQHV5HVSRQVDELOLGDGHV 7(0$ 1XHYDV IRUPDV GH WUDEDMR (O WHOHWUDEDMR \ RWUDV IyUPXODV GH HPSOHR &DPELRV HQ HO PHUFDGR ODERUDO\GHVHPSOHR 7(0$ 5LWPRV ELROyJLFRV \ DFWLYLGDG ODERUDO -RUQDGD ODERUDO 7LSRV +RUDULRV GH WUDEDMR 7XUQRV GH WUDEDMR\WUDEDMRQRFWXUQR)yUPXODVIOH[LEOHV 7(0$ *HVWLyQGHOWLHPSR3ODQLILFDFLyQIOH[LEOHGHORVWLPPLQJV 7(0$ /DV QXHYDV WHFQRORJtDV HQ HO PXQGR ODERUDO ,QFLGHQFLD GHO IDFWRU WHFQROyJLFR HQ HO WUDEDMR /D GHVFRQH[LyQGLJLWDO$OLHQDFLyQYHUVXVKXPDQL]DFLyQGHOWUDEDMR'HPDQGDVFRJQLWLYDV,QWHUDFFLyQ VRFLDO7HQGHQFLDVIXWXUDV 7(0$ (ODXWRHPSOHR,QIRUPDFLyQ\PRWLYDFLyQSDUDHODXWRHPSOHR$VHVRUDPLHQWR\RULHQWDFLyQ 7(0$ $FFLRQHVGHRULHQWDFLyQSURIHVLRQDOWXWRUtDLQGLYLGXDOL]DGD'HVDUUROORGHDVSHFWRVSHUVRQDOHV 7(0$ 6HUYLFLR&iQWDEURGH(PSOHR(VWDWXWRV1DWXUDOH]DIXQFLRQHVRUJDQL]DFLyQ 7(0$ &RPSHWHQFLDVIXQFLRQHV\VHUYLFLRVHQPDWHULDGHWUDEDMRHPSOHR\IRUPDFLyQHQOD&RPXQLGDG $XWyQRPDGH&DQWDEULD %/248(,,, 7(0$ (ODSHJR&RQFHSWRIRUPDFLyQ\HYROXFLyQGHODSHJR 7(0$ 'HVDUUROORFRJQLWLYROHQJXDMHDIHFWLYRSVLFRPRWRU\VRFLDOHQODSULPHUDLQIDQFLD DDxRV 7(0$ 'HVDUUROORFRJQLWLYRDIHFWLYRSVLFRPRWRU\VRFLDOHQODSULPHUDLQIDQFLD DDxRV 7(0$ 'HVDUUROORFRJQLWLYRDIHFWLYR\VRFLDOHQODDGROHVFHQFLD 7(0$ (OGHVDUUROORSHUVRQDO\VRFLDOGXUDQWHODWHUFHUDHGDG&DUDFWHUtVWLFDVGHSHUVRQDOLGDGUHOHYDQWHV DOELHQHVWDUSVLFROyJLFRGXUDQWHHOSURFHVRGHHQYHMHFLPLHQWR 7(0$ 0DUFR OHJDO GH OD VDOXG PHQWDO HQ &DQWDEULD OD /H\ GH GH PD\R GH 6DOXG 0HQWDO 0RGHORGHDWHQFLyQ\UHFXUVRV 7(0$ 7UDVWRUQRV GH FRQGXFWD HQ OD LQIDQFLD \ OD DGROHVFHQFLD 3UHVXSXHVWRV WHyULFRV ,PSOLFDFLRQHV WHUDSpXWLFDV$FFLyQSUHYHQWLYD 7(0$ 7UDVWRUQRV GH OD FRQGXFWD DOLPHQWDULD 7LSRORJtD 3UHVXSXHVWRV WHyULFRV ,PSOLFDFLRQHV WHUDSpXWLFDV 7(0$ 7UDVWRUQRVQHXUyWLFRV3UHVXSXHVWRVWHyULFRV,PSOLFDFLRQHVWHUDSpXWLFDV$FFLyQSUHYHQWLYD 7(0$ 7UDVWRUQRVSVLFyWLFRV7LSRORJtDSUHVXSXHVWRVWHyULFRVHLPSOLFDFLRQHVWHUDSpXWLFDV 7(0$ 0DUFROHJDOGHODDWHQFLyQGURJRGHSHQGHQFLDVHQ&DQWDEULDOD/H\GHGHRFWXEUHGH SUHYHQFLyQ DVLVWHQFLD H LQFRUSRUDFLyQ VRFLDO HQ PDWHULD GH GURJRGHSHQGHQFLDV 0RGHOR GH DWHQFLyQ\UHFXUVRV 7(0$ (OHTXLSRPXOWLSURIHVLRQDOHQGURJRGHSHQGHQFLDV3DSHOGHOSVLFyORJRDHQHOHTXLSR 7(0$ &OtQLFD\WUDWDPLHQWRGHODVWR[LFRPDQtDVLQWHUYHQFLRQHVLQGLYLGXDOHVLQWHUYHQFLRQHVJUXSDOHV 7(0$ /RV WUDVWRUQRV UHODFLRQDGRV FRQ HO DEXVR GH VXVWDQFLDV 2EMHWLYRV IDVHV GH LQWHUYHQFLyQ \ SULQFLSDOHVHVWUDWHJLDVGHLQWHUYHQFLyQ 7(0$ 'LVHxRGHSURJUDPDVGHSUHYHQFLyQGHOFRQVXPR\DEXVRGHGURJDV)DFWRUHVDVRFLDGRViPELWRV GH DFWXDFLyQ SODQLILFDFLyQ LPSOHPHQWDFLyQ \ HYDOXDFLyQ GH ODV HVWUDWHJLDV \ SURJUDPDV GH SUHYHQFLyQHQGURJRGHSHQGHQFLDV i Pág. 12644 boc.cantabria.es CVE-2019-3750 137/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 6tQGURPH GH ,QPXQRGHILFLHQFLD DGTXLULGD ,PSOLFDFLRQHV SVLFROyJLFDV \ VRFLDOHV (VWUDWHJLDV \ UHFXUVRVSDUDODLQWHUYHQFLyQ3URJUDPDVGHSUHYHQFLyQ 7(0$ /D/H\GH&DQWDEULDGHGHQRYLHPEUHGHFUHDFLyQGHO,QVWLWXWR&iQWDEURGH6HUYLFLRV 6RFLDOHV&RPSHWHQFLDVIXQFLRQHV\SULQFLSLRVJHQHUDOHVGHDFWXDFLyQ 7(0$ 0DUFROHJDOGHORVVHUYLFLRVVRFLDOHVHQ&DQWDEULDOD/H\GH&DQWDEULDGHGHPDU]RGH 'HUHFKRV\6HUYLFLRV6RFLDOHV(O6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVSULQFLSLRVRUJDQL]DFLyQ\ UHFXUVRV 7(0$ /DVSUHVWDFLRQHVGHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVOD&DUWHUDGH6HUYLFLRV6RFLDOHV 7(0$ /DSVLFRORJtDFRPXQLWDULD'HILQLFLyQSULQFLSLRVREMHWLYRV\HVWUDWHJLDVGHLQWHUYHQFLyQ 7(0$ /DHYDOXDFLyQGHORVSURJUDPDVGHLQWHUYHQFLyQVRFLDO&RPSRQHQWHVWLSRVIDVHVSODQLILFDFLyQ\ GLVHxRGHODHYDOXDFLyQ 7(0$ )XQFLRQHV GHO SVLFyORJR HQ OD ,QWHUYHQFLyQ 6RFLDO 3URFHGLPLHQWRV WpFQLFDV H LQVWUXPHQWRV ÈPELWRVGHDFWXDFLyQ 7(0$ /D GHVSURWHFFLyQ LQIDQWLO PDUFR OHJDO \ SULQFLSLRV GH DFWXDFLyQ (O 6LVWHPD GH $WHQFLyQ D OD ,QIDQFLD\OD$GROHVFHQFLDHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 3URFHGLPLHQWRGHLQWHUYHQFLyQHQVLWXDFLRQHVGHGHVSURWHFFLyQLQIDQWLO 7(0$ (ODEXVRVH[XDOLQIDQWLO(YDOXDFLyQ\SURJUDPDVGHLQWHUYHQFLyQ 7(0$ /RVSURJUDPDVGHLQWHUYHQFLyQIDPLOLDU3UHVHUYDFLyQIDPLOLDU 7(0$ /RVSURJUDPDVFHQWUDGRVHQHODSR\RDORVQLxRVQLxDV\DGROHVFHQWHV3URJUDPDVGHIRPHQWRGH ODUHVLOLHQFLD 7(0$ /D/H\2UJiQLFDGHGHHQHURUHJXODGRUDGHODUHVSRQVDELOLGDGSHQDOGHORVPHQRUHV (O 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH OD /H\ 2UJiQLFD0HGLGDV\3URJUDPDVGHLQWHUYHQFLyQFRQPHQRUHVLQIUDFWRUHV3DSHOGHOHTXLSR WpFQLFR 7(0$ &RQGXFWDGHOLFWLYD\FDUDFWHUtVWLFDVSVLFRVRFLDOHVGHORVPHQRUHVLQIUDFWRUHV 7(0$ 2UJDQL]DFLyQ -XGLFLDO HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD ÏUJDQRV FROHJLDGRV \ XQLSHUVRQDOHV(VSHFLDOUHIHUHQFLDDORV-X]JDGRVGH)DPLOLD\DO-X]JDGRGH0HQRUHV 7(0$ 3URFHVRV GH GHUHFKR GH IDPLOLD PHGLGDV SURYLVLRQDOHV JXDUGD \ FXVWRGLD DGRSFLyQ \ DFRJLPLHQWR ,QWHUYHQFLyQ GHO HTXLSR SVLFRVRFLDO /D LPSRUWDQFLD GH ORV LQIRUPHV WpFQLFRV FRPR PHGLRVGHSUXHED 7(0$ 2UJDQL]DFLyQ\IXQFLRQHVGHORVHTXLSRVSVLFRVRFLDOHV 7(0$ 0DUFROHJDOGHODDWHQFLyQDODGHSHQGHQFLDHQ&DQWDEULDOD/H\GHGHGLFLHPEUHGH 3URPRFLyQ GH OD $XWRQRPtD 3HUVRQDO \ $WHQFLyQ D ODV SHUVRQDV HQ VLWXDFLyQ GH GHSHQGHQFLD 1RUPDVGHGHVDUUROOR 7(0$ &RQFHSWR GH GHSHQGHQFLD 9DORUDFLyQ FDWiORJR GH VHUYLFLRV \ QLYHO PtQLPR GH SURWHFFLyQ JDUDQWL]DGR 7(0$ 9DORUDFLyQGHODGLVFDSDFLGDG1RUPDWLYDDSOLFDEOH(VSHFLDOUHIHUHQWHDODYDORUDFLyQSVLFROyJLFD GHODVSHUVRQDVFRQGLVFDSDFLGDG 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GHJDUDQWtD GH ORV GHUHFKRV GH ODV SHUVRQDV FRQ GLVFDSDFLGDG 7(0$ &,) &ODVLILFDFLyQ ,QWHUQDFLRQDO GH )XQFLRQDPLHQWR 'LVFDSDFLGDG \ 6DOXG $QWHFHGHQWHV 2EMHWLYRV0RGHORGHIXQFLRQDPLHQWR\GLVFDSDFLGDG8WLOLGDG 7(0$ /DYLROHQFLDGHJpQHURGHILQLFLyQFDUDFWHUtVWLFDV\DVSHFWRVSVLFROyJLFRVGHODVYtFWLPDV/D/H\ 2UJiQLFD GH GH GLFLHPEUH GH 0HGLGDV GH 3URWHFFLyQ ,QWHJUDO FRQWUD OD 9LROHQFLD GH *pQHUR 7(0$ /D/H\GHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDGHGHDEULO,QWHJUDOSDUDOD3UHYHQFLyQ GHOD9LROHQFLDFRQWUDODV0XMHUHV\OD3URWHFFLyQDVXV9tFWLPDV i Pág. 12645 CVE-2019-3750 boc.cantabria.es 138/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2, &8(532)$&8/7$7,92683(5,25 /,&(1&,$'2(19(7(5,1$5,$ 0$7(5,$6(63(&Ë),&$6 %/248(, 7(0$ $VSHFWRVJHQHUDOHVGH/D/H\GHGHDEULO*HQHUDOGH6DQLGDGOD/H\GH GH GLFLHPEUH GH 2UGHQDFLyQ 6DQLWDULD GH &DQWDEULD \ OD /H\ GH GH RFWXEUH *HQHUDOGH6DOXG3~EOLFDHQUHODFLyQFRQOD9HWHULQDULDGH6DOXG3~EOLFD 7(0$ /H\ GH GH -XOLR GH VHJXULGDG DOLPHQWDULD \ QXWULFLyQ \ OD /H\ GH GH RFWXEUH *HQHUDO GH 6DOXG 3~EOLFD $JHQFLD (VSDxROD GH 6HJXULGDG $OLPHQWDULD \ 1XWULFLyQ $XWRULGDG(XURSHDGH6HJXULGDG$OLPHQWDULD(VWUDWHJLD1$26 7(0$ $XWRUL]DFLyQ\UHJLVWURGHHPSUHVDVDOLPHQWDULDV\DOLPHQWRV1RUPDWLYDDSOLFDEOH 7(0$ &RQWUROHV YHWHULQDULRV GH ORV SURGXFWRV DOLPHQWDULRV GH RULJHQ DQLPDO DSOLFDEOHV D ORV LQWHUFDPELRV LQWUDFRPXQLWDULRV DVt FRPR GH SDtVHV QR SHUWHQHFLHQWHV D OD 8QLyQ (XURSHD 1RUPDWLYDDSOLFDEOH 7(0$ 3ULQFLSLRV\UHTXLVLWRVJHQHUDOHVGHODOHJLVODFLyQDOLPHQWDULD 7(0$ +LJLHQHGHORVSURGXFWRVDOLPHQWLFLRV1RUPDWLYDGHDSOLFDFLyQ 7(0$ ,QIRUPDFLyQDOLPHQWDULDIDFLOLWDGDDOFRQVXPLGRU1RUPDWLYDDSOLFDEOH 7(0$ &RQWURO RILFLDO HQ DOLPHQWRV 2UJDQL]DFLyQ GH ORV FRQWUROHV RILFLDOHV 5HTXLVLWRV GH ODV DXWRULGDGHV FRPSHWHQWHV 3ODQ QDFLRQDO GH FRQWURO RILFLDO GH OD FDGHQD DOLPHQWDULD 3ODQ GH VHJXULGDGDOLPHQWDULDGH&DQWDEULD1RUPDWLYDDSOLFDEOH 7(0$ ,QVSHFFLyQ \ DXGLWRUtD (O DFWD GH LQVSHFFLyQ VDQLWDULD \ OD WRPD GH PXHVWUDV GH DOLPHQWRV 1RUPDWLYDDSOLFDEOH 7(0$ *HVWLyQ GH ULHVJRV HQ OD HPSUHVD DOLPHQWDULD *XtDV GH SUiFWLFDV FRUUHFWDV GH KLJLHQH \ VLVWHPD$33&&,PSRUWDQFLDVDQLWDULDGHORVPDQLSXODGRUHVGHDOLPHQWRV 7(0$ 6LVWHPDV GH JHVWLyQ GH OD FDOLGDG DSOLFDEOHV D OD VHJXULGDG DOLPHQWDULD &HUWLILFDFLyQ \ DFUHGLWDFLyQ3ULQFLSDOHVQRUPDV\HVWiQGDUHVUHODFLRQDGRV 7(0$ 7UD]DELOLGDG5HTXLVLWRVJHQHUDOHV5HTXLVLWRVHVSHFtILFRV1RUPDWLYDDSOLFDEOH 7(0$ 5HGHV GH DOHUWD DOLPHQWDULDV QDFLRQDOHV \ FRPXQLWDULDV &RQFHSWR 2UJDQL]DFLyQ \ IXQFLRQDPLHQWR(YDOXDFLyQJHVWLyQ\FRPXQLFDFLyQGHHPHUJHQFLDVRFULVLVDOLPHQWDULDV 7(0$ (VWDEOHFLPLHQWRV GH HODERUDFLyQ GH FRPLGDV SUHSDUDGDV ,QVSHFFLyQ KLJLpQLFRVDQLWDULD 1RUPDWLYDDSOLFDEOH 7(0$ ,QIHFFLRQHV H LQWR[LFDFLRQHV ELyWLFDV GH RULJHQ DOLPHQWDULR *HQHUDOLGDGHV 7R[LLQIHFFLRQHV PiVIUHFXHQWHV i Pág. 12646 boc.cantabria.es CVE-2019-3750 7(0$ &ULWHULRVPLFURELROyJLFRVDSOLFDEOHVDORVSURGXFWRVDOLPHQWLFLRV/HJLVODFLyQ 7(0$ 6LVWHPDGHYLJLODQFLDHSLGHPLROyJLFDGHODVHQIHUPHGDGHVWUDQVPLWLGDVSRUORVDOLPHQWRV\HO DJXD$FWXDFLRQHVDQWHODVRVSHFKDGHXQEURWHHSLGpPLFR 139/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ &RQWDPLQDFLyQDELyWLFDGHORVDOLPHQWRV2ULJHQ\QDWXUDOH]DGHORVFRQWDPLQDQWHV&ULWHULRV GH HYDOXDFLyQ GH ULHVJRV 1RUPDWLYD UHJXODGRUD GH ORV UHVLGXRV GH FRQWDPLQDQWHV HQ ORV SURGXFWRVDOLPHQWLFLRV 7(0$ 3ODQQDFLRQDOGHLQYHVWLJDFLyQGHUHVLGXRVHQDQLPDOHVYLYRV\HQDOLPHQWRVGHRULJHQDQLPDO 7(0$ 0DWHULDOHV \ REMHWRV HQ FRQWDFWR FRQ ORV DOLPHQWRV 7LSRV &RQGLFLRQHV TXH GHEHQ UHXQLU &RQWUROVDQLWDULR1RUPDWLYDDSOLFDEOH 7(0$ $GLWLYRV DOLPHQWDULRV FRQFHSWR \ FODVLILFDFLyQ 0HWRGRORJtD JHQHUDO GH HYDOXDFLyQ GH OD WR[LFLGDG GH ORV DGLWLYRV ,QJHVWD GLDULD DGPLVLEOH /LVWD SRVLWLYD GH DGLWLYRV 1RUPDWLYD DSOLFDEOH 7(0$ &RQWURO RILFLDO HQ PDWDGHURV ,QVSHFFLyQ DQWHPRUWHP \ SRVWPRUWHP GH ODV HVSHFLHV GH DEDVWR1RUPDWLYDDSOLFDEOH $SOLFDFLyQGH$QiOLVLVGH3HOLJURV\3XQWRVGH&RQWURO&UtWLFR 7(0$ 5HTXLVLWRV VDQLWDULRV DSOLFDEOHV D OD SURGXFFLyQ \ FRPHUFLDOL]DFLyQ GH FDUQH IUHVFD HQ PDWDGHURV1RUPDWLYDDSOLFDEOH$SOLFDFLyQGH$QiOLVLVGH3HOLJURV\3XQWRVGH&RQWURO&UtWLFR 7(0$ &RQGLFLRQHVVDQLWDULDVTXHGHEHQUHXQLUODSURGXFFLyQ\FRPHUFLDOL]DFLyQGHODFDUQHSLFDGD SUHSDUDGRV GH FDUQH FDUQH VHSDUDGD PHFiQLFDPHQWH \ SURGXFWRV FiUQLFRV $SOLFDFLyQ GHO $QiOLVLVGH3HOLJURV\3XQWRVGH&RQWURO&UtWLFR 7(0$ 1RUPDV HVSHFtILFDV SDUD ORV FRQWUROHV RILFLDOHV GH OD SUHVHQFLD GH WULTXLQDV HQ OD FDUQH 1RUPDWLYDDSOLFDEOH 7(0$ ,QVSHFFLyQ\FRQWUROVDQLWDULRGHODVFDUQHVGHUHVHVGHOLGLD1RUPDWLYDDSOLFDEOH 7(0$ &RQGLFLRQHVVDQLWDULDVDSOLFDEOHVDODSURGXFFLyQ\FRPHUFLDOL]DFLyQGHODOHFKHFUXGDOHFKH WUDWDGD WpUPLFDPHQWH \ SURGXFWRV OiFWHRV $SOLFDFLyQ GHO $QiOLVLV GH 3HOLJURV \ 3XQWRV GH &RQWURO&UtWLFR 7(0$ 1RUPDVVDQLWDULDVDSOLFDEOHVDODSURGXFFLyQGHSURGXFWRVSHVTXHURV$SOLFDFLyQGHO$QiOLVLV GH 3HOLJURV \ 3XQWRV GH &RQWURO &UtWLFR HQ ODV LQGXVWULDV GH OD SHVFD (QIHUPHGDGHV SURGXFLGDVSRUHOFRQVXPRGHSHVFDGR 7(0$ 0ROXVFRV \ FUXVWiFHRV 1RUPDV GH FDOLGDG GH ODV DJXDV \ GH OD SURGXFFLyQ GH PROXVFRV (QIHUPHGDGHVSURGXFLGDVSRUHOFRQVXPRGHPDULVFRV 7(0$ +XHYRV \ GHULYDGRV &ODVLILFDFLyQ &DUDFWHUtVWLFDV GH IUHVFXUD ,QVSHFFLyQ KLJLpQLFRVDQLWDULD HQORVFHQWURVGHFODVLILFDFLyQ\WUDQVIRUPDFLyQ$SOLFDFLyQGHO$QiOLVLVGH3HOLJURV\3XQWRV GH&RQWURO&UtWLFR1RUPDWLYDDSOLFDEOH 7(0$ 0LHO&ODVLILFDFLyQ'HWHUPLQDFLRQHVDQDOtWLFDV1RUPDWLYDDSOLFDEOH 7(0$ 3URGXFWRV DOLPHQWLFLRV GH RULJHQ YHJHWDO 5LHVJRV DVRFLDGRV D VX SURGXFFLyQ \ FRPHUFLDOL]DFLyQ+RQJRV\VHWDVFRPHVWLEOHV3ULQFLSDOHVHVSHFLHVFRPHVWLEOHV\YHQHQRVDV 1RUPDWLYDDSOLFDEOH 7(0$ $JXDV SRWDEOHV GH FRQVXPR S~EOLFR 9LJLODQFLD \ FRQWURO VDQLWDULR 5LHVJRV SDUD OD VDOXG S~EOLFD1RUPDWLYDDSOLFDEOH 7(0$ /HJLRQHORVLV ,QVWDODFLRQHV GH ULHVJR 0HGLGDV SUHYHQWLYDV /HJLVODFLyQ $FWXDFLRQHV DQWH OD VRVSHFKDGHEURWHGHOHJLRQHORVLV,QVSHFFLyQPXHVWUHR\PHGLGDVGHFRQWURO 7(0$ &RPSOHPHQWRVDOLPHQWLFLRV$GLFLyQGHYLWDPLQDV\PLQHUDOHV\RWUDVVXVWDQFLDVDDOLPHQWRV 1RUPDWLYDDSOLFDEOH 7(0$ $OLPHQWRVPRGLILFDGRVJHQpWLFDPHQWH1XHYRVDOLPHQWRV1RUPDWLYDOHJDODSOLFDEOH CVE-2019-3750 7(0$ &RQVHUYDFLyQGHORVDOLPHQWRVVLVWHPDVGHFRQVHUYDFLyQSRUHOIUtR5HSHUFXVLRQHVVREUHVX YDORU QXWULWLYR \ RUJDQROpSWLFR $OLPHQWRV VREUH ORV TXH VH HPSOHDQ ,QVSHFFLyQ KLJLpQLFR VDQLWDULD i Pág. 12647 boc.cantabria.es 140/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ &RQVHUYDFLyQ GH ORV DOLPHQWRV VLVWHPDV GH FRQVHUYDFLyQ SRU HO FDORU 5HSHUFXVLRQHV VREUH VXYDORUQXWULWLYR\RUJDQROpSWLFR$OLPHQWRVVREUHORVTXHVHHPSOHDQ,QVSHFFLyQKLJLpQLFR VDQLWDULD 7(0$ &RQVHUYDFLyQ GH ORV DOLPHQWRV OLRILOL]DFLyQ DKXPDGR WUDWDPLHQWRV TXtPLFRV \ UDGLDFLRQHV LRQL]DQWHV5HSHUFXVLRQHVVREUHVXYDORUQXWULWLYR\RUJDQROpSWLFR$OLPHQWRVVREUHORVTXHVH HPSOHDQ,QVSHFFLyQKLJLpQLFRVDQLWDULD 7(0$ &D]D,QVSHFFLyQ\FRQWUROVDQLWDULR1RUPDWLYDDSOLFDEOH 7(0$ 6DFULILFLRGRPLFLOLDULRGHDQLPDOHVGHDEDVWRSDUDDXWRFRQVXPR,QVSHFFLyQ\FRQWUROVDQLWDULR 1RUPDWLYDDSOLFDEOH %/248(,, 7(0$ 1RUPDWLYD*HQHUDOGH6DQLGDG$QLPDO/H\GHGHDEULOGH6DQLGDG$QLPDO 7(0$ 'HFODUDFLyQ GH HQIHUPHGDGHV /D 2UJDQL]DFLyQ 0XQGLDO GH 6DQLGDG $QLPDO RUJDQLVPRV 2,( 2UJDQLVPRVFRPSHWHQWHVHQOD8QLyQ(XURSHDHVWUXFWXUD\RUJDQL]DFLyQ2UJDQLVPRV FRPSHWHQWHV HQ (VSDxD \ &DQWDEULD 5HG GH $OHUWD 6DQLWDULD 9HWHULQDULD /DV OLVWDV GH HQIHUPHGDGHVGHGHFODUDFLyQREOLJDWRULD 7(0$ 3URJUDPDGHFRQWURO\YLJLODQFLDGHOD/HQJXD$]XO1RUPDWLYD6LWXDFLyQHQ(XURSD(VSDxD\ &DQWDEULD )LHEUH $IWRVD SUHYHQFLyQ \ SURILOD[LV 6LVWHPDV RILFLDOHV GH GLDJQyVWLFR FRQWURO \ HUUDGLFDFLyQ 7(0$ 3URJUDPDV QDFLRQDOHV GH HUUDGLFDFLyQ GH WXEHUFXORVLV ERYLQD EUXFHORVLV ERYLQD EUXFHORVLV RYLQD \ FDSULQD 5HDO 'HFUHWR GH GH GLFLHPEUH &DOLILFDFLyQ VDQLWDULD GH ODV H[SORWDFLRQHV0RYLPLHQWRGHJDQDGR 7(0$ &DPSDxDVGHVDQHDPLHQWRJDQDGHURHQ&DQWDEULD2UJDQL]DFLyQ\GHVDUUROOR9DFtRVDQLWDULR GHH[SORWDFLRQHVJDQDGHUDVFRPRPHGLGDGHHUUDGLFDFLyQ6LVWHPDGHD\XGDVHQFDPSDxDGH VDQHDPLHQWRJDQDGHUR6LWXDFLyQHQ&DQWDEULD1RUPDWLYDDSOLFDEOH 7(0$ 3ULQFLSDOHV HQFHIDORSDWtDV HVSRQJLIRUPHV WUDVPLVLEOHV (WLRORJtD \ SDWRJHQLD (SLGHPLRORJtD 3URJUDPD LQWHJUDO FRRUGLQDGR GH YLJLODQFLD \ FRQWURO GH ODV HQFHIDORSDWtDV HVSRQJLIRUPHV WUDQVPLVLEOHV 7(0$ 3URJUDPDV RILFLDOHV GH SUHYHQFLyQ FRQWURO \ HUUDGLFDFLyQ GH ODV HQIHUPHGDGHV GHO JDQDGR SRUFLQR6LWXDFLyQDFWXDO1RUPDWLYDOHJDO3ODQVDQLWDULRDYtFROD5HJXODFLyQ1RUPDWLYD 7(0$ 3URJUDPDV GH FRQWURO YHWHULQDULR GH ODV H[SORWDFLRQHV GH DFXLFXOWXUD PDULQD \ FRQWLQHQWDO 3ULQFLSDOHV HQIHUPHGDGHV LQIHFWRFRQWDJLRVDV GH ORV SHFHV FUXVWiFHRV \ PROXVFRV &DOLILFDFLyQ VDQLWDULD GH ODV ]RQDV \ H[SORWDFLRQHV 6LWXDFLyQ HQ &DQWDEULD 1RUPDWLYD DSOLFDEOH 7(0$ 3URJUDPDGHYLJLODQFLD\FRQWUROGHVDOPRQHOODHQDYHV0HGLGDVGHFRQWURO\OXFKD0HGLGDV GHELRVHJXULGDGHQH[SORWDFLRQHVDYtFRODV1RUPDWLYD\SURJUDPDV3URJUDPDGHYLJLODQFLDGH LQIOXHQ]DDYLDU6LVWHPDVGHYLJLODQFLDHQDYHVGRPpVWLFDV\VLOYHVWUHV0HGLGDVGHOXFKDHQ FDVRGHDSDULFLyQGHODHQIHUPHGDG 7(0$ $JUXSDFLRQHV GH 'HIHQVD 6DQLWDULD *DQDGHUD 2EMHWR QRUPDWLYD \ RUJDQL]DFLyQ 3URJUDPDV VDQLWDULRV 7(0$ 7XEHUFXORVLV \ EUXFHORVLV ERYLQD (WLRORJtD SDWRJHQLD \ HSLGHPLRORJtD 'HVFULSFLyQ GH PpWRGRVGHGLDJQyVWLFRRILFLDO\YDORUDFLyQ CVE-2019-3750 7(0$ /HXFRVLV (Q]RyWLFD %RYLQD \ 3HULQHXPRQtD &RQWDJLRVD %RYLQD (WLRORJtD SDWRJHQLD HSLGHPLRORJtD\GLDJQyVWLFR3ODQHVGHOXFKD\HUUDGLFDFLyQ i Pág. 12648 boc.cantabria.es 141/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ %5 %9' 3DUDWXEHUFXORVLV (WLRORJtD SDWRJHQLD \ HSLGHPLRORJtD 6LVWHPDV GH GLDJQyVWLFR FRQWUROSUHYHQFLyQ\HUUDGLFDFLyQ 7(0$ 3ULQFLSDOHV SURFHVRV LQIHFFLRVRV GHO JDQDGR RYLQR \ FDSULQR EUXFHORVLV SDUDWXEHUFXORVLV DJDOD[LDFRQWDJLRVD(WLRORJtDSDWRJHQLDHSLGHPLRORJtD3ODQHVGHOXFKD\FRQWURO 7(0$ 3ULQFLSDOHV SURFHVRV LQIHFFLRVRV GHO JDQDGR SRUFLQR SHVWH SRUFLQD DIULFDQD SHVWH SRUFLQD FOiVLFD HQIHUPHGDG GH $XMHV]N\ HQIHUPHGDG YHVLFXODU (WLRORJtD SDWRJHQLD HSLGHPLRORJtD 3ODQHVGHOXFKD\FRQWURO 7(0$ 3ULQFLSDOHVSURFHVRVLQIHFFLRVRVGHORVpTXLGRVDUWHULWLVLQIHFFLRVDHTXLQDDQHPLDLQIHFFLRVD HTXLQD PHWULWLV FRQWDJLRVD HTXLQD (WLRORJtD SDWRJHQLD HSLGHPLRORJtD 3ODQHV GH OXFKD \ FRQWURO 7(0$ ,QWHUFDPELRLQWUDFRPXQLWDULRGHDQLPDOHV\SURGXFWRVGHRULJHQDQLPDO&RQWUROHVYHWHULQDULRV HQRULJHQ\GHVWLQR&HUWLILFDFLyQ9HWHULQDULD75$&(61RUPDWLYDDSOLFDEOH 7(0$ 6XESURGXFWRVGHRULJHQDQLPDOQRGHVWLQDGRVDOFRQVXPRKXPDQR&ODVLILFDFLyQ6LVWHPDVGH DSURYHFKDPLHQWR\GHVWUXFFLyQGHLQGXVWULDVGHWUDQVIRUPDFLyQ&RQWUROYHWHULQDULR1RUPDWLYD DSOLFDEOH 7(0$ 0HGLFDPHQWR YHWHULQDULR 1RUPDWLYD DSOLFDEOH D OD SUHVFULSFLyQ DGPLQLVWUDFLyQ \ XVR GHO PHGLFDPHQWR YHWHULQDULR HQ H[SORWDFLyQ JDQDGHUD 9LJLODQFLD \ FRQWURO GH UHVLGXRV HQ DQLPDOHV YLYRV \ SURGXFWRV GH RULJHQ DQLPDO HQ H[SORWDFLyQ /tPLWHV Pi[LPRV GH UHVLGXRV 1RUPDWLYDDSOLFDEOH 7(0$ %LHQHVWDU$QLPDOiPELWRVGHHODERUDFLyQGHODQRUPDWLYD0XQGLDO8QLyQ(XURSHD\(VSDxD 1RUPDWLYD JHQHUDO GH ELHQHVWDU /H\ GH GH QRYLHPEUH SDUD HO FXLGDGR GH ORV DQLPDOHVHQVXH[SORWDFLyQWUDQVSRUWHH[SHULPHQWDFLyQ\VDFULILFLR/H\GH&DQWDEULD GHGHPDU]RGHSURWHFFLyQGHORVDQLPDOHV 7(0$ 3URWHFFLyQ GH ORV DQLPDOHV HQ H[SORWDFLyQ 1RUPDV GH SURWHFFLyQ GH WHUQHURV QRUPDV GH SURWHFFLyQGHFHUGRV1RUPDVGHSURWHFFLyQHQJDOOLQDVSRQHGRUDV1RUPDWLYDGHELHQHVWDUGH DQLPDOHVGHH[SHULPHQWDFLyQ 7(0$ 3URWHFFLyQ\ELHQHVWDUDQLPDOHQHOWUDQVSRUWH1RUPDWLYDDSOLFDEOH5HJLVWURGH\DXWRUL]DFLyQ GHYHKtFXORVGHWUDQVSRUWHGHDQLPDOHVYLYRV %/248(,,, 7(0$ /DJDQDGHUtDHQ&DQWDEULD\VXLPSRUWDQFLDHQODSURGXFFLyQILQDODJUDULD&HQVRV\UD]DVVX HYROXFLyQ\GLVWULEXFLyQFRPDUFDO3URGXFFLRQHVJDQDGHUDV(OPHUFDGR1DFLRQDOGH*DQDGRV GH7RUUHODYHJD 7(0$ 6LVWHPDLQWHJUDOGHWUD]DELOLGDGDQLPDOUHJLVWURJHQHUDOGHH[SORWDFLRQHVJDQDGHUDV 5(*$ 2UGHQDFLyQ GH H[SORWDFLRQHV SRUFLQDV DYtFRODV \ DStFRODV 1RUPDWLYDV 6LWXDFLyQ HQ &DQWDEULD 7(0$ 6LVWHPDLQWHJUDOGHWUD]DELOLGDGDQLPDO 6,75$1 UHJLVWURGHLGHQWLILFDFLyQLQGLYLGXDOL]DGRGH DQLPDOHV 5,,$ \ 5HJLVWUR GH PRYLPLHQWRV 5(02 6X DSOLFDFLyQ D ODV GLVWLQWDV HVSHFLHV 1RUPDWLYDDSOLFDEOH 7(0$ 6LVWHPDV GH LGHQWLILFDFLyQ GH ODV GLVWLQWDV HVSHFLHV ERYLQRV RYLQRV FDSULQRV SRUFLQRV HTXLQRV\FDQLQRV,GHQWLILFDFLyQHOHFWUyQLFD1RUPDWLYDV6LWXDFLyQHQ&DQWDEULD CVE-2019-3750 7(0$ &RPSRVLFLyQTXtPLFDGHODOHFKH\IDFWRUHVTXHLQIOX\HQHQHOOR&RPSRQHQWHVELROyJLFRVGHOD OHFKH \ IXHQWHV GH FRQWDPLQDFLyQ &RQWDPLQDFLyQ DELyWLFD GH OD OHFKH &RQVHUYDFLyQ GH OD OHFKHHQJUDQMD1RUPDWLYDDSOLFDEOH i Pág. 12649 boc.cantabria.es 142/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ )LVLRORJtD GHO RUGHxR \ GH OD ODFWDFLyQ 2UGHxR PHFiQLFR \ FRPSRQHQWHV GH OD LQVWDODFLyQ ,QIOXHQFLDVGHODPiTXLQDGHRUGHxRVREUHODFDOLGDGGHODOHFKH&RQWUROHVGHODLQVWDODFLyQ GHRUGHxR 7(0$ 3UiFWLFDVFRUUHFWDVGHKLJLHQHHQODVH[SORWDFLRQHVGHYDFXQROHFKHUR&RQWUROHVRILFLDOHVGH ODOHFKHFUXGD/HWUD41RUPDWLYDV 7(0$ 3ULPDVJDQDGHUDV ILQDQFLDFLyQFRPXQLWDULD 3DJRVGLUHFWRV\PHGLGDVGHGHVDUUROORUXUDOGH SDJRSRUDQLPDO 7(0$ 6LVWHPDV GH SURGXFFLyQ GH FDUQH GH YDFXQR *XtD GH SUiFWLFDV FRUUHFWDV GH KLJLHQH HQ H[SORWDFLRQHVGHYDFXQRGHFHER\YDFDQRGUL]D&ODVLILFDFLyQGHFDQDOHV1RUPDWLYDV 7(0$ 6LVWHPDV GH SURGXFFLyQ GH HTXLQR SDUD FDUQH \ RWUDV RULHQWDFLRQHV SURGXFWLYDV $\XGDV DO VHFWRUHTXLQR1RUPDWLYDDSOLFDEOH 7(0$ 6LVWHPDVGHSURGXFFLyQGHRYLQR\FDSULQRSDUDFDUQH*XtDGHSUiFWLFDVFRUUHFWDVGHKLJLHQH HQH[SORWDFLRQHVGHRYLQR\FDSULQRGHFDUQH1RUPDWLYDDSOLFDEOH 7(0$ (O VHFWRU GH OD DOLPHQWDFLyQ DQLPDO PDWHULDV SULPDV SLHQVRV FRPSXHVWRV DGLWLYRV \ SUHPH]FODV (WLTXHWDGR 3URJUDPDV GH FRQWURO GH ORV SURGXFWRV HPSOHDGRV HQ DOLPHQWDFLyQ DQLPDO6LWXDFLyQHQ&DQWDEULD 7(0$ (O5HJODPHQWR &( GHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHHQHURSRUHO TXHVHILMDQUHTXLVLWRVHQPDWHULDGHKLJLHQHGHORVSLHQVRV1RUPDWLYD%DVHVGHGDWRV 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH&RQWURO$PELHQWDO,QWHJUDGRVXDSOLFDFLyQD ODVH[SORWDFLRQHVJDQDGHUDV/RVUHVLGXRVJDQDGHURV\VXVUHSHUFXVLRQHVPHGLRDPELHQWDOHV 0DQHMR\WUDWDPLHQWRGHHVWLpUFROHV1RUPDWLYDVREUHUHVLGXRVJDQDGHURV 7(0$ 3URGXFFLRQHV JDQDGHUDV HFROyJLFDV (O FRQVHMR UHJXODGRU GH DJULFXOWXUD HFROyJLFD /D JDQDGHUtDHFROyJLFDHQ&DQWDEULD2ILFLQDGHFDOLGDGDOLPHQWDULD 2'(&$ 7(0$ 3URGXFFLyQGHVHPHQ0pWRGRVGHUHFRJLGDFRQWUDVWDFLyQGLOXFLyQ\FRQJHODFLyQ3URJUDPDV GHFRQWUROUHSURGXFWLYR(QIHUPHGDGHVLQIHFFLRVDVTXHDIHFWDQDODUHSURGXFFLyQ 7(0$ 7pFQLFDV GH UHSURGXFFLyQ DVLVWLGD ,QVHPLQDFLyQ DUWLILFLDO 7UDQVSODQWH GH HPEULRQHV )HUWLOL]DFLyQLQ9LWUR0LFURPDQLSXODFLyQGHHPEULRQHV(YROXFLyQ\SHUVSHFWLYDV 7(0$ 1XWULFLyQ\UHSURGXFFLyQHQHOYDFXQROHFKHUR5DFLRQDPLHQWRHVWDGRFRUSRUDO(QIHUPHGDGHV PHWDEyOLFDVTXHDIHFWDQDODUHSURGXFFLyQ 7(0$ 0HMRUD JHQpWLFD 0pWRGRV GH VHOHFFLyQ \ UHVSXHVWD +HUHGDELOLGDG &RQVDQJXLQLGDG \ SDUHQWHVFR 'HSUHVLyQ FRQVDQJXtQHD \ KHWHURVLV 3URJUDPDV GH UHFXSHUDFLyQ GH UD]DV GH SURWHFFLyQHVSHFLDO CVE-2019-3750 7(0$ (O FRQWURO GHO UHQGLPLHQWR OHFKHUR RILFLDO &HQWUR DXWRQyPLFR GH FRQWURO OHFKHUR &DOLILFDFLyQ PRUIROyJLFD9DORUDFLyQJHQpWLFDGHVHPHQWDOHV)HULDVFRQFXUVRV\H[SRVLFLRQHVJDQDGHUDV HQ&DQWDEULD1RUPDWLYDV i Pág. 12650 boc.cantabria.es 143/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 &8(532)$&8/7$7,92683(5,25 7e&1,&2'((67$'Ë67,&$6(&21Ï0,&$6 %/248((67$'Ë67,&$ 7(0$ (VWDGtVWLFDGHVFULSWLYD$QiOLVLVGHGLVWULEXFLRQHV,QWURGXFFLyQ*UiILFRVGHGLVWULEXFLRQHV 'HVFULSFLyQGHODVGLVWULEXFLRQHVPHGLDQWHQ~PHURV'LVWULEXFLRQHVQRUPDOHV 7(0$ )HQyPHQRV DOHDWRULRV (VSDFLRV GH SUREDELOLGDG $[LRPDV 3URSLHGDGHV &DVR GLVFUHWR &DVRFRQWLQXR 7(0$ 3UREDELOLGDGFRQGLFLRQDGD7HRUHPDVGHODSUREDELOLGDGFRQGLFLRQDGD,QGHSHQGHQFLDGH VXFHVRV7HRUHPDGHOD3UREDELOLGDG7RWDO7HRUHPDGH%D\HV 7(0$ 9DULDEOH DOHDWRULD XQLGLPHQVLRQDO 3UREDELOLGDG LQGXFLGD SRU XQD YDULDEOH DOHDWRULD )XQFLyQ GH GLVWULEXFLyQ 'LVWULEXFLRQHV GLVFUHWDV \ DEVROXWDPHQWH FRQWLQXDV &DPELR GH YDULDEOHHQODVGLVWULEXFLRQHVXQLGLPHQVLRQDOHV 7(0$ 'LVWULEXFLRQHVXQLGLPHQVLRQDOHV(VSHUDQ]DPDWHPiWLFD3URSLHGDGHV0RPHQWRVGHXQD YDULDEOHDOHDWRULDXQLGLPHQVLRQDO2WUDVPHGLGDVGHSRVLFLyQGLVSHUVLyQ\GHIRUPD 7(0$ 9DULDEOHV DOHDWRULDV ELGLPHQVLRQDOHV )XQFLRQHV GH GLVWULEXFLyQ ELGLPHQVLRQDOHV 'LVWULEXFLRQHV GLVFUHWDV \ DEVROXWDPHQWH FRQWLQXDV 'LVWULEXFLRQHV PDUJLQDOHV \ FRQGLFLRQDGDV ,QGHSHQGHQFLD GH YDULDEOHV DOHDWRULDV &DPELR GH YDULDEOH ([WHQVLyQ D GLPHQVLRQHVPD\RUHV 7(0$ (VSHUDQ]D GH XQD YDULDEOH DOHDWRULD ELGLPHQVLRQDO 3URSLHGDGHV 0RPHQWRV GH XQD YDULDEOH DOHDWRULD ELGLPHQVLRQDO 3URSLHGDGHV GH OD YDULDQ]D \ OD FRYDULDQ]D &RHILFLHQWH GHFRUUHODFLyQ 7(0$ (VSHUDQ]DFRQGLFLRQDGD3URSLHGDGHV)XQFLyQGHUHJUHVLyQ5HODFLRQHVFRQODUHJUHVLyQ PtQLPRFXDGUiWLFRRUGLQDULD 7(0$ 'LVWULEXFLRQHV GLVFUHWDV 'LVWULEXFLyQ GH %HUQRXLOOL 'LVWULEXFLyQ ELQRPLDO 'LVWULEXFLyQ PXOWLQRPLDO 'LVWULEXFLyQ QRUPDO PXOWLYDULDQWH 'LVWULEXFLyQ GH 3RLVVRQ 'LVWULEXFLyQ JHRPpWULFD'LVWULEXFLyQKLSHUJHRPpWULFD 7(0$ 'LVWULEXFLRQHV FRQWLQXDV 'LVWULEXFLyQ QRUPDO &DUDFWHUtVWLFDV ,PSRUWDQFLD GH HVWDV GLVWULEXFLRQHV HQ OD WHRUtD \ SUiFWLFD HVWDGtVWLFD 'LVWULEXFLyQ ORJQRUPDO 'LVWULEXFLyQ QRUPDOPXOWLYDULDQWH 7(0$ 'LVWULEXFLRQHV FRQWLQXDV 'LVWULEXFLyQ XQLIRUPH 'LVWULEXFLyQ H[SRQHQFLDO 'LVWULEXFLRQHV JDPPD\EHWD'LVWULEXFLyQGH3DUHWR'LVWULEXFLyQGH&DXFK\ 7(0$ 3URFHVRV HVWRFiVWLFRV 3URFHVRV HVWDFLRQDULRV 3URFHVRV GH LQFUHPHQWRV RUWRJRQDOHV H LQGHSHQGLHQWHV&DGHQDVGH0DUNRY3URFHVRVGH3RLVVRQ 7(0$ )XQGDPHQWRVGHOD,QIHUHQFLD(VWDGtVWLFD&RQFHSWRGHPXHVWUDDOHDWRULD'LVWULEXFLyQGH ODPXHVWUD(VWDGtVWLFRV\VXGLVWULEXFLyQHQHOPXHVWUHR i Pág. 12651 boc.cantabria.es CVE-2019-3750 7(0$ 'LVWULEXFLRQHV FRQWLQXDV 'LVWULEXFLRQHV ; W \ ) &DUDFWHUtVWLFDV ,PSRUWDQFLD GH HVWDV GLVWULEXFLRQHVHQODWHRUtD\SUiFWLFDHVWDGtVWLFD 144/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 'LVWULEXFLRQHV HQ HO PXHVWUHR DVRFLDGDV FRQ SREODFLRQHV QRUPDOHV 'LVWULEXFLRQHV GH OD PHGLDYDULDQ]D\GLIHUHQFLDGHPHGLDV 7(0$ (VWLPDFLyQSXQWXDO3URSLHGDGHVGHORVHVWLPDGRUHVSXQWXDOHV(VWLPDGRUHVLQVHVJDGRV HILFLHQWHV FRQVLVWHQWHV \ VXILFLHQWHV (VWLPDGRUHV UREXVWRV 7pFQLFDV GH UHPXHVWUHR HVWLPDGRUHV%RRWVWUDS\HVWLPDGRUHVGH-DFNNQLIH 7(0$ 0pWRGRVGHHVWLPDFLyQ0pWRGRGHORVPRPHQWRV0pWRGRGHODPtQLPD;0pWRGRGHOD PtQLPDYDULDQ]D0pWRGRGHORVPtQLPRVFXDGUDGRV0pWRGRV%D\HVLDQRV 7(0$ 0pWRGRGHHVWLPDFLyQGHPi[LPDYHURVLPLOLWXG3URSLHGDGHV'LVWULEXFLyQDVLQWyWLFDGHORV HVWLPDGRUHVGHPi[LPDYHURVLPLOLWXG 7(0$ (VWLPDFLyQ SRU LQWHUYDORV ,QWHUYDORV GH FRQILDQ]D HQ SREODFLRQHV QRUPDOHV PHGLD YDULDQ]DGLIHUHQFLDGHPHGLDV\FRFLHQWHGHYDULDQ]DV5HJLRQHVGHFRQILDQ]D 7(0$ &RQWUDVWHVGHKLSyWHVLV(UURUHV\SRWHQFLDGHXQFRQWUDVWH+LSyWHVLVVLPSOHV+LSyWHVLV FRPSXHVWDV \ FRQWUDVWHV XQLIRUPHPHQWH PiV SRWHQWHV &RQWUDVWHV GH VLJQLILFDFLyQ S YDORU 7(0$ &RQWUDVWHV GH ERQGDG GH DMXVWH &RQWUDVWH ; GH 3HDUVRQ &RQWUDVWH GH .ROPRJRURY 6PLUQRY&RQWUDVWHVGHQRUPDOLGDG 7(0$ &RQWUDVWHV GH LQGHSHQGHQFLD &RQWUDVWH GH KRPRJHQHLGDG &RQWUDVWHV GH DOHDWRULHGDG &RQWUDVWHVGHORFDOL]DFLyQ&RQWUDVWHVGHFRPSDUDFLyQGHSREODFLRQHV 7(0$ $QiOLVLV GLVFULPLQDQWH &ODVLILFDFLyQ FRQ JUXSRV )XQFLyQ GLVFULPLQDQWH GH )LVKHU &ODVLILFDFLyQFRQPiVGHJUXSRV)XQFLRQHV&ODVLILFDGRUDV 7(0$ $QiOLVLVGHFRPSRQHQWHVSULQFLSDOHV)RUPXODFLyQGHOSUREOHPDUHVROXFLyQ\SURSLHGDGHV 'HWHUPLQDFLyQGHOQ~PHURGHFRPSRQHQWHVDFRQVLGHUDU 7(0$ $QiOLVLV IDFWRULDO )RUPXODFLyQ GHO SUREOHPD 7pFQLFDV GH UHVROXFLyQ 5HODFLyQ FRQ HO DQiOLVLVGHFRPSRQHQWHVSULQFLSDOHV5RWDFLRQHV$GHFXDFLyQ\YDOLGDFLyQGHKLSyWHVLV 7(0$ $QiOLVLVGHFRUUHVSRQGHQFLDV5HODFLRQHVFRQWDEODVGHFRQWLQJHQFLDV5HODFLRQHVGHILODV \ FROXPQDV FRQ ORV IDFWRUHV $VSHFWRV JHRPpWULFRV 2EWHQFLyQ ,QWHUSUHWDFLyQ \ UHVXOWDGRV 7(0$ 7pFQLFDV GH DJUXSDFLyQ &OXVWHU FRQFHSWR JHQHUDO 'LVWDQFLDV 0pWRGRV MHUiUTXLFRV 6LPSOH&RPSOHWR:DUG0pWRGRVQRMHUiUTXLFRVQXEHVGLQiPLFDVÈUEROGHDJUXSDFLyQ SDUWLFLyQHLQWHUSUHWDFLyQ 7(0$ $QiOLVLV GH &RUUHODFLyQ &DQyQLFD ,QWURGXFFLyQ &RUUHODFLyQ FDQyQLFD \ YDULDEOHV FDQyQLFDVFiOFXORHLQWHUSUHWDFLyQJHRPpWULFD3URSLHGDGHV5HODFLyQFRQRWUDVWpFQLFDV GHODQiOLVLVPXOWLYDULDQWH 7(0$ $QiOLVLV GH 9DULDQ]D &RQFHSWRV JHQHUDOHV \ SULQFLSLRV IXQGDPHQWDOHV 3UXHEDV GH LJXDOGDGGHPHGLDV0RGHORVGHDQiOLVLVGHYDULDQ]D$QiOLVLVGHYDULDQ]DGHGRVIDFWRUHV 7(0$ 1~PHURVtQGLFHVFRQFHSWRVFULWHULRV\SURSLHGDGHVËQGLFHVGH/DVSH\UHV\GH3DDVFKH UHODFLRQHV YHQWDMDV H LQFRQYHQLHQWHV 6LVWHPDV LQWHJUDGRV GH tQGLFHV GH SUHFLRV \ GH FDQWLGDG(OHFFLyQGHORVtQGLFHV\GHODxREDVH 7(0$ ËQGLFHVGHGHVLJXDOGDG\PHGLGDVGHFRQFHQWUDFLyQËQGLFHGH*LQL\ODFXUYDGH/RUHQ] i Pág. 12652 boc.cantabria.es CVE-2019-3750 7(0$ 6HULHV WHPSRUDOHV FRPSRQHQWHV GH XQD VHULH WHPSRUDO 0HGLDV PyYLOHV $OLVDGR H[SRQHQFLDO7DVDVGHFUHFLPLHQWR 145/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ %/248(08(675(2 7(0$ 0XHVWUHRSUREDELOtVWLFRFRQFHSWRGHSREODFLyQPDUFR\PXHVWUD+LSyWHVLVGH1RUPDOLGDG 6HVJR\VXVHIHFWRV 7(0$ 0XHVWUHRDOHDWRULRVLPSOHFRQFHSWRJHQHUDO(VWLPDFLRQHV\SURSLHGDGHV&RUUHFFLyQSRU SREODFLyQ ILQLWD (VWLPDFLyQ GHO HUURU D SDUWLU GH XQD PXHVWUD /tPLWHV GH FRQILDQ]D (VWLPDFLyQGHXQDUD]yQ\XQDSURSRUFLyQ&DOFXORGHOWDPDxRGHPXHVWUD 7(0$ 0XHVWUHR HVWUDWLILFDGR FRQFHSWR JHQHUDO )RUPDFLyQ GH HVWUDWRV (VWLPDFLRQHV \ SURSLHGDGHV0XHVWUHRGHVSURSRUFLRQDGRRDVLJQDFLyQySWLPD5HODFLyQHQWUHHOPXHVWUHR DOHDWRULRVLPSOH\HOPXHVWUHRHVWUDWLILFDGR(VWLPDFLyQSDUDSURSRUFLRQHV(VWLPDGRUHVGH UD]yQHQHOPXHVWUHRHVWUDWLILFDGR 7(0$ 0XHVWUHR SRU FRQJORPHUDGRV &RQFHSWR JHQHUDO &RQJORPHUDFLyQ GHO PLVPR WDPDxR &RQJORPHUDFLyQ GH WDPDxRV GHVLJXDOHV PXHVWUHR FRQ SUREDELOLGDG SURSRUFLRQDO DO WDPDxR 6HOHFFLyQ FRQ SUREDELOLGDGHV GHVLJXDOHV \ FRQ UHVWLWXFLyQ 0HGLGD ySWLPD GHO WDPDxR([DFWLWXGHVUHODWLYDVGHODVWUHVWpFQLFDV 7(0$ 0XHVWUHRSROLHWiSLFR 6XEPXHVWUHR PXHVWUHRHQGRVHWDSDV'HWHUPLQDFLyQGHPHGLDV\ YDULDQ]DV 9DULDQ]D GH OD PHGLD HVWLPDGD (VWLPDFLyQ PXHVWUDO GH OD YDULDQ]D \ HVWLPDFLyQ GH SURSRUFLRQHV )UDFFLRQHV ySWLPDV GH PXHVWUHR \ VXEPXHVWUHR 0XHVWUHR VLVWHPiWLFR5HODFLyQFRQRWURVPpWRGRVGHPXHVWUHR 7(0$ )XHQWHV GH HUURU HQ RSHUDFLRQHV HVWDGtVWLFDV HUURUHV GH PXHVWUHR (UURUHV DMHQRV DO PXHVWUHR SDSHO GH OD QRUHVSXHVWD HQ ODV HQFXHVWDV (IHFWRV \ WLSRV GH QRUHVSXHVWD $QiOLVLV\WUDWDPLHQWRGHODQRUHVSXHVWD3RVWHVWUDWLILFDFLyQ\FDOLEUDGRGHODPXHVWUD 7(0$ 0HWRGRORJtDGHXQDRSHUDFLyQHVWDGtVWLFD'HILQLFLyQGHREMHWLYRV'LVHxRGHFXHVWLRQDULR 'LVHxRPXHVWUDO\XVRGHGLUHFWRULRVGHXQLGDGHVHVWDGtVWLFDV5HFRJLGDGHLQIRUPDFLyQ HQFXHVWDFLyQGLUHFWD\XWLOL]DFLyQGHIXHQWHVDGPLQLVWUDWLYDV 7(0$ (TXLSRGHFDPSRVHOHFFLyQIRUPDFLyQFRQWURO\HYDOXDFLyQGHFRVWHV7UDWDPLHQWRGHOD LQIRUPDFLyQ PHFDQL]DFLyQ YDOLGDFLyQ GHSXUDFLyQ H LPSXWDFLyQ GH GDWRV ([SORWDFLyQ HVWDGtVWLFD$QiOLVLV\GLIXVLyQGHUHVXOWDGRVSDSHO\VRSRUWHVHOHFWUyQLFRV %/248((&2120Ë$ 7(0$ 2EMHWRGHHVWXGLRGHODHFRQRPtD)OXMRFLUFXODUGHODDFWLYLGDGHFRQyPLFD9DULDEOHVIOXMR \YDULDEOHVVWRFN,QWHUUHODFLyQHQWUHPLFURHFRQRPtD\PDFURHFRQRPtD 7(0$ (O6LVWHPDGH&XHQWDVGHOD8QLyQ(XURSHD\VXHYROXFLyQKLVWyULFD5DVJRVEiVLFRVGHO 6(&/DVXQLGDGHVHVWDGtVWLFDV\VXDJUXSDFLyQ/RVIOXMRV\ORVVWRFNV(OVLVWHPD GHFXHQWDV\ORVDJUHJDGRVHQHO6(& 7(0$ (O PDUFR LQSXWRXWSXW HQ HO 6(& 7DEODV GH RULJHQ \ GHVWLQR 7DEOD LQSXWRXWSXW VLPpWULFD )LQDOLGDG HVWDGtVWLFD \ DQDOtWLFD GH ODV WDEODV GH RULJHQ \ GHVWLQR 2WURV HOHPHQWRVDQH[RVDOPDUFR,2HPSOHRGHOIDFWRUWUDEDMRPHGLFLRQHVGHOIDFWRUFDSLWDO CVE-2019-3750 7(0$ 0HGLFLyQGHODVYDULDFLRQHVGHSUHFLR\YROXPHQHQHOPDUFRGHODFRQWDELOLGDGQDFLRQDO GHDFXHUGRFRQHO6(&&DPSRGHDSOLFDFLyQGHORVtQGLFHVGHSUHFLR\YROXPHQHQ HOVLVWHPDGHFXHQWDVËQGLFHVHQFDGHQDGRV i Pág. 12653 boc.cantabria.es 146/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 2WURV VLVWHPDV GH FXHQWDV HQ HO PDUFR GHO 6(& /DV FXHQWDV WULPHVWUDOHV /DV FXHQWDVUHJLRQDOHV/DVFXHQWDVVDWpOLWHV 7(0$ &ODVLILFDFLRQHV HVWDGtVWLFDV &ODVLILFDFLRQHV QDFLRQDOHV &ODVLILFDFLRQHV LQWHUQDFLRQDOHV &ODVLILFDFLRQHVHFRQyPLFDV&1$(&13$\&12 7(0$ (VWDGtVWLFDVHFRQyPLFDVDODVHPSUHVDV'LUHFWRULRVGHHPSUHVDV(QFXHVWDVLQGXVWULDOHV (QFXHVWDV GH VHUYLFLRV (QFXHVWDV GH FRQVWUXFFLyQ (VWDGtVWLFDV GH RSLQLRQHV HPSUHVDULDOHV 7(0$ /DUHQWD\HOJDVWRSHUVRQDO\IDPLOLDU)XHQWHVHVWDGtVWLFDVSDUDVXHVWXGLR/DHQFXHVWD GH OD SREUH]D \ ODV GHVLJXDOGDGHV VRFLDOHV /D H[SORWDFLyQ HVWDGtVWLFD GH ODV IXHQWHV ILVFDOHV3UHVXSXHVWRVIDPLOLDUHV 7(0$ %DODQ]D GH SDJRV (VWDGtVWLFDV GH FRPHUFLR H[WHULRU (VWDGtVWLFDV ILQDQFLHUDV \ PRQHWDULDV 7(0$ /DV HVWDGtVWLFDV ODERUDOHV /D (QFXHVWD GH 3REODFLyQ $FWLYD 0RYLPLHQWR ODERUDO UHJLVWUDGR(OVLVWHPD6,63( 7(0$ (VWDGtVWLFDVGHSUHFLRV\VDODULRV,3&3UHFLRVDJUtFRODVHLQGXVWULDOHV&RVWHV/DERUDOHV 7(0$ (VWDGtVWLFDVGH,'L'HILQLFLyQGHLQYHVWLJDFLyQGHVDUUROORHLQQRYDFLyQ(QFXHVWDVREUH LQQRYDFLyQ HQ ODV HPSUHVDV (VWDGtVWLFDV VREUH DFWLYLGDGHV HQ ,' (VWDGtVWLFD GH JDVWR S~EOLFRHQ,' 7(0$ (VWDGtVWLFDV UHODWLYDV DO VHFWRU SULPDULR &HQVR DJUDULR (QFXHVWD VREUH OD HVWUXFWXUD GH H[SORWDFLRQHV DJUtFRODV 6XSHUILFLH \ SURGXFFLyQ DJUtFROD ,QGLFDGRUHV HFRQyPLFRV DJUDULRV(VWDGtVWLFDVGHSHVFD 7(0$ (VWDGtVWLFDV WXUtVWLFDV /DV HQFXHVWDV GH RFXSDFLyQ (QFXHVWD GH WXULVPR GH UHVLGHQWHV (QFXHVWDGHJDVWR7XUtVWLFR0RYLPLHQWRVWXUtVWLFRVHQIURQWHUD %/248((&2120(75Ë$ 7(0$ 5HODFLRQHV HQWUH YDULDEOHV FRQFHSWRV &DXVDOLGDG \ QR FDXVDOLGDG 0RGHORV HFRQRPpWULFRV 7(0$ (O PRGHOR OLQHDO JHQHUDO (VSHFLILFDFLyQ (VWLPDGRUHV PtQLPRV FXDGUDGRV RUGLQDULRV 'LVWULEXFLRQHVPXHVWUDOHV&RQWUDVWHGHQRUPDOLGDG%RQGDGGHDMXVWH(VWLPDGRUPi[LPD YHURVLPLOLWXG(UURUHVGHHVSHFLILFDFLyQ 7(0$ ,QIHUHQFLD HQ HO PRGHOR OLQHDO &RQWUDVWH GH KLSyWHVLV 7UDWDPLHQWR JHQHUDO &RQWUDVWH DFHUFD GH XQ FRHILFLHQWH GHO PRGHOR &RQWUDVWH GH VLJQLILFDFLyQ JOREDO \ FRQMXQWD GHO PRGHOR &RQWUDVWH GH FDPELR HVWUXFWXUDO 7HVW GH &KRZ (VWLPDFLyQ EDMR UHVWULFFLRQHV 3UHGLFFLyQHQHOPRGHOROLQHDO 7(0$ 3URFHVR HVWRFiVWLFR HVWDFLRQDULR 5XLGR %ODQFR 7HRUHPD GH GHVFRPSRVLFLyQ GH :ROG 3URFHVRV $5 0$ \ $50$ ,GHQWLILFDFLyQ HVWLPDFLyQ FRQWUDVWH \ SUHGLFFLyQ GHO PRGHOR $5,0$ SGT i Pág. 12654 boc.cantabria.es CVE-2019-3750 7(0$ 0RGHORV FRQ YDULDEOHV H[SOLFDWLYDV FXDOLWDWLYDV 0RGHOR OLQHDO JHQHUDOL]DGR 0RGHOR SUREDELOtVWLFROLQHDO0RGHOR/RJLW\3URELW 147/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 0RGHORV GH VHULHV WHPSRUDOHV QR HVWDFLRQDULRV 0RGHORV FRQ WHQGHQFLD GHWHUPLQtVWLFD \ FRPSRQHQWHVHVWDFLRQDULRV3URFHVRVLQWHJUDGRV3URFHVRVQRHVWDFLRQDULRVHQYDULDQ]D 7(0$ (OPRGHOROLQHDOFRQUHJUHVRUHVQRHVWDFLRQDULRV&RQWUDVWHVGHUDtFHVXQLWDULDV'HILQLFLyQ GHFRLQWHJUDFLyQ&RLQWHJUDFLyQHQHOPRGHORXQLHFXDFLRQDO(QIRTXHGH(QJOH*UDQJHU %/248('(02*5$)Ë$ 7(0$ /DGHPRJUDItD(VTXHPDGH/H[LV/RVIHQyPHQRVGHPRJUiILFRV 7(0$ (O DQiOLVLV GH ORV IHQyPHQRV GHPRJUiILFRV 7DVDV FRFLHQWHV SURSRUFLRQHV $QiOLVLV ORQJLWXGLQDO\$QiOLVLVWUDVYHUVDO 7(0$ )XHQWHV HVWDGtVWLFDV GHPRJUiILFDV (O FHQVR GH SREODFLyQ 3DGURQHV \ UHJLVWURV GH SREODFLyQ 7(0$ )XHQWHVHVWDGtVWLFDVGHPRJUiILFDV(O0RYLPLHQWR1DWXUDOGHOD3REODFLyQ(VWDGtVWLFDVGH PLJUDFLRQHV(QFXHVWDVGHPRJUiILFDV)HFXQGLGDG\(QFXHVWDFRQWLQXDGHKRJDUHV 7(0$ ,QGLFDGRUHV VRFLDOHV 2EMHWLYRV GH OD HODERUDFLyQ GH LQGLFDGRUHV VRFLDOHV ÈUHDV SULQFLSDOHV GH DSOLFDFLyQ &ULWHULRV GH VHOHFFLyQ GH ORV LQGLFDGRUHV 3URFHGLPLHQWRV GH HODERUDFLyQ'HVDJUHJDFLRQHVJHRJUiILFDV\VRFLROyJLFDV 7(0$ /DVHQFXHVWDVVRFLDOHVDIDPLOLDV&RQGLFLRQHVGHYLGD8VRGHOWLHPSRHWF 7(0$ /D 6RFLHGDG GH OD ,QIRUPDFLyQ (QFXHVWDV GH XVR GH 7,& \ FRPHUFLR HOHFWUyQLFR GH HPSUHVDV (QFXHVWD VREUH (TXLSDPLHQWR \ 8VR GH 7HFQRORJtDV GH OD ,QIRUPDFLyQ \ &RPXQLFDFLyQHQORVKRJDUHV %/248(/(*,6/$&,Ï1 7(0$ /D &RQVWLWXFLyQ (VSDxROD GH &DUDFWHUtVWLFD (VWUXFWXUD /D UHIRUPD FRQVWLWXFLRQDO /DV &RUWHV *HQHUDOHV &RPSRVLFLyQ \ IXQFLRQHV /D &RURQD (O JRELHUQR FRPSRVLFLyQ \ IXQFLRQHV 7(0$ (O SRGHU MXGLFLDO /RV GHUHFKRV \ OLEHUWDGHV S~EOLFDV (O 7ULEXQDO &RQVWLWXFLRQDO 2UJDQL]DFLyQ\)XQFLRQHV5HFXUVRV\SURFHVRVDQWHHO7ULEXQDO&RQVWLWXFLRQDO 7(0$ (O (VWDWXWR GH $XWRQRPtD GH &DQWDEULD (O SURFHVR DXWRQyPLFR GH &DQWDEULD LQLFLDWLYD DXWRQyPLFDWUDPLWDFLyQ\DSUREDFLyQGHO(VWDWXWRGH$XWRQRPtD&RPSHWHQFLDVDVXPLGDV SRU OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRV GH DPSOLDFLyQ GHFRPSHWHQFLDV 7(0$ 2UJDQL]DFLyQ LQVWLWXFLRQDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR HO 3UHVLGHQWHHO*RELHUQRUHODFLRQHVHQWUHHO3DUODPHQWR\HO*RELHUQR i Pág. 12655 boc.cantabria.es CVE-2019-3750 7(0$ /DRUJDQL]DFLyQWHUULWRULDOGHO(VWDGR/DV&RPXQLGDGHV$XWyQRPDVPRGHORWHUULWRULDOHQ OD &RQVWLWXFLyQ (VSDxROD GH (O (VWDWXWR GH $XWRQRPtD FRPR QRUPD LQVWLWXFLRQDO EiVLFDGHODV&RPXQLGDGHV$XWyQRPDVFRQWHQLGRDSUREDFLyQ\UHIRUPDGHORV(VWDWXWRV 2UJDQL]DFLyQLQVWLWXFLRQDOGHODV&RPXQLGDGHV$XWyQRPDV 148/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /RV yUJDQRV GH *RELHUQR \ $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD UpJLPHQ MXUtGLFR HVWUXFWXUD \ FRPSHWHQFLDV /D +DFLHQGD 3~EOLFD GH OD &RPXQLGDG $XWyQRPDGH&DQWDEULD 7(0$ /D OH\ FRQFHSWR \ FODVHV 3URFHGLPLHQWRV GH HODERUDFLyQ GH ODV OH\HV 'LVSRVLFLRQHV QRUPDWLYDVFRQIXHU]DGHOH\ORV'HFUHWRV/H\HV\ORV'HFUHWRV/HJLVODWLYRV 7(0$ (O5HJODPHQWRQDWXUDOH]DFODVHV\GLVWLQFLyQFRQORVDFWRVDGPLQLVWUDWLYRV7LWXODUHVGHOD SRWHVWDG UHJODPHQWDULD ,QGHURJDELOLGDG VLQJXODU GH ORV UHJODPHQWRV /DV QRUPDV UHJODPHQWDULDV\ODOH\ 7(0$ (O DFWR DGPLQLVWUDWLYR &RQFHSWR FODVHV \ HOHPHQWRV (O UpJLPHQ MXUtGLFR GHO VLOHQFLR DGPLQLVWUDWLYR (ILFDFLD GH ORV DFWRV DGPLQLVWUDWLYRV 3UHVXSXHVWRV (MHFXWLYLGDG 6XVSHQVLyQ GH OD HILFDFLD /D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV7UDQVPLVLELOLGDGFRQYHUVLyQFRQVHUYDFLyQ\FRQYDOLGDFLyQ 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR \ FODVHV 3ULQFLSLRV 6X UHJXODFLyQ HQ HO GHUHFKRSRVLWLYR 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR ,QLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ\WHUPLQDFLyQGHOSURFHGLPLHQWR 7(0$ /RV UHFXUVRV DGPLQLVWUDWLYRV &RQFHSWR \ QDWXUDOH]D &ODVHV \ UpJLPHQ MXUtGLFR %UHYH UHIHUHQFLDDOD/H\GH&DQWDEULDGH5pJLPHQ-XUtGLFRGHO*RELHUQRGHOD$GPLQLVWUDFLyQ\ GHO6HFWRU3~EOLFR,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD 7(0$ (O 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGRGHOD/H\GHO(VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFRSHUVRQDODOVHUYLFLRGHODV $GPLQLVWUDFLRQHV 3~EOLFDV $GTXLVLFLyQ \ SHUGLGD GH OD UHODFLyQ GH VHUYLFLR 6LWXDFLRQHV DGPLQLVWUDWLYDV 'HUHFKRV \ GHEHUHV GH ORV HPSOHDGRV S~EOLFRV &yGLJR GH FRQGXFWD \ UpJLPHQGLVFLSOLQDULR 7(0$ /D)XQFLyQ3~EOLFDHQOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD&ODVHV GH SHUVRQDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQ $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 'HUHFKRV \ GHEHUHV GH ORV IXQFLRQDULRV 'HUHFKRV HFRQyPLFRV GH ORV IXQFLRQDULRV 5HWULEXFLRQHV EiVLFDV \ FRPSOHPHQWDULDV 'HUHFKRV SDVLYRV \ 6HJXULGDG 6RFLDOGHORVIXQFLRQDULRV 7(0$ 5HSUHVHQWDFLyQ \ SDUWLFLSDFLyQ GH ORV IXQFLRQDULRV S~EOLFRV /H\ 2UJiQLFD GH /LEHUWDG 6LQGLFDO /D QHJRFLDFLyQ FROHFWLYD OD UHSUHVHQWDFLyQ \ OD SDUWLFLSDFLyQ LQVWLWXFLRQDO HQ HO 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGRGHOD/H\GHO(VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV5HJODPHQWRGH ORV6HUYLFLRVGH3UHYHQFLyQ 5HDO'HFUHWRGHGHHQHUR 7(0$ (O 5HJODPHQWR 8( GHO 3DUODPHQWR (XURSHR \ GHO &RQVHMR GH GH DEULO GH UHODWLYRDODSURWHFFLyQGHODVSHUVRQDVItVLFDVHQORTXHUHVSHFWDDOWUDWDPLHQWRGH GDWRVSHUVRQDOHV\DODOLEUHFLUFXODFLyQGHHVWRVGDWRV'HILQLFLRQHV3ULQFLSLRVJHQHUDOHV ÈPELWR GH DSOLFDFLyQ /D OHJLWLPDFLyQ SDUD HO WUDWDPLHQWR GH ORV GDWRV SHUVRQDOHV 5HDO 'HFUHWROH\ GH GH MXOLR GHPHGLGDV XUJHQWHVSDUD OD DGDSWDFLyQGHO 'HUHFKR HVSDxRODODQRUPDWLYDGHOD8QLyQHXURSHDHQPDWHULDGHSURWHFFLyQGHGDWRV,QVSHFFLyQ \UpJLPHQVDQFLRQDGRU i Pág. 12656 boc.cantabria.es CVE-2019-3750 7(0$ 3ROtWLFDVGHLJXDOGDGGHJpQHUR3ROtWLFDVFRQWUDODYLROHQFLDGHJpQHUR1RUPDWLYDYLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 149/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /D /H\ GH GH RFWXEUH GH HVWDGtVWLFD GH &DQWDEULD 3ULQFLSLRV JHQHUDOHV GH OD )XQFLyQ (VWDGtVWLFD 3~EOLFD /D UHFRJLGD GH GDWRV 6HFUHWR HVWDGtVWLFR 'LIXVLyQ GH OD LQIRUPDFLyQHVWDGtVWLFD 7(0$ /RV 6HUYLFLRV HVWDGtVWLFRV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'LVSRVLFLRQHV *HQHUDOHV (O ,QVWLWXWR &iQWDEUR GH (VWDGtVWLFD QDWXUDOH]D IXQFLRQHV yUJDQRV \ FDSDFLGDGIXQFLRQDO/RVRWURVVHUYLFLRVHVWDGtVWLFRVGHOD$GPLQLVWUDFLyQ5HJLRQDO 7(0$ /RV 6HUYLFLRV HVWDGtVWLFRV GHO (VWDGR (O ,QVWLWXWR 1DFLRQDO GH (VWDGtVWLFD 5HODFLRQHV HQWUH DGPLQLVWUDFLRQHV S~EOLFDV HQ PDWHULD GH HVWDGtVWLFD S~EOLFD /D HVWDGtVWLFD HQ OD 8QLyQ(XURSHD 7(0$ /HJLVODFLyQ HVWDGtVWLFD HXURSHD HO 5HJODPHQWR &( Q~PHUR GHO 3DUODPHQWR (XURSHR\GHO&RQVHMRGHGHPDU]RGHUHODWLYRDODHVWDGtVWLFDHXURSHD YHUVLyQ FRQVROLGDGD HOFyGLJRGH%XHQDV3UiFWLFDVGHODV(VWDGtVWLFDV(XURSHDV %/248(,1)250È7,&$ 7(0$ ,QIRUPiWLFDEiVLFD&RQFHSWRGHLQIRUPiWLFD+DUGZDUHFRPSRQHQWHVGHORUGHQDGRU\ SHULIpULFRV6RIWZDUHFRQFHSWRGHVLVWHPDRSHUDWLYRDSOLFDFLRQHVLQIRUPiWLFDV 7(0$ /D LQIRUPiWLFD HQ HO HQWRUQR GH WUDEDMR 5HGHV FRQFHSWR FRPSDUWLFLyQ GH UHFXUVRV XVXDULRV SULYLOHJLRV \ JUXSRV $SOLFDFLRQHV LQIRUPiWLFDV SURFHVDGRUHV GH WH[WR KRMDV GH FiOFXOR EDVHVGHGDWRVFRUUHRHOHFWUyQLFRQDYHJDGRU 7(0$ ,QWHUQHW H ,QWUDQHW &RQH[LyQ D OD :RUOG :LGH :HE 5RXWHU PRGHP VHUYLGRU SUR[\ \ VHUYLGRUHVGHFRUUHR)LUHZDOO9LUXV\DQWLYLUXV&HUWLILFDGRGLJLWDO\ILUPDHOHFWUyQLFD +HUUDPLHQWDVGHSURGXFFLyQ\GLIXVLyQHVWDGtVWLFD3URJUDPDV63665\3&$[LV 7(0$ %LJGDWD0LQHUtDGHGDWRV0DFKLQH/HDUQLQJ'DWD6FLHQFH CVE-2019-3750 7(0$ i Pág. 12657 boc.cantabria.es 150/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2,, &8(532)$&8/7$7,92683(5,25 0$7(5,$6&2081(6 '(5(&+2&2167,78&,21$/<'(5(&+2$8721Ï0,&2 7(0$ /D &RQVWLWXFLyQ (VSDxROD GH 3ULQFLSLRV TXH OD LQIRUPDQ 'HUHFKRV IXQGDPHQWDOHV \ OLEHUWDGHVS~EOLFDV*DUDQWtD\VXVSHQVLyQGHORVGHUHFKRV\OLEHUWDGHV 7(0$ /D&RURQD)XQFLRQHVFRQVWLWXFLRQDOHVGHO5H\6XFHVLyQ\UHJHQFLD 7(0$ /DV&RUWHV*HQHUDOHV&RQJUHVRGHORV'LSXWDGRV\6HQDGR&RPSRVLFLyQ\IXQFLRQHV 7(0$ (O7ULEXQDO&RQVWLWXFLRQDO(O3RGHU-XGLFLDO(O&RQVHMR*HQHUDOGHO3RGHU-XGLFLDO(O'HIHQVRU GHO3XHEOR 7(0$ (O *RELHUQR HQ HO VLVWHPD FRQVWLWXFLRQDO HVSDxRO 5HODFLRQHV HQWUH HO *RELHUQR \ ODV &RUWHV *HQHUDOHV'HVLJQDFLyQUHPRFLyQ\UHVSRQVDELOLGDGGHO*RELHUQR 7(0$ /D RUJDQL]DFLyQ WHUULWRULDO GHO (VWDGR /DV &RPXQLGDGHV $XWyQRPDV PRGHOR WHUULWRULDO HQ OD &RQVWLWXFLyQ(VSDxRODGH(O(VWDWXWRGH$XWRQRPtDFRPRQRUPDLQVWLWXFLRQDOEiVLFDGHODV &RPXQLGDGHV $XWyQRPDV FRQWHQLGR DSUREDFLyQ \ UHIRUPD GH ORV (VWDWXWRV 2UJDQL]DFLyQ LQVWLWXFLRQDOGHODV&RPXQLGDGHV$XWyQRPDV 7(0$ /D$GPLQLVWUDFLyQ/RFDO5HJXODFLyQFRQVWLWXFLRQDO\HQWLGDGHVTXHODLQWHJUDQ 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD (O SURFHVR DXWRQyPLFR GH &DQWDEULD LQLFLDWLYD DXWRQyPLFDWUDPLWDFLyQ\DSUREDFLyQGHO(VWDWXWRGH$XWRQRPtD&RPSHWHQFLDVDVXPLGDVSRUOD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRV GH DPSOLDFLyQ GH FRPSHWHQFLDV 7(0$ 2UJDQL]DFLyQ LQVWLWXFLRQDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR HO 3UHVLGHQWHHO*RELHUQRUHODFLRQHVHQWUHHO3DUODPHQWR\HO*RELHUQR 7(0$ /RV yUJDQRV GH *RELHUQR \ $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD UpJLPHQ MXUtGLFRSULQFLSLRVHVWUXFWXUD\FRPSHWHQFLDV/D+DFLHQGD3~EOLFDGHOD&RPXQLGDG$XWyQRPD GH&DQWDEULD '(5(&+2$'0,1,675$7,9235(6838(67$5,2)81&,Ï13Ò%/,&$<32/Ë7,&$6'(,*8$/'$' i Pág. 12658 7(0$ /DOH\FRQFHSWR\FODVHV3URFHGLPLHQWRGHHODERUDFLyQGHODVOH\HV'LVSRVLFLRQHVQRUPDWLYDV FRQIXHU]DGHOH\ORV'HFUHWRV±/H\HV\ORV'HFUHWRV±/HJLVODWLYRV 7(0$ (O 5HJODPHQWR QDWXUDOH]D FODVHV \ GLVWLQFLyQ FRQ ORV DFWRV DGPLQLVWUDWLYRV 7LWXODUHV GH OD SRWHVWDGUHJODPHQWDULD,QGHURJDELOLGDGVLQJXODUGHORVUHJODPHQWRV/DQRUPDUHJODPHQWDULD\OD OH\ 7(0$ (O DFWR DGPLQLVWUDWLYR &RQFHSWR FODVHV \ HOHPHQWRV (O UpJLPHQ MXUtGLFR GHO VLOHQFLR DGPLQLVWUDWLYR 7(0$ (ILFDFLDGHORVDFWRVDGPLQLVWUDWLYRV3UHVXSXHVWRV(MHFXWLYLGDG6XVSHQVLyQGHODHILFDFLD/D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV 7UDQVPLVLELOLGDG FRQYHUVLyQ FRQVHUYDFLyQ\FRQYDOLGDFLyQ 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR \ FODVHV 3ULQFLSLRV 6X UHJXODFLyQ HQ HO GHUHFKR SRVLWLYR boc.cantabria.es CVE-2019-3750 151/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ (OSURFHGLPLHQWRDGPLQLVWUDWLYRFRP~Q)DVHV3URFHGLPLHQWRVHVSHFLDOHV 7(0$ /RVUHFXUVRVDGPLQLVWUDWLYRV&RQFHSWR\QDWXUDOH]D&ODVHV\UpJLPHQMXUtGLFR%UHYHUHIHUHQFLD D OD /H\ GH &DQWDEULD GH GH QRYLHPEUH GH 5pJLPHQ -XUtGLFR GHO *RELHUQR GH OD $GPLQLVWUDFLyQ\GHO6HFWRU3~EOLFR,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD 7(0$ (O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR , 3HUVRQDO DO VHUYLFLR GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 6LWXDFLRQHV DGPLQLVWUDWLYDV 7(0$ (O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GHOD/H\GHO(VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR ,, 'HUHFKRV\GHEHUHVGHORVHPSOHDGRV S~EOLFRV&yGLJRGHFRQGXFWD\UpJLPHQGLVFLSOLQDULR 7(0$ /D )XQFLyQ 3~EOLFD HQ OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &ODVHV GH SHUVRQDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQ $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 'HUHFKRV\GHEHUHVGHORVIXQFLRQDULRV'HUHFKRVHFRQyPLFRVGHORVIXQFLRQDULRV5HWULEXFLRQHV EiVLFDV\FRPSOHPHQWDULDV'HUHFKRVSDVLYRV\6HJXULGDG6RFLDOGHORVIXQFLRQDULRV 7(0$ 5HSUHVHQWDFLyQ \ SDUWLFLSDFLyQ GH ORV IXQFLRQDULRV S~EOLFRV /H\ 2UJiQLFD GH /LEHUWDG 6LQGLFDO /D QHJRFLDFLyQ FROHFWLYD OD UHSUHVHQWDFLyQ \ OD SDUWLFLSDFLyQ LQVWLWXFLRQDO HQ HO 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR 7(0$ /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ 5HDO'HFUHWRGHGHHQHUR 7(0$ /RV 3UHVXSXHVWRV *HQHUDOHV GHO (VWDGR FRQFHSWR HVWUXFWXUD \ FRQWHQLGR (ODERUDFLyQ DSUREDFLyQHMHFXFLyQ\FRQWUROGHOSUHVXSXHVWR 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5HJXODFLyQHQOD/H\GH )LQDQ]DVGH&DQWDEULD(VWUXFWXUD\FRQWHQLGR(ODERUDFLyQDSUREDFLyQHMHFXFLyQ\FRQWUROGHO SUHVXSXHVWR 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ 7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR%UHYHUHIHUHQFLDDOD /H\GH&DQWDEULDGHGHPDU]RGH7UDQVSDUHQFLDGHOD$FWLYLGDG3~EOLFD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV 81,Ï1(8523($ i Pág. 12659 7(0$ /D 8QLyQ (XURSHD $QWHFHGHQWHV \ REMHWLYRV /RV 7UDWDGRV IXQGDFLRQDOHV \ VXV UHIRUPDV /D DGKHVLyQGH(VSDxDDOD&((/DV,QVWLWXFLRQHV&RPXQLWDULDV(O&RQVHMR(XURSHRHO&RQVHMR \OD&RPLVLyQ(XURSHDHO3DUODPHQWR(XURSHRHO7ULEXQDOGH-XVWLFLD&RPSRVLFLyQIXQFLRQHV\ FRPSHWHQFLDV 7(0$ /DV IXHQWHVGHO RUGHQDPLHQWR MXUtGLFRFRPXQLWDULR GHUHFKR RULJLQDULR \ GHULYDGR 5HJODPHQWRV GLUHFWLYDV\GHFLVLRQHV/DVUHODFLRQHVHQWUHHOGHUHFKRFRPXQLWDULR\HOGHUHFKRGHORV(VWDGRV PLHPEURVHQODDSOLFDFLyQGHDTXpOHVSHFLDOUHIHUHQFLDDO(VWDGRHVSDxRO/DSDUWLFLSDFLyQGHODV &RPXQLGDGHV$XWyQRPDVHQODDSOLFDFLyQGHO'HUHFKR&RPXQLWDULR 7(0$ /DV OLEHUWDGHV EiVLFDV GHO VLVWHPD FRPXQLWDULR \ HO LQWHUYHQFLRQLVPR S~EOLFR /DV SROtWLFDV FRPXQHV/DSROtWLFDUHJLRQDO\VXLQFLGHQFLDHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD boc.cantabria.es CVE-2019-3750 152/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ &8(5327e&1,&2'(),1$1=$6 $1(;2, '(5(&+2&,9,/'(5(&+20(5&$17,/<(&2120Ë$ 7(0$ (OFRQFHSWRGHSHUVRQD&ODVHVGHSHUVRQDV3HUVRQDVItVLFDV1DFLPLHQWR\H[WLQFLyQ3HUVRQDV MXUtGLFDV &RQFHSWR QDWXUDOH]D \ FODVHV &RQVWLWXFLyQ \ H[WLQFLyQ GH ODV SHUVRQDV MXUtGLFDV &DSDFLGDGMXUtGLFD\FDSDFLGDGGHREUDU5HSUHVHQWDFLyQ$GTXLVLFLyQ\SpUGLGDGHODQDFLRQDOLGDG HVSDxROD(OH[WUDQMHUR 7(0$ /RVGHUHFKRVUHDOHV&RQFHSWR\FODVHV'LIHUHQFLDVHQWUHORVGHUHFKRVUHDOHV\ORVGHUHFKRVGH FUpGLWR /D SURSLHGDG 0RGRV GH DGTXLULU \ SHUGHU OD SURSLHGDG (O 5HJLVWUR GH OD 3URSLHGDG 3ULQFLSLRVKLSRWHFDULRV 7(0$ /DSRVHVLyQ(OXVXIUXFWR/DVHUYLGXPEUH&RPXQLGDGGHELHQHV 7(0$ /RVGHUHFKRVUHDOHVGHJDUDQWtD&RQFHSWR\FODVLILFDFLyQ+LSRWHFD3UHQGD+LSRWHFDPRELOLDULD\ SUHQGDVLQGHVSOD]DPLHQWR$QWLFUHVLV 7(0$ /DV REOLJDFLRQHV &RQFHSWR \ FODVHV )XHQWHV GH ODV REOLJDFLRQHV 3UXHED GH ODV REOLJDFLRQHV &RQFXUUHQFLD \ SUHODFLyQ GH FUpGLWRV ([WLQFLyQ GH ODV REOLJDFLRQHV ,QIOXHQFLD GHO WLHPSR HQ ODV UHODFLRQHVMXUtGLFDV 7(0$ (OFRQWUDWR&RQFHSWR\FODVHV(OHPHQWRVGHORVFRQWUDWRV*HQHUDFLyQSHUIHFFLyQ\FRQVXPDFLyQ GHORVFRQWUDWRV,QHILFDFLDGHORVFRQWUDWRV,QWHUSUHWDFLyQ\IRUPDGHORVFRQWUDWRV 7(0$ /D FRPSUDYHQWD &RQFHSWR \ HOHPHQWRV &RQWHQLGR GH OD FRPSUDYHQWD (O FRQWUDWR GH DUUHQGDPLHQWR&RQFHSWR\FODVHV 7(0$ /DGRQDFLyQ&RQFHSWR\FODVHV(OHPHQWRVGHODGRQDFLyQ(IHFWRVGHODGRQDFLyQ5HYRFDFLyQ\ UHGXFFLyQGHGRQDFLRQHV/DVXFHVLyQPRUWLVFDXVD&RQFHSWR\FODVHV/DKHUHQFLD&RQFHSWR\ VLWXDFLRQHVHQTXHSXHGHHQFRQWUDUVHODKHUHQFLD 7(0$ $FHSWDFLyQ GH OD KHUHQFLD +HUHGHUR \ OHJDWDULR 'HUHFKR D DFUHFHU &RODFLyQ \ SDUWLFLyQ GH OD KHUHQFLD /D VXFHVLyQ WHVWDPHQWDULD &RQFHSWR FDUDFWHUHV \ FODVHV GH WHVWDPHQWRV 6XFHVLyQ IRU]RVD/DVXFHVLyQLQWHVWDGD'HVKHUHGDFLyQ3UHWHULFLyQ 7(0$ /DHPSUHVDPHUFDQWLO(OHPSUHVDULRLQGLYLGXDO&DSDFLGDG\SURKLELFLRQHV3UXHEDDGTXLVLFLyQ\ SpUGLGDGHODFXDOLGDGGHHPSUHVDULR(O5HJLVWUR0HUFDQWLO 7(0$ /DFRQWDELOLGDGPHUFDQWLO&RQWDELOLGDGIRUPDO/LEURVREOLJDWRULRV5HTXLVLWRVGHORVOLEURV(ILFDFLD SUREDWRULD &RPXQLFDFLyQ \ H[KLELFLyQ GH ORV OLEURV &RQWDELOLGDG PDWHULDO &XHQWDV DQXDOHV 9HULILFDFLyQDXGLWRULD\GHSyVLWRGHFXHQWDV(QWLGDGHVREOLJDGDVDDXGLWDUVXVFXHQWDV 7(0$ 6RFLHGDGHVGHFDSLWDO&RQFHSWR\FDUDFWHUHV)XQGDFLyQ(VFULWXUDVRFLDO\HVWDWXWRV$FFLRQHV\ REOLJDFLRQHV ÏUJDQRV /D GLVROXFLyQ GH ODV VRFLHGDGHV PHUFDQWLOHV /LTXLGDFLyQ \ GLYLVLyQ 7UDQVIRUPDFLyQIXVLyQ\HVFLVLyQGHODVVRFLHGDGHVPHUFDQWLOHV 7(0$ /RVWtWXORVYDORUHV&RQFHSWR\FODVLILFDFLyQ/RVWtWXORVQRPLQDWLYRVDODRUGHQDOSRUWDGRU\GH WUDGLFLyQ/DOHWUDGHFDPELR&RQFHSWR\UHTXLVLWRVIRUPDOHV(OHQGRVR/DDFHSWDFLyQ(OSDJRGH ODOHWUD/DVH[FHSFLRQHVFDPELDULDV i Pág. 12660 boc.cantabria.es CVE-2019-3750 7(0$ /DVVRFLHGDGHVPHUFDQWLOHV&RQFHSWR\FODVLILFDFLyQ5HTXLVLWRVGHFRQVWLWXFLyQGHODVVRFLHGDGHV PHUFDQWLOHV /D VRFLHGDG LUUHJXODU 1DFLRQDOLGDG GH ODV VRFLHGDGHV /DV VRFLHGDGHV FROHFWLYDV \ FRPDQGLWDULDV/DVRFLHGDGGHUHVSRQVDELOLGDGOLPLWDGD3ULQFLSDOHVQRWDVGHVXUpJLPHQMXUtGLFR 153/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /DGHFODUDFLyQGHFRQFXUVR/D$GPLQLVWUDFLyQFRQFXUVDO/RVHIHFWRVGHODGHFODUDFLyQGHFRQFXUVR /DFDOLILFDFLyQGHOFRQFXUVR 7(0$ /DDFWLYLGDGHFRQyPLFD6LVWHPDVHFRQyPLFRV7LSRVGHRUJDQL]DFLyQGHODDFWLYLGDGHFRQyPLFD )XQFLRQHVGHXQVLVWHPDHFRQyPLFR 7(0$ (O GLQHUR &RQFHSWR \ IXQFLRQHV GHO GLQHUR 'HPDQGD \ RIHUWD GH GLQHUR )RUPDFLyQ GHO WLSR GH LQWHUpV 7(0$ (OVLVWHPDILQDQFLHUR(O%DQFR&HQWUDO/RV%DQFRVFRPHUFLDOHV2WURVLQWHUPHGLDULRVILQDQFLHURV 7(0$ 7HRUtDGHODGHPDQGD&RQFHSWRGHXWLOLGDG&XUYDVGHLQGLIHUHQFLD(OHTXLOLEULRGHOFRQVXPLGRU &XUYDVGHGHPDQGD 7(0$ (OFRPHUFLRLQWHUQDFLRQDO/DSURWHFFLyQDUDQFHODULD/DEDODQ]DGHSDJRV&RQFHSWR\HVWUXFWXUD (OWLSRGHFDPELR(OHTXLOLEULRGHODEDODQ]DGHSDJRV 7(0$ 7HRUtDGHODSURGXFFLyQ)XQFLRQHVGHSURGXFFLyQ3URGXFWLYLGDG(TXLOLEULRGHODSURGXFFLyQ/RV FRVWHVGHSURGXFFLyQ&RQFHSWR\FODVHV)XQFLRQHVGHFRVWHV/DFXUYDGHODRIHUWD(OHTXLOLEULR GHODHPSUHVD 7(0$ (OPHUFDGR&RQFHSWR\FODVHV0HUFDGRVGHOLEUHFRQFXUUHQFLD\PRQRSROtVWLFRV)RUPDFLyQGHO SUHFLR$QiOLVLVGHRWURVPHUFDGRV/DFRPSHWHQFLDPRQRSROtVWLFD\HOROLJRSROLR 7(0$ (O SURFHVR SURGXFWLYR /RV FRVWHV GH SURGXFFLyQ 6X HVWUXFWXUD /RV SULQFLSDOHV HOHPHQWRV GHWHUPLQDQWHVGHOFRVWHGHODSURGXFFLyQ(OFRVWHGHORVVXESURGXFWRV 7(0$ /D HPSUHVD FRPR RUJDQL]DFLyQ 0DUFR LQVWLWXFLRQDO &RQFHSWR 5HDOLGDG HFRQyPLFD \ HQWRUQR &ODVHVGHHPSUHVDV\FULWHULRVGHFODVLILFDFLyQ/RVREMHWLYRVGHODHPSUHVD6LVWHPDVGHGLUHFFLyQ \JHVWLyQ 7(0$ /DILQDQFLDFLyQGHODHVWUXFWXUDILMDGHODHPSUHVD/DDXWRILQDQFLDFLyQ/DIXQFLyQILQDQFLHUDGHORV IRQGRV GH DPRUWL]DFLRQHV /DV OODPDGDV DPRUWL]DFLRQHV ILQDQFLHUDV R GH FDSLWDO (TXLOLEULR HQWUH DPRUWL]DFLRQHVWpFQLFDV\DPRUWL]DFLRQHVILQDQFLHUDV 7(0$ /DV YDULDFLRQHV GH OD UHQWD GH OD HPSUHVD (VWXGLR GH VXV FDXVDV /D FRPSDUDFLyQ HQWUH OD UHQWDELOLGDGHVSHUDGD\ODUHDO/DUHQWDELOLGDGVXPHGLGD/DUHQWDELOLGDGGHODHPSUHVD\HOLQWHUpV GHOFDSLWDOLQYHUWLGRHQODPLVPD 7(0$ (ODQiOLVLVILQDQFLHUR/DHVWUXFWXUDGHODVIXHQWHVGHILQDQFLDFLyQ(OHTXLOLEULRILQDQFLHUR(OFRQWURO ILQDQFLHUR '(5(&+2&2167,78&,21$/<$'0,1,675$7,92 i Pág. 12661 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH&DUDFWHUtVWLFDV\HVWUXFWXUD/D&RURQD/DV&RUWHV*HQHUDOHV (O *RELHUQR (O 3RGHU -XGLFLDO (O 7ULEXQDO &RQVWLWXFLRQDO /D UHIRUPD FRQVWLWXFLRQDO 'HUHFKRV IXQGDPHQWDOHV\OLEHUWDGHVS~EOLFDV 7(0$ /DRUJDQL]DFLyQWHUULWRULDOGHO(VWDGRHQOD&RQVWLWXFLyQ/DV&RPXQLGDGHV$XWyQRPDV(VWUXFWXUD \FRPSHWHQFLDV/RV(VWDWXWRVGH$XWRQRPtD&DUDFWHUHV\FRQWHQLGR5HIHUHQFLDDOD&RPXQLGDG GH&DQWDEULD 7(0$ 3ROtWLFDV6RFLDOHV3~EOLFDV3ROtWLFDGHLJXDOGDGGHJpQHUR/H\RUJiQLFDGHGHPDU]R SDUDODLJXDOGDGHIHFWLYDGHKRPEUHV\PXMHUHV/H\2UJiQLFDGHGHGHGLFLHPEUHGH PHGLGDVGH3URWHFFLyQ,QWHJUDOFRQWUDODYLROHQFLDGHJpQHUR3ROtWLFDHQPDWHULDGHLJXDOGDGGH GHUHFKRVGHODVSHUVRQDVFRQGLVFDSDFLGDG/D/H\GHGHGLFLHPEUHGH3URPRFLyQGH ODDXWRQRPtDSHUVRQDO\DWHQFLyQDSHUVRQDVHQVLWXDFLRQHVGHGHSHQGHQFLD 7(0$ /DVIXHQWHVGHO'HUHFKR$GPLQLVWUDWLYR/D&RQVWLWXFLyQ/D/H\'LVSRVLFLRQHVGHO*RELHUQRFRQ IXHU]D GH OH\ 'HFUHWRVOH\HV \ 'HFUHWRV /HJLVODWLYRV (O 5HJODPHQWR &RQFHSWR FDUDFWHUHV \ FODVHV/tPLWHVGHORVUHJODPHQWRV5HJODPHQWRVLOHJDOHV boc.cantabria.es CVE-2019-3750 154/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ &RQFHSWR GH $GPLQLVWUDFLyQ 3~EOLFD &UHDFLyQ \ FRPSHWHQFLDV GH ORV yUJDQRV DGPLQLVWUDWLYRV 7LSRVGHHQWHVS~EOLFRV)RUPDVGHJHVWLyQGHORVVHUYLFLRVS~EOLFRV(OSULQFLSLRGHOHJDOLGDG/D DXWRWXWHODGHOD$GPLQLVWUDFLyQ 7(0$ /D$GPLQLVWUDFLyQHOHFWUyQLFD1RUPDWLYDUHJXODGRUD,QVWUXPHQWRVSDUDHODFFHVRHOHFWUyQLFRDODV $GPLQLVWUDFLRQHV 3~EOLFDV VHGHV HOHFWUyQLFDV FDQDOHV \ SXQWR GH DFFHVR LGHQWLILFDFLyQ \ DXWHQWLFDFLyQ (O *RELHUQR DELHUWR OD WUDQVSDUHQFLD HO DFFHVR D OD LQIRUPDFLyQ S~EOLFD OD SDUWLFLSDFLyQHQODUHQGLFLyQGHFXHQWDV\HOEXHQJRELHUQR(VSHFLDOUHIHUHQFLDDOD/H\GH GHPDU]RGH7UDQVSDUHQFLDGHOD$FWLYLGDG3~EOLFDGH&DQWDEULD 7(0$ (O DFWR DGPLQLVWUDWLYR &RQFHSWR \ FDUDFWHUHV 'LIHUHQWHV FODVLILFDFLRQHV GH ORV DFWRV DGPLQLVWUDWLYRV 7(0$ (OHPHQWRVGHODFWRDGPLQLVWUDWLYR6XMHWRREMHWRILQ\IRUPD/DPRWLYDFLyQ\FRPXQLFDFLyQGHORV DFWRVDGPLQLVWUDWLYRV(OVLOHQFLRDGPLQLVWUDWLYR 7(0$ (ILFDFLD GHO DFWR DGPLQLVWUDWLYR 1RWLILFDFLyQ \ SXEOLFDFLyQ (MHFXWRULHGDG GH ORV DFWRV DGPLQLVWUDWLYRV 9DOLGH] H LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR 5HYLVLyQ GH RILFLR GH ORV DFWRV DGPLQLVWUDWLYRV 7(0$ /DUHVSRQVDELOLGDGSDWULPRQLDOGHOD$GPLQLVWUDFLyQ3~EOLFD5pJLPHQYLJHQWH5HTXLVLWRVSDUDTXH SURFHGDODLQGHPQL]DFLyQ5HVSRQVDELOLGDGGHODVDXWRULGDGHV\IXQFLRQDULRV5HTXLVLWRV3OD]RV GHUHFODPDFLyQ\SURFHGLPLHQWR 7(0$ (OSURFHGLPLHQWRDGPLQLVWUDWLYR/RVLQWHUHVDGRV'HUHFKRVGHORVFLXGDGDQRVHQHOSURFHGLPLHQWR DGPLQLVWUDWLYR 'HUHFKR \ REOLJDFLyQ GH UHODFLRQDUVH HOHFWUyQLFDPHQWH FRQ ODV $GPLQLVWUDFLRQHV 3~EOLFDV 7(0$ /RVUHFXUVRVDGPLQLVWUDWLYRV&RQFHSWR\FODVHV 7(0$ /DMXULVGLFFLyQFRQWHQFLRVRDGPLQLVWUDWLYDQDWXUDOH]DH[WHQVLyQ\OtPLWHVÏUJDQRVGHODMXULVGLFFLyQ FRQWHQFLRVRDGPLQLVWUDWLYD /DV SDUWHV HQ HO SURFHVR FRQWHQFLRVRDGPLQLVWUDWLYR &DSDFLGDG OHJLWLPDFLyQ \ GHIHQVD 3ULQFLSDOHV DVSHFWRV GHO SURFHVR FRQWHQFLRVRDGPLQLVWUDWLYR 5HFXUVRV FRQWUDVHQWHQFLDV 7(0$ /RVIXQFLRQDULRVS~EOLFRV&RQFHSWR\FODVHV6LWXDFLRQHVGHORVIXQFLRQDULRV'HUHFKRV\GHEHUHV 5pJLPHQGLVFLSOLQDULRGHORVIXQFLRQDULRVS~EOLFRV(OUpJLPHQGHLQFRPSDWLELOLGDGHV 7(0$ ,QVWLWXFLRQHVGHOD8QLyQ(XURSHD(O&RQVHMROD&RPLVLyQHO3DUODPHQWR(O7ULEXQDOGH-XVWLFLD (O7ULEXQDOGH&XHQWDV(ORUGHQDPLHQWRMXUtGLFRFRPXQLWDULR\VXVIXHQWHV 7(0$ (OUpJLPHQMXUtGLFRGHO3DWULPRQLRGHO(VWDGR5HIHUHQFLDDOD/H\GH3DWULPRQLRGHOD&RPXQLGDG GH&DQWDEULD CVE-2019-3750 i Pág. 12662 boc.cantabria.es 155/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2,, &217$%,/,'$'<0$7(0È7,&$6),1$1&,(5$6 &RQWDELOLGDG &RQWDELOLGDGJHQHUDO 3ODQ *HQHUDO GH &RQWDELOLGDG \ 1RUPDV ,QWHUQDFLRQDOHV GH &RQWDELOLGDG 2SHUDFLRQHV GHO HMHUFLFLR \ FiOFXOR FRQWDEOHGHOUHVXOWDGR0DUFR&RQFHSWXDO1RUPDVGHUHJLVWUR\YDORUDFLyQ&XHQWDVDQXDOHV &RQWDELOLGDGGHVRFLHGDGHV &RQVWLWXFLyQ GLVWULEXFLyQ GH EHQHILFLRV DXPHQWR \ UHGXFFLyQ GH FDSLWDO ILQDQFLDFLyQ \ WUDQVIRUPDFLyQ GH VRFLHGDGHV&RPELQDFLRQHVGHQHJRFLRVQHJRFLRVFRQMXQWRV\RSHUDFLRQHVHQWUHHPSUHVDVGHOJUXSR)XVLyQ DEVRUFLyQHVFLVLyQ\GLVROXFLyQGHHPSUHVDVLQGLYLGXDOHV\VRFLDOHV 0DWHPiWLFDVILQDQFLHUDV &DSLWDOL]DFLyQVLPSOH\FRPSXHVWD 5HQWDVSUpVWDPRV\HPSUpVWLWRV 2SHUDFLRQHVFRQYDORUHVPRELOLDULRV CVE-2019-3750 i Pág. 12663 boc.cantabria.es 156/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2,,, , '(5(&+235(6838(67$5,26,67(0$6'(&21752/<&217$%,/,'$'3Ò%/,&$'(/$ &2081,'$'$87Ï120$'(&$17$%5,$ 7(0$ /RV 3UHVXSXHVWRV *HQHUDOHV GH &DQWDEULD , (ODERUDFLyQ WUDPLWDFLyQ \ DSUREDFLyQ (VWUXFWXUD SUHVXSXHVWDULD 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGH&DQWDEULD ,, /DVPRGLILFDFLRQHVSUHVXSXHVWDULDV6XWUDPLWDFLyQ \FRQWURO 7(0$ (O JDVWR S~EOLFR &RQFHSWR 3ULQFLSLRV FRQVWLWXFLRQDOHV 3URFHGLPLHQWR GH HMHFXFLyQ GHO JDVWR S~EOLFR5HIHUHQFLDDORV$QWLFLSRVGH&DMD)LMD\3DJRVD-XVWLILFDU 7(0$ *HVWLyQ GH ORV JDVWRV GH SHUVRQDO HQ DFWLYR \ GH FODVHV SDVLYDV /D 6HJXULGDG 6RFLDO GH ORV HPSOHDGRVS~EOLFRV 7(0$ *HVWLyQGHJDVWRVFRQWUDFWXDOHV1DFLPLHQWRGHREOLJDFLRQHV&XPSOLPLHQWRUHFRQRFLPLHQWRGHOD REOLJDFLyQMXVWLILFDFLyQ\H[WLQFLyQ 7(0$ *HVWLyQ GH JDVWRV GH WUDQVIHUHQFLDV 6XEYHQFLRQHV &RQFHSWR QDWXUDOH]D \ FODVLILFDFLyQ 3URFHGLPLHQWR GH FRQFHVLyQ \ SDJR 5HLQWHJUR ,QIUDFFLRQHV DGPLQLVWUDWLYDV HQ PDWHULD GH VXEYHQFLRQHV(OGHOLWRVXEYHQFLRQDO 7(0$ (O'HUHFKRGHOD&RQWDELOLGDG3~EOLFD(O3ODQ*HQHUDOGH&RQWDELOLGDG3~EOLFD&DQWDEULD\GHPiV QRUPDWLYDVXSOHWRULDGHDSOLFDFLyQ3ULQFLSLRVFRQWDEOHVFXHQWDVDQXDOHV\QRUPDVGHYDORUDFLyQ 7(0$ /D &XHQWD *HQHUDO GH &DQWDEULD 'RFXPHQWRV TXH LQWHJUDQ )RUPDFLyQ \ UHPLVLyQ ([DPHQ \ FRPSUREDFLyQSRU7ULEXQDOGH&XHQWDV7UDPLWDFLyQ\DSUREDFLyQ 7(0$ (O6HFWRU3~EOLFRDXWRQyPLFRGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDGHOLPLWDFLyQ\SULQFLSDOHV FDUDFWHUtVWLFDV/DVFXHQWDVHFRQyPLFDVGHO6HFWRU3~EOLFR 7(0$ (OFRQWUROLQWHUQRGHODDFWLYLGDGHFRQyPLFRILQDQFLHUDGHO6HFWRU3~EOLFRGHOD&RPXQLGDG$XWyQRPD GH&DQWDEULD&RQFHSWRFODVHV\iPELWR'HUHFKRV\GHEHUHVGHOSHUVRQDOFRQWURODGRU 7(0$ /D ,*$& 2UJDQL]DFLyQ \ IXQFLRQHV /D IXQFLyQ LQWHUYHQWRUD 0RGDOLGDGHV GH HMHUFLFLR 5HSDURV 2PLVLyQGHODLQWHUYHQFLyQ'LVFUHSDQFLDV&RPSUREDFLyQPDWHULDOGHODLQYHUVLyQ 7(0$ (O FRQWURO ILQDQFLHUR SHUPDQHQWH &RQFHSWR 5HJXODFLyQ \ SULQFLSLRV JHQHUDOHV ÈPELWR GH OD DSOLFDFLyQ ,QIRUPHV GH FRQWURO ILQDQFLHUR SHUPDQHQWH /D DXGLWRUtD S~EOLFD )RUPDV GH HMHUFLFLR 3ODQDQXDOGH&RQWURO)LQDQFLHUR$XGLWRUtD3~EOLFD\RWUDVRSHUDFLRQHVGHFRQWUROGH&DQWDEULD 7(0$ (O FRQWURO H[WHUQR GH OD DFWLYLGDG HFRQyPLFR ILQDQFLHUD GHO 6HFWRU 3~EOLFR HVWDWDO (O FRQWURO SDUODPHQWDULR(OFRQWUROGHO7ULEXQDOGH&XHQWDV(O7ULEXQDOGH&XHQWDVFRPSHWHQFLDVIXQFLRQHV ,, '(5(&+275,%87$5,2 i Pág. 12664 7(0$ (O'HUHFKR)LQDQFLHUR&RQFHSWR\FRQWHQLGR/D+DFLHQGD3~EOLFDHQOD&RQVWLWXFLyQ(VSDxROD 7(0$ (O 'HUHFKR 7ULEXWDULR &RQFHSWR \ FRQWHQLGR )XHQWHV /D /H\ *HQHUDO 7ULEXWDULD 3ULQFLSLRV JHQHUDOHV 7(0$ /RV7ULEXWRV&RQFHSWRILQHV\FODVHV/DUHODFLyQMXUtGLFRWULEXWDULD+HFKRLPSRQLEOH1RVXMHFLyQ \H[HQFLyQ'HYHQJR3UHVFULSFLyQ/DDSOLFDFLyQGHODQRUPDWULEXWDULD,QWHUSUHWDFLyQFDOLILFDFLyQ HLQWHJUDFLyQ/DDQDORJtD(OFRQIOLFWRHQODDSOLFDFLyQGHODQRUPDWULEXWDULD/DVLPXODFLyQ boc.cantabria.es CVE-2019-3750 157/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /DV REOLJDFLRQHV WULEXWDULDV /D REOLJDFLyQ WULEXWDULD SULQFLSDO OD REOLJDFLyQ WULEXWDULD GH UHDOL]DU SDJRV D FXHQWD ODV REOLJDFLRQHV HQWUH SDUWLFXODUHV ODV REOLJDFLRQHV WULEXWDULDV DFFHVRULDV \ IRUPDOHV/DVREOLJDFLRQHV\GHEHUHVGHOD$GPLQLVWUDFLyQ7ULEXWDULD/RVGHUHFKRV\JDUDQWtDVGH ORV REOLJDGRV WULEXWDULRV &RODERUDFLyQ VRFLDO HQ OD DSOLFDFLyQ GH ORV WULEXWRV 8WLOL]DFLyQ GH ODV QXHYDVWHFQRORJtDVGHODLQIRUPDFLyQ 7(0$ /RVREOLJDGRVWULEXWDULRV&RQWULEX\HQWHV6XMHWRVSDVLYRV6XFHVRUHV5HVSRQVDEOHVVROLGDULRV\ VXEVLGLDULRV2WURVREOLJDGRVWULEXWDULRV/DFDSDFLGDGGHREUDU5HSUHVHQWDFLyQ'RPLFLOLRILVFDO /DGHFODUDFLyQFHQVDO(OGHEHUGHH[SHGLU\HQWUHJDUIDFWXUDVGHHPSUHVDULRV\SURIHVLRQDOHV 7(0$ (OHPHQWRVGHFXDQWLILFDFLyQGHODREOLJDFLyQWULEXWDULDSULQFLSDO\GHODREOLJDFLyQGHUHDOL]DUSDJRV DFXHQWD%DVHLPSRQLEOHFRQFHSWRPpWRGRVGHGHWHUPLQDFLyQ%DVHOLTXLGDEOH7LSRGHJUDYDPHQ &XRWDWULEXWDULD&RPSUREDFLyQGHYDORUHV/DGHXGDWULEXWDULD 7(0$ /DDSOLFDFLyQGHORVWULEXWRV&RQFHSWR\yUJDQRVFRPSHWHQWHV/DLQIRUPDFLyQ\DVLVWHQFLDDORV REOLJDGRVWULEXWDULRV/DFRQVXOWDWULEXWDULD(OQ~PHURGHLGHQWLILFDFLyQILVFDO/RVSURFHGLPLHQWRV DGPLQLVWUDWLYRV HQ PDWHULD WULEXWDULD 3UXHED QRWLILFDFLRQHV REOLJDFLyQ GH UHVROXFLyQ \ SOD]R GH UHVROXFLyQ/DVOLTXLGDFLRQHVWULEXWDULDV 7(0$ $FWXDFLRQHV \ SURFHGLPLHQWRV GH JHVWLyQ WULEXWDULD ,QLFLDFLyQ 'HFODUDFLRQHV $XWROLTXLGDFLRQHV &RPXQLFDFLRQHVGHGDWRV3URFHGLPLHQWRGHGHYROXFLyQLQLFLDGRPHGLDQWHDXWROLTXLGDFLyQVROLFLWXG R FRPXQLFDFLyQ GH GDWRV 3URFHGLPLHQWR LQLFLDGR PHGLDQWH GHFODUDFLyQ 3URFHGLPLHQWR GH YHULILFDFLyQGHGDWRV3URFHGLPLHQWRGHFRPSUREDFLyQGHYDORUHV3URFHGLPLHQWRGHFRPSUREDFLyQ OLPLWDGD 7(0$ /DUHFDXGDFLyQ$FWXDFLRQHV\SURFHGLPLHQWRVÏUJDQRVGHUHFDXGDFLyQ([WLQFLyQGHODVGHXGDV (O SDJR \ RWUDV IRUPDV GH H[WLQFLyQ 2EOLJDGRV DO SDJR *DUDQWtDV GH OD GHXGD WULEXWDULD $SOD]DPLHQWRV\IUDFFLRQDPLHQWRV 7(0$ /DUHFDXGDFLyQHQSHULRGRHMHFXWLYR3URFHGLPLHQWRGHDSUHPLR7HUFHUtDV3URFHGLPLHQWRIUHQWHD UHVSRQVDEOHV\VXFHVRUHV 7(0$ /DLQVSHFFLyQGHORVWULEXWRVÏUJDQRV)XQFLRQHV)DFXOWDGHV'HEHUHV'LVWLQWDVDFWXDFLRQHVHQ HOSURFHGLPLHQWRGHLQVSHFFLyQ2EWHQFLyQGHLQIRUPDFLyQYDORUDFLyQLQIRUPH\DVHVRUDPLHQWR(O SURFHGLPLHQWRGHLQVSHFFLyQ(VSHFLDOUHIHUHQFLDDOGHOLWRFRQWUDODKDFLHQGDS~EOLFD 7(0$ /DUHYLVLyQGHORVDFWRVGHFDUiFWHUWULEXWDULRHQYtDDGPLQLVWUDWLYD3URFHGLPLHQWRVHVSHFLDOHVGH UHYLVLyQ (O UHFXUVR GH UHSRVLFLyQ /DV UHFODPDFLRQHV HFRQyPLFRDGPLQLVWUDWLYDV $FWRV LPSXJQDEOHVÏUJDQRVGHUHVROXFLyQ3URFHGLPLHQWRV6XVSHQVLyQGHDFWRVLPSXJQDGRV 7(0$ (O ,PSXHVWR VREUH OD 5HQWD GH ODV 3HUVRQDV )tVLFDV 1DWXUDOH]D REMHWR \ iPELWR GH DSOLFDFLyQ 6XMHFLyQ DO ,PSXHVWR 5HQGLPLHQWRV \ JDQDQFLDV \ SpUGLGDV SDWULPRQLDOHV ,QWHJUDFLyQ \ FRPSHQVDFLyQ GH UHQWDV 0tQLPR SHUVRQDO \ IDPLOLDU %DVH LPSRQLEOH \ EDVH OLTXLGDEOH &XRWD tQWHJUDHVWDWDO\DXWRQyPLFD'HGXFFLRQHVHVWDWDOHV\DXWRQyPLFDV&XRWDGLIHUHQFLDO7ULEXWDFLyQ IDPLOLDU*HVWLyQGHO,PSXHVWR'HFODUDFLRQHV3DJRVDFXHQWD 7(0$ (O ,PSXHVWR VREUH HO 3DWULPRQLR +HFKR LPSRQLEOH([HQFLRQHV6XMHWR SDVLYR %DVH LPSRQLEOH \ OLTXLGDEOH /D GHXGD WULEXWDULD 5HODFLyQ FRQ RWURV WULEXWRV *HVWLyQ GHO LPSXHVWR &RPSHWHQFLDV QRUPDWLYDVGHODV&RPXQLGDGHV$XWyQRPDV(VSHFLDOUHIHUHQFLDDODQRUPDWLYDGH&DQWDEULD 7(0$ (O,PSXHVWRVREUH7UDQVPLVLRQHV3DWULPRQLDOHV\$FWRV-XUtGLFRV'RFXPHQWDGRV+HFKRLPSRQLEOH VXMHWRSDVLYREDVHLPSRQLEOHFXRWDWULEXWDULD\UHJODVHVSHFLDOHV&RPSHWHQFLDVQRUPDWLYDVGHODV &RPXQLGDGHV$XWyQRPDV5HIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (O ,PSXHVWR VREUH 6XFHVLRQHV \ 'RQDFLRQHV +HFKR LPSRQLEOH 6XMHWR SDVLYR %DVH LPSRQLEOH 'HXGDWULEXWDULD&RPSHWHQFLDVQRUPDWLYDVGHODV&RPXQLGDGHV$XWyQRPDV i Pág. 12665 boc.cantabria.es CVE-2019-3750 7(0$ (O ,PSXHVWR VREUH HO 9DORU $xDGLGR &RQFHSWR \ QDWXUDOH]D ÈPELWR GH DSOLFDFLyQ GHO LPSXHVWR +HFKRLPSRQLEOH\VXSXHVWRVGHQRVXMHFLyQ([HQFLRQHV6XMHWRSDVLYR'HYHQJR%DVHLPSRQLEOH 7LSRVGHJUDYDPHQ'HGXFFLRQHV'HVOLQGHFRQHO,PSXHVWRVREUH7UDQVPLVLRQHV3DWULPRQLDOHV\ $FWRV-XUtGLFRV'RFXPHQWDGRV 158/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /DV 7DVDV FRQFHSWR iPELWR GH DSOLFDFLyQ +HFKR LPSRQLEOH 6XMHWR SDVLYR \ UHVSRQVDEOHV 'HYHQJR\OLTXLGDFLyQ/RVSUHFLRVS~EOLFRV5HIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD CVE-2019-3750 7(0$ /DILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV(OHPHQWRVSULQFLSDOHVGHORVWULEXWRVSURSLRV/RV WULEXWRVFHGLGRVÏUJDQRV\IRUPDVGHUHODFLyQHQWUHODV$GPLQLVWUDFLRQHV7ULEXWDULDVGHO(VWDGR\ GHODV&RPXQLGDGHV$XWyQRPDV i Pág. 12666 boc.cantabria.es 159/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 352*5$0$'(0$7(5,$63$5$(/,1*5(62(1(/&8(532'(*(67,Ï1 7(0$ /D &RQVWLWXFLyQ (VSDxROD GH FDUDFWHUtVWLFDV JHQHUDOHV /D &RQVWLWXFLyQ FRPR QRUPD MXUtGLFD (O (VWDGR VRFLDO \ GHPRFUiWLFR GH GHUHFKR /RV YDORUHV VXSHULRUHV HQ OD &RQVWLWXFLyQ (VSDxROD/DUHIRUPDGHOD&RQVWLWXFLyQ 7(0$ /RV'HUHFKRV)XQGDPHQWDOHVHYROXFLyQKLVWyULFD\FRQFHSWXDO/DVGHFODUDFLRQHVGHGHUHFKRV\ VX SUREOHPiWLFD MXUtGLFD /RV GHUHFKRV IXQGDPHQWDOHV ODV OLEHUWDGHV S~EOLFDV \ ORV GHUHFKRV HFRQyPLFRV\VRFLDOHVHQOD&RQVWLWXFLyQ6XJDUDQWtD\VXVSHQVLyQ 7(0$ )RUPDGH(VWDGR\IRUPDGH*RELHUQR/D-HIDWXUDGHO(VWDGRVXVDWULEXFLRQHV/D&RURQD(O *RELHUQR HQ HO VLVWHPD FRQVWLWXFLRQDO HVSDxRO &RPSRVLFLyQ /D GHVLJQDFLyQ \ UHPRFLyQ GHO *RELHUQR\VX3UHVLGHQWH 7(0$ /DV &RUWHV *HQHUDOHV &RQJUHVR GH ORV 'LSXWDGRV \ 6HQDGR FRPSRVLFLyQ \ IXQFLRQHV /D IXQFLyQSDUODPHQWDULDGHFRQWUROGHO*RELHUQRHQ(VSDxDÏUJDQRVGHSHQGLHQWHVGHODV&RUWHV *HQHUDOHVHO7ULEXQDOGH&XHQWDV\HO'HIHQVRUGHO3XHEOR 7(0$ (O 3RGHU -XGLFLDO (O &RQVHMR *HQHUDO GHO 3RGHU -XGLFLDO /D RUJDQL]DFLyQ MXGLFLDO HVSDxROD (O 7ULEXQDO6XSUHPR(O0LQLVWHULR)LVFDO 7(0$ (O7ULEXQDO&RQVWLWXFLRQDO2UJDQL]DFLyQFRPSRVLFLyQ\DWULEXFLRQHV 7(0$ /DRUJDQL]DFLyQWHUULWRULDOGHO(VWDGR(O(VWDGRGHODV$XWRQRPtDV7UDWDPLHQWRFRQVWLWXFLRQDO\ PRGHORGH&RQVWLWXFLyQ(VSDxRODGH/RVSULQFLSLRVGHDXWRQRPtD\XQLGDG 7(0$ (O VLVWHPD HVWDWXWDULR (O (VWDWXWR GH $XWRQRPtD FRPR QRUPD LQVWLWXFLRQDO EiVLFD GH FDGD &RPXQLGDG $XWyQRPD /DV LQVWLWXFLRQHV GH DXWRJRELHUQR $VDPEOHD /HJLVODWLYD \ &RQVHMR GH *RELHUQR /RV 7ULEXQDOHV 6XSHULRUHV GH -XVWLFLD (O LGLRPD ORV VtPERORV \ OD FDSLWDOLGDG DXWRQyPLFD 7(0$ /DVFRPSHWHQFLDVGHODV&RPXQLGDGHV$XWyQRPDV(OVLVWHPDGHGLVWULEXFLyQGHFRPSHWHQFLDV HQ SDUWLFXODU ORV FULWHULRVGH DVLJQDFLyQ GH ODV FRPSHWHQFLDV \ OD LQWHUSUHWDFLyQ \ OD DSOLFDFLyQ GHOVLVWHPDHQVXFRQMXQWR)yUPXODVGHDPSOLDFLyQGHODVFRPSHWHQFLDVDXWRQyPLFDVDOPDUJHQ GHORV(VWDWXWRV/DVOH\HVGHDUPRQL]DFLyQ 7(0$ /D&RPXQLGDG$XWyQRPDGH&DQWDEULD , (OSURFHVRDXWRQyPLFRGH&DQWDEULD(O7tWXOR9,,,GH OD &RQVWLWXFLyQ \ VX DSOLFDFLyQ D &DQWDEULD ,QLFLDWLYD DXWRQyPLFD \ SURFHVR OHJLVODWLYR GH WUDPLWDFLyQ \ DSUREDFLyQ GHO (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /D HWDSD DXWRQyPLFD SURYLVLRQDO5pJLPHQWUDQVLWRULRGHODV,QVWLWXFLRQHVSROtWLFDVGH&DQWDEULD 7(0$ /D &RPXQLGDG $XWyQRPD GH &DQWDEULD ,, (O (VWDWXWR GH $XWRQRPtD /DV LQVWLWXFLRQHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR \ OD $GPLQLVWUDFLyQGH&DQWDEULD5HODFLRQHVHQWUHHO3DUODPHQWR\HO*RELHUQR5pJLPHQMXUtGLFR\ FRQWURO GH ORV DFWRV MXUtGLFRV GH OD &RPXQLGDG $XWyQRPD HQ HO (VWDWXWR GH $XWRQRPtD /D UHIRUPDGHO(VWDWXWR 7(0$ /D &RPXQLGDG $XWyQRPD GH &DQWDEULD ,,, &RPSHWHQFLDV DVXPLGDV SRU OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRV GH DPSOLDFLyQ GH FRPSHWHQFLDV 7UDVSDVRGHIXQFLRQHV\VHUYLFLRVUpJLPHQMXUtGLFR\SURFHGLPLHQWR 7(0$ /D $GPLQLVWUDFLyQ /RFDO &RQFHSFLyQ FRQVWLWXFLRQDO GH OD DXWRQRPtD ORFDO (QWLGDGHV TXH LQWHJUDQOD$GPLQLVWUDFLyQ/RFDO3ULQFLSDOHVFRPSHWHQFLDV i Pág. 12667 boc.cantabria.es CVE-2019-3750 '(5(&+2&2167,78&,21$/ 160/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ '(5(&+2$'0,1,675$7,92<$'0,1,675$&,Ï1 i Pág. 12668 7(0$ /RV 7UDWDGRV ,QWHUQDFLRQDOHV \ VX YDORU HQ HO 'HUHFKR LQWHUQR (O 'HUHFKR FRPXQLWDULR FRPR SDUWH GHO RUGHQDPLHQWR MXUtGLFR QDFLRQDO 'HUHFKR RULJLQDULR \ 'HUHFKR GHULYDGR /D DSOLFDFLyQ GHORUGHQDPLHQWRMXUtGLFRFRPXQLWDULRHIHFWRGLUHFWR\SULPDFtD 7(0$ /D /H\ &RQFHSWR \ FODVHV 3URFHGLPLHQWR GH HODERUDFLyQ GH ODV OH\HV /DV GLVSRVLFLRQHV GHO *RELHUQRFRQUDQJRGH/H\'HFUHWRVOH\HV\'HFUHWRVOHJLVODWLYRV 7(0$ (ORUGHQDPLHQWRMXUtGLFRDGPLQLVWUDWLYR(VWUXFWXUD\FDUDFWHUHVHQSDUWLFXODUODLUUHWURDFWLYLGDG GH ODV GLVSRVLFLRQHV VDQFLRQDGRUDV QR IDYRUDEOHV R UHVWULFWLYDV GH GHUHFKRV LQGLYLGXDOHV /RV SULQFLSLRVJHQHUDOHVGHO'HUHFKR 7(0$ (ORUGHQDPLHQWRHVWDWDO\ORVRUGHQDPLHQWRVDXWRQyPLFRV/H\HV\UHJODPHQWRVDXWRQyPLFRVVX UHODFLyQFRQODVQRUPDVHVWDWDOHV/RVFRQIOLFWRVHQWUHQRUPDV\ODVUHJODVGHODVXSOHWRULHGDG\ ODSUHYDOHQFLDGHO'HUHFKRHVWDWDO 7(0$ (OUHJODPHQWR&RQFHSWR\QDWXUDOH]DVXGLVWLQFLyQFRQORVDFWRVDGPLQLVWUDWLYRV7LWXODUHVGHOD SRWHVWDGUHJODPHQWDULD/tPLWHVDOHMHUFLFLRGHODSRWHVWDGUHJODPHQWDULD&ODVHVGHUHJODPHQWRV 7(0$ (O DGPLQLVWUDGR FRQFHSWR \ FODVHV /DV VLWXDFLRQHV MXUtGLFDV GHO DGPLQLVWUDGR /D FDSDFLGDG &DXVDVPRGLILFDWLYDVGHODFDSDFLGDG/RVGHUHFKRVVXEMHWLYRV2WUDVILJXUDVVXEMHWLYDVDFWLYDV\ SDVLYDV 7(0$ (OSULQFLSLRGHOHJDOLGDG/DGLVFUHFLRQDOLGDGGHOD$GPLQLVWUDFLyQ/RVSRGHUHVH[RUELWDQWHVGHOD $GPLQLVWUDFLyQ/DDXWRWXWHODGHFODUDWLYD\ODDXWRWXWHODHMHFXWLYD 7(0$ (ODFWRDGPLQLVWUDWLYR&RQFHSWR&ODVHV(OHPHQWRVVXEMHWLYRV(OHPHQWRVREMHWLYRV(OHPHQWRV IRUPDOHVHQSDUWLFXODUODPRWLYDFLyQ(OVLOHQFLRDGPLQLVWUDWLYR 7(0$ /D HILFDFLD GH ORV DFWRV DGPLQLVWUDWLYRV 3UHVXSXHVWRV HQ HVSHFLDO OD QRWLILFDFLyQ \ OD SXEOLFDFLyQ 'HWHUPLQDFLRQHV DFFHVRULDV FRQGLFLyQ WpUPLQR \ PRGR /D VXVSHQVLyQ GH OD HILFDFLD 7(0$ /D HMHFXFLyQ GHO DFWR DGPLQLVWUDWLYR (MHFXWLYLGDG \ HMHFXFLyQ IRU]RVD 0HGLRV GH HMHFXFLyQ IRU]RVD3ULQFLSLRVJHQHUDOHVGHXWLOL]DFLyQGHORVPHGLRVGHHMHFXFLyQIRU]RVD/DYtDGHKHFKR 7(0$ /D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV ,UUHJXODULGDGHV QR LQYDOLGDQWHV([FHSFLRQHVDODLQYDOLGH]GHORVDFWRVWUDQVPLVLELOLGDGFRQYHUVLyQFRQVHUYDFLyQ \FRQYDOLGDFLyQ5HYRFDFLyQ\UHYLVLyQGHORVDFWRVDGPLQLVWUDWLYRV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR 3ULQFLSLRV JHQHUDOHV ,QWHUHVDGRV $EVWHQFLyQ \ UHFXVDFLyQ/RVGHUHFKRVGHORVFLXGDGDQRV5HJLVWURVDGPLQLVWUDWLYRV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ \ WHUPLQDFLyQ GHO SURFHGLPLHQWR %UHYH UHIHUHQFLD D ORV SURFHGLPLHQWRV GH UHVSRQVDELOLGDGSDWULPRQLDO\GHQDWXUDOH]DVDQFLRQDGRUD 7(0$ /RVUHFXUVRVDGPLQLVWUDWLYRV&RQFHSWR\VLJQLILFDGR&ODVHV(OSURFHGLPLHQWRDGPLQLVWUDWLYRHQ YtDGHUHFXUVRSULQFLSLRVJHQHUDOHV%UHYHUHIHUHQFLDDOD/H\GH&DQWDEULDGH5pJLPHQ-XUtGLFR GHO*RELHUQRGHOD$GPLQLVWUDFLyQ\GHO6HFWRU3~EOLFR,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD 7(0$ (O UHFXUVR GH DO]DGD (O UHFXUVR GH UHSRVLFLyQ (O UHFXUVR H[WUDRUGLQDULR GH UHYLVLyQ (VSHFLDOLGDGHVGHORVUHFXUVRVDGPLQLVWUDWLYRVHQPDWHULDWULEXWDULD 7(0$ /D MXVWLFLD DGPLQLVWUDWLYD ÈPELWR \ yUJDQRV GH OD MXULVGLFFLyQ FRQWHQFLRVRDGPLQLVWUDWLYD /DV SDUWHV HQ HO SURFHVR FRQWHQFLRVRDGPLQLVWUDWLYR (O REMHWR GHO UHFXUVR FRQWHQFLRVR DGPLQLVWUDWLYR (O SURFHGLPLHQWR HQ SULPHUD \ ~QLFD LQVWDQFLD (O SURFHGLPLHQWR DEUHYLDGR (MHFXFLyQGHVHQWHQFLDV boc.cantabria.es CVE-2019-3750 161/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /RV FRQWUDWRV GHO 6HFWRU 3~EOLFR &RQILJXUDFLyQ JHQHUDO GH OD FRQWUDWDFLyQ GHO VHFWRU S~EOLFR \ HOHPHQWRVHVWUXFWXUDOHVGHORVFRQWUDWRV3UHSDUDFLyQGHORVFRQWUDWRV6HOHFFLyQGHOFRQWUDWLVWD \ DGMXGLFDFLyQ GH ORV FRQWUDWRV (IHFWRV FXPSOLPLHQWR \ H[WLQFLyQ GH ORV FRQWUDWRV DGPLQLVWUDWLYRV 7(0$ 7LSRV GH FRQWUDWRV REUDV FRQFHVLyQ GH VHUYLFLRV S~EOLFRV VXPLQLVWUR VHUYLFLRV FRQFHVLyQ GH REUDV\PL[WRV 7(0$ /D H[SURSLDFLyQ IRU]RVD 1DWXUDOH]D MXVWLILFDFLyQ \ HOHPHQWRV GH OD SRWHVWDG H[SURSLDWRULD /D GHFODUDFLyQGHXWLOLGDGS~EOLFDRLQWHUpVVRFLDO(OSURFHGLPLHQWRJHQHUDOH[SURSLDWRULR*DUDQWtDV MXULVGLFFLRQDOHV\HFRQyPLFDVHQHOSURFHGLPLHQWRH[SURSLDWRULR(OSURFHGLPLHQWRH[SURSLDWRULR GHXUJHQFLD 7(0$ /D UHVSRQVDELOLGDG SDWULPRQLDO GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV (YROXFLyQ 3UHVXSXHVWRV (IHFWLYLGDGGHODUHSDUDFLyQ/DDFFLyQGHUHVSRQVDELOLGDG/DUHVSRQVDELOLGDGDGPLQLVWUDWLYDHQ HOiPELWRGHO'HUHFKRSULYDGR/DUHVSRQVDELOLGDGSDWULPRQLDOGHODVDXWRULGDGHVIXQFLRQDULRV\ SHUVRQDOGHOD$GPLQLVWUDFLyQODDFFLyQGHUHJUHVR 7(0$ /D SRWHVWDG VDQFLRQDGRUD GH OD $GPLQLVWUDFLyQ SULQFLSLRV TXH OD LQIRUPDQ (O SURFHGLPLHQWR VDQFLRQDGRU/DUHVROXFLyQVDQFLRQDGRUD\ODVXVSHQVLyQGHVXHMHFXWRULHGDG 7(0$ /D RUJDQL]DFLyQ DGPLQLVWUDWLYD /RV yUJDQRV DGPLQLVWUDWLYRV ÏUJDQRV FROHJLDGRV /D FRPSHWHQFLD /D MHUDUTXtD /D GHOHJDFLyQ OD DYRFDFLyQ \ OD HQFRPLHQGD GH JHVWLyQ /D VXSOHQFLD&RQFHQWUDFLyQ\GHVFRQFHQWUDFLyQ&HQWUDOL]DFLyQ\GHVFHQWUDOL]DFLyQ 7(0$ /DVUHODFLRQHVHQWUHHO(VWDGR\ODV&RPXQLGDGHV$XWyQRPDV/RVLQVWUXPHQWRVGHFRRSHUDFLyQ \FRRUGLQDFLyQ/RVFRQIOLFWRVGHFRPSHWHQFLD/RVFRQIOLFWRVHQGHIHQVDGHODDXWRQRPtDORFDO 7(0$ /D $GPLQLVWUDFLyQ *HQHUDO GHO (VWDGR UpJLPHQ MXUtGLFR \ SULQFLSLRV 2UJDQL]DFLyQ FHQWUDO yUJDQRVVXSHULRUHV\GLUHFWLYRV2UJDQL]DFLyQWHUULWRULDO'HOHJDGRVGHO*RELHUQR6XEGHOHJDGRV GHO*RELHUQR\6HUYLFLRVWHUULWRULDOHV 7(0$ /RV2UJDQLVPRV3~EOLFRVFRQFHSWRFODVHV\UpJLPHQMXUtGLFR/D$GPLQLVWUDFLyQFRQVXOWLYD 7(0$ /D $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD /RV yUJDQRV VXSHULRUHV OD SUHVLGHQFLD GHO *RELHUQR \ OD YLFHSUHVLGHQFLD ORV FRQVHMHURV \ VXV yUJDQRV GH FRODERUDFLyQ \ DSR\R /RV yUJDQRV GLUHFWLYRV VHFUHWDULRV JHQHUDOHV GLUHFWRUHV JHQHUDOHV \ VXEGLUHFWRUHV JHQHUDOHV/DV&RQVHMHUtDV&ULWHULRVSDUDODRUJDQL]DFLyQGHOD$GPLQLVWUDFLyQ 7(0$ 2UJDQL]DFLyQGHOD8QLyQ(XURSHD(O&RQVHMR(XURSHR(O&RQVHMR/D&RPLVLyQ(O3DUODPHQWR (XURSHR(O7ULEXQDOGH-XVWLFLD2WURVyUJDQRVGHOD8QLyQ(XURSHD 7(0$ /RV ELHQHV S~EOLFRV &ODVHV (O GRPLQLR S~EOLFR &RQFHSWR \ QDWXUDOH]D (QXPHUDFLyQ GH ODV OH\HV HVWDWDOHV GHO GRPLQLR S~EOLFR (OHPHQWRV VXMHWR REMHWR \ GHVWLQR $IHFWDFLyQ GHVDIHFWDFLyQ\PXWDFLRQHVGHPDQLDOHV 7(0$ 5pJLPHQMXUtGLFRGHOGRPLQLRS~EOLFR3RWHVWDGHVDGPLQLVWUDWLYDV\UpJLPHQGHSURWHFFLyQ8VR GH ORV ELHQHV GHPDQLDOHV DXWRUL]DFLyQ FRQFHVLyQ \ UHVHUYD GHPDQLDO 5HIHUHQFLD D OD /H\ GHGHDEULOGHO3DWULPRQLRGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ 7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV i Pág. 12669 boc.cantabria.es CVE-2019-3750 162/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ *(67,Ï1),1$1&,(5$<75,%87$5,$ /RV 3UHVXSXHVWRV *HQHUDOHV GHO (VWDGR FRQFHSWR HVWUXFWXUD \ FRQWHQLGR (ODERUDFLyQ DSUREDFLyQHMHFXFLyQ\FRQWUROGHOSUHVXSXHVWR 7(0$ (O SUHVXSXHVWR FRQFHSWR \ FODVHV 3UHVXSXHVWR SRU SURJUDPDV REMHWLYRV SURJUDPDV \ VX HYDOXDFLyQ3UHVXSXHVWRHQEDVHFHURREMHWLYRVXQLGDGHV\SDTXHWHVGHGHFLVLyQ$VLJQDFLyQ GHSULRULGDGHV 7(0$ /D/H\GHGHRFWXEUHGH)LQDQ]DVGH&DQWDEULD(VWUXFWXUD\SULQFLSLRVJHQHUDOHV /RVGHUHFKRV\ODVREOLJDFLRQHVGHO*RELHUQRGH&DQWDEULD 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5HJXODFLyQHQOD/H\GH )LQDQ]DV GH &DQWDEULD \ HQ ODV /H\HV DQXDOHV GH 3UHVXSXHVWRV (VWUXFWXUD \ FRQWHQLGR GHO SUHVXSXHVWR &ODVLILFDFLyQ RUJiQLFD HFRQyPLFD \ IXQFLRQDO (ODERUDFLyQ \ DSUREDFLyQ GH ORV 3UHVXSXHVWRV(ODERUDFLyQHQWpUPLQRVGHFRQWDELOLGDGQDFLRQDO 7(0$ /D /H\ 2UJiQLFD GH GH DEULO GH (VWDELOLGDG 3UHVXSXHVWDULD \ 6RVWHQLELOLGDG )LQDQFLHUD GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV &RQFHSWRV GH HVWDELOLGDG SUHVXSXHVWDULD \ VRVWHQLELOLGDGILQDQFLHUD3ULQFLSLRV*HQHUDOHVGHODOH\2EMHWLYRGHHVWDELOLGDGSUHVXSXHVWDULD\ UHJODGHJDVWR0HGLGDVSUHYHQWLYDVFRUUHFWLYDV\FRHUFLWLYDV3ODQHVHFRQyPLFRILQDQFLHURV(O SULQFLSLRGH7UDQVSDUHQFLD/tPLWHGH*DVWRQRILQDQFLHUR 7(0$ /RV FUpGLWRV SUHVXSXHVWDULRV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0RGLILFDFLRQHV GH ORV FUpGLWRVLQLFLDOHV7UDQVIHUHQFLDVGHFUpGLWRV&UpGLWRVH[WUDRUGLQDULRV6XSOHPHQWRVGHFUpGLWRV $PSOLDFLRQHV GH FUpGLWRV ,QFRUSRUDFLRQHV GH FUpGLWRV *HQHUDFLRQHV GH FUpGLWRV *DVWRV 3OXULDQXDOHV 7(0$ (OJDVWRS~EOLFRHQ&DQWDEULD/DHMHFXFLyQGHOSUHVXSXHVWRGHJDVWRV3URFHGLPLHQWRJHQHUDOGH HMHFXFLyQ GHO JDVWR S~EOLFR \ SURFHGLPLHQWRV HVSHFLDOHV ÏUJDQRV FRPSHWHQWHV )DVHV GHO SURFHGLPLHQWRGHSDJR/DOLTXLGDFLyQGHOSUHVXSXHVWR 7(0$ (OHQGHXGDPLHQWRGHOVHFWRUS~EOLFRHQ&DQWDEULD/RVDYDOHVGHOD7HVRUHUtDGHO*RELHUQRGH &DQWDEULDREMHWR\OtPLWHVyUJDQRVFRPSHWHQWHV\SURFHGLPLHQWRSDUDVXFRQFHVLyQ 7(0$ /D /H\ GH GH MXOLR GH 6XEYHQFLRQHV GH &DQWDEULD 'LVSRVLFLRQHV JHQHUDOHV 3URFHGLPLHQWRVGHFRQFHVLyQ\JHVWLyQGHODVVXEYHQFLRQHV,QYDOLGH]UHYRFDFLyQ\UHLQWHJURGH ODVVXEYHQFLRQHV&RQWUROILQDQFLHURGHODVVXEYHQFLRQHV 7(0$ &RQWDELOLGDG S~EOLFD &RQFHSWR &RQWDELOLGDG SUHYHQWLYD &RQWDELOLGDG HMHFXWLYD &RQWDELOLGDG FUtWLFD&RQWUROGHOJDVWRS~EOLFRHQ(VSDxD(VSHFLDOUHIHUHQFLDDOFRQWUROGHOHJDOLGDG 7(0$ /DFRQWDELOLGDGS~EOLFD\ODSODQLILFDFLyQFRQWDEOH(O3ODQ*HQHUDOGH&RQWDELOLGDG3~EOLFDILQHV REMHWLYRViPELWRGHDSOLFDFLyQ\FDUDFWHUtVWLFDV3ULQFLSLRVFRQWDEOHV 7(0$ &RQWDELOLGDG SUHVXSXHVWDULD \ FRQWDELOLGDG GH JHVWLyQ /D &XHQWD *HQHUDO GHO *RELHUQR GH &DQWDEULD (O FRQWURO LQWHUQR GH OD ,QWHUYHQFLyQ *HQHUDO GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPDGH&DQWDEULDODIXQFLyQLQWHUYHQWRUD\HOFRQWUROILQDQFLHUR(OFRQWUROH[WHUQR 7(0$ /RV 7ULEXWRV FRQFHSWR QDWXUDOH]D \ FODVHV 6LVWHPD WULEXWDULR HVSDxRO 3ULQFLSLRV *HQHUDOHV FRQWHQLGRVHQOD&RQVWLWXFLyQ\HVWUXFWXUDEiVLFDGHOVLVWHPDYLJHQWH 7(0$ /D UHODFLyQ MXUtGLFD WULEXWDULD FRQFHSWR \ HOHPHQWRV (O KHFKR LPSRQLEOH HO VXMHWR SDVLYR \ ORV UHVSRQVDEOHVODEDVHLPSRQLEOH\VXVUHJtPHQHVGHGHWHUPLQDFLyQODEDVHOLTXLGDEOH\HOWLSR GHJUDYDPHQ\ODGHXGDWULEXWDULD CVE-2019-3750 7(0$ i Pág. 12670 boc.cantabria.es 163/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /DILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV/H\GHGHGLFLHPEUHGHO6LVWHPD GH)LQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDVGHUpJLPHQFRP~Q\FLXGDGHVFRQ(VWDWXWRGH $XWRQRPtD /DV )XHQWHV GH )LQDQFLDFLyQ GH ODV &RPXQLGDGHV $XWyQRPDV 5HFXUVRV SURFHGHQWHV GHO 6LVWHPD GH )LQDQFLDFLyQ $XWRQyPLFD LQJUHVRV WULEXWDULRV SURSLRV \ HVSHFLDO UHIHUHQFLDDODVWDVDV\VXUpJLPHQMXUtGLFR/RVSUHFLRVS~EOLFRV2WURVLQJUHVRVSURSLRVGHODV &RPXQLGDGHV $XWyQRPDV WUDQVIHUHQFLDV FRUULHQWHV \ GH FDSLWDO LQJUHVRV SDWULPRQLDOHV HQDMHQDFLyQGHLQYHUVLRQHVUHDOHVLQJUHVRVILQDQFLHURV 7(0$ /RV LQJUHVRV \ WULEXWRV GH SURFHGHQFLD HVWDWDO /RV WULEXWRV FHGLGRV /D FHVLyQ GH WULEXWRV UpJLPHQMXUtGLFR&RPSHWHQFLDVQRUPDWLYDVGH&DQWDEULD$OFDQFHGHODFHVLyQHQUHODFLyQFRQOD JHVWLyQWULEXWDULD/RV)RQGRVGH&RPSHQVDFLyQ,QWHUWHUULWRULDOFDUDFWHUHV 7(0$ (O,PSXHVWRVREUHWUDQVPLVLRQHVSDWULPRQLDOHV\DFWRVMXUtGLFRVGRFXPHQWDGRVFDUDFWHUtVWLFDV 3ULQFLSLRV EiVLFRV VREUH HO KHFKR LPSRQLEOH VXMHWRSDVLYR EDVHLPSRQLEOH EHQHILFLRV ILVFDOHV GHYHQJR\SUHVFULSFLyQ 7(0$ (O ,PSXHVWR VREUH 6XFHVLRQHV \ 'RQDFLRQHV \ HO ,PSXHVWR VREUH HO 3DWULPRQLR FRQFHSWR \ FDUDFWHUtVWLFDVHQODOHJLVODFLyQYLJHQWH3ULQFLSLRVEiVLFRVHQORVHOHPHQWRVGHHVWRVWULEXWRV *(67,Ï1'(3(5621$/<6(*85,'$'62&,$/ (OSHUVRQDODOVHUYLFLRGHOD$GPLQLVWUDFLyQ&ODVHV\UHJXODFLyQQRUPDWLYD(OUpJLPHQMXUtGLFRGH OD)XQFLyQ3~EOLFD(O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR \ /H\ GH &DQWDEULD GHGHPDU]RGHOD)XQFLyQ3~EOLFD 7(0$ 6HOHFFLyQ\SURYLVLyQGHSXHVWRVGHWUDEDMRSURPRFLyQSURIHVLRQDO$GTXLVLFLyQ\SpUGLGDGHOD FRQGLFLyQGHIXQFLRQDULR 7(0$ 6LWXDFLRQHV DGPLQLVWUDWLYDV 'HUHFKRV \ GHEHUHV GH ORV IXQFLRQDULRV 5pJLPHQ UHWULEXWLYR H LQGHPQL]DWRULR 7(0$ $QiOLVLV GHO UpJLPHQ GLVFLSOLQDULR IDOWDV \ VDQFLRQHV 3URFHGLPLHQWR (VSHFLDO UHIHUHQFLD D OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 5pJLPHQ GH LQFRPSDWLELOLGDGHV GHO SHUVRQDO DO VHUYLFLR GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV UpJLPHQ MXUtGLFR iPELWR \ SULQFLSLRV $XWRUL]DFLyQ \ UHFRQRFLPLHQWR GH FRPSDWLELOLGDG HVSHFLDO UHIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /D/H\2UJiQLFDGH/LEHUWDG6LQGLFDO/DSDUWLFLSDFLyQGHORVIXQFLRQDULRVHQODGHWHUPLQDFLyQGH ODVFRQGLFLRQHVGHWUDEDMR\ODQHJRFLDFLyQFROHFWLYDHQHO5HDO'HFUHWR/HJLVODWLYRGH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR3~EOLFRÏUJDQRVGHUHSUHVHQWDFLyQ-XQWDVGH3HUVRQDO\'HOHJDGRVGH3HUVRQDO 7(0$ (OSHUVRQDOODERUDODOVHUYLFLRGHODV$GPLQLVWUDFLRQHV3~EOLFDV'HUHFKRV\GHEHUHV(OFRQWUDWR ODERUDO FRQWHQLGR PRGDOLGDGHV VXVSHQVLyQ \ H[WLQFLyQ 1HJRFLDFLyQ ODERUDO &RQIOLFWRV \ FRQYHQLRVFROHFWLYRV 7(0$ /D 6HJXULGDG 6RFLDO (O 7H[WR 5HIXQGLGR GH OD /H\ *HQHUDO GH OD 6HJXULGDG 6RFLDO 5pJLPHQ JHQHUDO$ILOLDFLyQ\FRWL]DFLyQ$FFLyQSURWHFWRUD&RQWLQJHQFLDV\SUHVWDFLRQHV 7(0$ /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ 5HDO'HFUHWRGHGHHQHUR i Pág. 12671 boc.cantabria.es CVE-2019-3750 7(0$ 164/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12672 7(0$ 5HDO'HFUHWROHJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHOWH[WRUHIXQGLGRGHOD /H\GH6XHOR\5HKDELOLWDFLyQ8UEDQD 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHOR3ULQFLSLRVLQVSLUDGRUHV9LVLyQGHFRQMXQWRGHOD/H\5pJLPHQWUDQVLWRULR 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHOR3ODQHDPLHQWRWHUULWRULDO\VXVLQVWUXPHQWRVGHRUGHQDFLyQ 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHOR3ODQHDPLHQWRXUEDQtVWLFR\VXVLQVWUXPHQWRVGHRUGHQDFLyQ 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHOR (ODERUDFLyQ \ DSUREDFLyQ GH ORV SODQHV XUEDQtVWLFRV 3*28 3ODQHV 3DUFLDOHV 3ODQHV (VSHFLDOHV\GHPiVLQVWUXPHQWRV9LJHQFLDUHYLVLyQPRGLILFDFLyQ\(IHFWRVGHODDSUREDFLyQGH ORVSODQHV 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHOR&ODVLILFDFLyQGHWHUPLQDFLyQ\UpJLPHQMXUtGLFRGHODVGLVWLQWDVFODVHVGHVXHOR 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHOR,QVSHFFLyQXUEDQtVWLFDSURWHFFLyQGHODOHJDOLGDGXUEDQtVWLFD,QIUDFFLRQHV\VDQFLRQHV 7(0$ /H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHORGH&DQWDEULD5pJLPHQMXUtGLFRGHOVXHORU~VWLFRHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD &ODVHV&RQVWUXFFLRQHVHQVXHORU~VWLFR(IHFWRVSURFHGLPLHQWR\FRPSHWHQFLDV\UHIRUPDGHO UpJLPHQGHOVXHORU~VWLFRHQOD/H\GH&DQWDEULDGHGHMXQLRSRUODTXHVHPRGLILFDOD /H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFRGHO 6XHORGH&DQWDEULD 7(0$ (VWDWXWR GH GHUHFKRV \ GHEHUHV \ EDVHV GHO UpJLPHQ GHO VXHOR HQ HO 5HDO 'HFUHWR OHJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO WH[WR UHIXQGLGR GH OD /H\ GH 6XHOR \ 5HKDELOLWDFLyQ8UEDQD5pJLPHQXUEDQtVWLFRGHOVXHORFODVLILFDFLyQ\GHUHFKRV\GHEHUHVGHORV SURSLHWDULRVHQFDGDFODVHGHVXHOR/RVVLVWHPDVJHQHUDOHV/DVDFWXDFLRQHVDLVODGDV 7(0$ 9DORUDFLRQHVGHOVXHOR\ODHGLILFDFLyQ5HJXODFLyQHQHO5HDO'HFUHWR/HJLVODWLYRGH GHRFWXEUH6XGLVSRVLFLyQWUDQVLWRULDWHUFHUDUHPLVLyQDODUHJXODFLyQHQOD/H\HVWDWDO GHGHDEULO0pWRGRVGHYDORUDFLyQHQFDGDFODVHGHVXHORHQDPEDVQRUPDV6XSXHVWRGH FDUHQFLDGHSODQ6XSXHVWRVLQGHPQL]DWRULRV 7(0$ /D /H\ GH GH GLFLHPEUH GH 3DWULPRQLR 1DWXUDO \ GH OD %LRGLYHUVLGDG /D /H\ GH &DQWDEULDGHGHPD\RGH&RQVHUYDFLyQGHOD1DWXUDOH]DGH&DQWDEULD 7(0$ /D/H\GHGHPD\RGHSURWHFFLyQ\XVRVRVWHQLEOHGHOOLWRUDO\GHPRGLILFDFLyQGHOD /H\GHGHMXOLRGH&RVWDV6XLQFLGHQFLDHQHOSODQHDPLHQWR\JHVWLyQXUEDQtVWLFD boc.cantabria.es CVE-2019-3750 $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 $548,7(&727e&1,&2 0$7(5,$6(63(&Ë),&$6 165/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12673 7(0$ /D /H\ GH GH VHSWLHPEUH GH FDUUHWHUDV \ OD /H\ GH &DQWDEULD GH GH GLFLHPEUHGH&DUUHWHUDV$IHFFLRQHVXUEDQtVWLFDV 7(0$ /D/H\GHGHQRYLHPEUHGH2UGHQDFLyQGHOD(GLILFDFLyQ(OSURFHVRFRQVWUXFWLYRVX HVWUXFWXUDFLyQVHJ~QOD/2(&RQILJXUDFLyQOHJDOGHOSUR\HFWRGHHGLILFDFLyQ/DFRPSRVLFLyQGHO SUR\HFWR/RVSUR\HFWRVFRPSOHMRV\VXUpJLPHQGHUHVSRQVDELOLGDG,QWHUYHQFLyQGHHQWLGDGHV DVRFLDWLYDV 7(0$ /RVDJHQWHVGHODHGLILFDFLyQHOSURPRWRUHOFRQVWUXFWRUORVDJHQWHVWpFQLFRV/DVHQWLGDGHV\ ORV ODERUDWRULRV GH FRQWURO GH FDOLGDG GH OD HGLILFDFLyQ \ ORV VXPLQLVWUDGRUHV GH SURGXFWRV GH FRQVWUXFFLyQ/RVSURSLHWDULRV\ORVXVXDULRV'HFUHWRGHGHHQHURSRUHOTXHVHUHJXOD HO/LEURGHO(GLILFLRGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 5HDO'HFUHWRGHGHDJRVWRVREUHYLVDGRFROHJLDOREOLJDWRULR 7(0$ /H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFR2EMHWR\ILQDOLGDGiPELWRGH DSOLFDFLyQ'HOLPLWDFLyQGHORVWLSRVFRQWUDFWXDOHV/RVFRQWUDWRVGHO6HFWRU3~EOLFR/H\ GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFRSRUODTXHVHWUDVSRQHQDORUGHQDPLHQWR MXUtGLFRHVSDxROODV'LUHFWLYDVGHO3DUODPHQWR(XURSHR\GHO&RQVHMR8(\8( GHGHIHEUHURGHO 7(0$ /H\ GH GH QRYLHPEUH GH &RQWUDWRV GHO 6HFWRU 3~EOLFR &DSDFLGDG VROYHQFLD \ FODVLILFDFLyQ GHO HPSUHVDULR $FWXDFLRQHV UHODWLYDV D OD FRQWUDWDFLyQ 3OLHJRV GH FOiXVXODV DGPLQLVWUDWLYDV\GHSUHVFULSFLRQHVWpFQLFDV 7(0$ /H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFR&RQWUDWRGHREUDVDFWXDFLRQHV SUHSDUDWRULDVSUR\HFWRGHREUDFODVLILFDFLyQGHREUDV\FRQWHQLGR3UHVHQWDFLyQVXSHUYLVLyQ\ UHSODQWHRGHOSUR\HFWR 7(0$ /H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFRHMHFXFLyQGHOFRQWUDWRGHREUDV PRGLILFDFLyQFXPSOLPLHQWR\UHVROXFLyQ 7(0$ 2UJDQL]DFLyQGHXQDREUD7pFQLFDVGHSURJUDPDFLyQPDWHPiWLFD'LDJUDPDGH*DQWW6LVWHPD 3HUWWLHPSRV \ SUREDELOLGDG GHO FXPSOLPLHQWR GH ODV SUHYLVLRQHV 6LVWHPD SHUWFRVWHV 0pWRGR &30 7(0$ /H\ GH GH QRYLHPEUH GH &RQWUDWRV GHO 6HFWRU 3~EOLFR $FWXDFLRQHV UHODWLYDV D OD FRQWUDWDFLyQH[SHGLHQWHGHFRQWUDWDFLyQWUDPLWDFLyQXUJHQWH\WUDPLWDFLyQGHHPHUJHQFLD 7(0$ /H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFR$GMXGLFDFLyQGHORVFRQWUDWRV GH ODV $GPLQLVWUDFLRQHV 3XEOLFDV SURFHGLPLHQWR DELHUWR SURFHGLPLHQWR UHVWULQJLGR \ SURFHGLPLHQWRFRQQHJRFLDFLyQ 7(0$ /H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFR2EMHWRSUHVXSXHVWREDVHGH OLFLWDFLyQYDORUHVWLPDGRSUHFLRGHOFRQWUDWR\VXUHYLVLyQ 7(0$ (VWXGLRGHVHJXULGDG\VDOXG(OHVWXGLREiVLFR3ODQGHVHJXULGDG\VDOXGHQHOWUDEDMR 7(0$ (OGHEHUGHFRQVHUYDFLyQ\VXVOtPLWHV/DGHFODUDFLyQGHUXLQD(OFRQWUROGHODHGLILFDFLyQ\XVR GHO VXHOR ODV OLFHQFLDV XUEDQtVWLFDV (O YLVDGR XUEDQtVWLFR FROHJLDO FRPR WpFQLFD GH FRQWURO DGLFLRQDO 7(0$ 3DWRORJtDGHORVHGLILFLRV'HILFLHQFLDVHQHOHPHQWRVHVWUXFWXUDOHV+XPHGDGHVGHSHQHWUDFLyQ\ FRQGHQVDFLyQ6XVFDXVDV\VXUHSDUDFLyQ 7(0$ /D /H\ GH &DQWDEULD GH GH RFWXEUH GH 3DWULPRQLR &XOWXUDO 1RUPDV HVSHFtILFDV DSOLFDEOHVDORVLQPXHEOHVGHFODUDGRVGHLQWHUpVFXOWXUDO(OSDWULPRQLRDUTXHROyJLFR boc.cantabria.es CVE-2019-3750 166/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12674 7(0$ (O 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH DSUXHED HO &yGLJR 7pFQLFR GH OD (GLILFDFLyQ (VWUXFWXUD \ FRQWHQLGR 'LVSRVLFLRQHV JHQHUDOHV &RQGLFLRQHV 7pFQLFDV \ $GPLQLVWUDWLYDV([LJHQFLDV%iVLFDV5pJLPHQWUDQVLWRULR 7(0$ (O &yGLJR 7pFQLFR GH OD HGLILFDFLyQ 'LVSRVLFLRQHV JHQHUDOHV &RQGLFLRQHV 7pFQLFDV \ $GPLQLVWUDWLYDV([LJHQFLDV%iVLFDV 7(0$ (VTXHPD JHQHUDO \ HVWUXFWXUD GH ORV VLJXLHQWHV 'RFXPHQWRV %iVLFRV GH DSOLFDFLyQ HQ FXPSOLPLHQWR GHO &yGLJR 7pFQLFR GH OD (GLILFDFLyQ '%6( 6HJXULGDG (VWUXFWXUDO '%6($( $FFLRQHVHQOD(GLILFDFLyQ'%6(&&LPLHQWRV 7(0$ (VTXHPD JHQHUDO \ HVWUXFWXUD GH ORV VLJXLHQWHV 'RFXPHQWRV %iVLFRV GH DSOLFDFLyQ HQ FXPSOLPLHQWRGHO&yGLJR7pFQLFRGHOD(GLILFDFLyQ'%6($$FHUR'%6())iEULFD\'%6( 00DGHUD 7(0$ (VTXHPD JHQHUDO HVWUXFWXUD \ FRQWHQLGR GHO 'RFXPHQWR %iVLFR 6, GH 6HJXULGDG HQ FDVR GH LQFHQGLR 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR+(GH$KRUURGHHQHUJtD 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR68$GHVHJXULGDGGHXWLOL]DFLyQ \DFFHVLELOLGDG 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR+6GH6DOXEULGDG 7(0$ (VTXHPDJHQHUDOHVWUXFWXUD\FRQWHQLGRGHO'RFXPHQWR%iVLFR+5GH3URWHFFLyQIUHQWHDOUXLGR 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGH*DUDQWtDGHORV'HUHFKRVGHODV3HUVRQDVFRQ 'LVFDSDFLGDG 7(0$ 2UGHQ 9,9 GH GH IHEUHUR SRU OD TXH VH GHVDUUROOD HO GRFXPHQWR WpFQLFR GH FRQGLFLRQHV EiVLFDV GH DFFHVLELOLGDG \ QR GLVFULPLQDFLyQ SDUD HO DFFHVR \ XWLOL]DFLyQ GH ORV HVSDFLRVS~EOLFRVXUEDQL]DGRV 7(0$ /H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV5HDO'HFUHWR GHGHHQHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORV6HUYLFLRVGH3UHYHQFLyQ 7(0$ 5HDO'HFUHWRGHGHRFWXEUHSRUHOTXHVHHVWDEOHFHQODVFRQGLFLRQHVPtQLPDVGH VHJXULGDG\VDOXGHQODVREUDVGHFRQVWUXFFLyQ 7(0$ 5HDO 'HFUHWR GH GH DEULO SRU HO TXH VH DSUXHED HO SURFHGLPLHQWR EiVLFR SDUD OD FHUWLILFDFLyQGHODHILFLHQFLDHQHUJpWLFDGHORVHGLILFLRV2UGHQ,11GHGHPD\RSRU OD TXH VH UHJXOD HO UHJLVWUR GH FHUWLILFDFLRQHV GH HILFLHQFLD HQHUJpWLFD GH ORV HGLILFLRV GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ 1RUPDVGHYDORUDFLyQFDWDVWUDOHQHO5HDO'HFUHWR/HJLVODWLYRGHGHPDU]RSRUHOTXH VHDSUXHEDHOWH[WRUHIXQGLGRGHOD/H\GHO&DWDVWUR,QPRELOLDULR(O5HDO'HFUHWRGH GH MXQLR SRU HO TXH VH DSUXHEDQ ODV QRUPDV WpFQLFDV GH YDORUDFLyQ \ HO FXDGUR PDUFR GH YDORUHV GHO VXHOR \ GH ODV FRQVWUXFFLRQHV SDUD GHWHUPLQDU HO YDORU FDWDVWUDO GH ORV ELHQHV LQPXHEOHV GH QDWXUDOH]D XUEDQD 9DORUDFLyQ FDWDVWUDO GH ORV ELHQHV LQPXHEOHV /DV QRUPDV WpFQLFDVGHYDORUDFLyQ\FXDGURPDUFRGHYDORUHVSDUDGHWHUPLQDUHOYDORUFDWDVWUDOGHORVELHQHV LQPXHEOHVGHQDWXUDOH]DXUEDQD/DVSRQHQFLDVGHYDORUHV9DORUDFLyQGHVXHOR9DORUHVEiVLFRV \YDORUHVXQLWDULRV&RHILFLHQWHVFRUUHFWRUHVDDSOLFDU 7(0$ 9DORUDFLyQGHODVFRQVWUXFFLRQHV&ODVLILFDFLyQWLSROyJLFDHQUD]yQGHVXXVRFODVH0RGDOLGDG\ FDWHJRUtD$QWLJHGDGGHODVFRQVWUXFFLRQHV\HVWDGRGHFRQVHUYDFLyQ&RHILFLHQWHVFRUUHFWRUHV GHDSOLFDFLyQDODVXPDGHOYDORUGHOVXHOR\YDORUGHODFRQVWUXFFLyQ9DORUFDWDVWUDOGHORVELHQHV LQPXHEOHVGHQDWXUDOH]DXUEDQD boc.cantabria.es CVE-2019-3750 167/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 'HFUHWRGHGHRFWXEUHSRUHOTXHVHUHJXODODSURGXFFLyQ\JHVWLyQGHORVUHVLGXRV GHFRQVWUXFFLyQ\GHPROLFLyQHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (O PDUFR MXUtGLFR GH (YDOXDFLyQ GH ,PSDFWR $PELHQWDO HQ &DQWDEULD /HJLVODFLyQ EiVLFD \ DXWRQyPLFD7UDPLWDFLyQGHH[SHGLHQWHV 7(0$ ,QIUDFFLRQHV HQ PDWHULD GH FRQVXPR /DV VDQFLRQHV HQ PDWHULD GH FRQVXPR HQ OD /H\ GH &DQWDEULDGHGHPDU]RGH'HIHQVDGHORV&RQVXPLGRUHV\8VXDULRV3UHVFULSFLyQ\ FDGXFLGDGGHLQIUDFFLRQHV\VDQFLRQHV 7(0$ 5HDO'HFUHWRGHGHIHEUHURSRUHOTXHVHHVWDEOHFHQORVUHTXLVLWRVPtQLPRVGHORV FHQWURV TXH LPSDUWDQ ODVHQVHxDQ]DVGHO VHJXQGR FLFOR GH OD HGXFDFLyQ LQIDQWLO OD HGXFDFLyQ SULPDULD\ODHGXFDFLyQVHFXQGDULD 7(0$ (O5HDO'HFUHWRGHGHHQHURVREUHHGXFDFLyQLQIDQWLOGHSULPHUFLFOR 7(0$ /H\GHGHGLFLHPEUHGH9LYLHQGD3URWHJLGDGH&DQWDEULD/DFDOLILFDFLyQDFFHVRD ODVYLYLHQGDVSURWHJLGDV\SURJUDPDFLyQHQPDWHULDGHYLYLHQGD 7(0$ /H\ GH GH GLFLHPEUH GH 9LYLHQGD 3URWHJLGD GH &DQWDEULD 5pJLPHQ -XUtGLFR GH OD YLYLHQGDSURWHJLGD,QIUDFFLRQHV\VXVDQFLyQ 7(0$ /D2UGHQ2%5GHGHDEULOSRUODTXHVHDSUXHEDQODVRUGHQDQ]DVJHQHUDOHVGHGLVHxR \ FDOLGDG SDUD ODV YLYLHQGDV SURWHJLGDV GH &DQWDEULD 2UGHQDQ]DV JHQHUDOHV GH YLYLHQGDV SURWHJLGDV 7(0$ /D2UGHQ2%5GHGHDEULOSRUODTXHVHDSUXHEDQODVRUGHQDQ]DVJHQHUDOHVGHGLVHxR \FDOLGDGSDUDODVYLYLHQGDVSURWHJLGDVGH&DQWDEULD2UGHQDQ]DVWpFQLFDVGHGLVHxR\GHFDOLGDG GHYLYLHQGDVSURWHJLGDV 7(0$ 'HFUHWRGHGHIHEUHURSRUHOTXHVHUHJXODQGHWHUPLQDGDVD\XGDVGHO3ODQGH9LYLHQGDGH &DQWDEULD 7(0$ 5HJXODFLyQ HVWDWDO GH ODV YLYLHQGDV SURWHJLGDV 5HDO 'HFUHWR/H\ GH GH RFWXEUH VREUHSROtWLFDGHYLYLHQGDVGHSURWHFFLyQRILFLDO5HDO'HFUHWRGHGHQRYLHPEUH SRU HO TXH VH GHVDUUROOD HO 5HDO 'HFUHWR/H\ GH GH RFWXEUH VREUH SROtWLFD GH YLYLHQGDVGHSURWHFFLyQRILFLDO CVE-2019-3750 7(0$ i Pág. 12675 boc.cantabria.es 168/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 $76'( 0$7(5,$6(63(&Ë),&$6 i Pág. 12676 /H\ GH GH DEULO *HQHUDO GH 6DQLGDG (O GHUHFKR D OD SURWHFFLyQ GH OD VDOXG (O VLVWHPDGHVDOXG(VWUXFWXUDGHOVLVWHPDVDQLWDULRS~EOLFR 7(0$ /H\ GH GH QRYLHPEUH GH 2UGHQDFLyQ GH ODV 3URIHVLRQHV 6DQLWDULDV 3URIHVLRQHV 6DQLWDULDV &ODVLILFDFLyQ /DV FRPSHWHQFLDV GH ODV GLVWLQWDV SURIHVLRQHV VDQLWDULDV (O HMHUFLFLR SURIHVLRQDOHQODVSURIHVLRQHVVDQLWDULDV 7(0$ /H\GHGHQRYLHPEUHEiVLFDUHJXODGRUDGHODDXWRQRPtDGHOSDFLHQWH\GHGHUHFKRV \REOLJDFLRQHVHQPDWHULDGHLQIRUPDFLyQ\GRFXPHQWDFLyQFOtQLFD3ULQFLSLRVEiVLFRV(OGHUHFKR GH LQIRUPDFLyQ VDQLWDULD 'HUHFKR D OD LQWLPLGDG (O GHUHFKR D OD DXWRQRPtD GHO SDFLHQWH (O FRQVHQWLPLHQWRLQIRUPDGRVXVOtPLWHV\FRQGLFLRQHV'HILQLFLyQFRQWHQLGR\FRQVHUYDFLyQGHOD KLVWRULDFOtQLFD'HUHFKRGHDFFHVR 7(0$ /D/H\GHGHGLFLHPEUHGHO(VWDWXWR0DUFRGHO3HUVRQDO(VWDWXWDULRGHORV6HUYLFLRV GH6DOXG&ODVLILFDFLyQGHOSHUVRQDOGHORV6HUYLFLRVGH6DOXG'HUHFKRV\GHEHUHV-RUQDGDGH WUDEDMR6LWXDFLRQHVGHOSHUVRQDOHVWDWXWDULR 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GH 2UGHQDFLyQ 6DQLWDULD 3ULQFLSLRV 6LVWHPD 6DQLWDULR3~EOLFR&DUDFWHUtVWLFDV\RUJDQL]DFLyQIXQFLRQDO\WHUULWRULDO 7(0$ /H\GH&DQWDEULDGHGHMXQLRGHJDUDQWtDVGHWLHPSRVPi[LPRVGHUHVSXHVWDHQOD DWHQFLyQVDQLWDULDHVSHFLDOL]DGDHQHOVLVWHPDVDQLWDULRS~EOLFRGH&DQWDEULD2EMHWRiPELWRVGH DSOLFDFLyQ\WLHPSRVPi[LPRVGHUHVSXHVWD 7(0$ /H\GH&DQWDEULDGHGHGLFLHPEUHGHJDUDQWtDGHORVGHUHFKRVGHODVSHUVRQDVFRQ GLVFDSDFLGDG 7(0$ &RQFHSWRGH'HSHQGHQFLD9DORUDFLyQ\JUDGRV 7(0$ /H\ GH &DQWDEULD GH GH PDU]R GH 'HUHFKRV \ 6HUYLFLRV 6RFLDOHV 'HUHFKRV GH ODV SHUVRQDVHQUHODFLyQFRQORVVHUYLFLRVVRFLDOHV'HUHFKRVHVSHFtILFRVGHODVSHUVRQDVXVXDULDV GHFHQWURV\VHUYLFLRVGHDWHQFLyQ+LVWRULD3HUVRQDO 7(0$ 6DOXG3~EOLFDFRQFHSWR6DOXG\HQIHUPHGDGFRQFHSWR,QGLFDGRUHVGHVDOXGSRUHGDG\VH[R PRUELOLGDGPRUWDOLGDGOHWDOLGDG\HVSHUDQ]DGHYLGD 7(0$ 6DOXG/DERUDO/DVDOXGS~EOLFD\ODVDOXGGHORVWUDEDMDGRUHV&RPSHWHQFLDVGHODDGPLQLVWUDFLyQ VDQLWDULD 7(0$ 3ULQFLSLRVIXQGDPHQWDOHVGHOD%LRpWLFDGLOHPDVpWLFRV1RUPDVOHJDOHVGHiPELWRSURIHVLRQDO(O VHFUHWR SURIHVLRQDO FRQFHSWR \ UHJXODFLyQ MXUtGLFD &yGLJR GHRQWROyJLFR GH OD HQIHUPHUtD HVSDxROD(OFRQVHQWLPLHQWRLQIRUPDGR 7(0$ 0DUFRFRQFHSWXDO\PRGHORVGHHQIHUPHUtDJHQHUDOLGDGHV7HRUtDGHODV1HFHVLGDGHV+XPDQDV FRQFHSWR7HRUtDGHO$XWRFXLGDGRFRQFHSWR 7(0$ 0HWRGRORJtD GH (QIHUPHUtD IDVHV GHO 3URFHVR GH (QIHUPHUtD 9DORUDFLyQ GLDJQyVWLFD VHJ~Q 3DWURQHV)XQFLRQDOHVGH6DOXGFRQFHSWR\FODVLILFDFLyQ9DORUDFLyQGLDJQyVWLFDVHJ~QHO0RGHOR GH1HFHVLGDGHV%iVLFDVFRQFHSWR\FODVLILFDFLyQ 7(0$ 2UJDQL]DFLyQ GH ORV FXLGDGRV HQIHUPHURV HQ $WHQFLyQ (VSHFLDOL]DGD &RQVXOWD GH HQIHUPHUtD &RRUGLQDFLyQHQWUHQLYHOHVDVLVWHQFLDOHV boc.cantabria.es CVE-2019-3750 7(0$ 169/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12677 3ODQ GH FXLGDGRV HQIHUPHURV FRQFHSWR \ HVWUXFWXUD 'LDJQyVWLFRV GH (QIHUPHUtD FRQFHSWR \ WLSRV GH WD[RQRPtD )RUPXODFLyQ GH SUREOHPDV LQWHUGHSHQGLHQWHV FRQFHSWR )RUPXODFLyQ GH SUREOHPDVLQGHSHQGLHQWHVFRQFHSWR 7(0$ *HVWLyQ GH VHUYLFLRV VDQLWDULRV WHQGHQFLDV DFWXDOHV 3ODQLILFDFLyQ FRQFHSWR 3ODQLILFDFLyQ RSHUDWLYD GHILQLFLyQ GH REMHWLYRV DFWLYLGDGHV \ UHFXUVRV /D JHVWLyQ GH ORV VHUYLFLRV GH HQIHUPHUtD WHQGHQFLDV DFWXDOHV 3URGXFWR VDQLWDULR FRQFHSWR \ VLVWHPDV GH PHGLFLyQ (O SURGXFWRHQIHUPHURFRQFHSWR\VLVWHPDVGHPHGLFLyQ&DUWHUDGHVHUYLFLRVFRQFHSWR 7(0$ /D GRFHQFLD FRPR DFWLYLGDG QHFHVDULD SDUD HO GHVDUUROOR SURIHVLRQDO 3DUWLFLSDFLyQ HQ OD IRUPDFLyQGHSUHJUDGR\SRVWJUDGR)RUPDFLyQFRQWLQXDGDOtQHDVGHGHVDUUROOR 7(0$ 6LVWHPDV GH LQIRUPDFLyQ XWLOL]DGRV HQ $WHQFLyQ (VSHFLDOL]DGD KLVWRULD FOtQLFD 5HJLVWURV HVSHFtILFRVGH$FWLYLGDGGH(QIHUPHUtDHQ$WHQFLyQ(VSHFLDOL]DGD,QIRUPHGHHQIHUPHUtDDODOWD &ODVLILFDFLRQHV,QWHUQDFLRQDOHVGH3UREOHPDVGH6DOXGFDUDFWHUtVWLFDVJHQHUDOHV 7(0$ &DOLGDG HQ OD SUHVWDFLyQ GH VHUYLFLRV VDQLWDULRV , FDUDFWHUtVWLFDV GH OD DWHQFLyQ VDQLWDULD 'LPHQVLRQHVGHFDOLGDGFLHQWtILFRWpFQLFDHIHFWLYLGDGHILFLHQFLDDFFHVLELOLGDG\VDWLVIDFFLyQGHO XVXDULR 7(0$ &DOLGDG HQ OD SUHVWDFLyQ GH VHUYLFLRV VDQLWDULRV ,, (YDOXDFLyQ GH HVWUXFWXUD SURFHVR \ UHVXOWDGRV 0HMRUD FRQWLQXD GH OD FDOLGDG 0pWRGRV GH HYDOXDFLyQ GH OD FDOLGDG DXGLWRUtDV 7HQGHQFLDVDFWXDOHVGHHYDOXDFLyQGHFDOLGDGGHORVFXLGDGRVHQIHUPHURV 7(0$ &DOLGDG HQ OD SUHVWDFLyQ GH VHUYLFLRV VDQLWDULRV ,,, 3URJUDPDV GH FDOLGDG GLVHxR H LPSODQWDFLyQ 7(0$ 0HWRGRORJtDGH,QYHVWLJDFLyQWpFQLFDVFXDQWLWDWLYDV\FXDOLWDWLYDV(VWUXFWXUDPHWRGROyJLFDGHXQ WUDEDMRFLHQWtILFR)XHQWHVGHGDWRV 7(0$ ,QYHVWLJDFLyQ HQ HQIHUPHUtD EiVLFD HVWXGLRV GH LGHQWLILFDFLyQ \ SULRUL]DFLyQ GH SUREOHPDV ,QYHVWLJDFLyQ HQ HQIHUPHUtD DSOLFDGD HVWXGLRV GHVFULSWLYRV \ DQDOtWLFRV GH ORV GLDJQyVWLFRV HQIHUPHURVXWLOL]DGRVHVWXGLRVGHSURFHVRV\UHVXOWDGR 7(0$ (SLGHPLRORJtDFRQFHSWR\PpWRGRV6LVWHPDVGH9LJLODQFLD(SLGHPLROyJLFD3REODFLRQDO\UHGHV FHQWLQHOD 7(0$ 6LVWHPD1DFLRQDOGH9LJLODQFLD(SLGHPLROyJLFD(QIHUPHGDGHVGHGHFODUDFLyQREOLJDWRULD 7(0$ 3ULQFLSDOHV SUREOHPDV GH VDOXG HQ OD SREODFLyQ HVSDxROD DFWXDO (OHPHQWRV GH SULRUL]DFLyQ PDJQLWXGWUDVFHQGHQFLDYXOQHUDELOLGDG\FRVWH 7(0$ 3UHYHQFLyQ \ SURPRFLyQ GH OD VDOXG FRQFHSWR 'HWHFFLyQ SUHFR] GH SUREOHPDV GH VDOXG FRQFHSWR )DFWRUHV GH ULHVJR SDUD OD VDOXG HQ ODV GLVWLQWDV HWDSDV GH OD YLGD LQIDQFLD DGROHVFHQFLDDGXOWR\DQFLDQR LGHQWLILFDFLyQGHIDFWRUHVGHULHVJR\FXLGDGRVHQIHUPHURV 7(0$ /D (GXFDFLyQ SDUD OD 6DOXG LQGLYLGXDO JUXSDO \ FRPXQLWDULD FRQFHSWR PHWRGRORJtD \ WpFQLFDV GLGiFWLFDV7pFQLFDVGH(GXFDFLyQSDUDOD6DOXGSDUDHOIRPHQWRGHODXWRFXLGDGR\SURPRFLyQGH ODVDOXGGHOSDFLHQWHFXLGDGRUSULQFLSDO\IDPLOLD 7(0$ &ULWHULRVSDUDODHODERUDFLyQGH3URJUDPDVGH(GXFDFLyQSDUDOD6DOXG*UXSRVGHDXWRD\XGD FRQFHSWR)RUPDFLyQGH$JHQWHVGH6DOXG 7(0$ 7pFQLFDV \ KDELOLGDGHV GH FRPXQLFDFLyQ \ UHODFLyQ LQWHUSHUVRQDO 7UDEDMR HQ HTXLSR (QWUHYLVWD FOtQLFD FRQFHSWR \ FDUDFWHUtVWLFDV ,GHQWLILFDFLyQ GH QHFHVLGDGHV GH DSR\R HPRFLRQDO \ SVLFROyJLFRDOSDFLHQWHFXLGDGRUSULQFLSDO\IDPLOLD 7(0$ +LJLHQH HQFHQWURV VDQLWDULRVFRQFHSWRV JHQHUDOHV $QWLVpSWLFRV 'HVLQIHFWDQWHV (VWHULOL]DFLyQ (O VHUYLFLR GH HVWHULOL]DFLyQ 3UHSDUDFLyQ \ WLSRV GH PDWHULDO D HVWHULOL]DU PpWRGRV GH HVWHULOL]DFLyQ0DQLSXODFLyQ\FRQVHUYDFLyQGHOPDWHULDOHVWpULO*HVWLyQGHUHVLGXRVVDQLWDULRV 7(0$ 'URJRGHSHQGHQFLDV 3ODQ 5HJLRQDO GH 'URJDV 3ODQ GH 3UHYHQFLyQ \ &RQWURO GHO 7DEDTXLVPR JHQHUDOLGDGHV boc.cantabria.es CVE-2019-3750 7(0$ 170/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12678 7(0$ 'HVDUUROOR GH OD FRQGXFWD KXPDQD HWDSDV GHO GHVDUUROOR 7LSRV GH SHUVRQDOLGDG +iELWRV 0RWLYDFLyQ )DFWRUHV VRFLRFXOWXUDOHV VX LQFLGHQFLD HQ OD VDOXG 9DORUDFLyQ GH HQIHUPHUtD GHO FRPSRUWDPLHQWRKXPDQR\VXDSOLFDFLyQHQORVFXLGDGRVGHHQIHUPHUtD 7(0$ $OLPHQWDFLyQ\QXWULFLyQ , FRQFHSWR\GLIHUHQFLDFLyQ&ODVLILFDFLyQGHORVDOLPHQWRV(ODERUDFLyQ GHGLHWDV'LHWDVWHUDSpXWLFDV 7(0$ $OLPHQWDFLyQ\QXWULFLyQ ,, 9DORUDFLyQ\FXLGDGRVGHHQIHUPHUtDDSHUVRQDVFRQSUREOHPDVGH GHVQXWULFLyQGHVKLGUDWDFLyQDQRUH[LDEXOLPLD\REHVLGDG 7(0$ 9DORUDFLyQ\FXLGDGRVGHHQIHUPHUtDHQSHUVRQDVFRQQXWULFLyQHQWHUDO\SDUHQWHUDO7pFQLFDVGH DGPLQLVWUDFLyQ3URWRFRORVGHDFWXDFLyQ 7(0$ (ODERUDFLyQ GH XQ 3ODQ GH &XLGDGRV GH (QIHUPHUtD HQ $WHQFLyQ (VSHFLDOL]DGD (MHFXFLyQ GHO 3ODQ(YDOXDFLyQ 7(0$ 9DORUDFLyQ GH (QIHUPHUtD HQ SDFLHQWHV FRQ SUREOHPDV JDVWURLQWHVWLQDOHV &XLGDGRV GH (QIHUPHUtDHQORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ 9DORUDFLyQGH(QIHUPHUtDHQSDFLHQWHVFRQSUREOHPDVHQHOVLVWHPDUHQDO\XULQDULR&XLGDGRVGH (QIHUPHUtDHQORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ 9DORUDFLyQ GH (QIHUPHUtD HQ SDFLHQWHV FRQ SUREOHPDV HQ HO VLVWHPD QHXUROyJLFR &XLGDGRV GH (QIHUPHUtDHQORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ 9DORUDFLyQ GH (QIHUPHUtD HQ SDFLHQWHV FRQ SUREOHPDV FDUGLRFLUFXODWRULRV &XLGDGRV GH (QIHUPHUtDHQORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ 9DORUDFLyQ GH (QIHUPHUtD HQ SDFLHQWHV FRQ SUREOHPDV RIWDOPROyJLFRV &XLGDGRV GH (QIHUPHUtD HQORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ 9DORUDFLyQGH(QIHUPHUtDHQSDFLHQWHVFRQSUREOHPDVUHVSLUDWRULRV&XLGDGRVGH(QIHUPHUtDHQ ORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ (OSXHUSHULRLQPHGLDWRYDORUDFLyQ\FXLGDGRVGH(QIHUPHUtD(OUHFLpQQDFLGRVDQR\SDWROyJLFR YDORUDFLyQ \ FXLGDGRV GH HQIHUPHUtD /DFWDQFLD QDWXUDO \ DUWLILFLDO (VWLPXODFLyQ SUHFR] GH OD ODFWDQFLDQDWXUDO 7(0$ 3UHYHQFLyQ\GHWHFFLyQGHPDORVWUDWRVLQIDQWLOHV\GHODGXOWR 7(0$ 9DORUDFLyQ GH (QIHUPHUtD HQ SDFLHQWHV FRQ SUREOHPDV HQ HO VLVWHPD P~VFXORHVTXHOpWLFR &XLGDGRVGH(QIHUPHUtDHQORVPLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ (O SDFLHQWH HQFDPDGR DWHQFLyQ GH (QIHUPHUtD DQWH ÒOFHUDV GH GHF~ELWR ÒOFHUDV GH H[WUHPLGDGHVLQIHULRUHV2VWRPtDV 7(0$ 9DORUDFLyQ GH (QIHUPHUtD HQ SDFLHQWHV LQIHFWRFRQWDJLRVRV &XLGDGRV GH (QIHUPHUtD HQ ORV PLVPRV3URFHGLPLHQWRV\WpFQLFDVPiVXVXDOHV 7(0$ $FWXDFLyQGH(QIHUPHUtDDQWH4XHPDGXUDV/HVLRQHVSURGXFLGDVSRUHOHFWULFLGDG$KRJDPLHQWR 7(0$ $FWXDFLyQGH(QIHUPHUtDDQWH3ROLWUDXPDWLVPRV\7UDXPDWLVPRFUiQHRHQFHIiOLFR 7(0$ $FWXDFLyQGH(QIHUPHUtDDQWH&RQWXVLRQHV(VJXLQFHV/X[DFLRQHV)UDFWXUDV 7(0$ +HPRUUDJLDV&ODVLILFDFLyQ$FWXDFLyQGH(QIHUPHUtDDQWHKHPRUUDJLDVH[WHUQDV 7(0$ +HULGDV &ODVLILFDFLyQ $FWXDFLyQ GH (QIHUPHUtD DQWH ODV KHULGDV GH WyUD[ $FWXDFLyQ DQWH ODV KHULGDVGHDEGRPHQ 7(0$ $FWXDFLyQGH(QIHUPHUtDDQWH3DUDGD&DUGLRUUHVSLUDWRULD5HDQLPDFLyQ&DUGLRSXOPRQDUEiVLFD 7(0$ $WHQFLyQ GH (QIHUPHUtD DO DQFLDQR HQIHUPR /DV HQIHUPHGDGHV HQ HO WUDQVFXUVR GH OD YHMH] &URQLFLGDGHLQYDOLGH]3DSHOGHODHQIHUPHUDDQWHODKRVSLWDOL]DFLyQGHODQFLDQRHQIHUPR boc.cantabria.es CVE-2019-3750 171/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 9DORUDFLyQ \ FXLGDGRV GH HQIHUPHUtD D SHUVRQDV FRQ SUREOHPDV GH VDOXG PHQWDO $O]KHLPHU \ RWUDV GHPHQFLDV 2WUDV DOWHUDFLRQHV SVtTXLFDV 3UHYHQFLyQ \ FRQWURO DQWH HO ULHVJR GH VXLFLGLR 9DORUDFLyQGHODVLWXDFLyQIDPLOLDU\VRFLDO 7(0$ $WHQFLyQ GH (QIHUPHUtD DO SDFLHQWH WHUPLQDO KRVSLWDOL]DGR &XLGDGRV SDOLDWLYRV GHO HQIHUPR WHUPLQDO$SR\RDORVIDPLOLDUHVIUHQWHDOGRORU\ODPXHUWH 7(0$ 7pFQLFDV GH (QIHUPHUtD 6RQGDMH YHVLFDO REMHWLYR 0DWHULDO QHFHVDULR 0HWRGRORJtD HGXFDFLyQ GHOSDFLHQWH\GHODIDPLOLD 7(0$ 7pFQLFDV GH (QIHUPHUtD 6RQGDMH QDVRJiVWULFR REMHWLYR 0DWHULDO QHFHVDULR 0HWRGRORJtD (GXFDFLyQGHOSDFLHQWH\GHODIDPLOLD 7(0$ 7pFQLFDV GH (QIHUPHUtD 6XWXUDV HQ FXUDV GH FLUXJtD PHQRU REMHWLYR 0DWHULDO QHFHVDULR 0HWRGRORJtD\SUHSDUDFLyQGHOSDFLHQWH5HWLUDGDGHSXQWRVGHVXWXUD 7(0$ $QHVWHVLD ORFDO ,QGLFDFLRQHV 7LSRV GH DGPLQLVWUDFLyQ ,QILOWUDFLyQ ORFDO %ORTXHR GH FDPSR 7URQFXODUSRUFRQJHODFLyQ 7(0$ 0HGLFDPHQWRV IRUPDV GH FODVLILFDFLyQ \ YtDV GH DGPLQLVWUDFLyQ (OHFFLyQ FRUUHFWD GH OD XQFLyQ SRU YtD SDUHQWHUDO 'RVLILFDFLyQ 3URFHGLPLHQWRV \ FXLGDGRV $EVRUFLyQ \ GLVWULEXFLyQ GH IiUPDFRV WR[LFLGDG \ HIHFWRV FRODWHUDOHV )iUPDFRYLJLODQFLD &RQGLFLRQHV GH FRQVHUYDFLyQ GH ORVPHGLFDPHQWRV&DGXFLGDGHV CVE-2019-3750 7(0$ i Pág. 12679 boc.cantabria.es 172/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 $76(035(6$ 0$7(5,$6(63(&Ë),&$6 7(0$ 8QLyQ (XURSHD /DV DFWXDFLRQHV HQ PDWHULD GH 6HJXULGDG \ 6DOXG HQ HO 7UDEDMR HQ HO iPELWRGHODVLQVWLWXFLRQHVFRPXQLWDULDV/DVLQVWLWXFLRQHVFRPXQLWDULDVUHODFLRQDGDVFRQ HVWD PDWHULD /DV GLUHFWLYDV VREUH GLVSRVLFLRQHV PtQLPDV GH VHJXULGDG \ VDOXG HQ HO WUDEDMR 7(0$ $FWXDFLRQHV GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV FRPSHWHQWHV HQ PDWHULD GH 6HJXULGDG \ 6DOXGHQHOWUDEDMRHQ(VSDxD(O,QVWLWXWR1DFLRQDOGH6HJXULGDG\6DOXGHQHO7UDEDMR )XQFLRQHV\DFWXDFLRQHVGHOD,QVSHFFLyQGH7UDEDMR\6HJXULGDG6RFLDO/DUHGHVSDxROD GH 6HJXULGDG \ 6DOXG HQHO 7UDEDMR /D &RPLVLyQ1DFLRQDO GH6HJXULGDG \6DOXG HQHO 7UDEDMR/D)XQGDFLyQSDUDOD3UHYHQFLyQGH5LHVJRV/DERUDOHV/RVyUJDQRVWpFQLFRVGH ODV&RPXQLGDGHV$XWyQRPDV 7(0$ /H\GH3UHYHQFLyQGH5LHVJRV/DERUDOHV/H\GHGHQRYLHPEUH/H\ GHGHGLFLHPEUHGHUHIRUPDGHOPDUFRQRUPDWLYRGHODSUHYHQFLyQGHULHVJRVODERUDOHV 7(0$ 5HJODPHQWRGHORV6HUYLFLRVGH3UHYHQFLyQ5HDO'HFUHWRGHGHHQHUR\VXV PRGLILFDFLRQHV 7(0$ 3ODQ GH 3UHYHQFLyQ GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD /D HVWUXFWXUD RUJDQL]DWLYD GHO VLVWHPD GH SUHYHQFLyQ 6HUYLFLRV GH 3UHYHQFLyQ (VWUXFWXUD SUHYHQWLYDGHODV6HFUHWDUtDV*HQHUDOHV5HFXUVRVSUHYHQWLYRV 7(0$ 3ODQ GH 3UHYHQFLyQ GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'HUHFKRV GH FRQVXOWD \ SDUWLFLSDFLyQ 'HOHJDGRV GH 3UHYHQFLyQ &RPLVLyQ 3DULWDULD GH 6DOXG/DERUDO&RPLWpVGH6HJXULGDG\6DOXG 7(0$ 3ODQ GH 3UHYHQFLyQ GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 3URFHGLPLHQWRV GHO 6HUYLFLR &HQWUDO GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 6&35/ 5HFRQRFLPLHQWRV PpGLFRV YROXQWDULRV 5HFRQRFLPLHQWRV 0pGLFRV SUHYLRV \R SHULyGLFRV REOLJDWRULRV 5HFRQRFLPLHQWRV PpGLFRV IXHUD GH SURJUDPDFLyQ 9DORUDFLyQ VREUH OD LQIOXHQFLDGHGHWHUPLQDGDVFRQGLFLRQHVGHWUDEDMRHQHOHVWDGRGHVDOXGGHOWUDEDMDGRU &DPELRGHSXHVWRGHWUDEDMRSRUPRWLYRVGHVDOXGSDUDSHUVRQDOODERUDO 7(0$ (O DFFLGHQWH GH WUDEDMR &RQFHSWRV \ GHILQLFLyQ OHJDO 3DUWH GH $FFLGHQWH GH 7UDEDMR QRWLILFDFLyQ\WUDPLWDFLyQ2UGHQ0LQLVWHULDO7$6GHGHQRYLHPEUHSRUOD TXH VH UHJXOD OD XWLOL]DFLyQ GHO VLVWHPD GH 'HFODUDFLyQ (OHFWUyQLFD GH $FFLGHQWHV GH 7UDEDMR/DV0XWXDVGHDFFLGHQWHVGHWUDEDMR\HQIHUPHGDGHVSURIHVLRQDOHV 7(0$ (O DFFLGHQWH GH WUDEDMR GH RULJHQ ELROyJLFR 3UHYHQFLyQ GH OD LQIHFFLyQ SRU YLUXV GH WUDQVPLVLyQ VDQJXtQHD HQ HO PHGLR SURIHVLRQDO VDQLWDULR $FWXDFLyQ DQWH H[SRVLFLRQHV DFFLGHQWDOHVFRQPDWHULDOELROyJLFR3URWRFRORVGHDFWXDFLyQ i Pág. 12680 boc.cantabria.es CVE-2019-3750 173/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12681 7(0$ (QIHUPHGDGHV SURIHVLRQDOHV &RQFHSWR \ GHILQLFLyQ 5HDO 'HFUHWR GH GH QRYLHPEUHPRGLILFDGRSRUHO5HDO'HFUHWRGHGHGLFLHPEUHSRUHOTXHVH DSUXHEDHOFXDGURGH(QIHUPHGDGHV3URIHVLRQDOHVHQHOVLVWHPDGHOD6HJXULGDG6RFLDO\ VHHVWDEOHFHQFULWHULRVSDUDVXQRWLILFDFLyQ\UHJLVWUR2UGHQ7$6GHGHHQHUR SRUODTXHVHHVWDEOHFHHOPRGHORGH3DUWHGH(QIHUPHGDG3URIHVLRQDOVHGLFWDQQRUPDV SDUDVXHODERUDFLyQ\WUDQVPLVLyQ\VHFUHDHOFRUUHVSRQGLHQWHILFKHURGHGDWRVSHUVRQDOHV 7(0$ &RQFHSWR GH VDOXG \ SUHYHQFLyQ &RQFHSWR \ REMHWLYRV GH OD 0HGLFLQD GHO 7UDEDMR 3DWRORJtDV GH RULJHQ ODERUDO (SLGHPLRORJtD ODERUDO 3URWRFRORV GH YLJLODQFLD VDQLWDULD HVSHFtILFD 7(0$ (O WUDEDMR \ OD VDOXG &RQFHSWR GH ULHVJR ODERUDO )DFWRUHV GH ULHVJR &RQGLFLRQHV GH WUDEDMRHQUHODFLyQFRQODVDOXG'DxRVGHULYDGRVGHOWUDEDMR/DVWpFQLFDVSUHYHQWLYDV\ VXiPELWRGHDSOLFDFLyQ 7(0$ 9LJLODQFLD GH OD VDOXG GH ORV WUDEDMDGRUHV (O H[DPHQ GH VDOXG HQ HO iPELWR ODERUDO /D DSWLWXGODERUDO([LJHQFLDVSVLFRItVLFDVHQHOSXHVWRGHWUDEDMR/DDGDSWDFLyQUD]RQDEOH GHOSXHVWRGHWUDEDMR 7(0$ /D KLVWRULD FOtQLFRODERUDO &RQWHQLGRV 5HDOL]DFLyQ GH SUXHEDV HVSHFtILFDV &XVWRGLD \ FRQVHUYDFLyQGHORVGRFXPHQWRVGHVDOXG/DFRQILGHQFLDOLGDGGHORVGDWRVGHODYLJLODQFLD GHODVDOXG 7(0$ 3URPRFLyQGHODVDOXGHQODHPSUHVD3ODQLILFDFLyQHLQIRUPDFLyQVDQLWDULDHQVDOXGODERUDO (GXFDFLyQSDUDODVDOXG 7(0$ /DIRUPDFLyQHQSUHYHQFLyQGHULHVJRVODERUDOHV'HUHFKRV\REOLJDFLRQHV/DSODQLILFDFLyQ GHODIRUPDFLyQHQODHPSUHVD(OGLDJQyVWLFRGHQHFHVLGDGHV/DGHILQLFLyQGHREMHWLYRV /D GHWHUPLQDFLyQ GH ORV SURJUDPDV 0pWRGRV \ WpFQLFDV IRUPDWLYDV /DV QXHYDV WHFQRORJtDVDSOLFDGDVDODIRUPDFLyQ 7(0$ ,QPXQL]DFLyQ HQ HO PHGLR ODERUDO 3ULQFLSLRV JHQHUDOHV (VWUDWHJLDV \ SURJUDPDV GH YDFXQDFLyQ7LSRVGHYDFXQDV3ULQFLSDOHVYDFXQDFLRQHVHQORVWUDEDMDGRUHV 7(0$ 3VLFRVRFLRORJtD &RQFHSWR \ GHILQLFLyQ GH IDFWRUHV GH ULHVJR SVLFRVRFLDO 3ULQFLSDOHV HIHFWRV SDUD OD VDOXG &RQVHFXHQFLDV ItVLFDV \ ILVLROyJLFDV GHO HVWUpV &RQVHFXHQFLDV SVLFROyJLFDV0pWRGRVGHHYDOXDFLyQGHIDFWRUHVSVLFRVRFLDOHV 7(0$ (ODFRVRODERUDO(OVtQGURPHGH³EXUQRXW´ 7(0$ (UJRQRPtD FRQFHSWR \ REMHWLYRV (UJRQRPtD HQ HO SUR\HFWR &RQFHSFLyQ \ GLVHxR GHO SXHVWR GH WUDEDMR 2UJDQL]DFLyQ GHO WUDEDMR &DUJD ItVLFD GH WUDEDMR &DUJD PHQWDO GH WUDEDMR 7(0$ (VSHFLILFDFLRQHV HUJRQyPLFDV GHO DPELHQWH ItVLFR /DV FRQGLFLRQHV WHUPRKLJURPpWULFDV 'LVFRQIRUWWpUPLFR0pWRGRVGHYDORUDFLyQ\PHGLGDVSUHYHQWLYDV(OFRQFHSWRGHFRQIRUW DF~VWLFR0ROHVWLDVSURGXFLGDVSRUHOUXLGRHQHOWUDEDMR&ULWHULRVGHYDORUDFLyQ 7(0$ 5LWPRVELROyJLFRV(OWUDEDMRDWXUQRV&RQVHFXHQFLDVSDUDODVDOXG 7(0$ 7R[LFRORJtD/DERUDO&ODVLILFDFLyQGHORVDJHQWHVTXtPLFRVVHJ~QVXHVWDGR\IRUPD9tDV GHHQWUDGDHQHORUJDQLVPR,QWHUDFFLyQFRQHORUJDQLVPR'DxRVGHULYDGRVGHOWUDEDMRD FRUWR\ODUJRSOD]R)DFWRUHVGHWHUPLQDQWHVGHODWR[LFLGDG(IHFWRVDGLWLYRV\VLQpUJLFRV 7(0$ 7R[LFRORJtD/DERUDO&ULWHULRVELROyJLFRVGHYDORUDFLyQGHODH[SRVLFLyQDFRQWDPLQDQWHV TXtPLFRV ,QGLFDGRU ELROyJLFR 9DORUHV OtPLWH ELROyJLFRV HQ (VSDxD 2WURV OtPLWHV GH UHIHUHQFLD/RV%(,GHOD$&*,+ boc.cantabria.es CVE-2019-3750 174/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12682 7(0$ (YDOXDFLyQ GH ULHVJRV \ SODQLILFDFLyQ SUHYHQWLYD HQ OD HPSUHVD ,QWHJUDFLyQ GH OD SUHYHQFLyQ&RQGLFLRQHVGHWUDEDMR 7(0$ 8WLOL]DFLyQGHHTXLSRVGHSURWHFFLyQLQGLYLGXDO3URWHFFLyQFROHFWLYD&RQFHSWR\SULRULGDG GHXWLOL]DFLyQGHORVHTXLSRVGHSURWHFFLyQ(O5HDO'HFUHWRGHGHPD\R\OD *XtDWpFQLFDGHO,QVWLWXWR1DFLRQDOGH6HJXULGDG\6DOXGHQHO7UDEDMR 7(0$ 3URWHFFLyQ GH OD PDWHUQLGDG /HJLVODFLyQ YLJHQWH GH SURWHFFLyQ GH OD PDWHUQLGDG 6LWXDFLRQHV GH ULHVJR GXUDQWH HO HPEDUD]R \ OD ODFWDQFLD QDWXUDO 0HGLGDV SUHYHQWLYDV IUHQWHDORVULHVJRVHVSHFtILFRV 7(0$ 3URWHFFLyQ GH ORV WUDEDMDGRUHV HVSHFLDOPHQWH VHQVLEOHV 3URWHFFLyQ GH ORV PHQRUHV 5LHVJRV HVSHFtILFRV SDUD ORV PHQRUHV HQ UD]yQ GH VX WUDEDMR /HJLVODFLyQ YLJHQWH GH SURWHFFLyQGHORVPHQRUHV7UDEDMRVSURKLELGRV 7(0$ (SLGHPLRORJtDODERUDOHLQYHVWLJDFLyQHSLGHPLROyJLFD$SOLFDFLRQHVGHODHSLGHPLRORJtDHQ VDOXGODERUDO 7(0$ 7LSRV GH GLVHxRV HSLGHPLROyJLFRV (VWXGLRV H[SHULPHQWDOHV (VWXGLRV REVHUYDFLRQDOHV (VWXGLRVWUDQVYHUVDOHV(VWXGLRVORQJLWXGLQDOHVSURVSHFWLYRV\ UHWURVSHFWLYRV$SOLFDFLyQ GHFDGDXQRGHHOORVHQODLQYHVWLJDFLyQHSLGHPLROyJLFD 7(0$ 3DSHOGHODHVWDGtVWLFDHQHSLGHPLRORJtD(VWLPDFLyQGHLQWHUYDORVGHFRQILDQ]D&RQWUDVWH GHKLSyWHVLV(UURUDOID\HUURUEHWD(OHFFLyQGHODSUXHEDHVWDGtVWLFD 7(0$ (VWDGtVWLFDGHVFULSWLYD0HGLGDVGHODIUHFXHQFLDGHHQIHUPHGDGSURSRUFLyQUD]yQWDVD 3UHYDOHQFLDHLQFLGHQFLD5LHVJRUHODWLYR2GVVUDWLR 7(0$ 7LSRV GH HUURUHV HQ LQYHVWLJDFLyQ HSLGHPLROyJLFD HUURU DOHDWRULR \ HUURU VLVWHPiWLFR )DFWRUHVGHFRQIXVLyQ9DOLGH]LQWHUQD\H[WHUQD 7(0$ 6RFRUULVPR \ SULPHURV DX[LOLRV 3DXWDV JHQHUDOHV GH DFWXDFLyQ (YDOXDFLyQ GH XQ DFFLGHQWDGR 3DUR FDUGLRUHVSLUDWRULR DOJRULWPR GH DFWXDFLyQ 7pFQLFD GH UHDQLPDFLyQ FDUGLRSXOPRQDUEiVLFD 5&3% 7(0$ (PHUJHQFLDVPpGLFDVREVWUXFFLyQGHODYtDDpUHD$OWHUDFLRQHVGHODFRQFLHQFLDWLSRV\ IRUPDGHDFWXDFLyQ(SLOHSVLD 7(0$ (PHUJHQFLDV PpGLFDV +HPRUUDJLDV +HULGDV &RQWXVLRQHV )UDFWXUDV 4XHPDGXUDV $FFLGHQWHVSRUHOHFWULFLGDG 7(0$ (PHUJHQFLDV PpGLFDV 'RORU WRUiFLFR 'RORU 3LFDGXUDVPRUGHGXUDVGHDQLPDOHV/HVLRQHVRFXODUHV 7(0$ 7pFQLFDVGHLQPRYLOL]DFLyQ\WUDVODGR3DXWDVJHQHUDOHVGHDFWXDFLyQ3RVLFLyQODWHUDOGH VHJXULGDG7pFQLFDVGHWUDVODGR 7(0$ 3ODQHVGHHPHUJHQFLD\HYDFXDFLyQ5HDO'HFUHWRGHGHPDU]RSRUHOTXH VH DSUXHED OD 1RUPD %iVLFD GH $XWRSURWHFFLyQ GH ORV FHQWURV HVWDEOHFLPLHQWRV \ GHSHQGHQFLDV GHGLFDGRV D DFWLYLGDGHV TXH SXHGDQ GDU RULJHQ D VLWXDFLRQHV GH HPHUJHQFLD \ PRGLILFDFLRQHV SRVWHULRUHV 1RUPDWLYD GH UHJXODFLyQ HQ OD &RPXQLGDG $XWyQRPDGH&DQWDEULD 7(0$ 3URWHFFLyQGHODVDOXG\VHJXULGDGGHORVWUDEDMDGRUHVFRQWUDORVULHVJRVUHODFLRQDGRVFRQ ORVDJHQWHVTXtPLFRVGXUDQWHHOWUDEDMR5HDO'HFUHWRGHGHDEULOPRGLILFDGR SRU 5HDO 'HFUHWR GH GH MXOLR 2EMHWR \ iPELWR GH DSOLFDFLyQ 'HILQLFLRQHV &RQFHSWR \ XWLOL]DFLyQ GH ORV YDORUHV OtPLWHV YLQFXODQWHV H LQGLFDWLYRV 2EOLJDFLyQ GHO HPSUHVDULR boc.cantabria.es ,QWR[LFDFLRQHV CVE-2019-3750 DEGRPLQDO 175/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDDJHQWHVFDQFHUtJHQRV\PXWDJpQLFRVFRQFHSWR\ FDWHJRUtDVGHDJHQWHFDQFHUtJHQR\GHDJHQWHPXWDJpQLFR(O5HDO'HFUHWRGH GHPD\R\VXVPRGLILFDFLRQHVSRUHO5HDO'HFUHWRGHGHMXQLRHO5HDO 'HFUHWRGHGHPDU]R\HO5HDO'HFUHWRGHGHMXOLR*XtDWpFQLFD 7(0$ 3UHYHQFLyQGHULHVJRVSRUH[SRVLFLyQDOUXLGR&DUDFWHUtVWLFDVItVLFDVGHOUXLGR3DUiPHWURV GHPHGLGD7LSRVGHUXLGRODERUDO0HFDQLVPRVGHODDXGLFLyQ5LHVJRVSRUH[SRVLFLyQDO UXLGR0HGLGDVSUHYHQWLYDV5HDO'HFUHWRGHGHPDU]RVREUHODSURWHFFLyQ GH OD VDOXG \ VHJXULGDG GH ORV WUDEDMDGRUHV FRQWUD ORV ULHVJRV UHODFLRQDGRV FRQ OD H[SRVLFLyQDOUXLGR 7(0$ 5HDO'HFUHWRGHGHQRYLHPEUH PRGLILFDGRSRU5HDO'HFUHWRGH GHPDU]RVREUHODSURWHFFLyQGHODVDOXG\ODVHJXULGDGGHORVWUDEDMDGRUHVIUHQWHDORV ULHVJRV GHULYDGRV R TXH SXHGDQ GHULYDUVH GH OD H[SRVLFLyQ D YLEUDFLRQHV PHFiQLFDV &DUDFWHUtVWLFDV ItVLFDV GH ODV YLEUDFLRQHV 7LSRV GH YLEUDFLRQHV 5LHVJRV ODERUDOHV SRU H[SRVLFLyQDODVYLEUDFLRQHV0HGLGDVSUHYHQWLYDV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD5DGLDFLRQHVLRQL]DQWHV 7(0$ ([SRVLFLyQ D UDGLDFLRQHV QR LRQL]DQWHV FODVLILFDFLyQ \ FDUDFWHUtVWLFDV ItVLFDV GH ODV SULQFLSDOHV UDGLDFLRQHV QR LRQL]DQWHV XOWUDYLROHWD OX] YLVLEOH UDGLDFLRQHV LQIUDUURMDV PLFURRQGDV\OiVHUHV5LHVJRVSDUDODVDOXGHYDOXDFLyQGHOULHVJR\PHGLGDVSUHYHQWLYDV 7(0$ 3UREOHPiWLFD GH ODV UDGLDFLRQHV GH EDMD IUHFXHQFLD ([SRVLFLyQ D FDPSRV HOpFWULFRV \ PDJQpWLFRV5HDO'HFUHWRGHGHMXOLRVREUHSURWHFFLyQGHORVWUDEDMDGRUHV H[SXHVWRVDFDPSRVHOHFWURPDJQpWLFRV 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFDDJHQWHVELROyJLFRV(QIHUPHGDGHVFX\RULHVJR HVWi YLQFXODGR DO WLSR GH DFWLYLGDG ODERUDO 7XEHUFXORVLV DJHQWH FDXVDO HSLGHPLRORJtD HIHFWRVVREUHODVDOXGPpWRGRVGLDJQyVWLFRVFULWHULRVGHYDORUDFLyQYLJLODQFLDGHODVDOXG GHORVWUDEDMDGRUHVH[SXHVWRVSUXHEDGHODWXEHUFXOLQD 7(0$ (O WUDEDMR FRQ HTXLSRV TXH LQFOX\HQ SDQWDOODV GH YLVXDOL]DFLyQ GH GDWRV 3URWRFROR GH YLJLODQFLDVDQLWDULDHVSHFtILFD5HDO'HFUHWRGHGHDEULO 7(0$ 0DQLSXODFLyQPDQXDOGHFDUJDV3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD5HDO'HFUHWR GHGHDEULO 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD$VPDODERUDO 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFD3ODJXLFLGDV 7(0$ 3URWRFROR GH YLJLODQFLD VDQLWDULD HVSHFtILFD GHUPDWRVLV ODERUDOHV *XtDV SRU HIHFWR R HQIHUPHGDG'HUPDWLWLVGHFRQWDFWRDOpUJLFDGHUPDWLWLVGHFRQWDFWRLUULWDWLYDXUWLFDULDGH FRQWDFWRFiQFHUFXWiQHRSURIHVLRQDODFQpRFXSDFLRQDO 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFDQHXURSDWtDVSRUSUHVLyQ 7(0$ 3URWRFRORGHYLJLODQFLDVDQLWDULDHVSHFtILFDSRVWXUDVIRU]DGDV 7(0$ 3URWRFROR GH YLJLODQFLD VDQLWDULD HVSHFtILFD 5XLGR FULWHULRV GH DSOLFDFLyQ GHILQLFLyQ GHO SUREOHPDSURWRFRORVDQLWDULRHVSHFtILFRDXGLRPHWUtDFRQGXFWDDVHJXLU 7(0$ /DLOXPLQDFLyQ)LVLRORJtDGHODYLVLyQ(IHFWRVSDUDODVDOXG/DIDWLJDYLVXDO/DSUHYHQFLyQ PpGLFD3UXHEDVHVSHFtILFDVHQFRQWUROYLVLyQ i Pág. 12683 boc.cantabria.es CVE-2019-3750 176/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ /D HVSLURPHWUtD HQ ORV H[iPHQHV GH VDOXG ODERUDO LQGLFDFLRQHV FRQWUDLQGLFDFLRQHV UHODWLYDV\DEVROXWDVLQVWUXFFLRQHVDOWUDEDMDGRUWpFQLFDGHUHDOL]DFLyQFULWHULRVGHFDOLGDG GHODHVSLURPHWUtDPDQWHQLPLHQWRGHOHVSLUyPHWUR&RPSOLFDFLRQHV 7(0$ 3DWRORJtDUHODFLRQDGDFRQHOVtQGURPHGHOHGLILFLRHQIHUPR CVE-2019-3750 7(0$ i Pág. 12684 boc.cantabria.es 177/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 &216(59$'255(67$85$'25 0$7(5,$6(63(&Ë),&$6 7(0$ /HJLVODFLyQHVSDxRODVREUHSDWULPRQLRKLVWyULFR(YROXFLyQ\VLWXDFLyQDFWXDO/DV FRPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD HQ OD FRQVHUYDFLyQ GHO SDWULPRQLR 7(0$ /H\ GH 3DWULPRQLR &XOWXUDO GH &DQWDEULD SULQFLSLRV /D DGPLQLVWUDFLyQ ORFDO \ ORV SDUWLFXODUHVHQODGHIHQVD\FRQVHUYDFLyQGHOSDWULPRQLRGH&DQWDEULD 7(0$ /H\ GH 3DWULPRQLR &XOWXUDO GH &DQWDEULD UpJLPHQ GH SURWHFFLyQ GH ELHQHV LQPXHEOHV 7(0$ /H\GH3DWULPRQLR&XOWXUDOGH&DQWDEULDUpJLPHQGHSURWHFFLyQGHELHQHVPXHEOHV 7(0$ /H\GH3DWULPRQLRGH&DQWDEULDUpJLPHQGHSURWHFFLyQGHSURWHFFLyQGHOSDWULPRQLR DUTXHROyJLFR 7(0$ 0XVHRV\FROHFFLRQHV(YROXFLyQKLVWyULFD)XQFLRQHVGHOPXVHR7LSRVGHPXVHRV 7(0$ (O PXVHR FRPR FHQWUR H[SRVLWLYR ,QJUHVR \ PRYLPLHQWR GH IRQGRV PXVHtVWLFRV &ULWHULRVGHSUpVWDPRHLQWHUFDPELRGHELHQHVFXOWXUDOHV(OFRUUHR 7(0$ /H\GH0XVHRVGH&DQWDEULD 7(0$ (OVLVWHPDGH0XVHRVGH&DQWDEULD0XVHRV\&HQWURV&XOWXUDOHVGH&DQWDEULD 7(0$ +LVWRULDGHODUHVWDXUDFLyQ(OSHUILOGHFRQVHUYDGRUUHVWDXUDGRU\VXVFRPSHWHQFLDV 7(0$ ,QVWLWXFLRQHV \ RUJDQLVPRV UHODFLRQDGRV FRQ OD FRQVHUYDFLyQ \ UHVWDXUDFLyQ GHO SDWULPRQLRKLVWyULFR 7(0$ &DUWDV FRQYHQLRV \ GRFXPHQWRV LQWHUQDFLRQDOHV HQ PDWHULD GH FRQVHUYDFLyQ \ UHVWDXUDFLyQGHOSDWULPRQLRFXOWXUDO 7(0$ &ULWHULRVDFWXDOHVHQFRQVHUYDFLyQ\UHVWDXUDFLyQ 7(0$ 'RFXPHQWDFLyQGHORVSURFHVRVGHUHVWDXUDFLyQ3UR\HFWRLQIRUPHVGHDQiOLVLV\ WDUHDVGHVHJXLPLHQWRGXUDQWHODHMHFXFLyQGHOSURFHVR 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQORVUHWDEORV 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQODWDOOD\ODHVFXOWXUDSROLFURPDGD 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQSLQWXUDGHFDEDOOHWH 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQSLQWXUDPXUDO 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQODPDGHUD 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQHOPHWDO 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQPDWHULDOHVSpWUHRV 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQPDWHULDRUJiQLFD i Pág. 12685 boc.cantabria.es CVE-2019-3750 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQPDWHULDOHVFHUiPLFRV 178/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQPDWHULDOHVSURFHGHQWHVGHPHGLRVDFXiWLFRV 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQHOSDWULPRQLRGRFXPHQWDO 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQWHMLGRV 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQYLGULR\FULVWDO 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQPRVDLFR 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQPDWHULDOHVDUTXHROyJLFRV 7(0$ 0pWRGRV\WpFQLFDVGHUHVWDXUDFLyQREUDJUiILFD 7(0$ (OSDWULPRQLRLQGXVWULDOHQ&DQWDEULD&ULWHULRVGHFRQVHUYDFLyQ 7(0$ (OSDWULPRQLRHWQRJUiILFRGH&DQWDEULD&ULWHULRVGHFRQVHUYDFLyQ 7(0$ 7UDWDPLHQWRVGHOLPSLH]D&RQFHSWRVJHQHUDOHV\FULWHULRVSURGXFWRV\WpFQLFDVGH DSOLFDFLyQDORVGLVWLQWRVWLSRVGHELHQHVFXOWXUDOHV 7(0$ $GKHVLYRV \ FRQVROLGDQWHV &RQFHSWRV JHQHUDOHV SURGXFWRV \ WpFQLFDV GH DSOLFDFLyQDORVGLVWLQWRVWLSRVGHELHQHVFXOWXUDOHV 7(0$ %DUQLFHV \ SHOtFXODV GH SURWHFFLyQ WHUPLQRORJtD QDWXUDOH]D FRPSRVLFLyQ \ FODVLILFDFLyQ 7(0$ 0pWRGRVGHH[DPHQFLHQWtILFRDSOLFDGRVDOHVWXGLRFRQVHUYDFLyQ\UHVWDXUDFLyQGH ODVREUDVGHDUWH 7(0$ 0DQLSXODFLyQHPEDODMH\WUDQVSRUWHGHELHQHVFXOWXUDOHV 7(0$ &ULWHULRVGHFRQVHUYDFLyQHQPRQWDMHGHH[SRVLFLRQHVWHPSRUDOHV\SHUPDQHQWHV 7(0$ 3URFHVRVGHGHWHULRUR\IDFWRUHVGHDOWHUDFLyQGHORVELHQHVFXOWXUDOHV 7(0$ &RQVHUYDFLyQSUHYHQWLYDGHORVELHQHVFXOWXUDOHVFRQFHSWRPHWRGRORJtD\WpFQLFDV 7(0$ 5LHVJRVODERUDOHVSODQHVGHDXWRSURWHFFLyQ0DQLSXODFLyQGHSURGXFWRVTXtPLFRV 0HGLGDVSUHYHQWLYDVHQWDOOHUGHUHVWDXUDFLyQ\SDXWDVGHDFWXDFLyQ 7(0$ 0RQWDMHGHXQODERUDWRULRGHFRQVHUYDFLyQ\UHVWDXUDFLyQLQVWDODFLRQHVVHJXULGDG HTXLSDPLHQWR LQVWUXPHQWDO UHFXUVRV PDWHULDOHV EiVLFRV 1XHYDV WHFQRORJtDV \ HTXLSDPLHQWRV 7(0$ (O3DOHROtWLFR 7(0$ 'HO1HROtWLFRDOD(GDGGHORV0HWDOHVHQ&DQWDEULD 7(0$ /DVFXHYDVFRQDUWHUXSHVWUH\VXFRQVHUYDFLyQ 7(0$ (OSHULRGRURPDQRHQ&DQWDEULDKLVWRULDSDWULPRQLR 7(0$ /DHWDSDWDUGRDQWLJXD\DOWRPHGLHYDOHQ&DQWDEULDKLVWRULDSDWULPRQLR 7(0$ /DDUTXLWHFWXUDUHOLJLRVDURPiQLFDHQ&DQWDEULD 7(0$ /D(GDG0RGHUQDHQ&DQWDEULDKLVWRULDDUWHSDWULPRQLR 7(0$ $UTXLWHFWXUDWUDGLFLRQDOUXUDOHQ&DQWDEULD 7(0$ (O0RGHUQLVPRHQ&DQWDEULD i Pág. 12686 boc.cantabria.es CVE-2019-3750 7(0$ (O*yWLFRHQODVYLOODVGHODFRVWDFiQWDEUD 179/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ',3/20$'2(1),6,27(5$3,$ 0$7(5,$6(63(&Ë),&$6 i Pág. 12687 7(0$ ,QYHVWLJDFLyQ FOtQLFD \ HSLGHPLROyJLFD ,QYHVWLJDFLyQ FXDOLWDWLYD \ FXDQWLWDWLYD9DOLGH]GHORVPpWRGRVGLDJQyVWLFRVYDOLGH]\ILDELOLGDGGHORV LQVWUXPHQWRV GH PHGLGD 6HQVLELOLGDG HVSHFLILFLGDG 9DORUHV SUHGLFWLYRV SRVLWLYR\QHJDWLYR 7(0$ 3UHYHQFLyQ \ SURPRFLyQ GH OD VDOXG FRQFHSWRV 'HWHFFLyQ SUHFR] GH SUREOHPDV GH VDOXG FRQFHSWR )DFWRUHV GH ULHVJR SDUD OD VDOXG HQ ODV GLVWLQWDV HWDSDV GH OD YLGD LQIDQFLD DGROHVFHQFLD DGXOWR \ DQFLDQR ,GHQWLILFDFLyQGHIDFWRUHVGHULHVJR\PHGLGDVDDGRSWDU 7(0$ 6DOXG 3~EOLFD FRQFHSWR 6DOXG \ HQIHUPHGDG FRQFHSWRV ,QGLFDGRUHV GH VDOXG SRU HGDG \ VH[R PRUELOLGDG PRUWDOLGDG OHWDOLGDG \ HVSHUDQ]D GH YLGD 7(0$ /D HGXFDFLyQ SDUD OD VDOXG OD FRPXQLFDFLyQ HQ HO JUXSR &RQFHSWR PHWRGRORJtD \ WpFQLFDV GLGiFWLFDV &ULWHULRV SDUD OD HODERUDFLyQ GH SURJUDPDVGHHGXFDFLyQSDUDODVDOXG*UXSRVGHDXWRD\XGDFRQFHSWR 7(0$ (UJRQRPtDHKLJLHQHSRVWXUDOGHILQLFLyQ\REMHWLYRV'LVHxRGHOSXHVWRGH WUDEDMR 3DSHO GHO ILVLRWHUDSHXWD HQ HUJRQRPtD 3RVWXUDV YLFLRVDV GXUDQWH HO WUDEDMR (VFXHOD GH HVSDOGD 0pWRGRV GH PRYLOL]DFLyQ GH SHUVRQD HQFDPDGDV\RLQPRYLOL]DGDV7UDWDPLHQWRSRVWXUDO 7(0$ (O SURIHVLRQDO GH OD )LVLRWHUDSLD GHQWUR GHO HTXLSR PXOWLGLVFLSOLQDU 2EMHWLYRV FRPXQHV \ VHJXLPLHQWR GHO SDFLHQWH 3URWRFRORV GH DFWXDFLyQ WHUDSpXWLFD'HILQLFLyQGHREMHWLYRV 7(0$ &LQHVLRORJtD \ DUWURORJtD &RQFHSWRV 3RVLFLyQ DQDWyPLFD &HQWUR GH JUDYHGDG(MHV\SODQRVGHUHIHUHQFLDGHODXQLGDGGLQiPLFD0RYLPLHQWRV DUWLFXODUHV WLSRV \ JHQHUDOLGDGHV 0HGLFLyQ LQVWUXPHQWDO *RQLRPHWUtD DUWLFXODU FRQFHSWR UHJLVWUR WpFQLFDV JRQLRPpWULFDV \ DPSOLWXGHV DUWLFXODUHV GH ORV PLHPEURV VXSHULRUHV PLHPEURV LQIHULRUHV \ FROXPQD YHUWHEUDO 7(0$ (YDOXDFLyQDQDOtWLFD\IXQFLRQDOGHOSDFLHQWH9DORUDFLyQDUWLFXODU 7(0$ 9DORUDFLyQ GH OD IXQFLyQ PXVFXODU %DODQFH PXVFXODU *HQHUDOLGDGHV ([DPHQPDQXDOGHODIXHU]DPXVFXODU0pWRGRVGHYDORUDFLyQ boc.cantabria.es CVE-2019-3750 180/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 6tQGURPHV GRORURVRV 6tQGURPH GRORURVR UHJLRQDO FRPSOHMR 6tQGURPH PLRIDVFLDO (VFDODV GH YDORUDFLyQ GHO GRORU REMHWLYRV \ WUDWDPLHQWR ILVLRWHUiSLFR3XQFLyQVHFD 7(0$ (VWXGLR GH OD PDUFKD 0DUFKD QRUPDO \ SDWROyJLFD 3URGXFWRV GH DSR\R SDUDODPDUFKD5HHGXFDFLyQHQODVGLIHUHQWHVSDWRORJtDV 7(0$ 7pFQLFDV GH PXVFXODFLyQ FRQFHSWRV ILVLROyJLFRV &DGHQDV FLQpWLFDV PXVFXODUHV 7pFQLFDV GH UHIXHU]R PXVFXODU (MHUFLFLRV SDUD DXPHQWDU OD IXHU]DPXVFXODU7UDEDMRLVRPpWULFRHLVRWyQLFR 7(0$ (TXLOLEULR \ HVWDELOLGDG )DFWRUHV TXH LQWHUYLHQHQ HQ OD HVWDELOLGDG (O FXHUSRFRPRVLVWHPDGHSDODQFD(VFDODVGHYDORUDFLyQGHOHTXLOLEULR\OD HVWDELOLGDG 7(0$ (VWLUDPLHQWRV P~VFXOR WHQGLQRVRV *HQHUDOLGDGHV 'LIHUHQWHV WpFQLFDV GH HVWLUDPLHQWR 0HFDQLVPRV GH DFFLyQ &DUDFWHUtVWLFDV ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV 7(0$ (O YHQGDMH IXQFLRQDO &RQFHSWR \ DSOLFDFLRQHV 0DWHULDO QHFHVDULR 0pWRGRV,QGLFDFLRQHV\FRQWUDLQGLFDFLRQHV9HQGDMHQHXURPXVFXODU 7(0$ 2UWHVLV\SUyWHVLV&RQFHSWRV\FODVLILFDFLyQ,QGLFDFLRQHV 7(0$ )LVLRWHUDSLD HQ *HULDWUtD ILVLRSDWRORJtD GHO HQYHMHFLPLHQWR YDORUDFLyQ ILVLRWHUDSpXWLFD HVFDODV GH DFWLYLGDGHV GH OD YLGD GLDULD DFWLYLGDGHV GH SUHYHQFLyQ \ SURPRFLyQ $WHQFLyQ ILVLRWHUDSpXWLFD HQ HO DQFLDQR /RV DFFLGHQWHV HQ HO DQFLDQR FDtGDV \ RWURV ULHVJRV 9DORUDFLyQ JHULiWULFD LQWHJUDO 7(0$ (O URO GHO ILVLRWHUDSHXWD HQ &HQWURV GH $WHQFLyQ D OD 'HSHQGHQFLD 2UJDQL]DFLyQGHOD8QLGDGGH)LVLRWHUDSLDHQXQD5HVLGHQFLDGH3HUVRQDV PD\RUHV5HFXUVRVQHFHVDULRVFULWHULRVGHRUJDQL]DFLyQ 7(0$ %HQHILFLRVGHOHMHUFLFLRWHUDSpXWLFR3URJUDPDFLyQGHODDFWLYLGDGJUXSDOHQ XQ&HQWURGH$WHQFLyQDOD'HSHQGHQFLD 7(0$ )LVLRWHUDSLD HQ ODV SULQFLSDOHV DIHFFLRQHV SVLTXLiWULFDV \ SVLFRVRPiWLFDV 3URJUDPDWHUDSpXWLFRGHODILVLRWHUDSLDHQVDOXGPHQWDO 7(0$ 9DORUDFLyQ ILVLRWHUiSLFD GHO GHVDUUROOR SVLFRPRWRU GHO QLxR QRUPDO (WDSDV GHOGHVDUUROORPRWRU\FRJQLWLYR3VLFRPRWULFLGDGHQODLQIDQFLD 7(0$ (O ILVLRWHUDSHXWD HQ HO iPELWR HGXFDWLYR 2EMHWLYRV GH OD LQWHUYHQFLyQ GHO 7(0$ (O DOXPQR FRQ QHFHVLGDGHV HGXFDWLYDV HVSHFLDOHV 6LVWHPDV GH SRVLFLRQDPLHQWR \ PDWHULDO DGDSWDGR HQ HO iPELWR HVFRODU $XOD GH ILVLRWHUDSLDHQODHVFXHODRUGLQDULD\HQHGXFDFLyQHVSHFLDO i Pág. 12688 boc.cantabria.es CVE-2019-3750 ILVLRWHUDSHXWD HVFRODU 3DUWLFLSDFLyQ HQ HO SURFHVR HGXFDWLYR \ HQ ORV SURJUDPDVGHLQFOXVLyQHVFRODU5HODFLyQFRQORVSDGUHVHLQWHUYHQFLyQFRQ ODV IDPLOLDV &RRUGLQDFLyQ FRQ ORV GLIHUHQWHV SURIHVLRQDOHV GHO FHQWUR HGXFDWLYR\RWURVSURIHVLRQDOHVUHODFLRQDGRVFRQHODOXPQDGR 181/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3ROHRWHUDSLD \ 6XVSHQVLRWHUDSLD SULQFLSLRV 7pFQLFDV GH DSOLFDFLyQ ,QGLFDFLRQHV\FRQWUDLQGLFDFLRQHV 7(0$ 7pFQLFD GH IDFLOLWDFLyQ QHXURPXVFXODU SURSLRFHSWLYD 31) 0HFDQLVPRV QHXURILVLROyJLFRV GH OD IDFLOLWDFLyQ 0pWRGR .DEDW LQGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV 7(0$ &LQHVLWHUDSLD&RQFHSWR\PRGDOLGDGHV3ULQFLSLRVJHQHUDOHV&LQHVLWHUDSLD DFWLYD\SDVLYD'HILQLFLyQWLSRV(IHFWRVWHUDSpXWLFRV3ULQFLSLRVJHQHUDOHV \REMHWLYRV,QGLFDFLRQHV\FRQWUDLQGLFDFLRQHV 7(0$ 7pFQLFDV GH FLQHVLWHUDSLD DFWLYD HVSHFtILFD (MHUFLFLRV GH &RGPDQ %XHUJHU)UHQNHO\&KDQGOHU 7(0$ 7HUPRWHUDSLD \ FULRWHUDSLD FRQFHSWR 7pFQLFDV GH DSOLFDFLyQ HIHFWRV ILVLROyJLFRV \ WHUDSpXWLFRV ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV )RUPDV GH SURSDJDFLyQGHOFDORU7HUPRUUHJXODFLyQHVWtPXORWpUPLFR\IUtR 7(0$ +LGURWHUDSLD \ FLQHEDOQHRWHUDSLD FRQFHSWR ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV 3ULQFLSLRV JHQHUDOHV )XQGDPHQWRV ILVLFRTXtPLFRV GH ODKLGURWHUDSLD7LSRVGHDJXD7HPSHUDWXUDGHODJXD(IHFWRVILVLROyJLFRV\ WHUDSpXWLFRV7pFQLFDVKLGURWHUiSLFDV0pWRGR+DOOLZLFN 7(0$ 0HFDQRWHUDSLD FRQFHSWR ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV (TXLSRV HVSHFLDOHVXWLOLGDGHV\DSOLFDFLRQHV 7(0$ 0DVRWHUDSLD FRQFHSWR ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV (IHFWRV WHUDSpXWLFRV0DQLREUDVIXQGDPHQWDOHVGHODPDVRWHUDSLD 7(0$ 7pFQLFDVHVSHFLDOHVGHPDVRWHUDSLDPDVDMHGHIULFFLyQSURIXQGDPDVDMH WRUiFLFR GUHQDMH OLQIiWLFR PDQXDO \ PDVDMH GHO WHMLGR FRQMXQWLYR HIHFWRV ILVLROyJLFRV \ WHUDSpXWLFRV 7pFQLFDV HVSHFtILFDV ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV 7(0$ (OHFWURWHUDSLD FRQFHSWR &ODVLILFDFLyQ GH ODV FRUULHQWHV HOpFWULFDV PiV XWLOL]DGDV HQ ILVLRWHUDSLD 1RUPDV GH VHJXULGDG HQ HO PDQHMR GH DSDUDWRV GHHOHFWURWHUDSLD 7(0$ 7pFQLFDV HOHFWURWHUiSLFDV FRQ FRUULHQWHV GH EDMD PHGLD \ DOWD IUHFXHQFLD ,QGLFDFLRQHV\FRQWUDLQGLFDFLRQHV 7(0$ 7pFQLFDV HOHFWURWHUiSLFDV FRQ XOWUDVRQLGRV UDGLDFLRQHV LQIUDUURMDV \ XOWUDYLROHWD OiVHU \ FDPSRV HOHFWURPDJQpWLFRV ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV )DFWRUHV D WHQHU HQ FXHQWD HQ OD GRVLILFDFLyQ GH ODV GLIHUHQWHVWpFQLFDVHOHFWURWHUiSLFDV 7(0$ 3URFHVRV GH ILVLRWHUDSLD GHO HQFDPDGR \R LQPRYLOL]DGR (IHFWRV GHO HQFDPDPLHQWRSURORQJDGR3UHYHQFLyQ\WUDWDPLHQWR7UDWDPLHQWRSRVWXUDO ILVLRWHUDSpXWLFD 2EMHWLYRV 3ODQ GH WUDWDPLHQWR ILVLRWHUDSpXWLFR 3URJUDPD GHUHDGDSWDFLyQDOHVIXHU]R i Pág. 12689 boc.cantabria.es CVE-2019-3750 7(0$ )LVLRWHUDSLD FDUGLRYDVFXODU HQ SDWRORJtDV PiV IUHFXHQWHV 9DORUDFLyQ 182/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ )LVLRWHUDSLD HQ OD SDWRORJtD YDVFXODU 3DWRORJtD DUWHULDO 3DWRORJtD GH OD FLUFXODFLyQGHOUHWRUQRYHQRVR9DORUDFLyQILVLRWHUDSpXWLFD2EMHWLYRV3ODQ GHWUDWDPLHQWRILVLRWHUDSpXWLFR 7(0$ )LVLRWHUDSLDUHVSLUDWRULD3DWRORJtDVUHVSLUDWRULDVREVWUXFWLYDV\UHVWULFWLYDV PiV IUHFXHQWHV $VPD (32& )LEURVLV 4XtVWLFD %URQTXLHFWDVLDV )LVLRWHUDSLD UHVSLUDWRULD HQ QHXURORJtD 9DORUDFLyQ ILVLRWHUDSpXWLFD 2EMHWLYRV3ODQGHWUDWDPLHQWRILVLRWHUDSpXWLFR 7(0$ )LVLRWHUDSLD UHVSLUDWRULD 7pFQLFDV HVSHFtILFDV 7pFQLFDV GH DFODUDPLHQWR PXFRFLOLDU ,QGLFDFLRQHV \ FRQWUDLQGLFDFLRQHV 'LVSRVLWLYRV XWLOL]DGRV HQ ILVLRWHUDSLD UHVSLUDWRULD $HURVROWHUDSLD \ R[LJHQRWHUDSLD 9HQWLODFLyQ PHFiQLFDQRLQYDVLYD 901, ,QGLFDFLRQHVGHOD901, 7(0$ $FWXDFLyQ GHO ILVLRWHUDSHXWD HQ VLWXDFLRQHV FUtWLFDV 3DUDGD FDUGLRUUHVSLUDWRULD 2EVWUXFFLyQ GH ODV YtDV DpUHDV 5HDQLPDFLyQ FDUGLRSXOPRQDUEiVLFD 7(0$ )LVLRWHUDSLDHQODVPDOIRUPDFLRQHVFRQJpQLWDVPiVIUHFXHQWHV9DORUDFLyQ ILVLRWHUDSpXWLFD2EMHWLYRV3ODQGHWUDWDPLHQWRILVLRWHUDSpXWLFR 7(0$ )LVLRWHUDSLD HQ ODV SDWRORJtDV yVHDV \ GH SDUWHV EODQGDV GH GLIHUHQWHV DUWLFXODFLRQHV9DORUDFLyQ\REMHWLYRVILVLRWHUiSLFRV7pFQLFDV\PpWRGRVGH WUDWDPLHQWRILVLRWHUDSpXWLFRHQODVSDWRORJtDVPiVIUHFXHQWHV 7(0$ )LVLRWHUDSLD HQ WUDXPDWRORJtD 9DORUDFLyQ \ REMHWLYRV ILVLRWHUiSLFRV 7pFQLFDV \ PpWRGRV GH WUDWDPLHQWR ILVLRWHUDSpXWLFR HQ ODVSDWRORJtDVPiV IUHFXHQWHV 7(0$ $OWHUDFLRQHV RUWRSpGLFDV HQ FDGHUD URGLOOD \ SLH 7UDWDPLHQWR ILVLRWHUDSpXWLFR 7(0$ )LVLRWHUDSLD HQ SDWRORJtDV PiV IUHFXHQWHV HQ UHXPDWRORJtD 9DORUDFLyQ ILVLRWHUDSpXWLFD 2EMHWLYRV 3ODQ GH WUDWDPLHQWR ILVLRWHUDSpXWLFR HQ ODV SDWRORJtDVPiVIUHFXHQWHV 7(0$ )LVLRWHUDSLD HQ ODV GHIRUPLGDGHV GHO UDTXLV PiV IUHFXHQWHV &ODVLILFDFLyQ 9DORUDFLyQILVLRWHUDSpXWLFD2EMHWLYRV3ODQGHWUDWDPLHQWRILVLRWHUDSpXWLFR 7(0$ )LVLRWHUDSLD HQ 1HXURORJtD &RQFHSWR \ YDORUDFLyQ GHO SDFLHQWH TXH VXIUH XQ DFFLGHQWH FHUHEURYDVFXODU $&9 R 7UDXPDWLVPR FUiQHR HQFHIiOLFR 7&( 7UDWDPLHQWRILVLRWHUDSpXWLFR 7(0$ )LVLRWHUDSLD HQ 1HXURORJtD 9DORUDFLyQ ILVLRWHUDSpXWLFD 2EMHWLYRV 3ODQ GH WUDWDPLHQWR ILVLRWHUiSLFR HQ HVFOHURVLV HQIHUPHGDGHVGHPRWRQHXURQD P~OWLSOH SROLRPLHOLWLV \ )LVLRWHUDSLD HQ HO 6tQGURPH FHUHEHORVR $WD[LD \ VX WUDWDPLHQWR HQ ILVLRWHUDSLD(MHUFLFLRVGH)UHQNHO 7(0$ )LVLRWHUDSLD HQ ODV OHVLRQHV PHGXODUHV &ODVLILFDFLyQ &RPSOLFDFLRQHV GHO OHVLRQDGRPHGXODU3DUDSOHMtD\WHWUDSOHMtD7UDWDPLHQWRILVLRWHUDSpXWLFR i Pág. 12690 boc.cantabria.es CVE-2019-3750 7(0$ )LVLRWHUDSLD HQ HO 6tQGURPH GH 3DUNLQVRQ 7UDWDPLHQWR ILVLRWHUDSpXWLFR 183/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ )LVLRWHUDSLDHQODVSDWRORJtDVQHXUROyJLFDVGHOVLVWHPDQHUYLRVRSHULIpULFR 1HXURSDWtDV\SROLQHXURSDWtDV6tQGURPHGH*XLOODLQ%DUUp 7(0$ 0LRSDWtDV \ HQIHUPHGDGHV QHXURPXVFXODUHV 7UDWDPLHQWR ILVLRWHUDSpXWLFR 'LVWURILDV 7(0$ )LVLRWHUDSLD HQ HO DPSXWDGR $PSXWDFLRQHV GH OD H[WUHPLGDG LQIHULRU \ VXSHULRU 1LYHOHV GH DPSXWDFLyQ 7UDWDPLHQWR ILVLRWHUiSLFR &XLGDGRV JHQHUDOHV$GLHVWUDPLHQWRSURWpVLFR 7(0$ 3DUiOLVLV FHUHEUDO LQIDQWLO &RQFHSWR &ODVLILFDFLyQ 9DORUDFLyQ ILVLRWHUDSpXWLFD2EMHWLYRV3ODQGHWUDWDPLHQWRILVLRWHUDSpXWLFR3ULQFLSDOHV PpWRGRV HPSOHDGRV HQ HO WUDWDPLHQWR ILVLRWHUDSpXWLFR 'LVSRVLWLYRV \ QXHYDVWHFQRORJtDV 7(0$ )LVLRWHUDSLD HQ QHXURORJtD (VSLQD %tILGD 7LSRV 2EMHWLYRV (YDOXDFLyQ \ WUDWDPLHQWRILVLRWHUDSpXWLFR 7(0$ (QIHUPHGDGHV GHO VLVWHPD QHUYLRVR SHULIpULFR 3DUiOLVLV %UDTXLDO 2EVWpWULFD7LSRV7UDWDPLHQWRILVLRWHUiSLFR 7(0$ 7RUWtFROLV PXVFXODU FRQJpQLWD 'HILQLFLyQ 9DORUDFLyQ 7LSRV \ WUDWDPLHQWR CVE-2019-3750 ILVLRWHUDSpXWLFR i Pág. 12691 boc.cantabria.es 184/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ',3/20$'2(17(5$3,$2&83$&,21$/ 0$7(5,$6(63(&Ë),&$6 i Pág. 12692 7(0$ (SLGHPLRORJtDFRQFHSWR(QIHUPHGDGHVWUDQVPLVLEOHVGHPD\RULQFLGHQFLDHQODSREODFLyQ HVSDxRODWLSRV\FDUDFWHUtVWLFDV(QIHUPHGDGHVGHGHFODUDFLyQREOLJDWRULD 7(0$ 6DOXGS~EOLFDFRQFHSWR6DOXG\HQIHUPHGDGFRQFHSWR,QGLFDGRUHVGHVDOXGSRUHGDG\ VH[RPRUELOLGDGPRUWDOLGDGOHWDOLGDG\HVSHUDQ]DGHYLGD 7(0$ 'HILQLFLyQGHWHUDSLDRFXSDFLRQDO(OGHVDUUROORGHODWHUDSLDRFXSDFLRQDOHQ(VSDxD 7(0$ %DVHVFRQFHSWXDOHVGHWHUDSLDRFXSDFLRQDOFRQFHSWRVEiVLFRVSDUDGLJPDGHODWHUDSLD RFXSDFLRQDO 7(0$ 0DUFRVGHUHIHUHQFLDSULPDULRVILVLROyJLFRSVLFROyJLFR\KXPDQLVWD 7(0$ 0DUFRV GH UHIHUHQFLD DSOLFDGRV HQ OD GLVIXQFLyQ ItVLFD ELRPHFiQLFR QHXURGHVDUUROOR FRJQLWLYRSHUFHSWLYR 7(0$ 0DUFRV GH UHIHUHQFLD DSOLFDGRV HQ OD GLVIXQFLyQ SVLFRVRFLDO FRQGXFWXDO FRJQLWLYR FRQGXFWXDOSVLFRGLQiPLFR\KXPDQLVWD 7(0$ 0RGHORV SURSLRV GH WHUDSLD RFXSDFLRQDO 02+2 PRGHOR FDQDGLHQVH GH GHVHPSHxR RFXSDFLRQDOPRGHORGHGLVFDSDFLGDGGH$OOHQPRGHORGHOIXQFLRQDPLHQWRRFXSDFLRQDOGH 7URPEO\2WURVPRGHORVHQGHVDUUROOR5HHG 6DQGHUVRQ5HLOO\0 7(0$ &RQFHSWRGHRFXSDFLyQ'LIHUHQFLDVHQWUHRFXSDFLyQDFWLYLGDG\WDUHD 7(0$ 5ROFRPSHWHQFLDV\IXQFLRQHVGHOWHUDSHXWDRFXSDFLRQDOHQHOHTXLSRLQWHUGLVFLSOLQDUHQ ORVGLIHUHQWHViPELWRVGHLQWHUYHQFLyQ 7(0$ (YDOXDFLyQHQWHUDSLDRFXSDFLRQDO'LIHUHQFLDVHQWUHHYDOXDFLyQ\YDORUDFLyQ(YDOXDFLyQ LQLFLDOGXUDQWH\DOILQDOGHODLQWHUYHQFLyQ 7(0$ $ERUGDMHV GH LQWHUYHQFLyQ HQ WHUDSLD RFXSDFLRQDO SURPRFLyQ GH OD VDOXG UHVWDXUDFLyQ PDQWHQLPLHQWRPRGLILFDFLyQ\SUHYHQFLyQGHODGLVFDSDFLGDG 7(0$ 0pWRGRV H LQVWUXPHQWRV SDUD YDORUDFLyQ VHQVLWLYD \ VHQVRULDO 7DFWR VXSHUILFLDO 'RORU 7HPSHUDWXUD3DUHVWHVLD7DFWRHQPRYLPLHQWR'LVFULPLQDFLyQGHGRVSXQWRVHVWiWLFRV\ HQPRYLPLHQWR(VWHURJQRVLD3URSLRFHSFLyQ&LQHVWHVLD0RQRILODPHQWRV 7(0$ $QiOLVLV GH OD DFWLYLGDG 0RGHORV SDUD HO DQiOLVLV GH OD DFWLYLGDG /D JUDGXDFLyQ GH OD DFWLYLGDG 7(0$ $FWLYLGDGHVGHODYLGDGLDULDGHILQLFLyQ\FODVLILFDFLyQ5HODFLyQFRQODWHUDSLDRFXSDFLRQDO ,QVWUXPHQWRVHVWDQGDUL]DGRVSDUDVXYDORUDFLyQ 7(0$ (GXFDFLyQSDUDODVDOXGLQGLYLGXDOJUXSDO\FRPXQLWDULDHQWHUDSLDRFXSDFLRQDOFRQFHSWR PHWRGRORJtD\WpFQLFDVGLGiFWLFDV 7(0$ 2FLRHQWHUDSLDRFXSDFLRQDO3ODQLILFDFLyQHLQWHUYHQFLyQHQHOWLHPSRGHRFLR(OMXHJRHQ ODLQIDQFLD,PSRUWDQFLDGHOMXHJRHQODWHUDSLDRFXSDFLRQDO boc.cantabria.es CVE-2019-3750 185/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 i Pág. 12693 TEMA 18.- Alteraciones congénitas del aparato locomotor (I). Agenesia bilateral de miembros superiores: utilización y manejo de prótesis. Agenesia unilateral de miembros superiores: utilización y manejo de prótesis. Agenesia bilateral de miembros inferiores: utilización y manejo de prótesis, silla de ruedas y bastones. TEMA 19.- Alteraciones congénitas del aparato locomotor (II). Agenesia vertebral y Escoliosis congénita: manejo de ortesis. TEMA 20.- Evaluaciones de la función física. Métodos e instrumentos de valoración articular. Arco de movimiento articular. Goniómetro. Métodos e instrumentos de valoración muscular. Examen muscular manual. Escalas de calificación. Métodos e instrumentos de valoración de la fuerza manual y pinza digital. Dinamómetro. Pinzómetro. TEMA 21.- Planificación e Intervención en la rehabilitación de los trastornos sensitivos. TEMA 22.- Planificación e intervención en los trastornos neurológicos: Traumatismos cráneoencefálicos. Accidentes cerebro-vasculares. TEMA 23.- Planificación e intervención en los trastornos neurológicos: Enfermedades neurodegenerativas. Lesiones medulares. Lesiones de nervios periféricos. TEMA 24.- Fisiopatología del envejecimiento: envejecimiento fisiológico y patológico. Valoración geriátrica integral: papel del terapeuta ocupacional. TEMA 25.- Planificación e intervención de la terapia ocupacional en los síndromes geriátricos de mayor incidencia: deterioro funcional, inmovilismo, caídas, incontinencia urinaria y demencia. TEMA 26.- Productos de apoyo en actividades básicas de la vida diaria (ABVD). TEMA 27.- Relaciones del terapeuta ocupacional con los familiares de las personas usuarias. Modelos de intervención con las familias. TEMA 28.- Planificación e intervención de la terapia ocupacional en las personas afectadas de esclerosis múltiple, Parkinson, enfermedad de la motoneurona. TEMA 29.- Trastornos neuropsicológicos. Déficit de percepción visual y agnosias. Déficits espaciales. Apraxias. Trastornos de la atención. Problemas de memoria. Valoración neurocognitiva (Lotca, Cotnab.). Planificación e Intervención. TEMA 30.- Planificación e intervención de la terapia ocupacional en la enfermedad cardiaca y respiratoria. TEMA 31.- Planificación e intervención de la terapia ocupacional en la patología de origen reumatológico, osteo-articular y de partes blandas: artritis, artrosis y osteoporosis. TEMA 32.- Planificación e intervención en terapia ocupacional en las patologías de salud mental más frecuentes: esquizofrenia, trastorno bipolar, trastornos del ánimo y trastorno de la personalidad. TEMA 33.- Terapia Ocupacional en los Programas de Entrenamiento en Habilidades Sociales (HHSS). Líneas actuales y definición de las HHSS. Importancia del entrenamiento de las HHSS. Principios del aprendizaje en HHSS. Evaluación y planteamiento de objetivos en HHSS. TEMA 34.- Sistemas de comunicación aumentativa y alternativa. TEMA 35.- Terapia Ocupacional en Cuidados Paliativos. Atención integral no farmacológica. TEMA 36.- Planificación e intervención de la terapia ocupacional en pérdidas sensoriales: visuales y auditivas. boc.cantabria.es CVE-2019-3750 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA 186/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA Estimulación cognitiva en terapia ocupacional. TEMA 38.- Planificación e intervención en rehabilitación infantil: Principios básicos para el manejo del niño. TEMA 39.- Planificación e intervención en rehabilitación infantil: Retraso psicomotor y trastornos del aprendizaje. TEMA 40.- Clasificación Internacional del Funcionamiento, de la discapacidad y de la salud (CIF): Objetivos, propiedades y aplicaciones. TEMA 41.- Ortesis y Prótesis: concepto, clasificación, funciones y mecanismos de acción. TEMA 42.- Adaptación del Entorno: Criterios de Accesibilidad (escaleras y rampas, puertas y pasillos, cuarto de baño o aseo, cocina, salón, dormitorio). Adaptaciones ambientales. Prevención de accidentes. Domótica. TEMA 43.- Intervención sobre el entorno. Evaluación del entorno: datos sociodemográficos. Valoración de la vivienda, puesto de trabajo y del entorno. Barreras físicas, arquitectónicas y psicosociales. TEMA 44.- Ergonomía: Definición y objetivos. Aplicación en terapia ocupacional. TEMA 45.- Concepto de adaptaciones y productos de apoyo. Criterios de selección. Productos de apoyo en ocio y tiempo libre, material escolar e informático. TEMA 46.- Planificación e intervención en discapacidad intelectual. TEMA 47.- Productos de apoyo para la movilidad y el transporte. Clasificación, funciones y criterios de selección. TEMA 48.- Género y salud. Violencia de género. Malos Tratos: Detección y prevención. Desigualdades sociales en salud. TEMA 49.- Ley de Cantabria 2/2007, de 27 de marzo, de derechos y servicios sociales. Disposiciones generales. Derechos y deberes. Sistema público de servicios sociales. Definición y principios rectores. Ordenación funcional y territorial. Cartera de servicios sociales. Financiación, gestión y planificación del servicio público de servicios sociales. Régimen competencial. Participación, condiciones de prestación de los servicios sociales. Formación e investigación. Inspección. TEMA 50.- Ley 39/2006, de 14 de diciembre, de Promoción de la Autonomía Personal y Atención a las personas en situación de dependencia: El sistema para la autonomía y atención para la dependencia (Título I). TEMA 51.- Marco normativo de la Comunidad Autónoma de Cantabria. ORDEN SAN/26/2007, de 7 de mayo, por la que se regulan los procedimientos para el reconocimiento de la situación de dependencia y del derecho a las prestaciones del sistema para la autonomía y atención a la dependencia. TEMA 52.- Productos de apoyo. Normativa y recursos en Cantabria. TEMA 53.- Derechos de las personas con discapacidad. Ley de Cantabria 9/2018, de 21 de diciembre, de Garantía de los derechos de las personas con discapacidad. CVE-2019-3750 TEMA 37.- i Pág. 12694 boc.cantabria.es 187/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ',3/20$'2(175$%$-262&,$/ 0$7(5,$6(63(&Ë),&$6 7(0$ (YROXFLyQKLVWyULFDGHO7UDEDMR6RFLDO 7(0$ &RQFHSWRDFWXDOGHO7UDEDMR6RFLDO2EMHWR\2EMHWLYRV 7(0$ 0pWRGR%iVLFRHQHO7UDEDMR6RFLDO 7(0$ (O 7UDEDMDGRU 6RFLDO IXQFLRQHV 5HODFLRQHV 3URIHVLRQDOHV HQWUH HO 7UDEDMDGRU 6RFLDO \ HO FLXGDGDQR 7(0$ eWLFD\7UDEDMR6RFLDO&yGLJR'HRQWROyJLFRGHORV7UDEDMDGRUHV6RFLDOHV 7(0$ 0RGHORVWHyULFRVHQLQWHUYHQFLyQVRFLDO 7(0$ 0RYLPLHQWRVSVLFROyJLFRV\VXDSOLFDFLyQDO7UDEDMR6RFLDO 7(0$ 7pFQLFDV,QVWUXPHQWDOHV\GH,QWHUYHQFLyQHQ7UDEDMR6RFLDO 7(0$ 1LYHOHVGH,QWHUYHQFLyQHQ7UDEDMR6RFLDO 7(0$ 7UDEDMR6RFLDO,QGLYLGXDOL]DGRFRQFHSWRILQDOLGDG\IXQFLRQHV3URFHVRGHLQWHUYHQFLyQ7pFQLFDV XWLOL]DGDV 7(0$ 7UDEDMR6RFLDOFRQIDPLOLDVREMHWLYRV\PHWRGRORJtD$FWXDFLRQHV 7(0$ 0HGLDFLyQ\RULHQWDFLyQIDPLOLDUHQ7UDEDMR6RFLDO 7(0$ 7UDEDMR 6RFLDO GH *UXSR FRQFHSWR ILQDOLGDG \ IXQFLRQHV 3URFHVR GH LQWHUYHQFLyQ 7pFQLFDV XWLOL]DGDV 7(0$ )XQGDPHQWRVGH3VLFRORJtD6RFLDO/RVSURFHVRVEiVLFRVGHJUXSR 7(0$ (VWUXFWXUD\GLQiPLFDGHORVJUXSRV 7(0$ 7UDEDMR 6RFLDO &RPXQLWDULR &RQFHSWR ILQDOLGDG \ IXQFLRQHV 3URFHVR GH LQWHUYHQFLyQ 7pFQLFDV XWLOL]DGDV 7(0$ 3URJUDPDVGHLQWHUYHQFLyQHQODFRPXQLGDG$QLPDFLyQVRFLRFRPXQLWDULD 7(0$ (O7UDEDMR6RFLDOHQHOHTXLSRLQWHUGLVFLSOLQDU7pFQLFDVGHWUDEDMRHQHTXLSR 7(0$ ,QVWUXPHQWRVGHUHFRJLGDGHGDWRVHQ7UDEDMR6RFLDO 7(0$ /DLQYHVWLJDFLyQVRFLDOHQ7UDEDMR6RFLDO 7(0$ (O&XHVWLRQDULRFRPRWpFQLFDGHQWURGHODLQYHVWLJDFLyQVRFLDO 7(0$ /D3ODQLILFDFLyQHQHO7UDEDMR6RFLDO i Pág. 12695 boc.cantabria.es CVE-2019-3750 7(0$ /D(QWUHYLVWDFRPRWpFQLFDGHQWURGHODLQYHVWLJDFLyQVRFLDO 188/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /D(YDOXDFLyQHQHO7UDEDMR6RFLDO 7(0$ &DOLGDGHQVHUYLFLRVVRFLDOHV&RQFHSWR6LVWHPDVGHFDOLGDG 7(0$ /DV(QWLGDGHVGHODLQLFLDWLYDVRFLDO\VXSDSHOHQHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHV 7(0$ /D VRFLHGDG FLYLO \ ORV VHUYLFLRV VRFLDOHV (QWLGDGHV GH LQLFLDWLYD VRFLDO ,QWHUYHQFLyQ GHVGH HO 7UDEDMR6RFLDO 7(0$ /DVQHFHVLGDGHVVRFLDOHVFRQFHSWRFDUDFWHUtVWLFDV\WLSRORJtD 7(0$ /DH[FOXVLyQVRFLDOFRQFHSWRFDXVDV\FRQVHFXHQFLDV 7(0$ 3URJUDPDVGHLQFRUSRUDFLyQVRFLDO3DSHOGHOWUDEDMDGRUVRFLDO 7(0$ %LHQHVWDU6RFLDOFRQFHSWRV3ROtWLFD6RFLDO 7(0$ /DSREUH]DHQ(VSDxD\HQ&DQWDEULD 7(0$ 3ODQ1DFLRQDOSDUDOD,QFOXVLyQ6RFLDOHQ(VSDxD 7(0$ ÈUHDV GH DFWXDFLyQ GH ORV VHUYLFLRV VRFLDOHV /RV VHUYLFLRV VRFLDOHV HQ OD &RQVWLWXFLyQ \ HQ HO (VWDWXWRGH$XWRQRPtDGH&DQWDEULD 7(0$ /D UHDOLGDG VRFLDO HQ &DQWDEULD &DUDFWHUtVWLFDV IXQGDPHQWDOHV 3ULQFLSDOHV UDVJRV VRFLRGHPRJUiILFRV 7(0$ /H\GH&DQWDEULDGHGHPDU]RGH'HUHFKRV\6HUYLFLRV6RFLDOHV'HUHFKRVVRFLDOHV EiVLFRV 7(0$ (O VLVWHPD S~EOLFR GH 6HUYLFLRV 6RFLDOHV GHILQLFLyQ \ ILQDOLGDG 2UGHQDFLyQ IXQFLRQDO GH ORV 6HUYLFLRV 6RFLDOHV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD )XQFLRQHV HTXLSDPLHQWRV \ SURJUDPDV 7(0$ &DUWHUDGH6HUYLFLRVGHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVGH&DQWDEULD 7(0$ 2UGHQDFLyQWHUULWRULDOGHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVGH&DQWDEULD 7(0$ 5HQWDVRFLDOEiVLFD\SUHVWDFLyQHFRQyPLFDGHHPHUJHQFLDVRFLDO 7(0$ /RV6HUYLFLRV6RFLDOHVGH$WHQFLyQ3ULPDULD)XQFLRQHVSURJUDPDV\PDUFRDGPLQLVWUDWLYR 7(0$ 6HUYLFLRV 6RFLDOHV GH $WHQFLyQ (VSHFLDOL]DGD SDUD LQIDQFLD DGROHVFHQFLD \ IDPLOLD 1HFHVLGDGHV GHHVWRVFROHFWLYRV0DUFRDGPLQLVWUDWLYR 7(0$ (OVLVWHPDS~EOLFRGH3HQVLRQHV1LYHOHVFRQWULEXWLYR\QRFRQWULEXWLYR 7(0$ $FWXDFLRQHVGHVGHORVVHUYLFLRVVRFLDOHVHQVLWXDFLRQHVGHGHVSURWHFFLyQLQIDQWLO 7(0$ 5HFXUVRV HVSHFtILFRV HQ HO iUHD GH LQIDQFLD \ DGROHVFHQFLD HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ 3ROtWLFDVGHLJXDOGDGGHJpQHUR1RUPDWLYD\UHFXUVRVHQ&DQWDEULD 7(0$ /H\ GH &DQWDEULD GH GH DEULO ,QWHJUDO SDUD OD 3UHYHQFLyQ GH OD 9LROHQFLD FRQWUD ODV 0XMHUHV\OD3URWHFFLyQGHVXV9tFWLPDV5HFXUVRVHVSHFtILFRVHQHOiUHDGHYLROHQFLDGHJpQHUR HQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD i Pág. 12696 boc.cantabria.es CVE-2019-3750 7(0$ 9LROHQFLDGHJpQHUR7LSRORJtD0RGHORVGHLQWHUYHQFLyQ 189/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 3URPRFLyQ GH OD /H\ GH DXWRQRPtD SHUVRQDO \ DWHQFLyQ D ODV SHUVRQDV HQ VLWXDFLyQ GH GHSHQGHQFLD'HVFULSFLyQ\QHFHVLGDGHVGHHVWHFROHFWLYR0DUFRQRUPDWLYR 7(0$ 9DORUDFLyQ GH ODV VLWXDFLRQHV GHSHQGHQFLD \ DFFHVR D ODV SUHVWDFLRQHV GHO 6LVWHPD SDUD OD $XWRQRPtD\OD$WHQFLyQDOD'HSHQGHQFLD 6$$' HQ&DQWDEULD 7(0$ &XLGDGRIDPLOLDUGHSHUVRQDVHQVLWXDFLyQGHSHQGHQFLD(OFXLGDGRGHORVFXLGDGRUHV*UXSRVGH $\XGD0XWXD 7(0$ $FFHVLELOLGDG\$\XGDV7pFQLFDV1RUPDWLYD\UHFXUVRVHQ&DQWDEULD 7(0$ 5HFXUVRVHVSHFtILFRVSDUDODDWHQFLyQDSHUVRQDVHQVLWXDFLyQGHGHSHQGHQFLDHQOD&RPXQLGDG $XWyQRPDGH&DQWDEULD 7(0$ 3HUVRQDV FRQ GLVFDSDFLGDG 'HVFULSFLyQ \ QHFHVLGDGHV GH HVWH FROHFWLYR 0DUFR DGPLQLVWUDWLYR 5HFXUVRVVRFLDOHVSDUDSHUVRQDVFRQGLVFDSDFLGDG 7(0$ /H\ GH &DQWDEULD GH GH GLFLHPEUH GHJDUDQWtD GH ORV GHUHFKRV GH ODV SHUVRQDV FRQ GLVFDSDFLGDG 7(0$ ,QWHUYHQFLyQ VRFLDO HQ 'URJRGHSHQGHQFLDV 'HVFULSFLyQ \ QHFHVLGDGHV GH HVWH FROHFWLYR 3ODQ 5HJLRQDOGH'URJDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ ,QWHUYHQFLyQVRFLDOFRQSHUVRQDVVLQKRJDU 7(0$ $FRJLGD H LQWHJUDFLyQ VRFLDO GH ODV SHUVRQDV LQPLJUDQWHV 'HVFULSFLyQ \ QHFHVLGDGHV GH HVWH FROHFWLYR3HUVSHFWLYDVIXWXUDV0DUFRDGPLQLVWUDWLYR\UHFXUVRVHQ&DQWDEULD 7(0$ ,QWHUYHQFLyQVRFLDOHQHOiPELWRVDQLWDULR 7(0$ /DHQIHUPHGDGPHQWDO$VSHFWRVVRFLDOHV\OHJDOHV,QWHUYHQFLyQVRFLDO\UHFXUVRVVRFLDOHV CVE-2019-3750 7(0$ 1RUPDWLYDGHDFUHGLWDFLyQDXWRUL]DFLyQIXQFLRQDPLHQWR\UHJLVWURGHFHQWURV\VHUYLFLRVVRFLDOHV HQ&DQWDEULD i Pág. 12697 boc.cantabria.es 190/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA ANEXO I CUERPO DE DIPLOMADOS Y TÉCNICOS MEDIOS INGENIERO TÉCNICO AGRÍCOLA MATERIAS ESPECÍFICAS TEMA 1.- El territorio rural de Cantabria. Aspectos demográficos, económicos, sociales y medioambientales. Referencia especial a la actividad agraria. La discriminación positiva de determinadas zonas en la normativa de subvenciones. TEMA 2.- La estructura de las explotaciones agrarias de Cantabria dentro del contexto nacional y europeo. Explotaciones, superficie agrícola, ganadería, trabajo en la explotación, aprovechamiento de la tierra, maquinaria, irrigación, régimen de tenencia de la tierra y cultivos. TEMA 3.- Las medidas de reforma estructural en la legislación nacional y autonómica vigente: Ley de reforma y desarrollo agrario, Ley de modernización de las explotaciones, Ley de arrendamientos rústicos, Ley de Cantabria de modernización y desarrollo agrario. TEMA 4.- Las explotaciones agrarias prioritarias. Requisitos. Determinación. Beneficios. Aplicación en Cantabria. TEMA 5.- La conservación de la naturaleza en Cantabria. Normativa. Espacios naturales protegidos. La actividad agraria y el desarrollo rural en los PORN y en el POL. TEMA 6.- Diseño y construcción de caminos rurales. Características constructivas, materiales y maquinaria empleada. TEMA 7.- La concentración parcelaria. Régimen jurídico y procedimiento. TEMA 8.- Sistemas de información geográfica. Funciones de un S.I.G. vectorial y de un S.I.G. ráster. Áreas de aplicación en la agronomía y medios de transmisión. TEMA 9.- El control ambiental y la seguridad y salud en las obras de infraestructura rural. Referencia a la Ley 17/2006, de 11 de diciembre, y su reglamento. TEMA 10.- Las ayudas estatales al sector agrario en la normativa europea. Normas sobre competencia en el Tratado de Funcionamiento de la UE. Directrices y reglamentos. TEMA 11.- La Política Agraria Común (PAC). Orígenes y evolución. Especial referencia a las reformas a partir de 1992. Principios, objetivos e instrumentos. La OCM Única. Ultima reforma de la PAC 20142020. TEMA 12.- La financiación de la PAC. El FEAGA y el FEADER. Organismos nacionales y autonómicos implicados. Referencia a Cantabria. TEMA 14.- El sector de la carne: vacuno y ovino-caprino. Evolución, situación actual y perspectivas. Referencia a Cantabria. OCM única. i Pág. 12698 boc.cantabria.es CVE-2019-3750 TEMA 13.- Sector lácteo. Evolución, situación actual y perspectivas. Referencia a Cantabria. Regulación de la leche y los productos lácteos. OCM única. 191/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA TEMA 15.- El sector de los cereales. Evolución, situación actual y perspectivas. Referencia a Cantabria. OCM única TEMA 16.- Las ayudas directas de la PAC. Regulación actual. Aplicación en Cantabria. TEMA 17.- Las ayudas comunitarias al desarrollo rural. Aspectos generales. Evolución y situación actual en Cantabria: el PDR 2014-2020. TEMA 18.- Las ayudas comunitarias para inversiones en infraestructuras agrarias y forestales, mejora y desarrollo de explotaciones agrarias y transformación y comercialización de alimentos. Aplicación en Cantabria. TEMA 19.- Las ayudas comunitarias sobre agroambiente y clima, agricultura ecológica, zonas con limitaciones naturales y Natura 2000 y bienestar animal. Aplicación en Cantabria. TEMA 20.- Las ayudas comunitarias para el desarrollo rural participativo. Especial referencia a la metodología LEADER y Cooperación. Aplicación en Cantabria. TEMA 21.- El sistema integrado de gestión y control. La condicionalidad. TEMA 22.- Contratos del sector público. Referencia a la Ley 9/2017, de 8 de noviembre, de Contratos del Sector Público. Tipos de contratos. Modificación de los contratos. Contratos de obras: Expedientes de contratación, ejecución, cumplimiento y resolución. TEMA 23.- Suelos desde el punto de vista agrario en Cantabria: tipos, componentes analíticos, interpretación de análisis, adecuación a las producciones vegetales. TEMA 24.- Fertilizantes. Tipos y características, técnicas de fertilización, incidencia de la fertilización en la producción agraria. Normativa. Enmiendas orgánicas y calizas. Referencia a Cantabria. TEMA 25.- Principales plagas, enfermedades y plantas adventicias de los cultivos, praderas y pastos naturales en Cantabria. Prevención y tratamiento. La Gestión integrada de Plagas (GIP). Plantas invasoras. TEMA 26.- Productos fitosanitarios. Clasificación. Uso sostenible de productos fitosanitarios. Plan de Acción Nacional (PAN). Requisitos para la comercialización y la aplicación. El Registro Oficial de Productores y Operadores (ROPO). TEMA 27.- Contaminación agraria. Directiva de nitratos. Código de buenas prácticas agrarias. Problemática de la contaminación por plaguicidas. Contaminación agraria puntual y difusa. La Directiva Marco del Agua. TEMA 28.- Producción y comercialización de material vegetal. Pasaporte fitosanitario. Normativa europea para la circulación de vegetales. Condiciones de cultivo y problemática general de los OGM. TEMA 29.- Los prados en Cantabria. Tipos y manejo: labores, abonado, pastoreo. Superficies, producciones e importancia económica. TEMA 31.- Cultivos forrajeros en Cantabria. Especies y variedades. Labores, abonado, tratamientos, alternativas. Superficies, producciones e importancia económica. TEMA 32.- Conservación y almacenamiento de forrajes. Henificación, ensilado y deshidratado. Valor nutritivo de los alimentos conservados. Cadena de mecanización. i Pág. 12699 boc.cantabria.es CVE-2019-3750 TEMA 30.- Los pastos comunales en Cantabria. Sistemas de aprovechamiento y conservación. Ordenación legal. Superficies, producciones e importancia económica. 192/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA TEMA 33.- Cereales, tubérculos y cultivos energéticos en Cantabria. Especies y variedades. Labores, abonado, tratamientos, alternativas. Superficies, producciones e importancia económica. TEMA 34.- La horticultura en Cantabria. Especies y variedades. Formas de producción. Labores, abonado, tratamientos. Superficies, producciones e importancia económica. Las plantas ornamentales en Cantabria. Autorización y Registro de Viveros. TEMA 35.- La vid y los pequeños frutos en Cantabria. Especies y variedades. Formas de producción. Labores, abonado, tratamientos. Superficies, producciones e importancia económica. Autorizaciones de plantación de viñedos. TEMA 36.- La ganadería en Cantabria y su importancia en la producción final agraria. Censos y razas, su evolución y distribución comarcal. Producciones ganaderas. TEMA 37.- Las explotaciones de vacuno de leche en Cantabria. Evolución. Características técnicas. Datos productivos. Importancia económica. TEMA 38.- El marco legal de las explotaciones de vacuno de leche en Cantabria. Normativa higiénicosanitaria. Prácticas correctas de higiene. Trazabilidad. Subvenciones específicas. TEMA 39.- La alimentación de la vaca lechera. Curva de lactación, necesidades y racionamiento. TEMA 40.- Instalaciones de ordeño para ganado vacuno. Tipos de salas de ordeño. Funcionamiento. El tanque de refrigeración. Normativa aplicable. TEMA 41.- Las explotaciones de vacuno de carne en Cantabria. Evolución. Razas y sus cruces. Las razas autóctonas. Características técnicas. Datos productivos. Importancia económica. La producción de carne del rebaño lechero. TEMA 42.- El marco legal de las explotaciones de vacuno de carne en Cantabria. Normativa sanitaria y de bienestar animal. Prácticas correctas de higiene. Trazabilidad. Aspectos ambientales. Subvenciones específicas. TEMA 43.- La alimentación del rebaño de vacuno de cría en Cantabria. El cebo del ganado vacuno. TEMA 44.- Producción de carne y producción de leche de ovino y caprino. Prácticas correctas de higiene. Producción de carne de equino. Referencia a Cantabria. TEMA 45.- Otras explotaciones en Cantabria: porcino, avícolas, cunícolas, apícolas. Características técnicas. Normativa aplicable. Datos productivos. Importancia económica. TEMA 46.- Valoración agraria. Métodos. El mercado de fincas rústicas: características, fijación de precios. El mercado de la tierra en Cantabria. TEMA 47.- Valoración de otros activos agrarios. Ganado. Maquinaria y equipos. Existencias. Inmuebles. Valoración de empresas. TEMA 48.- La contabilidad agraria. Concepto, utilidad y funciones. La partida doble y el sistema de márgenes brutos. Análisis financiero del balance. Análisis de inversiones y estudios de viabilidad. TEMA 50.- Asociacionismo agrario. Cooperativas y sociedades agrarias de transformación. Régimen jurídico y órganos de gobierno. Otras formas asociativas. Situación en Cantabria. i Pág. 12700 boc.cantabria.es CVE-2019-3750 TEMA 49.- Fiscalidad y seguridad social en la actividad agraria. Los seguros agrarios. Referencia a Cantabria. 193/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA TEMA 51.- Mataderos y salas de despiece. Procesos industriales. Clasificación de canales. Subproductos. Referencia a Cantabria. TEMA 52.- Industrias lácteas (I). La leche líquida, la mantequilla y la leche en polvo. Tipos. Procesos industriales. Referencia a Cantabria. TEMA 53.- Industrias lácteas (II). El queso y otros derivados lácteos distintos de la mantequilla y la leche en polvo. Tipos. Procesos industriales. Referencia a Cantabria. TEMA 54.- Industrias de conservas, semiconservas y salazones de pescado. Tecnología de elaboración, transformación o manipulación. Referencia a Cantabria. TEMA 55.- Industria vitivinícola y otros productos alcohólicos. Procesos de elaboración. Referencia a Cantabria. TEMA 56.- Fábricas de piensos. Procesos de elaboración. Normativa. Referencia a Cantabria. TEMA 57.- Seguridad alimentaria en la producción primaria y las industrias agrarias. Trazabilidad. Reglamentos europeos aplicables. Sistemas de gestión y su certificación. Higiene de la producción primaria. El Registro de explotaciones Agrícolas de Cantabria (REA) y el Registro General de la Producción Agrícola. El cuaderno de Explotación. TEMA 58.- La comercialización agraria, pesquera y alimentaria. Circuitos comerciales. Peculiaridades sectoriales. La transparencia de los mercados. La información de precios. Tipificación y normalización. TEMA 59.- Los alimentos de calidad diferenciada. Perspectiva general. Normativa comunitaria y estatal aplicable. Importancia económica. Referencia a Cantabria. La ODECA. TEMA 60.- Las denominaciones de origen en la comunidad autónoma de Cantabria. Normativa aplicable. Productos. Reglamentos. Consejos reguladores. TEMA 61.- Las indicaciones geográficas protegidas en la comunidad autónoma de Cantabria. Normativa aplicable. Productos. Reglamentos. Consejos reguladores. TEMA 62.- La producción agraria ecológica en Cantabria. Normativa aplicable. Producciones. El consejo regulador de la agricultura ecológica en Cantabria. TEMA 63.- Marcas de calidad en Cantabria. Normativa aplicable. Productos. Normas técnicas. El etiquetado facultativo de la carne de vacuno. Sistemas de certificación de leche de vaca. Normativa aplicable. Agentes implicados. Producciones. Referencia a Cantabria. CVE-2019-3750 TEMA 64.- Política de investigación desarrollo e innovación tecnológica agraria y alimentaría. Planificación, programación, organización y transferencia de la investigación agraria en Cantabria. Programas y organización. La innovación tecnológica y su difusión en la agricultura. El Centro de Investigación y Formación Agrarias (CIFA). Líneas de investigación. Principales proyectos de investigación. i Pág. 12701 boc.cantabria.es 194/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ,1*(1,(527e&1,&2'(0,1$6 0$7(5,$6(63(&Ë),&$6 i Pág. 12702 7(0$ /H\GH0LQDV\5HJODPHQWR*HQHUDOSDUDHO5pJLPHQGHOD0LQHUtDÈPELWRGH DSOLFDFLyQ&ODVLILFDFLyQGHORVUHFXUVRV$FFLyQHVWDWDO 7(0$ 5HJXODFLyQ GH UHFXUVRV 3HUPLVRV GH H[SORUDFLyQ 3HUPLVRV GH LQYHVWLJDFLyQ &RQFHVLRQHVGHH[SORWDFLyQ 7(0$ ([SORVLYRV 5pJLPHQ MXUtGLFR GH OD IDEULFDFLyQ WUDQVSRUWH \ XWLOL]DFLyQ GH H[SORVLYRV 7(0$ 9RODGXUDV 3DUiPHWURV GH GLVHxR 9LEUDFLRQHV 0HGLGDV GH VHJXULGDG HQ ODV YRODGXUDV9RODGXUDVHVSHFLDOHV 7(0$ 5HVHUYDV \ UHFXUVRV PLQHURV 0pWRGRV GH UHFRQRFLPLHQWR GH UHVHUYDV GH \DFLPLHQWRV 7(0$ 3URVSHFFLyQPLQHUD0pWRGRVGHSURVSHFFLyQ(VSHFLDOUHIHUHQFLDDODSURVSHFFLyQ PHFiQLFD 7(0$ $UUDQTXHPHFDQL]DGRHQH[SORWDFLRQHVPLQHUDV0DTXLQDULDHPSOHDGD 7(0$ ([SORWDFLyQDFLHORDELHUWR0pWRGRV&ULWHULRVGHGLVHxR0LQHUtDGHWUDQVIHUHQFLD 7(0$ )UDJPHQWDFLyQ&ODVLILFDFLyQGHHTXLSRVGHIUDJPHQWDFLyQ 7(0$ 7ULWXUDFLyQ\PROLHQGD0ROLHQGDHQK~PHGR0ROLHQGDHQVHFR 7(0$ &ODVLILFDGRUHVKLGUiXOLFRV*UXSRV7DQTXHVHVSHVDGRUHVGLVHxR 7(0$ )ORWDFLyQWpFQLFDPiTXLQDVGHIORWDFLyQ\UHDFWLYRV 7(0$ /DLQGXVWULDPHWDO~UJLFD(VSHFLDOUHIHUHQFLDDODPHWDOXUJLDQRIpUUHD 7(0$ (QHUJtDVUHQRYDEOHV(YROXFLyQ\SHUVSHFWLYDVGHGHVDUUROOR 7(0$ 0LQHUtDQRHQHUJpWLFD0LQHUtDPHWiOLFD0LQHUDOHVLQGXVWULDOHV 7(0$ 0LQHUtDQRHQHUJpWLFD5RFDVRUQDPHQWDOHVÈULGRV\RWURVSURGXFWRVGHFDQWHUD 7(0$ /DLQGXVWULDDX[LOLDUGHODFRQVWUXFFLyQFHPHQWRYLGULR\FHUiPLFD 7(0$ 5HJODPHQWR *HQHUDO GH 1RUPDV %iVLFDV GH 6HJXULGDG 0LQHUD H ,QVWUXFFLRQHV 7pFQLFDV&RPSOHPHQWDULDV 7(0$ /H\GH3UHYHQFLyQGH5LHVJRV/DERUDOHV'HUHFKRV\REOLJDFLRQHV 7(0$ *HVWLyQGHODSUHYHQFLyQHQODVH[SORWDFLRQHVPLQHUDV&RQVXOWD\SDUWLFLSDFLyQ GHORVWUDEDMDGRUHV boc.cantabria.es CVE-2019-3750 195/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12703 7(0$ $FFLGHQWHVGHWUDEDMR(QIHUPHGDGHVSURIHVLRQDOHV1RWLILFDFLyQUHJLVWURHtQGLFHV GHVLQLHVWUDOLGDGGHORVGDxRVODERUDOHVHQHO5pJLPHQGHOD0LQHUtD 7(0$ 'LVSRVLFLRQHVPtQLPDVGH6HJXULGDG\6DOXGHQODXWLOL]DFLyQGHORVHTXLSRVGH WUDEDMR8WLOL]DFLyQGHORVHTXLSRVGHSURWHFFLyQLQGLYLGXDO 7(0$ /H\GHFDUUHWHUDVGH&DQWDEULD'LVSRVLFLRQHVJHQHUDOHV3ODQLILFDFLyQHVWXGLRV\ SUR\HFWRV 7(0$ 8VR \ GHIHQVD GH ODV FDUUHWHUDV 5HJXODFLyQ GH DFFHVRV PDUFR QRUPDWLYR $XWRUL]DFLRQHVGHWUDQVSRUWHVHVSHFLDOHV 7(0$ &RQWUROGHODHURVLyQ\REUDVGHGHVDJH 7(0$ ,QHVWDELOLGDGGHWDOXGHV\ODGHUDV)DFWRUHVTXHDIHFWDQDODHVWDELOLGDG3URFHVRV \HYDOXDFLyQGHODGHJUDGDFLyQGHWDOXGHV 7(0$ 0pWRGRVGHHVWDELOL]DFLyQGHWDOXGHVURFRVRV 7(0$ 0pWRGRVGHHVWDELOL]DFLyQGHWDOXGHVHQVXHORV0XURV\GUHQDMHV 7(0$ 7pFQLFDVGHFRQWUROGHGHVSUHQGLPLHQWRGHURFDVHQWDOXGHV\ODGHUDV 7(0$ 3URSLHGDGHVEiVLFDV\HQVD\RVGHFDUDFWHUL]DFLyQGHORViULGRV3URSLHGDGHV\ FDUDFWHUL]DFLyQGHORVVXHORV 7(0$ /H\GHGHGLFLHPEUHGH(YDOXDFLyQ$PELHQWDO 7(0$ /H\GHGHGLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGR 7(0$ ,PSDFWRV DPELHQWDOHV HQ OD PLQHUtD ,GHQWLILFDFLyQ GH DOWHUDFLRQHV 0HGLGDV FRUUHFWRUDV 7(0$ /H\ GH SUHYHQFLyQ \ FRQWURO LQWHJUDGRV GH OD FRQWDPLQDFLyQ 5HDO 'HFUHWR GHGHRFWXEUHSRUHOTXHVHDSUXHEDHO5HJODPHQWRGH(PLVLRQHV ,QGXVWULDOHV 7(0$ 1RUPDWLYDVREUHFDOLGDGGHODLUH3DUiPHWURVGHLQPLVLyQYDORUHVOtPLWHSODQHVGH FDOLGDGGHODLUH 7(0$ (PLVLRQHVDODDWPyVIHUDSURGXFLGDVHQODLQGXVWULD0DUFRMXUtGLFR 7(0$ 0pWRGRVGHFDSWDFLyQ\GHSXUDFLyQGHHPLVLRQHVDODDWPyVIHUDHQODLQGXVWULD 7(0$ &RQWURO\SUHYHQFLyQGHOSROYRHQH[SORWDFLRQHVDFLHORDELHUWR0pWRGRVGHFRQWURO 7(0$ 1RUPDWLYD UHIHUHQWH D ODV $FWLYLGDGHV 3RWHQFLDOPHQWH &RQWDPLQDGRUDV GH OD $WPyVIHUD $3&$ &DWiORJRGHDFWLYLGDGHV$3&$1RUPDWLYDGH&DQWDEULDVREUH HPLVLRQHV 7(0$ &RQWURO\SUHYHQFLyQGHOUXLGR0HGLGDV\DQiOLVLV 7(0$ 9HUWLGRVHQODLQGXVWULD0DUFRMXUtGLFR(IOXHQWHVLQGXVWULDOHV7LSRV\PpWRGRVGH WUDWDPLHQWR 7(0$ (O GRPLQLR S~EOLFR 5pJLPHQ MXUtGLFR $IHFWDFLyQ GHVDIHFWDFLyQ \ PXWDFLRQHV GHPDQLDOHV 3RWHVWDGHV DGPLQLVWUDWLYDV \ UpJLPHQ GH SURWHFFLyQ GHO GRPLQLR S~EOLFR 7(0$ 5HDO 'HFUHWR /HJLVODWLYR GH GH MXOLR SRU HO TXH VH DSUXHED HO WH[WR UHIXQGLGRGHOD/H\GH$JXDV'RPLQLRS~EOLFRKLGUiXOLFRELHQHVTXHORLQWHJUDQ boc.cantabria.es CVE-2019-3750 196/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 8WLOL]DFLyQGHOGRPLQLRS~EOLFRKLGUiXOLFR$JXDVVXEWHUUiQHDV9HUWLGRV 7(0$ /H\ GH GH MXOLR GH &RVWDV %LHQHV GH GRPLQLR S~EOLFR PDUtWLPR WHUUHVWUH 7(0$ /LPLWDFLRQHV GH OD SURSLHGDG SRU UD]RQHV GH SURWHFFLyQ GHO GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH6HUYLGXPEUHVOHJDOHV 7(0$ 5pJLPHQGHXWLOL]DFLyQGHOGRPLQLRS~EOLFRPDUtWLPRWHUUHVWUH3UR\HFWRV\REUDV 9HUWLGRV 7(0$ &DPELR &OLPiWLFR 3ULQFLSDOHV JDVHV GH HIHFWR LQYHUQDGHUR 3RWHQFLDO GH &DOHQWDPLHQWR *OREDO &RPSURPLVRV QDFLRQDOHV \ HXURSHRV 0HGLGDV GH PLWLJDFLyQ \ DGDSWDFLyQ &RPHUFLR GH GHUHFKRV GH HPLVLyQ GH JDVHV GH HIHFWR LQYHUQDGHUR 7(0$ $FFHVR GHO S~EOLFR D OD LQIRUPDFLyQ DPELHQWDO 1RUPDWLYD DSOLFDEOH &RQYHQLRV LQWHUQDFLRQDOHV 5HJLVWUR HXURSHR \ HVWDWDO GH (PLVLRQHV \ 7UDQVIHUHQFLD GH &RQWDPLQDQWHV 7(0$ 0DUFRMXUtGLFRGHODSURGXFFLyQ\JHVWLyQGHUHVLGXRV/H\GHGHMXOLR GHUHVLGXRV\VXHORVFRQWDPLQDGRV&RPSHWHQFLDVDGPLQLVWUDWLYDVHQPDWHULDGH SURGXFFLyQ \ JHVWLyQ GH UHVLGXRV 5pJLPHQ GH DXWRUL]DFLyQ \ FRPXQLFDFLyQ GH DFWLYLGDGHVGHSURGXFFLyQ\JHVWLyQGHUHVLGXRV 7(0$ 1RUPDWLYDGHGHVDUUROORGHOD/H\GHGHMXOLRGHUHVLGXRV\VXHORV FRQWDPLQDGRV 7(0$ 7LSR GH UHVLGXRV (VSHFLDO UHIHUHQFLD D OD LQGXVWULD PHWDO~UJLFD 3ULQFLSDOHV RSHUDFLRQHVGHYDORUL]DFLyQ\HOLPLQDFLyQGHUHVLGXRV 7(0$ /DPLQHUtDHQ&DQWDEULD(VSHFLDOUHIHUHQFLDDODPLQHUtDPHWiOLFD CVE-2019-3750 7(0$ i Pág. 12704 boc.cantabria.es 197/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ,1*(1,(527e&1,&2'(2%5$63Ò%/,&$6 0$7(5,$6(63(&Ë),&$6 i Pág. 12705 7(0$ /DUHGGHFDUUHWHUDVGH&DQWDEULD(YROXFLyQKLVWyULFD/DVWUDQVIHUHQFLDVHQ&DQWDEULD 5HDO'HFUHWRGHGHIHEUHUR/DUHG$XWRQyPLFDGH&DQWDEULD&DWDORJDFLyQ\ FODVLILFDFLyQ 7(0$ /H\GHGHGLFLHPEUHGH&DUUHWHUDVGH&DQWDEULD$QiOLVLVGHVXFRQWHQLGR 7(0$ /H\ GH GH VHSWLHPEUH GH FDUUHWHUDV GHO (VWDGR 5HJODPHQWR *HQHUDO GH &DUUHWHUDV GHO (VWDGR 5HDO 'HFUHWR GH GH VHSWLHPEUH $QiOLVLV GH VX FRQWHQLGR 7(0$ 3ODQHV\SURJUDPDVGHFDUUHWHUDV3ODQGHFDUUHWHUDVGH&DQWDEULD(VWXGLRV\SUR\HFWRV GHFDUUHWHUDV2EMHWR\FRQWHQLGR 7(0$ (OWUiILFRHVWXGLRVHQFXHVWDV\DIRURV0pWRGRVLQWHQVLGDGHVYHORFLGDGHVFDSDFLGDG\ QLYHOHVGHVHUYLFLR 7(0$ &DUDFWHUtVWLFDV JHRPpWULFDV GH ODV FDUUHWHUDV (O WUD]DGR SODQWD DO]DGR \ VHFFLyQ WUDQVYHUVDO,QWHUVHFFLRQHV\HQODFHV1RUPDWLYD 7(0$ 3UR\HFWR\FRQVWUXFFLyQGHILUPHVGHFDUUHWHUDV%DVHVGHGLPHQVLRQDPLHQWR0DWHULDOHV \XQLGDGHVGHREUD 7(0$ 'UHQDMHVXSHUILFLDO\VXEWHUUiQHR1RUPDWLYD8WLOL]DFLyQ3HTXHxDVREUDVGHSDVR 7(0$ 2EUDVGHFDUUHWHUDVPRYLPLHQWRVGHWLHUUDV'HVPRQWHV&ODVLILFDFLyQGHORVVXHORVVHJ~Q HO 3* &RQVWUXFFLyQ GH H[SODQDFLRQHV &RQVWUXFFLyQ GH WHUUDSOHQHV SHGUDSOHQHV \ UHOOHQRVWRGRXQR 7(0$ 2EUDVGHFDUUHWHUDVFDSDVGHILUPH\ PDWHULDOHV0H]FODVELWXPLQRVDV3DYLPHQWRVGH KRUPLJyQ6XHORVHVWDELOL]DGRV5LHJRV 7(0$ &DUDFWHUtVWLFDVVXSHUILFLDOHV\HVWUXFWXUDOHVGHORVILUPHV$XVFXOWDFLyQ&RQVHUYDFLyQ\ UHKDELOLWDFLyQ1RUPD,&5HKDELOLWDFLyQGHILUPHV 7(0$ &LPHQWDFLRQHV7pFQLFDVGHPHMRUDGHOWHUUHQR3URWHFFLyQGHLQIUDHVWUXFWXUDVIUHQWHDOD FDtGDGHURFDV 7(0$ 2EUDVGHSDVR&RQFHSWRV*HQHUDOHV7LSRORJtDV\PDWHULDOHV0pWRGRVFRQVWUXFWLYRV\ PHGLRVDX[LOLDUHV&RQVHUYDFLyQHLQVSHFFLyQ 7(0$ 7~QHOHVGHFDUUHWHUDV&RQVWUXFFLyQ([SORWDFLyQ 7(0$ 0XURVHQREUDV\FRQVHUYDFLyQGHFDUUHWHUDV boc.cantabria.es CVE-2019-3750 198/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12706 7(0$ 2UJDQL]DFLyQGHODFRQVHUYDFLyQGHFDUUHWHUDV0pWRGRV7LSRVGHJHVWLyQ&RQVHUYDFLyQ SRUPHGLRVSURSLRV2EUDVSRUDGPLQLVWUDFLyQ9LDOLGDGLQYHUQDO0DTXLQDULD\PDWHULDOHV 7(0$ ([SORWDFLyQ GH FDUUHWHUDV /LPLWDFLRQHV GH OD SURSLHGDG GLIHUHQFLDV HQ ODV ]RQDV GH LQIOXHQFLDHQWUHFDUUHWHUDVDXWRQyPLFDVGH&DQWDEULD\HVWDWDOHV,QIUDFFLRQHV\VDQFLRQHV 7(0$ 6HJXULGDGYLDO(VWXGLRV\HVWDGtVWLFDVGHDFFLGHQWHV)DFWRUHVFRQGLFLRQDQWHVËQGLFHGH SHOLJURVLGDG0HGLGDVGHVHJXULGDG 7(0$ 6HxDOL]DFLyQ EDOL]DPLHQWR \ HOHPHQWRV GH VHJXULGDG 6HxDOL]DFLyQ KRUL]RQWDO \ VHxDOL]DFLyQYHUWLFDO6HxDOL]DFLyQGHREUDV1RUPDV 7(0$ 6LVWHPDV GH FRQWHQFLyQ GH YHKtFXORV 7LSRORJtDV 'HWHUPLQDFLyQ GHO VLVWHPD GH FRQWHQFLyQ 7(0$ &RQWUROGHFDOLGDGHQVD\RVGHPDWHULDOHV3OLHJRGHSUHVFULSFLRQHVWpFQLFDVJHQHUDOHV (QVD\RVGHFHPHQWRKRUPLJRQHV\DFHURV 7(0$ *HRWHFQLD GH REUDV OLQHDOHV HVWXGLR JHRWpFQLFR HODERUDFLyQ \ PpWRGRV GH DQiOLVLV \ HQVD\RV6XHORV\URFDV3UREOHPDVKDELWXDOHVHQREUDVOLQHDOHVFDXVDV\PHGLGDVGH WUDWDPLHQWR 7(0$ /RV WUDQVSRUWHV HQ (VSDxD 6X LPSRUWDQFLD HQ OD HFRQRPtD QDFLRQDO ,QIUDHVWUXFWXUDV EiVLFDV\FRPSOHPHQWDULDVSDUTXHV\WUiILFRGHORVGLVWLQWRVPRGRVGHWUDQVSRUWH 7(0$ 0RGRV GH WUDQVSRUWH &DUDFWHUtVWLFDV SULQFLSDOHV GH FDGD XQR GH HOORV 9HQWDMDV H LQFRQYHQLHQWHV'LVWULEXFLyQ\FRRUGLQDFLyQPRGDO 7(0$ /DV5HGHV7UDQVHXURSHDVGH7UDQVSRUWH2EMHWLYRVGHVDUUROOR\HYROXFLyQ)LQDQFLDFLyQ 7(0$ /D GHPDQGD GHO WUDQVSRUWH )DFWRUHV FXDOLWDWLYRV GH OD GHPDQGD (O SUREOHPD GH ODV SXQWDV&RVWHVGHLQIUDHVWUXFWXUD&RVWHVGHFRQJHVWLyQ7UDQVSRUWHGHYLDMHURVXUEDQRH LQWHUXUEDQR7UDQVSRUWHGHPHUFDQFtDV 7(0$ &RQFHSWRVEiVLFRVGHODOHJLVODFLyQHQHOWUDQVSRUWHWHUUHVWUH/H\GHGHMXOLR GH2UGHQDFLyQGHORV7UDQVSRUWHV7HUUHVWUHV 7(0$ 7H[WRUHIXQGLGRGHOD/H\GH$JXDV\5HJODPHQWRGHO'RPLQLR3~EOLFR+LGUiXOLFR$JXDV S~EOLFDV \ SULYDGDV 8WLOL]DFLyQ GHO 'RPLQLR 3~EOLFR +LGUiXOLFR VHUYLGXPEUHV XVRV FRPXQHV\SULYDWLYRVFRQFHVLRQHV\DXWRUL]DFLRQHV]RQDVGHVHUYLGXPEUH\GHSROLFtD 7(0$ +LGURORJtD &LFOR KLGUROyJLFR 5HG GH HVWDFLRQHV KLGUROyJLFDV GH (VSDxD /RV 6,* \ VX DSOLFDFLyQDODJHVWLyQGHORVUHFXUVRVKLGUiXOLFRV 7(0$ $JXDV VXEWHUUiQHDV $IRURV HQ DFXtIHURV VXEWHUUiQHRV 7pFQLFDV GH LQYHVWLJDFLyQ KLGURJHROyJLFD\HYDOXDFLyQGHUHFXUVRV([SORWDFLyQ\UHFDUJDGHDFXtIHURV 7(0$ 2EUDV GH HQFDX]DPLHQWR \ GHIHQVD GH ORV PiUJHQHV GH ORV UtRV $YHQLGDV FiOFXOR H KLGURJUDPDV 7(0$ 3UHVDV FODVLILFDFLyQ 3UHVDV GH IiEULFD 3UHVDV GH PDWHULDOHV VXHOWRV ÏUJDQRV GH GHVDJHGHODSUHVD 7(0$ &DQDOHV \ FRQGXFFLRQHV GH DJXD SRWDEOH 7LSRV GH WXEHUtD \ UHYHVWLPLHQWRV MXQWDV HOHPHQWRV\REUDVVLQJXODUHV boc.cantabria.es CVE-2019-3750 199/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12707 7(0$ 5HGHV GH GLVWULEXFLyQ GH DJXD SRWDEOH 5HGHV GH VDQHDPLHQWR (PLVDULRV VXEPDULQRV &RQVWUXFFLyQH[SORWDFLyQ\FRQVHUYDFLyQ 7(0$ 'HSXUDFLyQGHDJXDVUHVLGXDOHV$XWRGHSXUDFLyQHQFXUVRVQDWXUDOHV7HFQRORJtDGHOD GHSXUDFLyQ ILVLFRTXtPLFD SUHWUDWDPLHQWR \ WUDWDPLHQWRV SULPDULRV 7HFQRORJtD GH HOLPLQDFLyQELROyJLFDGHQXWULHQWHVWUDWDPLHQWRVVHFXQGDULRV7HFQRORJtDGHOWUDWDPLHQWR WHUFLDULRILOWUDFLyQ\HVWHULOL]DFLyQ7UDWDPLHQWRVDYDQ]DGRVGHHOLPLQDFLyQGHQXWULHQWHV 7(0$ 'LQiPLFDOLWRUDO2EUDVGHGHIHQVD\UHJHQHUDFLyQGHFRVWDV\SOD\DV&ULWHULRVGHGLVHxR GHREUDVFRPSOHPHQWDULDV3DVHRVPDUtWLPRV 7(0$ /H\GHGHMXOLRGH&RVWDV\VX5HJODPHQWR 5HDO'HFUHWRGHGH RFWXEUH 8WLOL]DFLyQ GHO GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH 3UR\HFWRV \ REUDV HQ HO GRPLQLR S~EOLFR PDUtWLPRWHUUHVWUH 5HVHUYDV $GVFULSFLRQHV $XWRUL]DFLRQHV \ &RQFHVLRQHV 7(0$ 2EUDVSRUWXDULDVH[WHULRUHV2EUDVGHDEULJR\URPSHRODV2EUDVGHDFFHVR'UDJDGRV\ HQFDX]DPLHQWRV$WHUUDPLHQWRV\HURVLRQHV 7(0$ 6HxDOL]DFLyQPDUtWLPD6LVWHPDVGHD\XGDDODQDYHJDFLyQ6HxDOHVYLVXDOHV\DF~VWLFDV VHxDOHVUDGLRHOpFWULFDV,OXPLQDQWHV\IXHQWHVGHHQHUJtD 7(0$ /DH[SURSLDFLyQIRU]RVDFRQFHSWR6XMHWRVREMHWR\FDXVD3URFHGLPLHQWRH[SURSLDWRULR RUGLQDULR*DUDQWtDSDWULPRQLDO 7(0$ 3URFHGLPLHQWRVH[SURSLDWRULRVHVSHFLDOHV3URFHGLPLHQWRGHXUJHQFLD 7(0$ 3URGXFFLyQ\JHVWLyQGHUHVLGXRVGHFRQVWUXFFLyQ\GHPROLFLyQHO5HDO'HFUHWR GH GH IHEUHUR 8WLOL]DFLyQ GH UHVLGXRV HQ REUD S~EOLFD /D HOLPLQDFLyQ GH UHVLGXRV PHGLDQWHGHSyVLWRHQYHUWHGHUR 7(0$ /D5HG1DWXUD/XJDUHVGH,PSRUWDQFLD&RPXQLWDULD /,& /RV/,&VHQ&DQWDEULD 7(0$ (O LPSDFWR DPELHQWDO &ULWHULRV GH HYDOXDFLyQ /H\ GH GH GLFLHPEUH GH HYDOXDFLyQDPELHQWDO/H\GHGHGLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGRGH &DQWDEULD 7(0$ /DRUGHQDFLyQWHUULWRULDOGH&DQWDEULD,QVWUXPHQWRVGHRUGHQDFLyQWHUULWRULDO3ULQFLSDOHV IXQFLRQHVGHORVLQVWUXPHQWRVGHRUGHQDFLyQWHUULWRULDO 7(0$ 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GH 6XHOR \ 5HKDELOLWDFLyQ 8UEDQD 5pJLPHQ XUEDQtVWLFR GH OD SURSLHGDGGHOVXHOR9DORUDFLRQHV([SURSLDFLRQHV6XSXHVWRVLQGHPQL]DWRULRV/D/H\GH &DQWDEULD GH GH MXQLR GH 2UGHQDFLyQ 7HUULWRULDO \ 5pJLPHQ 8UEDQtVWLFR GHO 6XHOR 7(0$ 5HDO 'HFUHWR GH GH RFWXEUH SRU HO TXH VH HVWDEOHFHQ ODV FRQGLFLRQHV PtQLPDVGHVHJXULGDG\VDOXGHQODVREUDVGHFRQVWUXFFLyQ$QiOLVLVGHVXFRQWHQLGRFRQ HVSHFLDOUHIHUHQFLDDREUDVSXEOLFDVFRQWUDWDGDV 7(0$ /H\ GH GH RFWXEUH UHJXODGRUD GH OD VXEFRQWUDWDFLyQ HQ HO VHFWRU GH OD FRQVWUXFFLyQ\5HDO'HFUHWRGHGHDJRVWRSRUHOTXHVHGHVDUUROODOD/H\ boc.cantabria.es CVE-2019-3750 200/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ /H\GHGHQRYLHPEUHGH&RQWUDWRVGHO6HFWRU3~EOLFR$FWXDFLRQHVUHODWLYDVD OD FRQWUDWDFLyQ GH REUDV ORV SOLHJRV GH FOiXVXODV DGPLQLVWUDWLYDV ORV SOLHJRV GH SUHVFULSFLRQHV WpFQLFDV ODV DFWXDFLRQHV DGPLQLVWUDWLYDV SUHSDUDWRULDV SUHYLDV D OD OLFLWDFLyQ\ODWUDPLWDFLyQGHORVH[SHGLHQWHV 7(0$ 'HODDGMXGLFDFLyQGHORVFRQWUDWRVGHREUDVSURFHGLPLHQWRVGHDGMXGLFDFLyQ 7(0$ 'HO FRQWUDWR GH REUDV FRPSUREDFLyQ GHO UHSODQWHR FHUWLILFDFLRQHV \ DERQRV D FXHQWD PRGLILFDFLyQGHOFRQWUDWRGHREUDVFXPSOLPLHQWRGHOFRQWUDWR\FDXVDVGHUHVROXFLyQGHO FRQWUDWR 7(0$ 'HO FRQWUDWR GH REUDV FODVLILFDFLyQ GHO FRQWUDWLVWD \ UHYLVLRQHV GH SUHFLRV 2EUDV SRU $GPLQLVWUDFLyQ&RQWUDWRVPHQRUHVGHREUDV 7(0$ 'HORVFRQWUDWRVGHVHUYLFLRVHMHFXFLyQPRGLILFDFLyQUHVROXFLyQSDJRGHOSUHFLRUHYLVLyQ GHSUHFLRVH[WLQFLyQGHOFRQWUDWR\UHFHSFLyQ6XEVDQDFLyQGHHUURUHV\UHVSRQVDELOLGDGHV HQODHODERUDFLyQGHSUR\HFWRVGHFRQVWUXFFLyQ CVE-2019-3750 7(0$ i Pág. 12708 boc.cantabria.es 201/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ,1*(1,(527e&1,&2)25(67$/ 0$7(5,$6(63(&Ë),&$6 i Pág. 12709 /D /H\ GH GH QRYLHPEUH GH 0RQWHV \ VXV PRGLILFDFLRQHV ÈPELWR GH DSOLFDFLyQ3ULQFLSLRVJHQHUDOHV&RQFHSWRGHPRQWH&ODVLILFDFLyQ\UpJLPHQMXUtGLFRGH ORVPRQWHV(O&DWiORJRGHPRQWHVGHXWLOLGDGS~EOLFD 7(0$ /D /H\ GH GH QRYLHPEUH GH 0RQWHV \ VXV PRGLILFDFLRQHV 5HFXSHUDFLyQ SRVHVRULD \ GHVOLQGH GH PRQWHV S~EOLFRV 5pJLPHQ GH ORV PRQWHV SULYDGRV *HVWLyQ IRUHVWDO VRVWHQLEOH 3ODQLILFDFLyQ IRUHVWDO 2UGHQDFLyQ GH PRQWHV $SURYHFKDPLHQWRV IRUHVWDOHV 7(0$ /D/H\GHGHQRYLHPEUHGH0RQWHV\VXVPRGLILFDFLRQHV&RQVHUYDFLyQ\ SURWHFFLyQ GH PRQWHV 8VRV GHO VXHOR 5HVWDXUDFLyQ KLGUROyJLFRIRUHVWDO ,QFHQGLRV IRUHVWDOHV6DQLGDG\JHQpWLFDIRUHVWDO5pJLPHQVDQFLRQDGRUHQPDWHULDGHPRQWHV 7(0$ ,QFHQGLRVIRUHVWDOHVQRUPDWLYDHVWDWDO(O'HFUHWRGHGHIHEUHURSRUHOTXH VHDSUXHEDHO3ODQ(VSHFLDOGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD VREUH ,QFHQGLRV )RUHVWDOHV 2UGHQ '(6 GH GH DJRVWR SRU OD TXH VH HVWDEOHFHQ QRUPDV VREUH XVR GHO IXHJR \ PHGLGDV SUHYHQWLYDV HQ UHODFLyQ FRQ ORV LQFHQGLRVIRUHVWDOHV 7(0$ /D /H\ GH GH GLFLHPEUH GHO 3DWULPRQLR 1DWXUDO \ GH OD %LRGLYHUVLGDG 3ULQFLSLRV LQVSLUDGRUHV LQVWUXPHQWRV SDUD HO FRQRFLPLHQWR \ OD SODQLILFDFLyQ FDWDORJDFLyQ FRQVHUYDFLyQ \ UHVWDXUDFLyQ GH KiELWDWV \ HVSDFLRV FRQVHUYDFLyQ GH OD ELRGLYHUVLGDGXVRVRVWHQLEOH 7(0$ /DV 'LUHFWLYDV (XURSHDV &(( +iELWDWV \ &( $YHV 2EMHWLYRV \ SULQFLSDOHVFRQWHQLGRV 7(0$ /D/H\GH&DQWDEULDGHGHMXOLRGH&D]D2EMHWLYRV\SULQFLSDOHVFRQWHQLGRV 7(0$ (O5HJODPHQWRGHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHRFWXEUHGH VREUH OD SUHYHQFLyQ \ OD JHVWLyQ GH OD LQWURGXFFLyQ \ SURSDJDFLyQ GH HVSHFLHV H[yWLFDV LQYDVRUDV (O &DWiORJR (VSDxRO GH (VSHFLHV ([yWLFDV ,QYDVRUDV 3ODQ (VWUDWpJLFR5HJLRQDOGH*HVWLyQ\&RQWUROGH(VSHFLHV([yWLFDV,QYDVRUDV 7(0$ /D/H\GH&DQWDEULDGHGHDEULOGH3HVFDHQ$JXDV&RQWLQHQWDOHV2EMHWLYRV \SULQFLSDOHVFRQWHQLGRV 7(0$ /D/H\GH&DQWDEULDGHGHPD\RGH&RQVHUYDFLyQGHOD1DWXUDOH]D2EMHWLYRV \SULQFLSDOHVFRQWHQLGRV 7(0$ /HJLVODFLyQVREUHHVSHFLHVDPHQD]DGDV(O/LVWDGRGH(VSHFLHV6LOYHVWUHVHQ5pJLPHQ GH3URWHFFLyQ(VSHFLDO\GHO&DWiORJR(VSDxROGH(VSHFLHV$PHQD]DGDV 5HDO'HFUHWR GHGHIHEUHUR (O&DWiORJR5HJLRQDOGH(VSHFLHV$PHQD]DGDV 'HFUHWR GHGHGLFLHPEUH 7(0$ /D/H\GHGHGLFLHPEUHGH3DUTXHV1DFLRQDOHV(O3ODQ'LUHFWRUGHOD5HG GH3DUTXHV1DFLRQDOHV 5HDO'HFUHWRGHGHRFWXEUH boc.cantabria.es CVE-2019-3750 7(0$ 202/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12710 7(0$ /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HDO 'HFUHWR GH GH HQHUR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH ORV 6HUYLFLRV GH 3UHYHQFLyQ'LVSRVLFLRQHVPtQLPDVHQPDWHULDGHVHJXULGDG\VDOXGHQODVREUDV 7(0$ /H\ GH GH QRYLHPEUH GH &RQWUDWRV GHO 6HFWRU 3~EOLFR 7LWXOR 3UHOLPLQDU 2EMHWLYRV\iPELWRGHDSOLFDFLyQGHOD/H\\WLSRVGHFRQWUDWRVGHO6HFWRU3~EOLFR 7(0$ (VWUDWHJLD 1DFLRQDO GH OD %LRGLYHUVLGDG (VWUDWHJLD )RUHVWDO (VSDxD 3ODQ )RUHVWDO (VSDxRO 7(0$ (O 3ODQ )RUHVWDO GH &DQWDEULD 2EMHWLYRV (MHV \ SURJUDPDV GH DFWXDFLyQ 3ULQFLSDOHV PHGLGDV 7(0$ 3ODQ (VWUDWpJLFR GH 3UHYHQFLyQ \ /XFKD FRQWUD ,QFHQGLRV )RUHVWDOHV HQ &DQWDEULD $QWHFHGHQWHViPELWRGHDSOLFDFLyQREMHWLYRVHMHV\SULQFLSDOHVPHGLGDV 7(0$ &DUDFWHUtVWLFDV ERWiQLFRHFROyJLFRVHOYtFRODV GH ODV HVSHFLHV GH FRQtIHUDV GH PD\RU LQWHUpVIRUHVWDOHQ&DQWDEULD 7(0$ &DUDFWHUtVWLFDV ERWiQLFRHFROyJLFRVHOYtFRODV GH ODV HVSHFLHV GH IURQGRVDV GH PD\RU LQWHUpVIRUHVWDOHQ&DQWDEULD 7(0$ %DVHV VHOYtFRODV GH OD JHVWLyQ GH PRQWHV DUERODGRV &ODVLILFDFLyQ GH ODV PDVDV IRUHVWDOHVVHJ~QVXFRPSRVLFLyQHVSHFtILFD0pWRGRVGHEHQHILFLRGHILQLFLyQFODVHV\ FULWHULRV GH VHOHFFLyQ )RUPDV SULQFLSDOHV GH PDVD 7UDWDPLHQWRV VHOYtFRODV FODVHV VLJQLILFDGRV\FRQFHSWR 7(0$ &XLGDGRV GH ODV PDVDV DUEyUHDV /LPSLDV FODUHRV FODUDV SRGDV ODERUHR GHO VXHOR )HUWLOL]DQWHV +HUELFLGDV \ VHOYtFLGDV &RQRFLPLHQWR GH OD PDTXLQDULD \ SURGXFWRV D HPSOHDU 7(0$ 5HSREODFLyQIRUHVWDO'HILQLFLyQ\DQWHFHGHQWHVKLVWyULFRV'LVHxR(OHFFLyQGHHVSHFLHV 7UDWDPLHQWRGHODYHJHWDFLyQSUHH[LVWHQWH3UHSDUDFLyQGHOVXHOR 7(0$ 5HSREODFLyQ IRUHVWDO 3ULQFLSDOHV PpWRGRV GH UHSREODFLyQ &XLGDGRV FXOWXUDOHV D ODV UHSREODFLRQHV2EUDVDFFHVRULDV0DTXLQDULDHPSOHDGDHQUHSREODFLyQIRUHVWDO 7(0$ (OVLVWHPDSDVWRUDO&UHDFLyQ\FXLGDGRVFXOWXUDOHVGHSDVWL]DOHV$SURYHFKDPLHQWRGH SDVWL]DOHVJDQDGHUtDH[WHQVLYDHQ&DQWDEULDUD]DVDXWyFWRQDVHQ&DQWDEULD 7(0$ ,QFHQGLRV IRUHVWDOHV FODVHV FDXVDV \ IDFWRUHV TXH LQIOX\HQ HQ VX SURSDJDFLyQ 3UHGLFFLyQ GHO ULHVJR GH LQFHQGLR \ VX SHOLJURVLGDG ËQGLFHV PHWHRUROyJLFRV 9XOQHUDELOLGDGGHOWHUULWRULR\PRGHORVGHFRPEXVWLEOHVIRUHVWDOHV$QiOLVLVGHODVLWXDFLyQ HQ&DQWDEULD 7(0$ 3UHYHQFLyQ \ GHWHFFLyQ GH LQFHQGLRV IRUHVWDOHV 2EMHWLYRV VLVWHPDV \ PHGLGDV $FWXDFLRQHVGLULJLGDVDOKRPEUH\DOPHGLR([WLQFLyQGHLQFHQGLRVIRUHVWDOHV3ULQFLSLRV HVWUDWHJLDV WiFWLFDV \ PHGLRV GLVSRQLEOHV SDUD OD H[WLQFLyQ 5HJHQHUDFLyQ GH iUHDV DIHFWDGDVSRULQFHQGLRVIRUHVWDOHV 7(0$ (QIHUPHGDGHV \ SODJDV IRUHVWDOHV GH PD\RU WUDVFHQGHQFLD HQ &DQWDEULD 0HGLGDV FXOWXUDOHVSURILOiFWLFDVELROyJLFDV\WHUDSpXWLFDV 7(0$ (ODSURYHFKDPLHQWRIRUHVWDO)DVHVPHGLRV\PpWRGRVGHDSURYHFKDPLHQWR,PSDFWRV JHQHUDGRVSRUHODSURYHFKDPLHQWRIRUHVWDO0HGLGDVSUHYHQWLYDV\FRUUHFWRUDVSDUDHYLWDU WDOHVLPSDFWRV 7(0$ &DPLQRV IRUHVWDOHV SODQLILFDFLyQ 7LSRV 7UD]DGR 6HFFLyQ WUDQVYHUVDO \ SHUILO ORQJLWXGLQDO0RYLPLHQWRGHWLHUUDV0DTXLQDULDHPSOHDGDHQVXFRQVWUXFFLyQ boc.cantabria.es CVE-2019-3750 203/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12711 7(0$ 2UGHQDFLyQ GH PRQWHV 3ODQLILFDFLyQ &RQWHQLGR 3ODQ *HQHUDO &DUDFWHUtVWLFDV VHOYtFRODV \ GDVRFUiWLFDV D GHWHUPLQDU FULWHULR GH FRQWDELOLGDG GHWHUPLQDFLyQ GH OD VXSHUILFLH D UHJHQHUDU 3ODQ (VSHFLDO $SURYHFKDPLHQWRV PHMRUDV \ SODQHV GH XVR EDODQFHHFRQyPLFR 7(0$ /DLQGXVWULDWUDQVIRUPDGRUDGHODPDGHUD,PSRUWDQFLDHFRQyPLFDGHOVHFWRUIRUHVWDO/D &HUWLILFDFLyQ)RUHVWDO(VSHFLDOUHIHUHQFLDD&DQWDEULD 7(0$ 0DWHULDOHV EiVLFRV GH FRQVWUXFFLyQ +RUPLJyQ SURSLHGDGHV DSOLFDFLRQHV \ QRUPDWLYD WpFQLFD $FHUR HVWUXFWXUDO SURSLHGDGHV DSOLFDFLRQHV \ QRUPDWLYD WpFQLFD 0DGHUD HVWUXFWXUDOSURSLHGDGHVDSOLFDFLRQHV\QRUPDWLYDWpFQLFD 7(0$ /RV ERVTXHV FRPR VXPLGHURV GH FDUERQR ,PSDFWR GHO FDPELR FOLPiWLFR VREUH ORV HFRVLVWHPDVIRUHVWDOHV$SOLFDFLyQHQ(VSDxD 7(0$ (GDIRORJÕD ғ IRUHVWDO(OVXHOR3HUILOGHXQVXHOR\KRUL]RQWHV3URSLHGDGHVItVLFDVGHORV VXHORV(ODJXDHQHOVXHOR/DPDWHULDRUJiQLFDGHOVXHOR\ORVSURFHVRVGHKXPLILFDFLyQ \PLQHUDOL]DFLyQ3URFHVRVJHQpWLFRV\GHHYROXFLyQHQORVVXHORV3ULQFLSDOHVVXHORVGH &DQWDEULD 7(0$ 0HGLR QDWXUDO HQ &DQWDEULD *HRJUDItD ItVLFD *HRORJtD (GDIRORJtD &OLPDWRORJtD %LRJHRJUDItD 7(0$ /RVERVTXHVLEpULFRV/RVERVTXHVHQHOSDLVDMHYHJHWDOGH(VSDxD'HVFULSFLyQGHORV VLVWHPDV IRUHVWDOHV DUERODGRV HQ &DQWDEULD 3UREOHPDV GHULYDGRV GH VX JHVWLyQ GHO PDUFRRUJDQL]DWLYRGHODHVWUXFWXUDGHODSURSLHGDGIRUHVWDO\GHODGHPDQGDVRFLDOSDUD HORFLR\UHFUHR 7(0$ 0DWRUUDOHV'LVWULEXFLyQ\VLJQLILFDFLyQVHULDOGHORVPDWRUUDOHVHVSDxROHV,PSRUWDQFLD HFROyJLFD6XDSURYHFKDPLHQWR'LVWULEXFLyQHQ&DQWDEULD 7(0$ 3DVWL]DOHV &ODVLILFDFLyQ GHVFULSFLyQ HFRORJtD \ iUHDV ELRFOLPiWLFDV GH ORV WLSRV PiV LPSRUWDQWHV'HVFULSFLyQHFRORJtD\DVSHFWRVSDVFtFRODVGHODVSULQFLSDOHVHVSHFLHVHQ &DQWDEULD 7(0$ 3ULQFLSDOHV HVSHFLHV GH IORUD \ IDXQD H[yWLFD LQYDVRUD HQ &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV\GLVWULEXFLyQHQ&DQWDEULD9tDVGHHQWUDGDSUREOHPiWLFDDPELHQWDOJHVWLyQ \PpWRGRVGHFRQWURO 7(0$ /RVGDxRVSURGXFLGRVSRUODIDXQDVLOYHVWUHHQ&DQWDEULD(VSHFLHVFDXVDQWHV\WLSRVGH GDxRVSURGXFLGRV,QVWUXPHQWRV\KHUUDPLHQWDVGHSUHYHQFLyQ\FRPSHQVDFLyQ 7(0$ /D FD]D HQ &DQWDEULD 2UGHQDFLyQ \ SODQLILFDFLyQ FLQHJpWLFD 3ULQFLSDOHV HVSHFLHV GH FD]DHQ&DQWDEULD3UREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQ 7(0$ /DSHVFDIOXYLDOHQ&DQWDEULD2UGHQDFLyQ\SODQLILFDFLyQ(VSHFLHVREMHWRGHSHVFDPiV LPSRUWDQWHV3UREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQ 7(0$ /D 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV 3ULQFLSDOHV FDUDFWHUtVWLFDV'HVFULSFLyQ3UREOHPiWLFDGHFRQVHUYDFLyQ 7(0$ /D5HG1DWXUDHQ&DQWDEULD$QWHFHGHQWHV2EMHWLYRV9DORUHVGHFRQVHUYDFLyQ 'HVFULSFLyQ\FDUDFWHUtVWLFDV&RQGLFLRQDQWHVGHVXJHVWLyQ 7(0$ 3DUTXH 1DFLRQDO GH ORV 3LFRV GH (XURSD $QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRVGHSODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ /RV3DUTXHV1DWXUDOHVHQ&DQWDEULD$QWHFHGHQWHV'HVFULSFLyQ9DORUHVTXHPRWLYDURQ VXGHFODUDFLyQ$VSHFWRVVRFLRHFRQyPLFRV\FRQGLFLRQDQWHVGHJHVWLyQ,QVWUXPHQWRVGH SODQHDPLHQWRRUGHQDFLyQ\JHVWLyQHQYLJRU boc.cantabria.es CVE-2019-3750 204/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ ÈUHDV 1DWXUDOHV GH (VSHFLDO ,QWHUpV \ 0RQXPHQWRV 1DWXUDOHV GH &DQWDEULD $QWHFHGHQWHV 'HVFULSFLyQ 9DORUHV TXH PRWLYDURQ VX GHFODUDFLyQ $VSHFWRV VRFLRHFRQyPLFRV \ FRQGLFLRQDQWHV GH JHVWLyQ ,QVWUXPHQWRV GH SODQHDPLHQWR RUGHQDFLyQ\JHVWLyQHQYLJRU 7(0$ (VSHFLHV GH IORUD DPHQD]DGD GH &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV 'LVWULEXFLyQ 2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (VSHFLHV GH IDXQD DPHQD]DGD GH &DQWDEULD &DUDFWHUtVWLFDV HFROyJLFDV 'LVWULEXFLyQ 2EMHWLYRV\FRQGLFLRQDQWHVGHVXJHVWLyQ\FRQVHUYDFLyQ 7(0$ (O XVR S~EOLFR HQ OD 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV \ JHVWLyQ0RWLYDFLyQ\WLSRORJtDGHYLVLWDQWHV&ULWHULRVGHFDOLGDGGHODYLVLWDDORVHVSDFLRV QDWXUDOHVSURWHJLGRV 7(0$ /DFRQVHUYDFLyQH[VLWXGHODGLYHUVLGDGELROyJLFD&HQWURVGH5HFXSHUDFLyQGH(VSHFLHV &UtDHQFDXWLYLGDG%DQFRVGHJHUPRSODVPD CVE-2019-3750 7(0$ i Pág. 12712 boc.cantabria.es 205/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532',3/20$'26<7(&1,&260(',26 ,1*(1,(527e&1,&2,1'8675,$/ 0$7(5,$6(63(&Ë),&$6 7(0$ /D (PSUHVD &RQFHSWR \ IXQFLyQ &ODVHV GH (PSUHVDV 2UJDQL]DFLyQ GH ODV (PSUHVDV )XQFLRQHVGHORVÏUJDQRVGH'LUHFFLyQGH$GPLQLVWUDFLyQ\GH *HVWLyQ/DV6RFLHGDGHV 5HVSRQVDELOLGDGGHORVVRFLRV 7(0$ /D LQYHUVLyQ HQ OD (PSUHVD ,QGXVWULDO &ULWHULRV GH VHOHFFLyQ &DSLWDO )LMR VXV SDUWLGDV IXQGDPHQWDOHV,QYHUVLyQSURGXFWLYD\FDSDFLGDGGHSURGXFFLyQ(OFLFORGHOHMHUFLFLRFDSLWDO FLUFXODQWH\VXURWDFLyQ 7(0$ (FRQRPtD FRQFHSWR \ REMHWR 3UREOHPDV IXQGDPHQWDOHV GHO VLVWHPD HFRQyPLFR UHFXUVRV HFRQyPLFRVFRVWHVGHRSRUWXQLGDG0HUFDGR\SUHFLRV/H\GHRIHUWD\GHPDQGD6LVWHPDV HFRQyPLFRV PHUFDGR SHUIHFWR H LPSHUIHFWR PRQRSROLR ROLJRSROLR FRQFXUUHQFLD SHUIHFWD HWF )DFWRUHVGHSURGXFFLyQFDSLWDO\WUDEDMR2UJDQL]DFLyQHPSUHVDULDOHQIDVHS~EOLFD SULYDGDFRQFHQWUDFLyQHPSUHVDULDOSDSHOGHODVPXOWLQDFLRQDOHVHWF 7(0$ &ODVLILFDFLyQ1DFLRQDOGH$FWLYLGDGHV(FRQyPLFDV &1$( 5HDO'HFUHWRGH GHDEULO 7(0$ /D,QGXVWULDHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD3DUWLFLSDFLyQGHODDFWLYLGDGLQGXVWULDO HQ HO FRQMXQWR GH OD HFRQRPtD QDFLRQDO \ DXWRQyPLFD 9DORU DxDGLGR HPSOHR EDODQ]D FRPHUFLDO)DFWRUHVGHORFDOL]DFLyQLQGXVWULDO 7(0$ /H\GHGHGLFLHPEUHGHJDUDQWtDGHODXQLGDGGHPHUFDGR 7(0$ /H\GHGHMXOLRGH,QGXVWULD 7(0$ 5HDO'HFUHWRGHGHPD\RSRUHOTXHVHDSUXHEDHO5HJLVWUR,QWHJUDGR,QGXVWULDO 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH OD LQIUDHVWUXFWXUDSDUDOD&DOLGDG\OD6HJXULGDG,QGXVWULDO 7(0$ /H\ GH GH GLFLHPEUH GHO 6HFWRU (OpFWULFR 5HDO 'HFUHWR GH GH GLFLHPEUHSRUHOTXHVHUHJXODQODVDFWLYLGDGHVGHWUDQVSRUWHGLVWULEXFLyQFRPHUFLDOL]DFLyQ VXPLQLVWUR\SURFHGLPLHQWRVGHDXWRUL]DFLyQGHHQHUJtDHOpFWULFD 7(0$ 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH DSUXHEDQ HO 5HJODPHQWR VREUH FRQGLFLRQHV WpFQLFDV \ JDUDQWtDV GH VHJXULGDG HQ OtQHDV HOpFWULFDV GH DOWD WHQVLyQ \ VXV LQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV,7&/$7D 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHUHJXODODDFWLYLGDGGHSURGXFFLyQHOpFWULFD DSDUWLUGHIXHQWHVGHHQHUJtDUHQRYDEOHVFRJHQHUDFLyQ\UHVLGXRV5HDO'HFUHWR GHGHRFWXEUHSRUHOTXHVHUHJXODQODVFRQGLFLRQHVDGPLQLVWUDWLYDVWpFQLFDV\HFRQyPLFDV GH ODV PRGDOLGDGHV GH VXPLQLVWUR GH HQHUJtD FRQ DXWRFRQVXPR \ GH SURGXFFLyQ FRQ DXWRFRQVXPR 7(0$ 5HDO'HFUHWRGHGHDJRVWRSRUHOTXHVHDSUXHEDHO5HJODPHQWRHOHFWURWpFQLFR SDUDEDMDWHQVLyQ2UGHQGHGHRFWXEUHGHSRUODTXHVHGLFWDQLQVWUXFFLRQHVSDUDOD DSOLFDFLyQGHO5HJODPHQWR(OHFWURWpFQLFRSDUD%DMD7HQVLyQ i Pág. 12713 boc.cantabria.es CVE-2019-3750 7(0$ 5HDO 'HFUHWR GH GH PD\R SRU HO TXH VH DSUXHEDQ HO 5HJODPHQWR VREUH FRQGLFLRQHVWpFQLFDV\JDUDQWtDVGHVHJXULGDGHQLQVWDODFLRQHVHOpFWULFDVGHDOWDWHQVLyQ\ VXV,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV,7&5$7D 206/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 5HDO 'HFUHWR GH GH QRYLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH HILFLHQFLD HQHUJpWLFD HQ LQVWDODFLRQHV GH DOXPEUDGR H[WHULRU \ VXV ,QVWUXFFLRQHV WpFQLFDV FRPSOHPHQWDULDV($D($ 7(0$ /H\GHGHRFWXEUHGHO6HFWRUGH+LGURFDUEXURV5HDO'HFUHWRGH GH GLFLHPEUH SRU HO TXH VH UHJXODQ ODV DFWLYLGDGHV GH WUDQVSRUWH GLVWULEXFLyQ FRPHUFLDOL]DFLyQVXPLQLVWUR\SURFHGLPLHQWRVGHDXWRUL]DFLyQGHLQVWDODFLRQHVGHJDVQDWXUDO 7(0$ 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH VHJXULGDGFRQWUDLQFHQGLRVHQORVHVWDEOHFLPLHQWRVLQGXVWULDOHV2UGHQ,1'GH GH DEULO SRU OD TXH VH DSUXHED HO SURFHGLPLHQWR SDUD OD WUDPLWDFLyQ \ OHJDOL]DFLyQ GH ODV LQVWDODFLRQHVFRQWUDLQFHQGLRVHQORVHVWDEOHFLPLHQWRVLQGXVWULDOHV 7(0$ 5HDO'HFUHWRGHGHPD\RSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHLQVWDODFLRQHV GHSURWHFFLyQFRQWUDLQFHQGLRV 7(0$ 5HDO'HFUHWRGHGHHQHURSRUHOTXHVHUHJXODQODDFWLYLGDGLQGXVWULDO\OD SUHVWDFLyQGHVHUYLFLRVHQORVWDOOHUHVGHUHSDUDFLyQGHYHKtFXORVDXWRPyYLOHVGHVXVHTXLSRV \FRPSRQHQWHV5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHDSUXHEDHO5HJODPHQWR GH9HKtFXORV+LVWyULFRV 7(0$ 5HDO 'HFUHWR GH GH RFWXEUH SRU HO TXH VH UHJXOD OD LQVSHFFLyQ WpFQLFD GH YHKtFXORV 'HFUHWR GH GH DEULO SRU HO TXH VH DSUXHED HO 5HJODPHQWR VREUH SUHVWDFLyQGHVHUYLFLRVGH,QVSHFFLyQ7pFQLFDGH9HKtFXORVHQOD&RPXQLGDG$XWyQRPDGH &DQWDEULD 7(0$ 5HDO 'HFUHWR GH GH MXQLR SRU HO TXH VH UHJXODQ ORV SURFHGLPLHQWRV GH KRPRORJDFLyQ GH YHKtFXORV GH PRWRU \ VXV UHPROTXHV PiTXLQDV DXWRSURSXOVDGDV R UHPROFDGDVYHKtFXORVDJUtFRODVDVtFRPRGHVLVWHPDVSDUWHV\SLH]DVGHGLFKRVYHKtFXORV 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHUHJXODODWUDPLWDFLyQGHODVUHIRUPDVGH YHKtFXORV 7(0$ (O WUDQVSRUWH WHUUHVWUH GH PHUFDQFtDV SHOLJURVDV 5HJXODFLyQ GH OD IDEULFDFLyQ \ FRPHUFLDOL]DFLyQGHORVYHKtFXORVHQYDVHV\FRQWHQHGRUHVSDUDHOWUDQVSRUWHGHPHUFDQFtDV SHOLJURVDV(OWUDQVSRUWHGHPHUFDQFtDVSHUHFHGHUDVDWHPSHUDWXUDUHJXODGD5HJXODFLyQGH OD IDEULFDFLyQ \ FRPHUFLDOL]DFLyQ GH ORV YHKtFXORV GHVWLQDGRV DO WUDVSRUWH GH PHUFDQFtDV SHUHFHGHUDV 7(0$ 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHDSUXHEDHO5HJODPHQWRGH,QVWDODFLRQHV 7pUPLFDVHQORV(GLILFLRV 7(0$ 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHGLVWULEXFLyQ\ XWLOL]DFLyQGHFRPEXVWLEOHVJDVHRVRV\VXVLQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV,&*D 7(0$ 5HJODPHQWRGHLQVWDODFLRQHVSHWUROtIHUDV\VXV,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV0, ,3D 7(0$ 5HDO'HFUHWRGHGHGLFLHPEUHSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHHTXLSRV DSUHVLyQ\VXVLQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV 7(0$ 5HDO'HFUHWRGHGHIHEUHURSRUHOTXHVHDSUXHEDQHO5HJODPHQWRGHVHJXULGDG SDUDLQVWDODFLRQHVIULJRUtILFDV\VXVLQVWUXFFLRQHVWpFQLFDVFRPSOHPHQWDULDV 7(0$ 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH DSUXHED OD ,QVWUXFFLyQ 7pFQLFD &RPSOHPHQWDULD $(0 $VFHQVRUHV GHO 5HJODPHQWR GH DSDUDWRV GH HOHYDFLyQ \ PDQXWHQFLyQDSUREDGRSRU5HDO'HFUHWRGHGHQRYLHPEUH2UGHQ,11 GHGHDEULOSRUODTXHVHHVWDEOHFHHOSURWRFRORHVSHFtILFRGHLQVSHFFLyQSHULyGLFDGHORV DVFHQVRUHVDVtFRPRORVUyWXORVLGHQWLILFDWLYRVGHODLQVSHFFLyQSHULyGLFDHQOD&RPXQLGDG $XWyQRPDGH&DQWDEULD i Pág. 12714 boc.cantabria.es CVE-2019-3750 7(0$ 5HDO 'HFUHWR GH GH MXQLR SRU HO TXH VH DSUXHED HO 5HJODPHQWR GH $OPDFHQDPLHQWRGH3URGXFWRV4XtPLFRV\VXV,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV0,( $34D5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHDSUXHEDHO5HJODPHQWR VREUHIHUWLOL]DQWHVDEDVHGHQLWUDWRDUPyQLFRFRQXQFRQWHQLGRHQQLWUyJHQRLJXDORLQIHULRUDO SRUFLHQWRHQPDVD 207/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 5HDO'HFUHWRGHGHMXQLRSRUHOTXHVHDSUXHEDXQDQXHYD,QVWUXFFLyQWpFQLFD FRPSOHPHQWDULD 0,($(0 GHO 5HJODPHQWR GH DSDUDWRV GH HOHYDFLyQ \ PDQXWHQFLyQ UHIHUHQWH D JU~DV WRUUH SDUD REUDV X RWUDV DSOLFDFLRQHV 5HDO 'HFUHWR GH GH MXQLRSRUHOTXHVHDSUXHEDHOQXHYRWH[WRPRGLILFDGR\UHIXQGLGRGHOD,QVWUXFFLyQWpFQLFD FRPSOHPHQWDULD 0,($(0 GHO 5HJODPHQWR GH DSDUDWRV GH HOHYDFLyQ \ PDQXWHQFLyQ UHIHUHQWHDJU~DVPyYLOHVDXWRSURSXOVDGDV 7(0$ 5HDO 'HFUHWR GH GH GLFLHPEUH SRU HO TXH VH DSUXHED HO 5HJODPHQWR VREUH LQVWDODFLRQHVQXFOHDUHV\UDGLDFWLYDV5HDO'HFUHWRGHGHMXOLRSRUHOTXHVH DSUXHEDHO5HJODPHQWRVREUHLQVWDODFLyQ\XWLOL]DFLyQGHDSDUDWRVGHUD\RV;FRQILQHVGH GLDJQyVWLFRPpGLFR 7(0$ /H\GHGHGLFLHPEUHGH0HWURORJtD5HDO'HFUHWRGHGHMXQLRSRUHO TXHVHGHVDUUROODOD/H\GHGHGLFLHPEUHGH0HWURORJtD 7(0$ 5HJODPHQWR &( QGHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHMXOLRGH SRUHOTXHVHHVWDEOHFHQORVUHTXLVLWRVGHDFUHGLWDFLyQ\YLJLODQFLDGHOPHUFDGRUHODWLYRVDOD FRPHUFLDOL]DFLyQGHORVSURGXFWRV\SRUHOTXHVHGHURJDHO5HJODPHQWR &(( Q 'HFLVLyQQ&(GHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHMXOLRGHVREUH XQPDUFRFRP~QSDUDODFRPHUFLDOL]DFLyQGHORVSURGXFWRV\SRUODTXHVHGHURJDOD'HFLVLyQ &((GHO&RQVHMR 7(0$ 5HDO 'HFUHWR GH GH RFWXEUH SRU HO TXH VH HVWDEOHFHQ ODV QRUPDV SDUD OD FRPHUFLDOL]DFLyQ\SXHVWDHQVHUYLFLRGHODVPiTXLQDV5HDO'HFUHWRGHGHMXOLR SRUHOTXHVHHVWDEOHFHQORVUHTXLVLWRVHVHQFLDOHVGHVHJXULGDGSDUDODFRPHUFLDOL]DFLyQGH ORVHTXLSRVDSUHVLyQ 7(0$ 5HDO'HFUHWRGHGHPD\RSRUHOTXHVHHVWDEOHFHQORVUHTXLVLWRVHVHQFLDOHVGH VHJXULGDG SDUD OD FRPHUFLDOL]DFLyQ GH DVFHQVRUHV \ FRPSRQHQWHV GH VHJXULGDG SDUD DVFHQVRUHV 5HJODPHQWR 8( GHO 3DUODPHQWR (XURSHR \ GHO &RQVHMR GH GH PDU]R GH VREUH ORV DSDUDWRV TXH TXHPDQ FRPEXVWLEOHV JDVHRVRV \ SRU HO TXH VH GHURJDOD'LUHFWLYD&( 7(0$ 5HJODPHQWR 8( QGHO3DUODPHQWR(XURSHR\GHO&RQVHMRGHGHPDU]RGH SRUHOTXHVHHVWDEOHFHQFRQGLFLRQHVDUPRQL]DGDVSDUDODFRPHUFLDOL]DFLyQGHSURGXFWRVGH FRQVWUXFFLyQ\VHGHURJDOD'LUHFWLYD&((GHO&RQVHMR 7(0$ /H\GHGHMXQLRGH$UWHVDQtDHQ&DQWDEULD2UGHQ,1'GHGHDEULOSRU ODTXHVHDSUXHEDHO5HSHUWRULRGH$FWLYLGDGHV$UWHVDQDVGH&DQWDEULD 7(0$ /DOH\GHGHQRYLHPEUHGHSUHYHQFLyQGHULHVJRVODERUDOHV 7(0$ 5HDO'HFUHWRGHGHHQHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORV6HUYLFLRV GH3UHYHQFLyQ 7(0$ 5HDO'HFUHWRGHGHRFWXEUHSRUHOTXHVHHVWDEOHFHQGLVSRVLFLRQHVPtQLPDV GHVHJXULGDG\VDOXGHQODVREUDVGHFRQVWUXFFLyQ 7(0$ (O&yGLJR7pFQLFRGHOD(GLILFDFLyQ &7( 'LVSRVLFLRQHVJHQHUDOHV&RQGLFLRQHVWpFQLFDV\ DGPLQLVWUDWLYDV([LJHQFLDV%iVLFDV&RQWHQLGRGHOSUR\HFWR'RFXPHQWDFLyQGHOVHJXLPLHQWR GHODREUD 7(0$ &RQWDPLQDFLyQGHOVXHOR5HDO'HFUHWRGHGHHQHURSRUHOTXHVHHVWDEOHFHOD UHODFLyQGHDFWLYLGDGHVSRWHQFLDOPHQWHFRQWDPLQDQWHVGHOVXHOR\ORVFULWHULRV\HVWiQGDUHV SDUDODGHFODUDFLyQGHVXHORVFRQWDPLQDGRV/H\GHGHMXOLRGHUHVLGXRV\VXHORV FRQWDPLQDGRV 7(0$ 3UHWUDWDPLHQWRGHODVDJXDVSRWDEOHVSURFHVRVGHFRDJXODFLyQIORFXODFLyQ6HGLPHQWDFLyQ \ILOWUDFLyQ5HDFWLYRVDXWRUL]DGRVHPSOHDGRVHQHVWRVWUDWDPLHQWRV i Pág. 12715 boc.cantabria.es CVE-2019-3750 7(0$ /H\GHGHQRYLHPEUHGHO5XLGR\QRUPDWLYDGHGHVDUUROOR'RFXPHQWREiVLFR '%+53URWHFFLyQIUHQWHDOUXLGRGHO&yGLJR7pFQLFRGHOD(GLILFDFLyQ 208/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'( )81&,Ï13Ò%/,&$ 7(0$ 7UDWDPLHQWRV GH GHVLQIHFFLyQ GHO DJXD FORUDFLyQ UDGLDFLyQ 89 2WURV SURFHGLPLHQWRV GH GHVLQIHFFLyQ 7(0$ /DSURWHFFLyQGHOPHGLRPDULQR/H\GHGHGLFLHPEUHGHSURWHFFLyQGHOPHGLR PDULQR 7(0$ /D /H\ GH GH GLFLHPEUH GH HYDOXDFLyQ DPELHQWDO /D /H\ GH GH GLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGRGH&DQWDEULD 7(0$ 1RUPDWLYD HQ PDWHULD GH HVSHFWiFXORV /D /H\ GH &DQWDEULD GH GH DEULO GH (VSHFWiFXORV3~EOLFRV\$FWLYLGDGHV5HFUHDWLYDVGH&DQWDEULD 7(0$ 5HDO 'HFUHWR /HJLVODWLYR GH GH VHSWLHPEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGRGHOD/H\GH3XHUWRVGHO(VWDGR\GHOD0DULQD0HUFDQWH/H\GH&DQWDEULD GHGHQRYLHPEUHGH3XHUWRVGH&DQWDEULD 7(0$ /D/H\GH&DQWDEULDGHGHMXQLRGH2UGHQDFLyQ7HUULWRULDO\5pJLPHQ8UEDQtVWLFR GHO6XHOR 7(0$ /H\GHGHMXOLRGHO6LVWHPD1DFLRQDOGH3URWHFFLyQ&LYLO\5HDO'HFUHWR GH GH DEULO SRU HO TXH VH DSUXHED OD 1RUPD %iVLFD GH 3URWHFFLyQ &LYLO 5HDO 'HFUHWR GH GH VHSWLHPEUH SRU HO TXH VH UHJXOD OD FRPSRVLFLyQ \ UpJLPHQ GH IXQFLRQDPLHQWRGHOD&RPLVLyQ1DFLRQDOGH3URWHFFLyQ&LYLO 7(0$ /H\ GH &DQWDEULD GH GH DEULO GHO 6LVWHPD GH 3URWHFFLyQ &LYLO \ *HVWLyQ GH (PHUJHQFLDVGH&DQWDEULD'HFUHWRGHGHRFWXEUHSRUHOTXHVHHVWDEOHFHOD FRPSRVLFLyQRUJDQL]DFLyQ\UpJLPHQGHIXQFLRQDPLHQWRGHOD&RPLVLyQGH3URWHFFLyQ&LYLO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 'HFUHWR GH GH HQHUR SRU HO TXH VH UHJXODQODVRUJDQL]DFLRQHVGH9ROXQWDULDGRGH3URWHFFLyQ&LYLOGH&DQWDEULD\HOUHJLVWURGH RUJDQL]DFLRQHVGH9ROXQWDULDGRGHSURWHFFLyQ&LYLOGH&DQWDEULD'HFUHWRGHGH PDU]RSRUHOTXHVHFUHDOD(VFXHODGH3URWHFFLyQ&LYLO 7(0$ 3ODQ7HUULWRULDOGH(PHUJHQFLDVGH3URWHFFLyQ&LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 'HFUHWRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO3ODQ7HUULWRULDOGH(PHUJHQFLDV GH&DQWDEULD 3/$7(5&$17 7(0$ 5HDO 'HFUHWR GH GH PDU]R SRU HO TXH VH DSUXHED OD 1RUPD %iVLFD GH $XWRSURWHFFLyQGHORVFHQWURVHVWDEOHFLPLHQWRV\GHSHQGHQFLDVGHGLFDGRVDDFWLYLGDGHVTXH SXHGDQGDURULJHQDVLWXDFLRQHVGHHPHUJHQFLD'HFUHWRGHGHDEULOSRUHOTXH VH UHJXOD HO SURFHGLPLHQWR GH &RQWURO $GPLQLVWUDWLYR \ 5HJLVWUR GH ORV 3ODQHV GH $XWRSURWHFFLyQ 7(0$ 5HDO'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVHDSUXHEDQPHGLGDVGHFRQWUROGH ORVULHVJRVLQKHUHQWHVDORVDFFLGHQWHVJUDYHVHQORVTXHLQWHUYHQJDQVXVWDQFLDVSHOLJURVDV 'HFUHWR GH GH PD\R SRU HO TXH VH GHVLJQDQ ORV yUJDQRV FRPSHWHQWHV GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULD\GHVDUUROODHO5HDO'HFUHWRGHGHMXOLR TXHDSUXHEDPHGLGDVGHFRQWUROGHORVULHVJRVLQKHUHQWHVDORVDFFLGHQWHVJUDYHVHQORVTXH LQWHUYHQJDQVXVWDQFLDVSHOLJURVDV CVE-2019-3750 7(0$ 5HDO'HFUHWRGHGHVHSWLHPEUHSRUHOTXHVHDSUXHEDOD'LUHFWUL]EiVLFDGH SURWHFFLyQFLYLOSDUDHOFRQWURO\SODQLILFDFLyQDQWHHOULHVJRGHDFFLGHQWHVJUDYHVHQORVTXH LQWHUYLHQHQ VXVWDQFLDV SHOLJURVDV 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHEDHO3ODQHVWDWDOGHSURWHFFLyQFLYLODQWHHOULHVJRTXtPLFR i Pág. 12716 boc.cantabria.es 209/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12717 $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 ,1*(1,(527e&1,&248Ë0,&2 0$7(5,$6(63(&Ë),&$6 /H\GHDJXDV'HVDUUROORGHO7tWXOR9VREUHODSURWHFFLyQGH'RPLQLR3~EOLFR+LGUiXOLFR\GH ODFDOLGDGGHODVDJXDVFRQWLQHQWDOHV/HJLVODFLyQYLJHQWHHQPDWHULDGHFRQWUROGHFDOLGDGGH ODVDJXDVVXSHUILFLDOHVGHVWLQDGDVDODSURGXFFLyQGHDJXDSRWDEOH &ULWHULRVVDQLWDULRVTXHGHEHQGHFXPSOLUODVDJXDVGHFRQVXPRKXPDQR\ODVLQVWDODFLRQHV TXHSHUPLWHQVXVXPLQLVWUR $QiOLVLVGHDJXDV³LQVLWX´FRORUWXUELGH]S+FORURGLVXHOWR\FRPELQDGRR[tJHQRGLVXHOWR WHPSHUDWXUD $QiOLVLV H LQWHUSUHWDFLyQ GH OD '%2 '42 \ PDWHULD RUJiQLFD HQ DJXDV VXSHUILFLDOHV &RUUHFFLRQHV GH ODV FDUDFWHUtVWLFDV ItVLFRTXtPLFDV GHO DJXD GH DEDVWHFLPLHQWR S~EOLFR DJUHVLYLGDG DEODQGDPLHQWR GHVIHUUL]DFLyQ IOXRUDFLyQ SRWDELOL]DFLyQ GH DJXDV VDOREUHV R PDULQDV\GHVPLQHUDOL]DFLyQ 9LJLODQFLDGHODVDJXDV , 7RPDGHPXHVWUDSDUDHODQiOLVLVPLFURELROyJLFRGHODVDJXDVGH FRQVXPRS~EOLFRWpFQLFDGHPXHVWUHRPDWHULDODFRQGLFLRQDPLHQWR\FRQVHUYDFLyQ1~PHUR GH WRPDV D HIHFWXDU HQ IXQFLyQ GH OD SREODFLyQ DEDVWHFLGD 0LFURELRORJtD GH ODV DJXDV GH DEDVWHFLPLHQWRS~EOLFRDQiOLVLVPtQLPR\QRUPDOQLYHOHVJXtD7pFQLFDVDQDOtWLFDV 9LJLODQFLDGHODVDJXDV ,, 7RPDGHPXHVWUDSDUDHODQiOLVLVItVLFRTXtPLFRGHODVDJXDVGH FRQVXPR S~EOLFR WpFQLFDV GH PXHVWUHR PDWHULDO DFRQGLFLRQDPLHQWR \ FRQVHUYDFLyQ GH OD PXHVWUDHQIXQFLyQGHORVSDUiPHWURVDGHWHUPLQDU$QiOLVLVLQLFLDOPtQLPRQRUPDOFRPSOHWR \ RFDVLRQDO 1~PHUR GH WRPDV D HIHFWXDU HQ IXQFLyQ GH OD SREODFLyQ DEDVWHFLGD \ WLSR GH DQiOLVLVDUHDOL]DU /D SURWHFFLyQ GHO PHGLR PDULQR /H\ GH GH GLFLHPEUH GH SURWHFFLyQ GHO PHGLR PDULQR$JXDVPDULQDV$QiOLVLVItVLFRTXtPLFR)XQGDPHQWRV\DSOLFDFLyQGHORVGDWRV2WURV DQiOLVLVGHFDOLGDG $EDVWHFLPLHQWRV GH DJXD FDSWDFLyQ ERPEHRV 'HSyVLWRV 5HGHV GH FRQGXFFLyQ GH DOWD \ EDMD 6DQHDPLHQWRV %RPEHRV 5HJLVWURV ,PERUQDOHV &iPDUD GH GHVFDUJD 7XEHUtD =DQMD GUHQDQWH7LSRV\ILQDOLGDGHVGHWRGRVHOORV 0HGLGDGHFDXGDO&RQWURO\DXWRPDWLVPRVHQRSHUDFLRQHVGHSURFHVRVGHDJXDVSRWDEOHV\ UHVLGXDOHV (VWDFLRQHV GH WUDWDPLHQWR GH DJXD SRWDEOH , 3UHWUDWDPLHQWR GH DJXDV SRWDEOHV 3URFHVRV GH FRDJXODFLyQ IORFXODFLyQ VHGLPHQWDFLyQ \ ILOWUDFLyQ 5HDFWLYRV DXWRUL]DGRV HQ HVWRV WUDWDPLHQWRV (VWDFLRQHV GH WUDWDPLHQWR GH DJXD SRWDEOH ,, 7UDWDPLHQWRV GH GHVLQIHFFLyQ GHO DJXD &ORUDFLyQ2]RQL]DFLyQ5DGLDFLyQ892WURVSURFHGLPLHQWRVGHGHVLQIHFFLyQ (VWDFLRQHV GHSXUDGRUDV GH DJXDV UHVLGXDOHV XUEDQDV , 3UHWUDWDPLHQWRV 7UDWDPLHQWRV SULPDULRV ,QWURGXFFLyQ D ORV SURFHVRV ELROyJLFRV )DQJRV DFWLYRV 3URFHVRV ELROyJLFRV GH FXOWLYRILMR (VWDFLRQHVGHSXUDGRUDVGHDJXDVUHVLGXDOHVXUEDQDV ,, /tQHDGHIDQJRV'HVLQIHFFLyQGH ORV HIOXHQWHV SDUD OD UHXWLOL]DFLyQ 7UDWDPLHQWRV DYDQ]DGRV SDUD OD UHJHQHUDFLyQ GH DJXDV UHVLGXDOHV 7UDWDPLHQWR GH DJXDV UHVLGXDOHV XUEDQDV HQ SHTXHxDV SREODFLRQHV )RVDV VpSWLFDV \ RWUDV SHTXHxDVGHSXUDGRUDVFRPSDFWDV (ODJXDHQODLQGXVWULD7LSRVGHDJXDVUHVLGXDOHV,QGXVWULDOHV&LFORGHODJXDHQODLQGXVWULD 7UDWDPLHQWRVGHODJXDHQODLQGXVWULD boc.cantabria.es CVE-2019-3750 210/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 7(0$ $QDOtWLFDV GH ODV $JXDV 5HVLGXDOHV ,QGXVWULDOHV 0HGLGDV GH FRQFHQWUDFLyQ HQ PDWHULD RUJiQLFD 72& (QVD\RV GH (FRWR[LFLGDG (VSHFWURIRWRPHWUtD GH $EVRUFLyQ $WyPLFD 'HPDQGD %LROyJLFD GH 2[tJHQR 'HPDQGD 4XtPLFD GH 2[tJHQR 6yOLGRV HQ 6XVSHQVLyQ *UXSRVGHO1LWUyJHQR ,QIOXHQFLD GH ORV YHUWLGRV LQGXVWULDOHV HQ ODV GHSXUDGRUDV GH $JXDV 5HVLGXDOHV 8UEDQDV 9LJLODQFLDGHODUHGGHFROHFWRUHVGHYHUWLGRVLQGXVWULDOHV1DWXUDOH]DGHYHUWLGRVLQGXVWULDOHV 9HUWLGRVVREUHODPLFURIDXQD 'RVLILFDFLyQ HQ VLVWHPDV GH WUDWDPLHQWR GH DJXDV 7LSRV GH GRVLILFDFLyQ HQ IXQFLyQ GHO SURGXFWRDGRVLILFDU\DOVLVWHPDGHDSOLFDFLyQ%RPEDVGRVLILFDGRUDV 'HSyVLWRV GH DJXDV SRWDEOHV \ UHVLGXDOHV 7LSRV IRUPDV XWLOLGDGHV YRO~PHQHV &RQWURO GH OOHQDGRGHGHSyVLWRVPHFiQLFRVHOpFWULFRVHOHFWUyQLFRV\HOHFWURPDJQpWLFRV /H\GH&DQWDEULDGHGHQRYLHPEUHGH$EDVWHFLPLHQWR \6DQHDPLHQWRGH$JXDV GHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD3ULQFLSLRVLQIRUPDGRUHVDQiOLVLVGHVXFRQWHQLGR 'HFUHWRGHGHPDU]RSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHO6HUYLFLR3~EOLFR GH6DQHDPLHQWR\'HSXUDFLyQGH$JXDV5HVLGXDOHVGH&DQWDEULD &DQRQ GH VDQHDPLHQWR GH &DQWDEULD 1RUPDWLYD YLJHQWH SDUD OD DSOLFDFLyQ GHO FDQRQ GH VDQHDPLHQWRHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 6LVWHPD GH ,QIRUPDFLyQ 1DFLRQDO GH $JXDV GH &RQVXPR +XPDQR &RQFHSWRV JHQHUDOHV 7LSRVGHXVXDULRV1LYHOHVGHLQIRUPDFLyQ\DFFHVRVDOVLVWHPD &RQYHQLR 263$5 REMHWLYRV PiV UHOHYDQWHV HVWUXFWXUD SULQFLSLRV \ PHGLGDV GH DSOLFDFLyQ =RQDVPDUtWLPDVFRQWHPSODGDV\VXRUJDQL]DFLyQ&RPLVLyQ263$5\HVWUXFWXUDMHUiUTXLFD 3URJUDPD5,' 9HUWLGRV DO OLWRUDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD , /HJLVODFLyQ HVWDWDO \ DXWRQyPLFD DSOLFDEOH &RPSHWHQFLDV VREUH YHUWLGRV DO PDU HQ HO iPELWR GHO OLWRUDO GH OD FRPXQLGDGDXWyQRPDGH&DQWDEULD 3ULQFLSDOHVQRUPDV\FRPSHWHQFLDVHQPDWHULDGH&RVWDV\0HGLR 0DULQRHQOD&RPXQLGDG $XWyQRPD GH &DQWDEULD 5HJODPHQWR *HQHUDO SDUD HO GHVDUUROOR \ HMHFXFLyQ GH OD /H\ GH &RVWDV'RPLQLR3~EOLFR0DUtWLPR7HUUHVWUH 9HUWLGRV DO OLWRUDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD ,, 5HTXLVLWRV \ FRQWHQLGR D LQFOXLU HQ XQD DXWRUL]DFLyQ GH YHUWLGR 3URFHGLPLHQWR GH REWHQFLyQ \ WUDPLWDFLyQ GH DXWRUL]DFLyQ GH YHUWLGRV DO PDU GHVGH WLHUUD HQ HO iPELWR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD /HJLVODFLyQ\QRUPDWLYDHQPDWHULDGHPHGLRDPELHQWH&ODVLILFDFLyQGHORVSULQFLSDOHVWH[WRV OHJLVODWLYRV\GRFXPHQWRVQRUPDWLYRVQDFLRQDOHVUHJLRQDOHV\HXURSHRV /D 'LUHFWLYD 8( GH GH QRYLHPEUH GH (PLVLRQHV ,QGXVWULDOHV 5HDO 'HFUHWR /HJLVODWLYRGHGHGLFLHPEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGRGHOD/H\GH SUHYHQFLyQ \ FRQWURO LQWHJUDGRV GH OD FRQWDPLQDFLyQ &RQWDPLQDFLyQ 3ULQFLSLRV 9DORUHV OtPLWHVGHHPLVLyQ/RVSHUPLVRVLQWHJUDGRVGHLQVWDODFLyQ/RVLQWHUFDPELRVGHLQIRUPDFLyQ /DVDXWRUL]DFLRQHVDPELHQWDOHVLQWHJUDGDVHQ&DQWDEULDSURFHGLPLHQWR\OHJLVODFLyQ /D/H\GHGHGLFLHPEUHGHFRQWURODPELHQWDOLQWHJUDGRGH&DQWDEULD /D /H\ GH GH GLFLHPEUH GH HYDOXDFLyQ DPELHQWDO (YDOXDFLyQ DPELHQWDO GH SUR\HFWRVSURFHGLPLHQWRV\VXLQWHJUDFLyQHQODDXWRUL]DFLyQGHOVHJXLPLHQWR\YLJLODQFLD /HJLVODFLyQ VREUH FDOLGDG GHO DLUH \ SURWHFFLyQ DWPRVIpULFD &DWiORJR GH DFWLYLGDGHV SRWHQFLDOPHQWHFRQWDPLQDQWHVGHODDWPyVIHUD 5HJODPHQWR GH $OPDFHQDPLHQWR GH 3URGXFWRV 4XtPLFRV \ VXV ,QVWUXFFLRQHV 7pFQLFDV &RPSOHPHQWDULDV 5HJODPHQWR GH LQVWDODFLRQHV SHWUROtIHUDV 5HDO 'HFUHWR GH GH RFWXEUH 5HDO 'HFUHWRGHGHRFWXEUH,QVWUXFFLRQHV7pFQLFDV&RPSOHPHQWDULDV i Pág. 12718 boc.cantabria.es 211/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12719 3ODQHVHVSHFLDOHVGHULHVJRTXtPLFR5HDO'HFUHWRGHGHVHSWLHPEUHSRUHOTXH VHDSUXHEDQPHGLGDVGHFRQWUROGHORVULHVJRVLQKHUHQWHVDORVDFFLGHQWHVJUDYHVHQORVTXH LQWHUYHQJDQ VXVWDQFLDV SHOLJURVDV 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH PRGLILFD HO 5HDO 'HFUHWR GH GH MXOLR SRU HO TXH VH DSUXHEDQ PHGLGDV GH FRQWUROGHORVULHVJRVLQKHUHQWHVDORVDFFLGHQWHVJUDYHVHQORVTXHLQWHUYHQJDQVXVWDQFLDV SHOLJURVDV5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHDSUXHEDHO3ODQHVWDWDOGH SURWHFFLyQ FLYLO DQWH HO ULHVJR TXtPLFR 'HFUHWR GH GH PD\R SRU HO TXH VH GHVLJQDQORVyUJDQRVFRPSHWHQWHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD\GHVDUUROODHO 5HDO 'HFUHWR GH GH MXOLR TXH DSUXHED PHGLGDV GH FRQWURO GH ORV ULHVJRV LQKHUHQWHVDORVDFFLGHQWHVJUDYHVHQORVTXHLQWHUYHQJDQVXVWDQFLDVSHOLJURVDV3ODQHVGH (PHUJHQFLD([WHULRU,QVWDODFLRQHVDIHFWDGDVHQ&DQWDEULD /D FRQWDPLQDFLyQ DF~VWLFD /D /H\ GH GH QRYLHPEUH GHO 5XLGR \ VX GHVDUUROOR UHJODPHQWDULR (IHFWRV VREUH OD VDOXG \ HO PHGLR DPELHQWH /D HYDOXDFLyQ SUHYHQFLyQ \ UHGXFFLyQGHOUXLGRDPELHQWDO0HGLGDVFRUUHFWRUDV /D FRQWDPLQDFLyQ DWPRVIpULFD WLSRV RUtJHQHV \ FDUDFWHUtVWLFDV /D /H\ GH GH QRYLHPEUH GH FDOLGDG GHO DLUH \ SURWHFFLyQ GH OD DWPyVIHUD 6HFWRUHV \ DFWLYLGDGHV FRQWDPLQDQWHV &RQWDPLQDFLyQ GHO VXHOR 5HDO 'HFUHWR GH GH HQHUR SRU HO TXH VH HVWDEOHFH OD UHODFLyQ GH DFWLYLGDGHV SRWHQFLDOPHQWH FRQWDPLQDQWHV GHO VXHOR \ ORV FULWHULRV \ HVWiQGDUHV SDUD OD GHFODUDFLyQ GH VXHORV FRQWDPLQDGRV 7LSRV GH FRQWDPLQDQWHV 8VRV GHO VXHOR (YDOXDFLyQGHOULHVJR1LYHOHVJHQpULFRVGHUHIHUHQFLD7pFQLFDVGHUHFXSHUDFLyQGHVXHORV /H\GHGHMXOLRGHUHVLGXRV\VXHORVFRQWDPLQDGRV (O5HJLVWUR(VWDWDOGH(PLVLRQHV\)XHQWHV&RQWDPLQDQWHV0HWRGRORJtD\IXQFLRQDPLHQWRGH (3575 $FFHVRDODLQIRUPDFLyQHQPDWHULDGHPHGLRDPELHQWH&RQYHQLRGH$DUKXV/DSDUWLFLSDFLyQ HQODJHVWLyQDPELHQWDO1RUPDWLYDGHOD8QLyQ(XURSHD/D/H\GHGHMXOLRSRUOD TXHVHUHJXODQORVGHUHFKRVGHDFFHVRDODLQIRUPDFLyQGHSDUWLFLSDFLyQS~EOLFD\GHDFFHVR DODMXVWLFLDHQPDWHULDGHPHGLRDPELHQWH /D QRUPDWLYD GH UHVSRQVDELOLGDG PHGLRDPELHQWDO /H\ GH GH RFWXEUH GH 5HVSRQVDELOLGDG0HGLRDPELHQWDO (PSUHVD \ *HVWLyQ $PELHQWDO $XGLWRUtDV DPELHQWDOHV /D QRUPD ,62 6LVWHPD FRPXQLWDULRGHJHVWLyQ\DXGLWRUtDPHGLRDPELHQWDOHV (0$6 /DHWLTXHWDHFROyJLFD 5LHVJR TXtPLFR , /HJLVODFLyQ HVSHFtILFD 7R[LFRORJtD LQGXVWULDO /tPLWHV GH H[SRVLFLyQ SURIHVLRQDOSDUDDJHQWHVTXtPLFRV 5LHVJR 4XtPLFR ,, (YDOXDFLyQ GHO ULHVJR TXtPLFR &RQWURO GH FRQWDPLQDQWHV TXtPLFRV 3URWHFFLyQFROHFWLYDHLQGLYLGXDOIUHQWHDOULHVJRTXtPLFR 6HJXULGDG HQ HO ODERUDWRULR TXtPLFR 5LHVJRV HVSHFtILFRV HQ ORV ODERUDWRULRV TXtPLFRV 5LHVJRVGHULYDGRVGHODXWLOL]DFLyQGHSURGXFWRVTXtPLFRV6HJXULGDGHQODPDQLSXODFLyQGH PDWHULDO H LQVWUXPHQWDO \ HQ RSHUDFLRQHV EiVLFDV 'HUUDPHV \ IXJDV GH SURGXFWRV TXtPLFRV SHOLJURVRV1RUPDVGHVHJXULGDG\VHxDOL]DFLyQ 5HDO 'HFUHWR GH GH RFWXEUH 2EMHWR \ DSOLFDFLyQ 3ULQFLSLRV GH OD DFFLyQ SUHYHQWLYD ([FHSFLRQHV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 'LVSRVLFLRQHVPtQLPDVGH6HJXULGDG\6DOXGTXHGHEHQDSOLFDUVHHQODVREUDVGHDSOLFDFLyQ DODWRWDOLGDGGHODREUDDORVSXHVWRVGHWUDEDMRHQHOLQWHULRUGHORVORFDOHV\DORVSXHVWRV GHWUDEDMRHQODVREUDVHQHOH[WHULRUGHORVORFDOHV 3URWHFFLRQHV LQGLYLGXDOHV GH ORV WUDEDMDGRUHV 1RUPDWLYD DSOLFDEOH 'HILQLFLyQ &ULWHULRV GH XWLOL]DFLyQ&RQGLFLRQHVDFXPSOLU 3URWHFFLRQHVFROHFWLYDV'HILQLFLyQ\&ULWHULRVGHXWLOL]DFLyQ boc.cantabria.es CVE-2019-3750 7(0$ 212/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERALDE FUNCIÓN PÚBLICA ANEXO I CUERPO DIPLOMADOS Y TÉCNICOS MEDIOS INGENIERO TÉCNICO EN TOPOGRAFÍA MATERIAS ESPECÍFICAS TEMA 1.- Teodolitos y taquímetros. Estaciones totales. Láser escáner. Descripción. TEMA 2.- Figura de la Tierra. Geoide. Elipsoide. Desviación relativa de la vertical. Elipsoide de Hayford, elipsoide GRS80. TEMA 3.- Configuración y precisiones de las redes geodésicas españolas. Señalización. Red REGENTE, Red ERGNSS. TEMA 4.- Técnicas de medición de ángulos acimutales. Métodos usuales. Tipos de teodolitos geodésicos. TEMA 5.- Medida electro-óptica y electro-magnética de distancias. Reducción de medidas al elipsoide. Trilateración. TEMA 6.- Influencia de la esfericidad terrestre en planimetría y altimetría. Proyección topográfica. Escalas. Límite de percepción visual y su relación con la escala. TEMA 7.- Triangulación. Concepto. Apoyo en la Red Geodésica. Proyecto de una triangulación. Base de una triangulación. Medición, orientación y ampliación de la base. Observación de la triangulación. Estaciones excéntricas. TEMA 8.- Métodos modernos de medición de bases. Fundamentos de la medida electrónica de distancias. Instrumentos utilizados. Precisiones. Errores. Ventajas e inconvenientes de cada tipo. TEMA 9.- Cálculo de una triangulación. Red topográfica. Transporte de acimutes y coordenadas. Tolerancias y errores. Métodos de compensación. TEMA 10.- Trilateración topográfica. Concepto. Observación. Cálculo. Compensación de errores. TEMA 11.- Intersección directa. Métodos. Errores. Compensación. TEMA 12.- Intersección inversa. Métodos de cálculo. Selección de direcciones. Compensación. TEMA 13.- Intersección mixta. Métodos de cálculo. Compensación. TEMA 14.- Compensación por mínimos cuadrados. Fundamento. Método paramétrico. Método de variación de coordenadas. Matriz de varianza-covarianza. TEMA 15.- Nivelación trigonométrica a grandes distancias. Corrección de esfericidad y refracción. Cálculo de desniveles por observaciones recíprocas y simultáneas. TEMA 16.- Nivelación por alturas. Métodos especiales de nivelación por alturas. Errores, tolerancia y compensación. TEMA 18.- Cálculo planimétrico de una poligonal: Transporte de acimutes. Tolerancia y compensación del error de cierre angular. Cálculo de coordenadas. Errores, tolerancia y compensación. Cálculo altimétrico: tolerancia y compensación. TEMA 19.- Método de radiación. Criterios de aplicación. Errores que se cometen. i Pág. 12720 boc.cantabria.es CVE-2019-3750 TEMA 17.- Poligonales taquimétricas. Tipos. Métodos de observación. Errores de observación. 213/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERALDE FUNCIÓN PÚBLICA TEMA 20.- Desarrollo de un proyecto de ingeniería desde el punto de vista topográfico: estudios previos, anteproyecto, proyecto, ejecución, construcción, conservación y control dimensional. TEMA 21.- Métodos de replanteo en planimetría: descripción, análisis, errores, ventajas e inconvenientes de cada método. TEMA 22.- Métodos de replanteo en altimetría: replanteo de rasantes, taludes y zanjas. TEMA 23.- Mediciones y cubicaciones: tipos de mediciones. Métodos de cubicación. TEMA 24.- Plan de carreteras de Cantabria. Catalogación y clasificación de la Red de Carreteras de Cantabria. TEMA 25.- Características geométricas de las carreteras. El trazado: planta, alzado y sección transversal. Intersecciones y enlaces. Replanteo. TEMA 26.- Procedimiento de deslinde de Montes de Utilidad Pública (MUP). Descripción y fases. Trabajos topográficos necesarios. TEMA 27.- Metodologías topográficas en los procesos de replanteo de líneas límite de MUP deslindados. Documentación disponible. Trabajos previos de oficina. Trabajo de campo. Ajuste final. TEMA 28.- Fotogrametría aérea con dos fotogramas. Orientación relativa. Métodos. Escala del modelo. TEMA 29.- Instrumentos de restitución. Distintas soluciones para la práctica de la restitución. Precisiones. TEMA 30.- Labor fundamental de un proyecto de vuelo. Recubrimientos. Escalas. Fórmula de Von Gruber. Errores medios altimétricos y planimétricos. TEMA 31.- Ortofotogrametría. Fundamento. Instrumentos. Aplicaciones. Ventajas e inconvenientes de los ortofotoplanos. Plan Nacional de Ortofotografía Aérea (PNOA). TEMA 32.- Sistemas de proyección. Representación plana de la superficie terrestre. Teoría de las deformaciones. Alteraciones de ángulos, longitudes y superficies. TEMA 33.- Clasificación de las proyecciones a partir de propiedades geométricas generales. Proyecciones cónicas. Proyecciones cilíndricas. TEMA 34.- Proyección cónica conforme de Lambert. Proyección Lambert reglamentaria en España. TEMA 35.- Proyección Universal Transversa Mercator. Definición y características. Husos. Factor de escala. Cuadrícula UTM. TEMA 36.- Sistema de Referencia Oficial ETRS89. Antecedentes. Real Decreto 1071/2007, de 27 de julio. Mallas de transformación. TEMA 37.- Modelo Geoidal español. Antecedentes. Adaptación al Sistema de Referencia Vertical en España. Precisión. TEMA 38.- Base Topográfica Armonizada 1/5000. Introducción, Catálogo de fenómenos. Marco de Referencia. Calidad. Captura de datos. TEMA 39.- Directiva INSPIRE. Antecedentes. Objetivos. Transposición al derecho español (LISIGE). Infraestructuras de Datos Espaciales. IDE Cantabria. TEMA 40.- Metadatos. Definición. Metadatos INSPIRE. Reglamento. Núcleo español de metadatos. Herramientas y validadores. Oficial. Términos básicos. Normativa y legislación. Nomenclator Geográfico. Interoperabilidad de datos. Nomenclator Geográfico Nacional. Nomenclator Geográfico Básico de España. TEMA 42.- La Red de Espacios Naturales Protegidos y la Red Natura 2000 en Cantabria. Objetivos. Principales características. Adaptación a INSPIRE. i Pág. 12721 boc.cantabria.es CVE-2019-3750 TEMA 41.- Toponimia 214/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERALDE FUNCIÓN PÚBLICA TEMA 43.- Geodesia espacial: Tipos de satélites. Posicionamiento. Propagación de emisiones radioeléctricas. Sistemas actuales de posicionamiento. Sistemas de referencia en geodesia espacial: sistemas globales, temporales y locales. Transformación al sistema local de las observaciones G.P.S. TEMA 44.- Sistemas de posicionamiento global: Sector espacial, Sector de control, Sector usuario. Sistemas de medida: Doppler, pseudodistancias, medidas de fase. TEMA 45.- Métodos de posicionamiento: según sistema de referencia, según movimiento del receptor, según tiempo de cálculo. Precisión de las observaciones. Redes GNSS. TEMA 46.- La Red Activa GNSS de Cantabria. Antecedentes. Configuración. Precisiones. Protocolo NTRIP. Tipos de solución. TEMA 47.- Aplicaciones del G.P.S. en geodesia y topografía. TEMA 48.- Sistemas de información geográfica (SIG). Definición. Componentes. TEMA 49.- SIG Corporativo. Concepto. Objetivos. Fases de implantación. Ventajas de las Geodatabases corporativas. Ejemplos. TEMA 50.- Teledetección: Fundamentos físicos. Radiación electromagnética. Interacción con la atmósfera y la CVE-2019-3750 superficie terrestre. Plataformas, sensores y canales. Aplicaciones en Cartografía. Plan Nacional de Teledetección. i Pág. 12722 boc.cantabria.es 215/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12723 $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 0$(6752('8&$'25',3/20$'2(1('8&$&,Ï162&,$/ 0$7(5,$6(63(&Ë),&$6 0RGHORVWHyULFRVGHODLQWHUYHQFLyQVRFLRHGXFDWLYD /DLQWHUYHQFLyQVRFLRHGXFDWLYDILQDOLGDG\IXQFLRQHV 7pFQLFDVGHLQWHUYHQFLyQVRFLRHGXFDWLYD /DSODQLILFDFLyQHQHOWUDEDMRGHOPDHVWURDHGXFDGRUGLSORPDGRDHQHGXFDFLyQVRFLDOPpWRGRV /DHYDOXDFLyQHQHOWUDEDMRGHOPDHVWURDHGXFDGRUGLSORPDGRDHQHGXFDFLyQVRFLDOPpWRGRV /DHYDOXDFLyQGHSURJUDPDVFRQFHSWRIXQFLRQHV\HWDSDV *HVWLyQGHODFDOLGDG&RQFHSWRVEiVLFRVVREUHFDOLGDG$SOLFDFLRQHVHQORVVHUYLFLRVS~EOLFRV /DVQHFHVLGDGHVGHODLQIDQFLD7D[RQRPtD (OGHVDUUROORSUHQDWDO&DUDFWHUtVWLFDVJHQHUDOHV\SULQFLSDOHVIDVHVGHHVWHSHUtRGR &UHFLPLHQWRItVLFR\GHVDUUROORPRWRUHQODSULPHUDLQIDQFLD DxRV /RVIXQGDPHQWRV\ODVSULPHUDVIDVHVGHOGHVDUUROORDIHFWLYRVRFLDO&DUDFWHUtVWLFDV\HYROXFLyQGHO YtQFXORGHODSHJR /RVIXQGDPHQWRVGHOOHQJXDMH\ODVSULPHUDVDGTXLVLFLRQHVOLQJtVWLFDV(OSDSHOGHOOHQJXDMHHQHO GHVDUUROORLQWHOHFWXDO (OGHVDUUROORFRJQLWLYRDVSHFWRVHYROXWLYRVHQODSULPHUDLQIDQFLD DxRV /D LPSRUWDQFLD GHO MXHJR HQ HO GHVDUUROOR &RQGXFWDV GH MXHJR HQ OD HGDG SUHHVFRODU MXHJR VLPEyOLFR\MXHJRGHUROHV (OGHVDUUROORDIHFWLYR\VRFLDOGHVGHORVWUHVDORVVHLVDxRV&DUDFWHUtVWLFDVJHQHUDOHV (OGHVDUUROORDIHFWLYR\VRFLDOGHVGHORVVHLVDORVGRFHDxRV&DUDFWHUtVWLFDVJHQHUDOHV (OGHVDUUROORDIHFWLYR\VRFLDOHQODDGROHVFHQFLD&DUDFWHUtVWLFDVJHQHUDOHV 3DSHOGHODIDPLOLD\GHOJUXSRGHLJXDOHVHQHOGHVDUUROORDIHFWLYR\VRFLDO /H\GH&DQWDEULDGHGHGLFLHPEUHGHJDUDQWtDGHGHUHFKRV\DWHQFLyQDODLQIDQFLD\OD DGROHVFHQFLD 0DUFROHJDOGHORVVHUYLFLRVVRFLDOHVHQ&DQWDEULDOD/H\GHGHPDU]RGH'HUHFKRV\ 6HUYLFLRV6RFLDOHV(O6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVSULQFLSLRVRUJDQL]DFLyQ\UHFXUVRV /DVSUHVWDFLRQHVGHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHVOD&DUWHUDGH6HUYLFLRV6RFLDOHV /DLQWHUYHQFLyQFRPXQLWDULDFULWHULRVGHSHUWLQHQFLD\HVWLORVGHLQWHUYHQFLyQ /D LQWHUYHQFLyQ FRPXQLWDULD SUHYHQFLyQ SULPDULD VHFXQGDULD \ WHUFLDULD (VWUDWHJLDV GH LQWHUYHQFLyQ (O SDSHO GHO PDHVWURDHGXFDGRUGLSORPDGRD HQ HGXFDFLyQ VRFLDO HQ ORV HTXLSRV PXOWLSURIHVLRQDOHVGHVHUYLFLRVVRFLDOHV /DGHVSURWHFFLyQLQIDQWLOPDUFROHJDO\SULQFLSLRVGHDFWXDFLyQ (ODEXVRVH[XDOLQIDQWLO(YDOXDFLyQ\SURJUDPDVGHLQWHUYHQFLyQ 3URFHGLPLHQWR GH LQWHUYHQFLyQ HQ VLWXDFLRQHV GH GHVSURWHFFLyQ LQIDQWLO ,QYHVWLJDFLyQ VLWXDFLyQ DGPLQLVWUDWLYDDVHJXLU\FULWHULRVWpFQLFRV 3ODQGH&DVR3ULQFLSLRVEiVLFRVLQVWUXPHQWDFLyQPHWRGROyJLFD\WRPDGHGHFLVLRQHV)LQDOLGDGHV \UHFXUVRV,QIRUPHGHHYDOXDFLyQ /D LQWHUYHQFLyQ IDPLOLDU 3ULQFLSLRV \ IXQGDPHQWRV GH ORV SURJUDPDV GH LQWHUYHQFLyQ IDPLOLDU HQ GHVSURWHFFLyQLQIDQWLO 3DXWDVJHQHUDOHV\FULWHULRVEiVLFRVGHDFWXDFLyQHQORV3URJUDPDVGH,QWHUYHQFLyQ)DPLOLDU 7LSRV\ILQDOLGDGHVHQORV3URJUDPDVGH,QWHUYHQFLyQ)DPLOLDU boc.cantabria.es CVE-2019-3750 216/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD CVE-2019-3750 7(0$ $VSHFWRVPHWRGROyJLFRVHQODLQWHUYHQFLyQIDPLOLDUFRQWH[WRVFDUDFWHUtVWLFDVIDVHV\UHFXUVRV 7(0$ (VWUDWHJLDV H LQVWUXPHQWRV WpFQLFRV HQ 3URJUDPDV GH ,QWHUYHQFLyQ )DPLOLDU (O 3ODQ GH ,QWHUYHQFLyQ\ODV(VFDODVGH%LHQHVWDU,QIDQWLO 7(0$ /RVSURJUDPDVFHQWUDGRVHQHODSR\RDORVQLxRVQLxDV\DGROHVFHQWHV3URJUDPDVGHIRPHQWRGH ODUHVLOLHQFLD 7(0$ )XQFLRQHV\WDUHDVGHOPDHVWURDHGXFDGRUGLSORPDGRDHQHGXFDFLyQVRFLDOHQORVSURJUDPDVGH LQWHUYHQFLyQIDPLOLDU 7(0$ (OSDSHOGHODFRJLPLHQWRUHVLGHQFLDOFRPRPHGLGDGHSURWHFFLyQ)XQFLRQHV\WLSRORJtD 7(0$ 0DUFR WHyULFR GHO WUDEDMR HGXFDWLYR HQ DFRJLPLHQWR UHVLGHQFLDO 0RGHOR GH $FRJLPLHQWR 5HVLGHQFLDOHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /DRUJDQL]DFLyQ\JHVWLyQGHORVFHQWURVGHDFRJLPLHQWRUHVLGHQFLDO3ULQFLSLRV\HVWiQGDUHVSDUD XQDLQWHUYHQFLyQGHFDOLGDG 7(0$ 3URJUDPDVGHWUDQVLFLyQDODYLGDDGXOWDHQDFRJLPLHQWRUHVLGHQFLDO 7(0$ )XQFLRQHV \ WDUHDV GHO PDHVWURDHGXFDGRUGLSORPDGRD HQ HGXFDFLyQ VRFLDO HQ ORV FHQWURV GH DFRJLPLHQWRUHVLGHQFLDO 7(0$ /DLQWHUYHQFLyQVRFLRHGXFDWLYDFRQDGROHVFHQWHVFRQSUREOHPDVGHFRQGXFWD 7(0$ /DLQWHUYHQFLyQFRQDGROHVFHQWHVH[WUDQMHURVQRDFRPSDxDGRV5HVSXHVWDDODVQHFHVLGDGHVGH ORVQLxRV\QLxDVTXHHVWiQHQHO6LVWHPDGH3URWHFFLyQ 7(0$ (YROXFLyQ GHO DFRJLPLHQWR IDPLOLDU \ WLSRV GH DFRJLPLHQWRV 0RGDOLGDGHV GH DFRJLPLHQWR GH HVSHFLDOLQWHUpV 7(0$ 3URFHVRV%iVLFRVGHLQWHUYHQFLyQHQHOPRGHORGH$FRJLPLHQWR5HVLGHQFLDOHQ&DQWDEULD 7(0$ /RV SURWDJRQLVWDV GHO DFRJLPLHQWR IDPLOLDU &DUDFWHUL]DFLyQ \ IDFWRUHV FODYHV HQ HO GHVDUUROOR GHO DFRJLPLHQWR 7(0$ (OSURFHVRGHLQWHUYHQFLyQHQHODFRJLPLHQWRIDPLOLDU(OHPHQWRV\PRPHQWRVFODYHV 7(0$ $GRSFLyQQDFLRQDODGRSFLyQLQWHUQDFLRQDO0DUFROHJDO\SURFHGLPLHQWR 7(0$ 0DUFR OHJDO GH OD LQWHUYHQFLyQ FRQ DGROHVFHQWHV LQIUDFWRUHV OD /H\ 2UJiQLFD GH GH HQHUR GH 5HVSRQVDELOLGDG SHQDO GH ORV PHQRUHV 3DSHO \ UHVSRQVDELOLGDG GH OD &RPXQLGDG $XWyQRPDHQODHMHFXFLyQGHODVPHGLGDV 7(0$ ,QDGDSWDFLyQVRFLDO\FRQGXFWDVGHOLFWLYDVWHRUtDVFULPLQROyJLFDVVREUHODGHOLQFXHQFLDMXYHQLO 7(0$ /DLQWHUYHQFLyQVRFLRHGXFDWLYDFRQDGROHVFHQWHVLQIUDFWRUHVHQFRQWH[WRVUHVLGHQFLDOHV 7(0$ /DLQWHUYHQFLyQVRFLRHGXFDWLYDFRQDGROHVFHQWHVLQIUDFWRUHVHQPHGLRDELHUWR 7(0$ 0DUFROHJDOGHODDWHQFLyQDODGHSHQGHQFLDHQ&DQWDEULDOD/H\GHGHGLFLHPEUHGH 3URPRFLyQ GH OD $XWRQRPtD 3HUVRQDO \ $WHQFLyQ D ODV SHUVRQDV HQ VLWXDFLyQ GH GHSHQGHQFLD 1RUPDVGHGHVDUUROOR 7(0$ &RQFHSWRGHGHSHQGHQFLD9DORUDFLyQ\SUHVWDFLRQHVGHO6LVWHPD3~EOLFRGH6HUYLFLRV6RFLDOHV 7(0$ &RQFHSWRGHGLVFDSDFLGDG\PLQXVYDOtD3DSHOGHOPDHVWURDHGXFDGRUGLSORPDGRDHQHGXFDFLyQ VRFLDOHQODLQWHUYHQFLyQFRQSHUVRQDVFRQGLVFDSDFLGDG 7(0$ 0DUFR OHJDO GH OD LQWHUYHQFLyQ HQ YLROHQFLD GH JpQHUR /H\ GH &DQWDEULD GH GH DEULO ,QWHJUDOSDUDOD3UHYHQFLyQGHOD9LROHQFLD&RQWUDODV0XMHUHV\OD3URWHFFLyQDVXV9tFWLPDV 7(0$ /DLQWHUYHQFLyQVRFLRHGXFDWLYDFRQYtFWLPDVGHYLROHQFLDGHJpQHUR 7(0$ /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV $VSHFWRV JHQHUDOHV &RQWHQLGR5HVSRQVDELOLGDGHV\VDQFLRQHV3ULQFLSDOHVGHEHUHVGHOHPSUHVDULR 7(0$ 3ODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12724 boc.cantabria.es 217/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(',3/20$'26<7e&1,&260(',26 7e&1,&2'(*(67,Ï1'(6,67(0$6 0$7(5,$6(63(&Ë),&$6 %/248(,7HFQRORJtDEiVLFD 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7HFQRORJtDV DFWXDOHV GH RUGHQDGRUHV GH ORV GLVSRVLWLYRV PyYLOHV D ORV VXSHURUGHQDGRUHV \ DUTXLWHFWXUDV HVFDODEOHV \ GH DOWDV SUHVWDFLRQHV &RPSXWDFLyQ HQ ODQXEH%DVHWHFQROyJLFD&RPSRQHQWHVIXQFLRQDOLGDGHV\FDSDFLGDGHV &RQFHSWRVGHVLVWHPDVRSHUDWLYRV&DUDFWHUtVWLFDVHYROXFLyQ\WHQGHQFLDV(VWUXFWXUD FRPSRQHQWHV\IXQFLRQHV6LVWHPDVRSHUDWLYRVPXOWLSURFHVDGRU &DUDFWHUtVWLFDVWpFQLFDV\IXQFLRQDOHVGHORVVLVWHPDVRSHUDWLYRV:LQGRZV/LQX[8QL[ \RWURV6LVWHPDVRSHUDWLYRVSDUDGLVSRVLWLYRVPyYLOHV &DUDFWHUtVWLFDVWpFQLFDVGHORVOHQJXDMHV\SDUDGLJPDVDFWXDOHVGHSURJUDPDFLyQ ,QWHOLJHQFLD GH QHJRFLRV FXDGURV GH PDQGR LQWHJUDO VLVWHPDV GH VRSRUWH D ODV GHFLVLRQHVVLVWHPDVGHLQIRUPDFLyQHMHFXWLYD\DOPDFHQHVGHGDWRV2/73\2/$3 6LVWHPDV GH JHVWLyQ GH EDVHV GH GDWRV UHODFLRQDOHV FDUDFWHUtVWLFDV \ HOHPHQWRV FRQVWLWXWLYRV $QWHFHGHQWHV KLVWyULFRV (O OHQJXDMH 64/ (VWiQGDUHV GH FRQHFWLYLGDG 2'%&\-'%& $UTXLWHFWXUD GH VLVWHPDV FOLHQWHVHUYLGRU \ PXOWLFDSDV WLSRORJtD &RPSRQHQWHV ,QWHURSHUDELOLGDGGHFRPSRQHQWHV9HQWDMDVHLQFRQYHQLHQWHV$UTXLWHFWXUDGHVHUYLFLRV ZHE (OPRGHOR7&3,3\HOPRGHORGHUHIHUHQFLDGHLQWHUFRQH[LyQGHVLVWHPDVDELHUWRV 26, GH,62DUTXLWHFWXUDFDSDVLQWHUIDFHVSURWRFRORVGLUHFFLRQDPLHQWR\HQFDPLQDPLHQWR /HQJXDMHVGHPDUFDRHWLTXHWD&DUDFWHUtVWLFDV\IXQFLRQDOLGDGHV6*0/+70/;0/\ VXVGHULYDFLRQHV/HQJXDMHVGHVFULSW *HVWLyQ GH OD DWHQFLyQ D FOLHQWHV \ XVXDULRV FHQWURV GH FRQWDFWR &50 $UTXLWHFWXUD PXOWLFDQDO6LVWHPDVGHUHVSXHVWDGHYR]LQWHUDFWLYD ,95 9RLFH;0/ 6HJXULGDGItVLFD\OyJLFDGHXQVLVWHPDGHLQIRUPDFLyQ+HUUDPLHQWDVHQFLEHUVHJXULGDG *HVWLyQGHLQFLGHQWHV,QIRUPiWLFDIRUHQVH 6RIWZDUHOLEUH\VRIWZDUHSURSLHWDULR&DUDFWHUtVWLFDV\WLSRVGHOLFHQFLDV/DSURWHFFLyQ MXUtGLFD GH ORV SURJUDPDV GH RUGHQDGRU 7HFQRORJtDV GH SURWHFFLyQ GH GHUHFKRV GLJLWDOHV 7pFQLFDV GH HYDOXDFLyQ GH DOWHUQDWLYDV \ DQiOLVLV GH YLDELOLGDG 3HUVRQDO SURFHGLPLHQWRVGDWRVVRIWZDUH\KDUGZDUH3UHVXSXHVWDFLyQ\FRQWUROGHFRVWHVGHXQ SUR\HFWRLQIRUPiWLFR 'RFXPiWLFD *HVWLyQ \ DUFKLYR HOHFWUyQLFR GH GRFXPHQWRV 6LVWHPDV GH JHVWLyQ GRFXPHQWDO\GHFRQWHQLGRV6LQGLFDFLyQGHFRQWHQLGR6LVWHPDVGHJHVWLyQGHIOXMRVGH WUDEDMRV %~VTXHGD GH LQIRUPDFLyQ URERWV VSLGHUV RWURV 3RVLFLRQDPLHQWR \ EXVFDGRUHV 6(2 2UJDQL]DFLyQ GH GHSDUWDPHQWRV GH WHFQRORJtDV GH OD LQIRUPDFLyQ iUHDV UROHV \ UHVSRQVDELOLGDGHV 7LSRV GH HVWUXFWXUDV GHSDUWDPHQWDOHV IXQFLRQDO PDWULFLDO OLQHDO CVE-2019-3750 7(0$ i Pág. 12725 boc.cantabria.es 218/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ *HVWLyQ GH OD SUHVWDFLyQ GHO VHUYLFLR 0RGHORV GH RXWVRXUFLQJ \ VX VHJXLPLHQWR WLSRORJtDVLQGLFDGRUHVFODYHVGHUHQGLPLHQWRDFXHUGRVGHQLYHOGHVHUYLFLR ,7,/)XQGDPHQWRVEiVLFRV)XQFLRQHVSURFHVRV\UROHV&LFORGHYLGDGHORVSURGXFWRV GHWHFQRORJtDGHODLQIRUPDFLyQ(OSURFHVRGHJHVWLyQGHODFRQILJXUDFLyQ(OSURFHVR GHJHVWLyQGHLQFLGHQFLDV(OSURFHVRGHJHVWLyQGHFDPELRV(OSURFHVRGHJHVWLyQGH SUREOHPDV9HQWDMDV\GHVYHQWDMDVGH,7,/ (VTXHPD 1DFLRQDO GH 6HJXULGDG 5HDO 'HFUHWR GH GH HQHUR ÈPELWR GH DSOLFDFLyQ 3ULQFLSLRV EiVLFRV 5HVSXHVWD D LQFLGHQWHV GH VHJXULGDG $QiOLVLV GH 5LHVJRV&DWHJRUL]DFLyQGHORV6LVWHPDV6HOHFFLyQGHODVPHGLGDVGHVHJXULGDG /HJLVODFLyQHQPDWHULDGHSURWHFFLyQGHGDWRV'HILQLFLRQHV3ULQFLSLRVGHODSURWHFFLyQ GH GDWRV GH FDUiFWHU SHUVRQDO 'HUHFKRV GH ORV DIHFWDGRV 7UDQVIHUHQFLDV LQWHUQDFLRQDOHV GH GDWRV &DWHJRUtDV HVSHFLDOHV GH GDWRV SHUVRQDOHV 5HJLVWURV GH $FWLYLGDGHVGHO7UDWDPLHQWR$QiOLVLVGHULHVJRVHYDOXDFLRQHVGHLPSDFWR\HOHFFLyQGH PHGLGDV GH VHJXULGDG /HJLVODFLyQ HVSDxROD *DUDQWtD GH ORV 'HUHFKRV 'LJLWDOHV /HJLVODFLyQHXURSHD /D 3ROtWLFD GH 6HJXULGDG GH OD ,QIRUPDFLyQ GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPDGH&DQWDEULD2EMHWLYRVGLUHFWULFHV\SULQFLSLRVGHODJHVWLyQGHODVHJXULGDG GHODLQIRUPDFLyQ2UJDQL]DFLyQGHODJHVWLyQGHODVHJXULGDGGHODLQIRUPDFLyQ*HVWLyQ GH ULHVJRV GHVDUUROOR GH OD SROtWLFD GH VHJXULGDG GH OD LQIRUPDFLyQ REOLJDFLRQHV GHO SHUVRQDOUHODFLRQHVFRQWHUFHUDVSDUWHV\UHVROXFLyQGHFRQIOLFWRV &RQWLQXLGDG GH ORV VHUYLFLRV 3ROtWLFD GH FRQWLQXLGDG 3ODQHV GH FRQWLQXLGDG GH ORV VHUYLFLRV SUHVWDGRV SRU OD RUJDQL]DFLyQ 3ODQHV GH FRQWLQXLGDG GHO GHSDUWDPHQWR GH WHFQRORJtDVGHODLQIRUPDFLyQ3ODQHVGHUHFXSHUDFLyQGHORVVLVWHPDV\SODWDIRUPDV 1RUPDWLYDHQPDWHULDGH$GPLQLVWUDFLyQHOHFWUyQLFDHVSHFLDOUHIHUHQFLDDOD&RPXQLGDG $XWyQRPDGH&DQWDEULD ,QIUDHVWUXFWXUDV VHUYLFLRV FRPXQHV \ FRPSDUWLGRV SDUD OD LQWHURSHUDELOLGDG HQWUH $GPLQLVWUDFLRQHVS~EOLFDV &O#YH OD &DUSHWD &LXGDGDQD HO 6LVWHPD GH ,QWHUFRQH[LyQ GH5HJLVWURVOD3ODWDIRUPDGH,QWHUPHGLDFLyQGH'DWRV\RWURVVHUYLFLRV %/248(,,'HVDUUROORGHVLVWHPDV CVE-2019-3750 7(0$ &RQFHSWRGHOFLFORGHYLGDGHORVVLVWHPDV\IDVHV0RGHORVGHFLFORGHYLGD 7(0$ *HVWLyQGHOSURFHVRGHGHVDUUROORREMHWLYRVDFWRUHV\DFWLYLGDGHV7pFQLFDV\SUiFWLFDV GHJHVWLyQGHSUR\HFWRV 7(0$ 3ODQLILFDFLyQ GHO GHVDUUROOR 7pFQLFDV GH SODQLILFDFLyQ 0HWRGRORJtDV GH GHVDUUROOR /D PHWRGRORJtD0pWULFD 7(0$ (VWUDWHJLDV GH GHWHUPLQDFLyQ GH UHTXHULPLHQWRV HQWUHYLVWDV GHULYDFLyQ GH VLVWHPDV H[LVWHQWHVDQiOLVLV\SURWRWLSRV/DHVSHFLILFDFLyQGHUHTXLVLWRVGHVRIWZDUH 7(0$ $QiOLVLV HVWUXFWXUDGR 'LDJUDPDV GH IOXMR GH GDWRV 'LDJUDPDV GH HVWUXFWXUD 'LFFLRQDULRGHGDWRV)OXMRJUDPDV 7(0$ 0RGHOL]DFLyQ FRQFHSWXDO (O PRGHOR (QWLGDG5HODFLyQ H[WHQGLGR (5 HOHPHQWRV 5HJODVGHPRGHOL]DFLyQ9DOLGDFLyQ\FRQVWUXFFLyQGHPRGHORVGHGDWRV 7(0$ 'LVHxR GH EDVHV GH GDWRV /D DUTXLWHFWXUD $16,63$5& (O PRGHOR OyJLFR UHODFLRQDO 1RUPDOL]DFLyQ 'LVHxR OyJLFR 'LVHxR ItVLFR 3UREOHPDV GH FRQFXUUHQFLD GH DFFHVR 0HFDQLVPRVGHUHVROXFLyQGHFRQIOLFWRV 7(0$ 7LSRV DEVWUDFWRV GH GDWRV \ HVWUXFWXUDV GH GDWRV *UDIRV 7LSRV GH DOJRULWPRV RUGHQDFLyQ \ E~VTXHGD (VWUDWHJLDV GH GLVHxR GH DOJRULWPRV 2UJDQL]DFLRQHV GH ILFKHURV i Pág. 12726 boc.cantabria.es 219/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12727 boc.cantabria.es CVE-2019-3750 7(0$ 'LVHxRGHSURJUDPDV'LVHxRHVWUXFWXUDGR$QiOLVLVGHWUDQVIRUPDFLyQ\GHWUDQVDFFLyQ &RKHVLyQ\DFRSODPLHQWR 7(0$ &RQVWUXFFLyQGHOVLVWHPD(QWRUQRVGHFRQVWUXFFLyQ\JHQHUDFLyQGHFyGLJR(VWiQGDUHV GHGRFXPHQWDFLyQ0DQXDOHVGHXVXDULR\PDQXDOHVWpFQLFRV)RUPDFLyQGHXVXDULRV\ SHUVRQDOWpFQLFRPpWRGRV\PDWHULDOHV 7(0$ 3UXHEDV 3ODQLILFDFLyQ \ GRFXPHQWDFLyQ 8WLOL]DFLyQ GH GDWRV GH SUXHED 3UXHEDV GH VRIWZDUHKDUGZDUHSURFHGLPLHQWRV\GDWRV 7(0$ ,QVWDODFLyQ \ FDPELR (VWUDWHJLDV GH VXVWLWXFLyQ 5HFHSFLyQ H LQVWDODFLyQ (YDOXDFLyQ SRVWLPSOHPHQWDFLyQ0DQWHQLPLHQWR 7(0$ $QiOLVLV \ GLVHxR RULHQWDGR D REMHWRV (OHPHQWRV (O SURFHVR XQLILFDGR GH VRIWZDUH (O OHQJXDMHGHPRGHODGRXQLILFDGR 80/ 3DWURQHVGHGLVHxR 7(0$ /D DUTXLWHFWXUD -DYD (( &DUDFWHUtVWLFDV GH IXQFLRQDPLHQWR (OHPHQWRV FRQVWLWXWLYRV 3URGXFWRV\KHUUDPLHQWDV3HUVLVWHQFLD6HJXULGDG 7(0$ /D SODWDIRUPD1HW 0RGHOR GH SURJUDPDFLyQ 6HUYLFLRV +HUUDPLHQWDV 3HUVLVWHQFLD 6HJXULGDG 7(0$ $SOLFDFLRQHVZHE'LVHxRZHEPXOWLSODWDIRUPDPXOWLGLVSRVLWLYR'HVDUUROORZHEIURQWHQG \HQVHUYLGRU7HFQRORJtDVGHSURJUDPDFLyQ-DYD6FULSWDSSOHWVVHUYOHWV$63-63\ 3+3 6HUYLFLRV ZHE HVWiQGDUHV SURWRFRORV DVRFLDGRV LQWHURSHUDELOLGDG \ VHJXULGDG ,QWHUQDFLRQDOL]DFLyQ\ORFDOL]DFLyQ 7(0$ /DFDOLGDGGHOVRIWZDUH\VXPHGLGD0RGHORVPpWULFDVQRUPDV\HVWiQGDUHV 7(0$ $FFHVLELOLGDG GLVHxR XQLYHUVDO \ XVDELOLGDG $FFHVLELOLGDG \ XVDELOLGDG GH ODV WHFQRORJtDV SURGXFWRV \ VHUYLFLRV UHODFLRQDGRV FRQ OD VRFLHGDG GH OD LQIRUPDFLyQ ([SHULHQFLDGH8VXDULRR8;/D*XtDGHFRPXQLFDFLyQGLJLWDOGHOD$GPLQLVWUDFLyQGHO (VWDGR 7(0$ 0LQHUtD GH GDWRV $SOLFDFLyQ D OD UHVROXFLyQ GH SUREOHPDV GH JHVWLyQ 7HFQRORJtD \ DOJRULWPRV3URFHVDPLHQWRDQDOtWLFRHQOtQHD 2/$3 %LJGDWD%DVHVGHGDWRV1R64/ %/248(,,,6LVWHPDV\FRPXQLFDFLRQHV 7(0$ $GPLQLVWUDFLyQ GHO 6LVWHPD RSHUDWLYR \ VRIWZDUH GH EDVH )XQFLRQHV \ UHVSRQVDELOLGDGHV 7(0$ $GPLQLVWUDFLyQ GH VLVWHPDV GH JHVWLyQ GH EDVHV GH GDWRV )XQFLRQHV < UHVSRQVDELOLGDGHV$GPLQLVWUDFLyQGHGDWRV 7(0$ 3UiFWLFDV GH PDQWHQLPLHQWR GH HTXLSRV H LQVWDODFLRQHV 7LSRV GH PDQWHQLPLHQWR 0RQLWRUL]DFLyQ\JHVWLyQGHFDSDFLGDG 7(0$ *HVWLyQGHODFRQILJXUDFLyQ*HVWLyQGHOLEUHUtDVGHSURJUDPDV\GHPHGLRVPDJQpWLFRV &RQWUROGHFDPELRV\GHYHUVLRQHV/RVOHQJXDMHVGHFRQWUROGHWUDEDMRV/DVWpFQLFDV\ KHUUDPLHQWDVGHRSHUDFLyQDXWRPiWLFD 7(0$ &RQWUROGHODHMHFXFLyQGHORVWUDEDMRV(YDOXDFLyQGHOUHQGLPLHQWR3ODQLILFDFLyQGHOD FDSDFLGDG$QiOLVLVGHODFDUJD+HUUDPLHQWDV\WpFQLFDVXWLOL]DEOHV 7(0$ $OPDFHQDPLHQWR PDVLYR GH GDWRV 6LVWHPDV 6$1 1$6 \ '$6 FRPSRQHQWHV SURWRFRORV JHVWLyQ \ DGPLQLVWUDFLyQ 9LUWXDOL]DFLyQ GHO DOPDFHQDPLHQWR *HVWLyQ GH YRO~PHQHV 7(0$ 0HGLRV GH WUDQVPLVLyQ JXLDGRV \ QR JXLDGRV LQDOiPEULFRV &DEOHV PHWiOLFRV &DEOH FRD[LDO)LEUDySWLFD7LSRORJtDGHUHGHVGHFDEOH6LVWHPDVGHWUDQVPLVLyQSRUVDWpOLWH 7(0$ 5HGHVORFDOHV7LSRORJtD7pFQLFDVGHWUDQVPLVLyQ0pWRGRVGHDFFHVR'LVSRVLWLYRVGH LQWHUFRQH[LyQ 7(0$ $GPLQLVWUDFLyQ GH UHGHV ORFDOHV *HVWLyQ GH XVXDULRV *HVWLyQ GH GLVSRVLWLYRV 0RQLWRUL]DFLyQ\FRQWUROGHWUiILFR*HVWLyQ6103*HVWLyQGHLQFLGHQFLDV 220/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ CVE-2019-3750 7(0$ 3ULQFLSDOHVSURWRFRORVGHODDUTXLWHFWXUDGHFRPXQLFDFLRQHV7&3,3 7(0$ 3ODQLILFDFLyQ ItVLFD GH XQ FHQWUR GH WUDWDPLHQWR GH OD LQIRUPDFLyQ 9XOQHUDELOLGDGHV ULHVJR\SURWHFFLyQ'LPHQVLRQDPLHQWRGHHTXLSRV)DFWRUHVDFRQVLGHUDU9LUWXDOL]DFLyQ GHSODWDIRUPD\GHUHFXUVRV9LUWXDOL]DFLyQGHSXHVWRVGHWUDEDMR 7(0$ 5HGHVFRQPXWDGDV\GHGLIXVLyQ&RQPXWDFLyQGHFLUFXLWRV\GHSDTXHWHV,QWHJUDFLyQ YR]GDWRV 3URWRFRORV GH HQFDPLQDPLHQWR (WKHUQHW FRQPXWDGD 03/6 &DOLGDG GH VHUYLFLR 4R6 7(0$ /D VHJXULGDG HQ UHGHV 6HJXULGDG SHULPHWUDO &RQWURO GH DFFHVRV 7pFQLFDV FULSWRJUiILFDV \ SURWRFRORV VHJXURV 0HFDQLVPRV GH ILUPD GLJLWDO 5HGHV SULYDGDV YLUWXDOHV6HJXULGDGHQHOSXHVWRGHOXVXDULR 7(0$ /DUHG,QWHUQHWDUTXLWHFWXUDGHUHG3ULQFLSLRVGHIXQFLRQDPLHQWR6HUYLFLRVHYROXFLyQ HVWDGRDFWXDO\SHUVSHFWLYDVGHIXWXUR/DZHE/DZHEVHPiQWLFD,QWHUQHWGHODV &RVDV ,R7 7(0$ 7HFQRORJtD;'6/\WHOHFRPXQLFDFLRQHVSRUFDEOHFRQFHSWRFDUDFWHUtVWLFDV\QRUPDWLYD UHJXODGRUD 7(0$ 5HGHV GH QXHYD JHQHUDFLyQ \ VHUYLFLRV FRQYHUJHQWHV 1*1,06 9R,3 7R,3 \ FRPXQLFDFLRQHVXQLILFDGDV&RQYHUJHQFLDWHOHIRQtDILMDWHOHIRQtDPyYLO 7(0$ 6LVWHPDV GH FRPXQLFDFLRQHV PyYLOHV *HQHUDFLRQHV 7HOHIRQtD VLQ KLORV \ '(&7 3DJLQJ5DGLRWHOHIRQtDSULYDGD6LVWHPDVFHOXODUHV7UXQNLQJ6ROXFLRQHVGHJHVWLyQGH GLVSRVLWLYRVPyYLOHV 0'0 7(0$ 5HGHV LQDOiPEULFDV 3URWRFRORV &DUDFWHUtVWLFDV IXQFLRQDOHV \ WpFQLFDV 6LVWHPDV GH H[SDQVLyQ GHO HVSHFWUR 6LVWHPDV GH DFFHVR 0RGRV GH RSHUDFLyQ 6HJXULGDG 1RUPDWLYDUHJXODGRUD 7(0$ ,3 PyYLO \ 3/& 3RZHU /LQH &RPXQLFDWLRQV &DUDFWHUtVWLFDV WpFQLFDV 0RGRV GH RSHUDFLyQ 6HJXULGDG 1RUPDWLYD UHJXODGRUD 9HQWDMDV H LQFRQYHQLHQWHV 7HOHYLVLyQ GLJLWDO6HUYLFLRVGHWHOHYLVLyQ ,379\277 5DGLRGLIXVLyQVRQRUDGLJLWDO i Pág. 12728 boc.cantabria.es 221/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 Consejería de Presidencia y Justicia ANEXO I CUERPO DE DIPLOMADOS Y TÉCNICOS MEDIOS TÉCNICO DE PREVENCIÓN DE RIESGOS LABORALES MATERIAS ESPECÍFICAS Conceptos básicos relativos a la seguridad y salud en el trabajo: El trabajo y la salud. Concepto de riesgo laboral. Protección y prevención. Prevención en el diseño. Condiciones de trabajo en relación con la salud. Factores de riesgo. Daños derivados del trabajo. TEMA 2.- Las técnicas preventivas. Seguridad en el Trabajo. Higiene Industrial. Ergonomía. Psicosociología Aplicada. Medicina del Trabajo. Técnicas de participación. La información y la comunicación. La formación. TEMA 3.- Unión Europea: Las actuaciones en materia de Seguridad y Salud en el trabajo en el ámbito de las instituciones comunitarias. Las instituciones comunitarias relacionadas con esta materia. Las directivas sobre disposiciones mínimas de seguridad y salud en el trabajo. Las directivas del mercado interior único y su relación con la seguridad y salud en el trabajo. El concepto de seguridad en el producto y de los requisitos esenciales de seguridad de los productos. TEMA 4.- El marco jurídico de la prevención de riesgos laborales en España: antecedentes. La Constitución de 1978. El Estatuto de los Trabajadores. La ley General de la Seguridad Social. La Ley sobre Infracciones y Sanciones en el Orden Social. TEMA 5.- Actuaciones de las Administraciones Públicas competentes en materia de Seguridad y Salud en el Trabajo en España. Funciones y actuaciones de la Inspección de Trabajo y Seguridad Social. El Instituto Nacional de Seguridad y Salud en el Trabajo. Los órganos técnicos de las Comunidades Autónomas. La Red Española de Seguridad y Salud en el Trabajo. La Comisión Nacional de Seguridad y Salud en el Trabajo. La Fundación para la Prevención de Riesgos Laborales. La Seguridad Social y las Mutuas de Accidentes de Trabajo y Enfermedades Profesionales. TEMA 6.- Actuaciones de las Administraciones Públicas competentes en materia sanitaria y de industria. La Ley 14/1986, de 25 de abril, General de Sanidad y modificaciones posteriores. La Ley 21/1992, de 16 de julio, de Industria. Reglamentos de Seguridad Industrial. TEMA 7.- La ley 31/1995, de 8 de noviembre, de Prevención de Riesgos Laborales. La Ley 54/2003, de 12 de diciembre, de reforma del marco normativo de la prevención de riesgos laborales. Real Decreto 171/2004, de 30 de enero, por el que desarrolla el artículo 24 de la Ley 31/1995, de 8 de noviembre, en materia de coordinación de actividades empresariales. TEMA 8.- El Reglamento de los Servicios de Prevención. Real Decreto 39/1997, de 17 de enero. Modificaciones introducidas por el Real Decreto 604/2006, de 19 de Mayo. TEMA 9.- Protección de la maternidad y de los menores: Riesgos laborales específicos para la mujer trabajadora en el periodo de embarazo, posparto y lactancia. Legislación vigente de protección de la maternidad. Medidas preventivas frente a los riesgos específicos. Riesgos específicos para los menores en razón de su trabajo. Legislación vigente de protección de los menores. Trabajos prohibidos. TEMA 10.- La adaptación de la normativa de prevención de riesgos laborales al ámbito de las Administraciones Públicas: las excepciones de la Ley de Prevención. Real Decreto 67/2010, de 29 de enero, de adaptación de la legislación de Prevención de Riesgos Laborales a la Administración General del Estado, modificado por Real Decreto 1084/2014, de 9 de diciembre. Real Decreto 1932/1998, de 11 de septiembre, de adaptación de los centros y establecimientos militares. TEMA 11.- La gestión de los riesgos laborales en la empresa. El sistema de gestión integrado de la prevención de riesgos laborales. El plan de Prevención. La asignación de responsabilidades. La planificación y la organización. La documentación. Los costes de los daños derivados del trabajo. Los beneficios de la acción preventiva. La auditoría de prevención. i Pág. 12729 boc.cantabria.es CVE-2019-3750 TEMA 1.- 222/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 TEMA 12.- Orden PRE/83/2009, de 29 de diciembre, por la que se aprueba la parte general del Plan de Prevención de Riesgos Laborales de la Administración de la Comunidad Autónoma de Cantabria, modificada por Orden PRE/16/2016, de 1 de marzo. Estructura del Plan de Prevención. Estructura organizativa del sistema de prevención. Procedimientos y Procesos. TEMA 13.- Concepto de salud y prevención. Concepto y objetivos de la medicina del trabajo. Patologías de origen laboral. Epidemiología laboral. Vigilancia de la salud. Protocolos de vigilancia sanitaria específica. Promoción de la salud. Planificación e información sanitaria. Normativa aplicable. TEMA 14.- Utilización de equipos de protección individual. Concepto y prioridad de utilización de los equipos de protección individual (EPI). El Real Decreto 773/1997, de 30 de mayo, y la guía técnica del Instituto Nacional de Seguridad y Salud en el Trabajo. TEMA 15.- Normativa del mercado único europeo relativa al diseño y comercialización de los EPI. Real Decreto 1407/1992, de 20 de noviembre, sobre comercialización y libre circulación intracomunitaria de los EPI. Reglamento (UE) 2016/425 del Parlamento Europeo y del Consejo, de 9 de marzo de 2016, relativo a los equipos de Protección individual. Definición de EPI y tipos. TEMA 16.- La formación en prevención de riesgos laborales. Derechos y obligaciones. La planificación de la formación en la empresa. El diagnóstico de necesidades. La definición de objetivos. La determinación de los programas. Métodos y técnicas formativas. Las nuevas tecnologías aplicadas a la formación. La evaluación. TEMA 17.- El accidente de trabajo y la enfermedad profesional en el sistema de la Seguridad Social. Parte de accidente de trabajo, notificación y tramitación. Orden de 16 de diciembre de 1987 por la que se establece modelos para la notificación de accidentes de trabajo y se dan instrucciones para su cumplimentación y tramitación. Orden Ministerial TAS/2926/2002, de 19 de noviembre, por la que se regula la utilización del Sistema de Declaración Electrónica de Accidentes de Trabajo (Delt@). TEMA 18.- Real Decreto 1299/2006, de 10 de noviembre, modificado por el Real Decreto 1150/2015, de 18 de diciembre, por el que se aprueba el cuadro de enfermedades profesionales en el sistema de la Seguridad Social y se establecen criterios para su notificación y registro. Orden TAS/1/2007, de 2 de enero, por la que se establece el modelo de parte de enfermedad profesional, se dictan normas para su elaboración y transmisión y se crea el correspondiente fichero de datos personales. TEMA 19.- Otras técnicas relacionadas con la prevención: La gestión medioambiental. La seguridad vial. La seguridad industrial y la prevención de riesgos patrimoniales. La gestión de la eliminación de residuos. TEMA 20.- Disposiciones mínimas de Seguridad y Salud en los lugares de trabajo: el Real Decreto 486/1997 de 14 de abril, y guía técnica del Instituto Nacional de Seguridad e Higiene en el Trabajo para la evaluación y prevención de riesgos. Real Decreto 314/2006, de 17 de marzo, por el que se aprueba el Código Técnico de la Edificación: Documento Básico SUA: Seguridad en la Utilización y Accesibilidad. TEMA 21.- Normas y señalización de seguridad y salud: La norma interna de seguridad. Objetivos. Concepto y tipos de señalización. Objeto y utilización adecuada de la señalización de seguridad. El Real Decreto 485/1997, de 14 de abril, sobre señalización de seguridad y salud en el trabajo. La guía técnica del Instituto Nacional de Seguridad e Higiene en el Trabajo. TEMA 22.- Utilización de equipos de trabajo: el Real Decreto 1215/1997, de 18 de julio, sobre la utilización por los trabajadores de equipos de trabajo. La guía técnica del Instituto Nacional de Seguridad y Salud en el Trabajo TEMA 23.- Comercialización y puesta en servicio de máquinas. Requisitos esenciales de Seguridad y Salud. La certificación y el marcado CE. Real Decreto 1644/2008, de 10 de octubre, por el que se establecen las normas para la comercialización y puesta en servicio de las máquinas. Seguridad de las máquinas. TEMA 24.- Aparatos e instalaciones a presión. Maquinaria móvil. Aparatos de elevación de cargas y de personas. Normativa vigente. TEMA 25.- Prevención y protección contra riesgo de incendios y explosión: Conceptos básicos sobre causas y propagación de los incendios. Principios generales de prevención y protección. Real Decreto 314/2006, de 17 de marzo, por el que se aprueba el Código Técnico de la Edificación. Documento Básico SI: Seguridad en caso de incendio. i Pág. 12730 boc.cantabria.es CVE-2019-3750 Consejería de Presidencia y Justicia 223/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 TEMA 26.- Real Decreto 2267/2004, de 3 de diciembre, por el que se aprueba el Reglamento de seguridad contra incendios en los establecimientos industriales. Real Decreto 513/2017, de 22 de mayo, por el que se aprueba el Reglamento de Instalaciones de Protección contra Incendios. TEMA 27.- Planes de emergencia y evacuación. Real Decreto 393/2007 de 23 de marzo, por el que se aprueba la Norma Básica de Autoprotección de los centros, establecimientos y dependencias dedicados a actividades que puedan dar origen a situaciones de emergencia, y modificaciones posteriores. Normativa de regulación en la Comunidad Autónoma de Cantabria. TEMA 28.- Riesgos eléctricos: características de la corriente eléctrica. Efectos fisiológicos de la corriente eléctrica. Factores de riesgo. Real Decreto 614/2001, de 8 de junio, sobre disposiciones mínimas para la protección de la Salud y Seguridad de los trabajadores frente al riesgo eléctrico. Actuación en caso de accidente eléctrico. Guía Técnica. TEMA 29.- Riesgo en el almacenamiento y manipulación de productos químicos peligrosos. Medidas de protección. Real Decreto 656/2017, de 23 de junio, por el que se aprueba el Reglamento de Almacenamiento de Productos Químicos y sus Instrucciones Técnicas Complementarias MIE APQ 0 a 10. TEMA 30.- Técnicas de Seguridad: el concepto del riesgo y la teoría de la causalidad. Técnicas específicas. Técnicas generales: analíticas y operativas. Inspecciones de seguridad: concepto y objetivo de las inspecciones de seguridad. Inspecciones planificadas y no planificadas. TEMA 31.- La investigación de accidentes: concepto y objetivos. Metodología general de la investigación. El estudio de las causas. El informe. El análisis estadístico de los accidentes. Índices estadísticos. Evolución de la siniestralidad en España. TEMA 32.- Seguridad y salud en las obras de construcción: principales riesgos propios de las obras de construcción. Real Decreto 1627/1997, de 24 de octubre, sobre disposiciones mínimas de Seguridad y Salud en las obras de construcción. Guía Técnica. TEMA 33.- Higiene Industrial. Conceptos básicos. Definición, objetivos y ramas. Tipos de agentes contaminantes. Concepto de exposición, dosis y valor límite. Noción de sustancias y mezclas. La encuesta higiénica. TEMA 34.- Toxicología laboral: Clasificación de los agentes químicos según su estado y forma. Vías de entrada en el organismo. Interacción con el organismo. Daños derivados del trabajo a corto y largo plazo. Factores determinantes de la toxicidad. Efectos aditivos y sinérgicos. Valoración del riesgo. TEMA 35.- Legislación del mercado único europeo sobre sustancias y mezclas: Notificación, clasificación, envasado y etiquetado de sustancias y mezclas. Reglamento CLP. Ficha de datos de seguridad. Limitaciones de la comercialización y uso de las sustancias y las mezclas. Legislación específica de los productos fitosanitarios. TEMA 36.- Agentes químicos: la evaluación de la exposición. Estrategia de muestreo. Sistemas de medida directa y de toma de muestras. Control de calidad de los equipos de medida y calibración de los muestradores. El método analítico y las técnicas de análisis. TEMA 37.- Agentes químicos: criterios de valoración. Valores límites ambientales: concepto y tipos. Valores límites ambientales de exposición profesional en España. Otros límites de referencia. Los TLV de la ACGIH. Normativa española. TEMA 38.- Criterios biológicos de valoración de la exposición a contaminantes químicos. Indicador biológico. Valores límites biológicos en España. Otros límites de referencia. Los BEI de la ACGIH. TEMA 39.- Control de riesgos por exposición a agentes químicos: prevención en el diseño. El principio de sustitución. El control sobre la fuente. Extracción localizada. Actuaciones sobre el ambiente. Ventilación general. Medidas preventivas sobre las personas. La protección personal. La vigilancia específica de la salud. Otras medidas preventivas: organizativas, limitación de acceso, etc. TEMA 40.- Real Decreto 374/2001, de 6 de abril, sobre la protección de la salud y seguridad de los trabajadores contra los riesgos relacionados con los agentes químicos durante el trabajo, (modificado por Real Decreto 598/2015, de 3 de julio). Objeto y ámbito de aplicación. Definiciones. Concepto y utilización de los valores límites vinculantes e indicativos. Obligación del empresario. Relación con otros Reales Decretos y Reglamentos. Guía técnica. i Pág. 12731 boc.cantabria.es CVE-2019-3750 Consejería de Presidencia y Justicia 224/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 Consejería de Presidencia y Justicia CVE-2019-3750 TEMA 41.- Prevención de riesgos por exposición a agentes cancerígenos y mutagénicos: concepto y categorías de agente cancerígeno y de agente mutagénico. El Real Decreto 665/1997, de 12 de mayo, y sus modificaciones por el Real Decreto 1124/2000, de 16 de junio, por el Real Decreto 349/2003, de 21 de marzo y por el Real Decreto 598/2015, de 3 de julio. Guía técnica. TEMA 42.- Real Decreto 396/2006, de 31 de marzo, por el que se establecen las disposiciones mínimas de seguridad y salud aplicables a los trabajos con riesgo de exposición al amianto. Guía técnica. TEMA 43.- Prevención de riesgos por exposición al ruido: Características físicas del ruido. Parámetros de medida. Tipos de ruido laboral. Mecanismos de la audición. Riesgos por exposición al ruido. Evaluación del riesgo por exposición al ruido. Medidas preventivas. Real Decreto 286/2006, de 10 de marzo, sobre la protección de la salud y la seguridad de los trabajadores contra los riesgos relacionados con la exposición al ruido. Guía técnica. TEMA 44.- Real Decreto 1311/2005, de 4 de noviembre, sobre la protección de la salud y la seguridad de los trabajadores frente a los riesgos derivados o que puedan derivarse de la exposición a vibraciones mecánicas. Modificación introducida por Real Decreto 330/2009 de 13 de marzo. Características físicas de las vibraciones. Tipos de vibraciones. Riesgos laborales por exposición a las vibraciones. Métodos de evaluación del riesgo y medidas preventivas. Guía técnica. TEMA 45.- Prevención de riesgos por exposición a radiaciones ionizantes: Concepto y tipos de radiaciones ionizantes. Interacción en el organismo. Riesgos por exposición a estas radiaciones. Principales actividades con este tipo de riesgos. Conceptos básicos de protección radiológica. La reglamentación vigente sobre protección contra las radiaciones ionizantes. Real Decreto 783/2001, de 6 de julio, por el que se aprueba el Reglamento de protección sanitaria contra radiaciones ionizantes y su modificación por el Real Decreto 1439/2010, de 5 de noviembre. Real Decreto 413/1997, de 21 de marzo, sobre protección de los trabajadores externos con riesgo de exposición a radiaciones ionizantes por intervención en zona controlada. TEMA 46.- Prevención de riesgos por exposición a radiaciones no ionizantes. Clasificación y características físicas de las principales radiaciones no ionizantes: ultravioleta, luz visible, radiaciones infrarrojas, microondas y láseres. Riesgos para la salud, evaluación del riesgo y medidas preventivas. Real Decreto 486/2010, de 23 de abril, sobre protección de la salud y la seguridad de los trabajadores contra los riesgos relacionados con la exposición a radiaciones ópticas artificiales. Guía técnica. TEMA 47.- Problemática de las radiaciones de baja frecuencia. Exposición a campos eléctricos y magnéticos. Real Decreto 1066/2001, de 28 de septiembre, por el que se aprueba el Reglamento que establece condiciones de protección del dominio público radioeléctrico, restricciones a las emisiones radioeléctricas y medidas de protección sanitaria frente a emisiones radioeléctricas. Modificaciones realizadas por Real Decreto 123/2017, de 24 de febrero. El Real Decreto 299/2016 de 22 de julio, sobre protección de los trabajadores expuestos a campos electromagnéticos TEMA 48.- Prevención de riesgos por exposición a agentes biológicos. Conceptos y definición de agente biológico. Clasificación. Vías de entrada en el organismo. Efectos sobre el individuo. Clasificación por grupos según el riesgo que presentan. Medidas preventivas de contención. Aplicación del Real Decreto 664/1997 de 12 de mayo, y de la Orden de 25 de marzo de 1998 que lo adapta al progreso técnico. TEMA 49.- Real Decreto 865/2003, de 4 de julio, por el que se establecen los criterios higiénico-sanitarios para la prevención y control de la legionelosis. TEMA 50.- Las condiciones termohigrométricas en los lugares de trabajo. Parámetros a considerar. Efectos sobre la salud. Equipos de medida. Valores de referencia en la normativa española. Evaluación del riesgo en ambientes calurosos. Índice WBGT. Medidas preventivas. El riesgo de estrés por frío y su valoración. El TLV de la ACGIH. Aplicación del reglamento de seguridad para plantas e instalaciones frigoríficas. TEMA 51.- Ergonomía: concepto y objetivos. El ser humano y su entorno. Ergonomía en el proyecto. Concepción y diseño de puestos de trabajo. La organización del trabajo. Las exigencias de la tarea. El trabajo a turnos. La carga mental. i Pág. 12732 boc.cantabria.es 225/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 Consejería de Presidencia y Justicia CVE-2019-3750 TEMA 52.- Especificaciones ergonómicas del ambiente físico. Las condiciones termohigrométricas. Disconfort térmico. Métodos de valoración y medidas preventivas. El concepto de confort acústico. Las molestias producidas por el ruido en el trabajo. Criterios de valoración. Criterios de valoración. TEMA 53.- Iluminación y color. Factores de la visión. Condiciones generales de la iluminación en los lugares de trabajo. Efectos sobre la salud. Fatiga visual. Condiciones de la iluminación. Niveles mínimos exigibles. La iluminación en los puestos de trabajo donde se utilizan pantallas de visualización de datos. Equipos de medida. TEMA 54.- Carga física de trabajo: consideraciones generales. Carga física estática y dinámica. Fatiga física. Lesiones y patologías. Métodos de evaluación de los riesgos. Criterio para determinar el consumo energético. Determinación de la frecuencia cardiaca. Procedimientos basados en el consumo de oxígeno. Prevención de los riesgos derivados de la carga física de trabajo. Manipulación manual de cargas. Posturas de trabajo. Movimientos repetitivos. TEMA 55.- Manipulación manual de cargas. La evaluación y prevención del riesgo. Aplicación del Real Decreto 487/1997, de 14 de abril, y de la guía técnica del Instituto Nacional de Seguridad e Higiene en el trabajo. TEMA 56.- El trabajo en oficinas. El trabajo en los puestos que incluyen pantalla de visualización de datos. Prevención de riesgos y evaluación. Aplicación del Real Decreto 488/1997, de 14 de abril, y la guía técnica del Instituto Nacional de Seguridad e Higiene en el Trabajo. El denominado síndrome del edificio enfermo. TEMA 57.- Factores de riesgo psicosociales: Concepto de riesgos psicosociales. Métodos de evaluación. La prevención del riesgo. TEMA 58.- El estrés: Sus formas. Consecuencias físicas y fisiológicas del estrés. Consecuencias psicológicas. La ansiedad y la depresión. Técnicas de control del estrés. El efecto del “quemado” (“burn out”). i Pág. 12733 boc.cantabria.es 226/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2,, &8(532'(',3/20$'26<7e&1,&260(',26 0$7(5,$6&2081(6 '(5(&+2&2167,78&,21$/<'(5(&+2$8721Ï0,&2 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH'HUHFKRVIXQGDPHQWDOHV\OLEHUWDGHVS~EOLFDV3URWHFFLyQGH ORV GHUHFKRV IXQGDPHQWDOHV 2UJDQL]DFLyQ WHUULWRULDO GHO (VWDGR HVSHFLDO UHIHUHQFLD D ODV &RPXQLGDGHV$XWyQRPDV 7(0$ /D&RURQD)XQFLRQHVFRQVWLWXFLRQDOHVGHO5H\6XFHVLyQ\UHJHQFLD 7(0$ /DV &RUWHV *HQHUDOHV (O 7ULEXQDO &RQVWLWXFLRQDO (O 3RGHU -XGLFLDO (O &RQVHMR *HQHUDO GHO 3RGHU-XGLFLDO(O'HIHQVRUGHO3XHEOR 7(0$ (O *RELHUQR HQ HO VLVWHPD FRQVWLWXFLRQDO HVSDxRO 5HODFLRQHV HQWUH HO *RELHUQR \ ODV &RUWHV *HQHUDOHV'HVLJQDFLyQUHPRFLyQ\UHVSRQVDELOLGDGGHO*RELHUQR 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD (O SURFHVR DXWRQyPLFR GH &DQWDEULD LQLFLDWLYD DXWRQyPLFDWUDPLWDFLyQ\DSUREDFLyQGHO(VWDWXWRGH$XWRQRPtD&RPSHWHQFLDVDVXPLGDVSRUOD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRV GH DPSOLDFLyQ GH FRPSHWHQFLDV 7(0$ /D RUJDQL]DFLyQ LQVWLWXFLRQDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR (O 3UHVLGHQWH(O*RELHUQR5HODFLRQHVHQWUHHO3DUODPHQWR\HO*RELHUQR 7(0$ /RV yUJDQRV GH *RELHUQR \ $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD UpJLPHQ MXUtGLFRSULQFLSLRVHVWUXFWXUD\FRPSHWHQFLDV/D+DFLHQGD3~EOLFDGHOD&RPXQLGDG$XWyQRPD GH&DQWDEULD '(5(&+2$'0,1,675$7,92)81&,Ï13Ò%/,&$<32/Ë7,&$6'(,*8$/'$' i Pág. 12734 /DOH\FRQFHSWR\FODVHV'LVSRVLFLRQHVQRUPDWLYDVFRQIXHU]DGHOH\ORV'HFUHWRV±/H\HV\ORV 'HFUHWRV±/HJLVODWLYRV (O 5HJODPHQWR QDWXUDOH]D FODVHV \ GLVWLQFLyQ FRQ ORV DFWRV DGPLQLVWUDWLYRV 7(0$ (O DFWR DGPLQLVWUDWLYR &RQFHSWR FODVHV \ HOHPHQWRV (O UpJLPHQ MXUtGLFR GHO VLOHQFLR DGPLQLVWUDWLYR 7(0$ (ILFDFLDGHORVDFWRVDGPLQLVWUDWLYRV3UHVXSXHVWRV(MHFXWLYLGDG6XVSHQVLyQGHODHILFDFLD/D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV 7UDQVPLVLELOLGDG FRQYHUVLyQ FRQVHUYDFLyQ\FRQYDOLGDFLyQ 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR \ FODVHV 3ULQFLSLRV 6X UHJXODFLyQ HQ HO GHUHFKR SRVLWLYR 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ\WHUPLQDFLyQGHOSURFHGLPLHQWR 7(0$ /RVUHFXUVRVDGPLQLVWUDWLYRV&RQFHSWR\QDWXUDOH]D&ODVHV5pJLPHQMXUtGLFRGHORVGLIHUHQWHV UHFXUVRV HQ OD /H\ GHO 3URFHGLPLHQWR $GPLQLVWUDWLYR &RP~Q GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV %UHYH UHIHUHQFLD D OD /H\ GH &DQWDEULD GH GH QRYLHPEUH GH 5pJLPHQ -XUtGLFR GHO *RELHUQRGHOD$GPLQLVWUDFLyQ\GHO6HFWRU3~EOLFR,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD boc.cantabria.es CVE-2019-3750 7(0$ 227/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ (O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR , 3HUVRQDO DO VHUYLFLR GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 6LWXDFLRQHV DGPLQLVWUDWLYDV 7(0$ (O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GHOD/H\GHO(VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR ,, 'HUHFKRV\GHEHUHVGHORVHPSOHDGRV S~EOLFRV&yGLJRGHFRQGXFWD\UpJLPHQGLVFLSOLQDULR 7(0$ /D )XQFLyQ 3~EOLFD HQ OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &ODVHV GH SHUVRQDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQ $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 'HUHFKRV\GHEHUHVGHORVIXQFLRQDULRV'HUHFKRVHFRQyPLFRVGHORVIXQFLRQDULRV5HWULEXFLRQHV EiVLFDV\FRPSOHPHQWDULDV'HUHFKRVSDVLYRV\6HJXULGDG6RFLDOGHORVIXQFLRQDULRV 7(0$ 5HSUHVHQWDFLyQ \ SDUWLFLSDFLyQ GH ORV IXQFLRQDULRV S~EOLFRV /H\ 2UJiQLFD GH /LEHUWDG 6LQGLFDO /D QHJRFLDFLyQ FROHFWLYD OD UHSUHVHQWDFLyQ \ OD SDUWLFLSDFLyQ LQVWLWXFLRQDO HQ HO 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR 7(0$ /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ 5HDO'HFUHWRGHGHHQHUR 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ 7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR%UHYHUHIHUHQFLDDOD /H\GH&DQWDEULDGHGHPDU]RGH7UDQVSDUHQFLDGHOD$FWLYLGDG3~EOLFD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV 81,Ï1(8523($ /D 8QLyQ (XURSHD $QWHFHGHQWHV \ REMHWLYRV /RV 7UDWDGRV IXQGDFLRQDOHV \ VXV UHIRUPDV /D DGKHVLyQGH(VSDxDDOD&((/DV,QVWLWXFLRQHV&RPXQLWDULDV(O&RQVHMR(XURSHRHO&RQVHMR \OD&RPLVLyQ(XURSHDHO3DUODPHQWR(XURSHRHO7ULEXQDOGH-XVWLFLD&RPSRVLFLyQIXQFLRQHV\ FRPSHWHQFLDV 7(0$ /DV IXHQWHVGHO RUGHQDPLHQWR MXUtGLFRFRPXQLWDULR GHUHFKR RULJLQDULR \ GHULYDGR 5HJODPHQWRV GLUHFWLYDV\GHFLVLRQHV/DVUHODFLRQHVHQWUHHOGHUHFKRFRPXQLWDULR\HOGHUHFKRGHORV(VWDGRV PLHPEURVHQODDSOLFDFLyQGHDTXpOHVSHFLDOUHIHUHQFLDDO(VWDGRHVSDxRO/DSDUWLFLSDFLyQGHODV &RPXQLGDGHV$XWyQRPDVHQODDSOLFDFLyQGHO'HUHFKR&RPXQLWDULR 7(0$ /DV OLEHUWDGHV EiVLFDV GHO VLVWHPD FRPXQLWDULR \ HO LQWHUYHQFLRQLVPR S~EOLFR /DV SROtWLFDV FRPXQHV/DSROtWLFDUHJLRQDO\VXLQFLGHQFLDHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD CVE-2019-3750 7(0$ i Pág. 12735 boc.cantabria.es 228/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 352*5$0$'(0$7(5,$63$5$(/,1*5(62(1(/&8(532$'0,1,675$7,92 '(5(&+2$'0,1,675$7,92$'0,1,675$&,Ï1<'(5(&+2&2167,78&,21$/ 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH(VWUXFWXUD\FRQWHQLGR'HUHFKRV\GHEHUHVIXQGDPHQWDOHV /DV JDUDQWtDV GH ORV GHUHFKRV IXQGDPHQWDOHV \ ODV OLEHUWDGHV S~EOLFDV /D VXVSHQVLyQ GH ORV GHUHFKRV\OLEHUWDGHV5HIRUPDGHOD&RQVWLWXFLyQ 7(0$ /D&RURQD)XQFLRQHVGHO5H\HQOD&RQVWLWXFLyQGH6XFHVLyQ\UHJHQFLD(OUHIUHQGR/D &DVDGHO5H\ 7(0$ /DV&RUWHV*HQHUDOHVFRPSRVLFLyQDWULEXFLRQHV\IXQFLRQDPLHQWR/DHODERUDFLyQGHODVOH\HV (O'HIHQVRUGHO3XHEOR 7(0$ (O *RELHUQR FRPSRVLFLyQ HVWDWXWR GH ORV PLHPEURV UpJLPHQ GH IXQFLRQDPLHQWR 5HODFLRQHV HQWUHHO*RELHUQR\ODV&RUWHV*HQHUDOHV 7(0$ /D 8QLyQ (XURSHD /DV LQVWLWXFLRQHV GH OD 8QLyQ (XURSHD HO &RQVHMR (XURSHR HO &RQVHMR HO 3DUODPHQWROD&RPLVLyQHO7ULEXQDOGH-XVWLFLDHO7ULEXQDOGH&XHQWDV7LSRORJtD\HIHFWRVGH ODVIXHQWHVGHOGHUHFKRFRPXQLWDULRWUDWDGRVUHJODPHQWRVGLUHFWLYDV\GHFLVLRQHV 7(0$ (O 3RGHU -XGLFLDO \ HO 7ULEXQDO &RQVWLWXFLRQDO (O SULQFLSLR GH XQLGDG MXULVGLFFLRQDO (O &RQVHMR *HQHUDO GHO 3RGHU -XGLFLDO (O 7ULEXQDO 6XSUHPR (O 0LQLVWHULR )LVFDO /D RUJDQL]DFLyQ MXGLFLDO HVSDxROD ORV 7ULEXQDOHV 6XSHULRUHV GH -XVWLFLD GH ODV &RPXQLGDGHV $XWyQRPDV (O 7ULEXQDO &RQVWLWXFLRQDO 7(0$ /DRUJDQL]DFLyQDGPLQLVWUDWLYD/RVyUJDQRVDGPLQLVWUDWLYRVÏUJDQRVFROHJLDGRV/RVSULQFLSLRV GH OD RUJDQL]DFLyQ DGPLQLVWUDWLYD FRPSHWHQFLD HILFDFLD MHUDUTXtD FRRUGLQDFLyQ GHVFHQWUDOL]DFLyQ\GHVFRQFHQWUDFLyQ 7(0$ /DRUJDQL]DFLyQDGPLQLVWUDWLYDHVSDxROD/RV0LQLVWURV6HFUHWDULRVGH(VWDGR6XEVHFUHWDULRV\ 'LUHFWRUHV *HQHUDOHV /D $GPLQLVWUDFLyQ 3HULIpULFD GHO (VWDGR ORV 'HOHJDGRV \ 6XEGHOHJDGRV GHO*RELHUQR 7(0$ /RV2UJDQLVPRVS~EOLFRVFRQFHSWRFODVHV\UpJLPHQMXUtGLFR/D$GPLQLVWUDFLyQFRQVXOWLYD 7(0$ /D RUJDQL]DFLyQ WHUULWRULDO GHO (VWDGR ODV &RPXQLGDGHV $XWyQRPDV &RQVWLWXFLyQ \ FRPSHWHQFLDV/RV(VWDWXWRVGH$XWRQRPtD 7(0$ /DRUJDQL]DFLyQWHUULWRULDOGHO(VWDGROD$GPLQLVWUDFLyQ/RFDO/D3URYLQFLD\HO0XQLFLSLR2WUDV HQWLGDGHVORFDOHV 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD $SUREDFLyQ \ SURPXOJDFLyQ (VWUXFWXUD \ FRQWHQLGR &RPSHWHQFLDV DVXPLGDV SRU OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRVGHDPSOLDFLyQGHFRPSHWHQFLDV/DUHIRUPDGHO(VWDWXWR 7(0$ (O RUGHQDPLHQWR MXUtGLFR /D &RQVWLWXFLyQ /DV /H\HV FRQFHSWR \ FODVHV /DV GLVSRVLFLRQHV GHO HMHFXWLYRFRQIXHU]DGH/H\'HFUHWRVOH\HV\'HFUHWRVOHJLVODWLYRV/RVUHJODPHQWRVFRQFHSWR\ FODVHV/RV7UDWDGRV,QWHUQDFLRQDOHV i Pág. 12736 boc.cantabria.es CVE-2019-3750 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /DV ,QVWLWXFLRQHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR /D $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPDGH&DQWDEULDORVyUJDQRVVXSHULRUHV\ORVyUJDQRVGLUHFWLYRV&RQVHMHURV6HFUHWDULRV *HQHUDOHV'LUHFWRUHV*HQHUDOHV\6XEGLUHFWRUHV*HQHUDOHV/DV&RQVHMHUtDV 229/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (ODFWRDGPLQLVWUDWLYR&RQFHSWR&ODVHV(OHPHQWRVVXEMHWLYRV(OHPHQWRVREMHWLYRV(OHPHQWRV IRUPDOHVHQSDUWLFXODUODPRWLYDFLyQ(OVLOHQFLRDGPLQLVWUDWLYR 7(0$ /D HILFDFLD GH ORV DFWRV DGPLQLVWUDWLYRV 3UHVXSXHVWRV HQ HVSHFLDO OD QRWLILFDFLyQ \ OD SXEOLFDFLyQ/DHMHFXFLyQGHODFWRDGPLQLVWUDWLYR(MHFXWLYLGDG\HMHFXFLyQIRU]RVD 7(0$ /D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV ,UUHJXODULGDGHV QR LQYDOLGDQWHV([FHSFLRQHVDODLQYDOLGH]GHORVDFWRVWUDQVPLVLELOLGDGFRQYHUVLyQFRQVHUYDFLyQ\ FRQYDOLGDFLyQ5HYRFDFLyQ\UHYLVLyQGHORVDFWRVDGPLQLVWUDWLYRV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR 3ULQFLSLRV JHQHUDOHV ,QWHUHVDGRV $EVWHQFLyQ \ UHFXVDFLyQ 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ \ WHUPLQDFLyQ GHO SURFHGLPLHQWR %UHYH UHIHUHQFLD D ORV SURFHGLPLHQWRV GH UHVSRQVDELOLGDGSDWULPRQLDO\GHQDWXUDOH]DVDQFLRQDGRUD 7(0$ /RV UHFXUVRV DGPLQLVWUDWLYRV FRQFHSWR \ FODVHV (O UHFXUVR GH DO]DGD GH UHSRVLFLyQ \ HO H[WUDRUGLQDULR GH UHYLVLyQ /DV UHFODPDFLRQHV HFRQyPLFRDGPLQLVWUDWLYDV %UHYH UHIHUHQFLD D OD /H\ GH &DQWDEULD GH 5pJLPHQ -XUtGLFR GHO *RELHUQR GH OD $GPLQLVWUDFLyQ \ GHO 6HFWRU 3~EOLFR ,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD 7(0$ /RV FRQWUDWRV S~EOLFRV FRQFHSWR \ FODVHV (VWXGLR GH ORV HOHPHQWRV GH ORV FRQWUDWRV DGPLQLVWUDWLYRV 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV *(67,Ï1'(3(5621$/ 7(0$ (OSHUVRQDODOVHUYLFLRGHOD$GPLQLVWUDFLyQ&ODVHV\UHJXODFLyQQRUPDWLYD(OUpJLPHQMXUtGLFRGH OD)XQFLyQ3~EOLFD(O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR \ OD /H\ GH &DQWDEULD GHGHPDU]RGHOD)XQFLyQ3~EOLFD 7(0$ (O SHUVRQDO IXQFLRQDULR DO VHUYLFLR GHO *RELHUQR GH &DQWDEULD OD UHODFLyQ MXUtGLFRHVWDWXWDULD $GTXLVLFLyQ \ SpUGLGD GH OD FRQGLFLyQ GH IXQFLRQDULR 6HOHFFLyQ GH IXQFLRQDULRV 3URYLVLyQ GH SXHVWRVGHWUDEDMR6LWXDFLRQHVDGPLQLVWUDWLYDV 7(0$ /RVGHUHFKRV\GHEHUHVGHORVIXQFLRQDULRVGHOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH &DQWDEULD 'HUHFKRV GH FDUiFWHU SURIHVLRQDO 'HUHFKRV HFRQyPLFRV 'HUHFKRV VRFLDOHV 'HUHFKRVFROHFWLYRV(OGHUHFKRGHKXHOJD\UHSUHVHQWDFLyQ/RVGHEHUHVGHORVIXQFLRQDULRV 7(0$ ,QFRPSDWLELOLGDGHV GH ORV IXQFLRQDULRV 5pJLPHQ GLVFLSOLQDULR /D UHVSRQVDELOLGDG GH ORV IXQFLRQDULRV(VSHFLDOUHIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD CVE-2019-3750 7(0$ (OSHUVRQDOODERUDODOVHUYLFLRGHODV$GPLQLVWUDFLRQHV3~EOLFDV'HUHFKRV\'HEHUHV(OFRQWUDWR ODERUDO FRQWHQLGR PRGDOLGDGHV VXVSHQVLyQ \ H[WLQFLyQ 1HJRFLDFLyQ /DERUDO &RQIOLFWRV \ FRQYHQLRVFROHFWLYRV i Pág. 12737 boc.cantabria.es 230/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$/D 6HJXULGDG 6RFLDO (O 7H[WR 5HIXQGLGR GH OD /H\ *HQHUDO GH OD 6HJXULGDG 6RFLDO FDPSR GH DSOLFDFLyQ\HVWUXFWXUDGHOVLVWHPDGHOD6HJXULGDG6RFLDO&RQFHSWR\SULQFLSDOHVFDUDFWHUtVWLFDV GHODDILOLDFLyQ\ODFRWL]DFLyQ$FFLyQSURWHFWRUDFRQWLQJHQFLDV FRPXQHV\SURIHVLRQDOHV \WLSRV GHSUHVWDFLRQHV 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV *(67,Ï1),1$1&,(5$ 7(0$ (O 'HUHFKR )LQDQFLHUR HO 'HUHFKR 3UHVXSXHVWDULR 3ULQFLSLRV *HQHUDOHV GHO 'HUHFKR 3UHVXSXHVWDULR FRQWHQLGRV HQ OD &RQVWLWXFLyQ (VSDxROD HO (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD OD /H\ GH )LQDQ]DV GH &DQWDEULD ODV /H\HV GH 3UHVXSXHVWRV *HQHUDOHV GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULDOD/H\*HQHUDO3UHVXSXHVWDULD 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5HJXODFLyQHQOD/H\GH )LQDQ]DV GH &DQWDEULD \ HQ ODV /H\HV DQXDOHV GH 3UHVXSXHVWRV (VWUXFWXUD \ FRQWHQLGR GHO SUHVXSXHVWR &ODVLILFDFLyQ RUJiQLFD HFRQyPLFD \ IXQFLRQDO (ODERUDFLyQ \ DSUREDFLyQ GH ORV 3UHVXSXHVWRV /D /H\ 2UJiQLFD GH GH DEULO GH (VWDELOLGDG 3UHVXSXHVWDULD \ 6RVWHQLELOLGDG)LQDQFLHUDGHODV$GPLQLVWUDFLRQHV3~EOLFDV 7(0$ /D&RQWDELOLGDG3~EOLFDFRQFHSWRVXMHWR\ILQHV/D&RQWDELOLGDG3~EOLFDHQOD/H\GH)LQDQ]DV /D3ODQLILFDFLyQ&RQWDEOH3ODQ*HQHUDOGH&RQWDELOLGDG3~EOLFDSDUD&DQWDEULDDQWHFHGHQWHV\ iPELWRGHDSOLFDFLyQ3ULQFLSLRV&RQWDEOHV*UXSRVGH&XHQWDV 7(0$ /RVGHUHFKRVGHOD+DFLHQGD$XWRQyPLFDFRQFHSWR\FODVHV/D$GPLQLVWUDFLyQGHORVGHUHFKRV \ VXV SUHUURJDWLYDV 5HFXUVRV UHFLELGRV GHO (VWDGR \ GH OD 8QLyQ (XURSHD (O HQGHXGDPLHQWR PRGDOLGDGHV\VXUpJLPHQMXUtGLFR(VWUXFWXUDGHOSUHVXSXHVWRGHLQJUHVRV 7(0$ /RVFUpGLWRVSUHVXSXHVWDULRVFRQFHSWR/RVFUpGLWRVLQLFLDOHV0RGLILFDFLRQHVGHFUpGLWR&UpGLWRV H[WUDRUGLQDULRV 6XSOHPHQWRV GH FUpGLWR 7UDQVIHUHQFLDV GH FUpGLWR *HQHUDFLRQHV GH FUpGLWR $PSOLDFLRQHVGHFUpGLWRH,QFRUSRUDFLyQGHUHPDQHQWHV3UyUURJDGHORVSUHVXSXHVWRV 7(0$ (OJDVWRS~EOLFRHQ&DQWDEULD/DHMHFXFLyQGHOSUHVXSXHVWRGHJDVWRV3URFHGLPLHQWRJHQHUDOGH HMHFXFLyQ GHO JDVWR S~EOLFR \ SURFHGLPLHQWRV HVSHFLDOHV ÏUJDQRV FRPSHWHQWHV )DVHV GHO SURFHGLPLHQWRGHSDJRGRFXPHQWRVFRQWDEOHVTXHLQWHUYLHQHQ/DOLTXLGDFLyQGHOSUHVXSXHVWR\ HO FLHUUH GHO HMHUFLFLR &RQWURO GHO JDVWR S~EOLFR &ODVHV (VSHFLDO UHIHUHQFLD GH FRQWURO GH OHJDOLGDG(O7ULEXQDOGH&XHQWDV 7(0$ /RV 7ULEXWRV FRQFHSWR QDWXUDOH]D \ FODVHV /D /H\ *HQHUDO 7ULEXWDULD HVWUXFWXUD \ SULQFLSLRV JHQHUDOHV 7(0$ /D/H\*HQHUDO7ULEXWDULDKHFKRLPSRQLEOHVXMHWRSDVLYR\UHVSRQVDEOHV%DVHLPSRQLEOH\EDVH OLTXLGDEOHWLSRGHJUDYDPHQFXRWD\GHXGDWULEXWDULD 7(0$ /DILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV/H\GHGHGLFLHPEUHGHO6LVWHPD CVE-2019-3750 GH)LQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDVGHUpJLPHQFRP~Q\FLXGDGHVFRQ(VWDWXWRGH $XWRQRPtD/DV)XHQWHVGHILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV5HFXUVRVSURFHGHQWHV GHO6LVWHPDGH)LQDQFLDFLyQ$XWRQyPLFDLQJUHVRVWULEXWDULRVSURSLRV\HVSHFLDOUHIHUHQFLDDODV WDVDV \ VX UpJLPHQ MXUtGLFR /RV SUHFLRV S~EOLFRV 2WURV LQJUHVRV SURSLRV GH ODV &RPXQLGDGHV $XWyQRPDV WUDQVIHUHQFLDV FRUULHQWHV \ GH FDSLWDO LQJUHVRV SDWULPRQLDOHV HQDMHQDFLyQ GH LQYHUVLRQHVUHDOHVLQJUHVRVILQDQFLHURV i Pág. 12738 boc.cantabria.es 231/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 25*$1,=$&,Ï1'(/$62),&,1$63Ò%/,&$6 7(0$ &RQFHSWRGHLQIRUPiWLFD/DXQLGDGFHQWUDOGHSURFHVR/DSHULIHULDGHXQRUGHQDGRU8QLGDGHV GHHQWUDGD\VDOLGD6LVWHPDRSHUDWLYR 7(0$ (VWUXFWXUD \ DOPDFHQDPLHQWR GH GDWRV 7LSRV GH ILFKHURV 0pWRGRV GH DFFHVR /DV EDVHV GH GDWRV\KRMDVGHFiOFXOR(OWUDWDPLHQWRGHWH[WRV 7(0$ /D GRFXPHQWDFLyQ DGPLQLVWUDWLYD VX QDWXUDOH]D \ VX IXQFLyQ $QiOLVLV GH ORV GRFXPHQWRV DGPLQLVWUDWLYRVPiVKDELWXDOHVLQVWDQFLDFHUWLILFDGRDQXQFLRLQIRUPHUHVROXFLyQFRPXQLFDFLyQ \QRWLILFDFLyQ)RUPDFLyQGHOH[SHGLHQWH'RFXPHQWDFLyQGHDSR\RLQIRUPDWLYR 7(0$ (O5HJLVWURGHHQWUDGD\VDOLGDGHGRFXPHQWRV(O'HFUHWRGHGHMXOLRSRUHOTXHVH UHJXOD HO UpJLPHQ MXUtGLFR GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD HQ HO XVRGHPHGLRVHOHFWUyQLFRVHQVXDFWLYLGDGDGPLQLVWUDWLYD\VXVUHODFLRQHVFRQORVFLXGDGDQRV (O 'HFUHWR GH GH PDU]R SRU HO TXH VH UHJXOD HO 5pJLPHQ -XUtGLFR \ 2UJDQL]DWLYR GH OD $WHQFLyQ&LXGDGDQD\GHOHMHUFLFLRGHOD)XQFLyQ$GPLQLVWUDWLYDGH5HJLVWURHQOD$GPLQLVWUDFLyQGHOD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (O DUFKLYR GH ORV GRFXPHQWRV DGPLQLVWUDWLYRV &ODVHV GH DUFKLYR \ FULWHULRV GH RUGHQDFLyQ (O DFFHVRDORVGRFXPHQWRVDGPLQLVWUDWLYRVVXVOLPLWDFLRQHV\IRUPDVGHDFFHVR 7(0$ /RVGHUHFKRVGHORVFLXGDGDQRV/DDWHQFLyQDOS~EOLFRDFRJLGDHLQIRUPDFLyQDOFLXGDGDQR/D CVE-2019-3750 LQIRUPDFLyQ DGPLQLVWUDWLYD (O 0DQXDO GH $WHQFLyQ DO &LXGDGDQR \ OD &DUWD GH 'HUHFKRV GH OD &LXGDGDQtD7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR i Pág. 12739 boc.cantabria.es 232/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 352*5$0$'(0$7(5,$63$5$(/,1*5(62(1(/&8(532$'0,1,675$7,92 3(5621$6&21',6&$3$&,'$' '(5(&+2$'0,1,675$7,92$'0,1,675$&,Ï1<'(5(&+2&2167,78&,21$/ 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH(VWUXFWXUD\FRQWHQLGR'HUHFKRV\GHEHUHVIXQGDPHQWDOHV /DV JDUDQWtDV GH ORV GHUHFKRV IXQGDPHQWDOHV \ ODV OLEHUWDGHV S~EOLFDV /D VXVSHQVLyQ GH ORV GHUHFKRV\OLEHUWDGHV5HIRUPDGHOD&RQVWLWXFLyQ 7(0$ /D&RURQD)XQFLRQHVGHO5H\HQOD&RQVWLWXFLyQGH6XFHVLyQ\UHJHQFLD(OUHIUHQGR/D &DVDGHO5H\ 7(0$ /DV&RUWHV*HQHUDOHVFRPSRVLFLyQDWULEXFLRQHV\IXQFLRQDPLHQWR/DHODERUDFLyQGHODVOH\HV (O'HIHQVRUGHO3XHEOR 7(0$ (O *RELHUQR FRPSRVLFLyQ HVWDWXWR GH ORV PLHPEURV UpJLPHQ GH IXQFLRQDPLHQWR 5HODFLRQHV HQWUHHO*RELHUQR\ODV&RUWHV*HQHUDOHV 7(0$ /D 8QLyQ (XURSHD /DV LQVWLWXFLRQHV GH OD 8QLyQ (XURSHD HO &RQVHMR (XURSHR HO &RQVHMR HO 3DUODPHQWROD&RPLVLyQHO7ULEXQDOGH-XVWLFLDHO7ULEXQDOGH&XHQWDV7LSRORJtD\HIHFWRVGH ODVIXHQWHVGHOGHUHFKRFRPXQLWDULRWUDWDGRVUHJODPHQWRVGLUHFWLYDV\GHFLVLRQHV 7(0$ (O 3RGHU -XGLFLDO \ HO 7ULEXQDO &RQVWLWXFLRQDO (O SULQFLSLR GH XQLGDG MXULVGLFFLRQDO (O &RQVHMR *HQHUDO GHO 3RGHU -XGLFLDO (O 7ULEXQDO 6XSUHPR (O 0LQLVWHULR )LVFDO /D RUJDQL]DFLyQ MXGLFLDO HVSDxROD ORV 7ULEXQDOHV 6XSHULRUHV GH -XVWLFLD GH ODV &RPXQLGDGHV $XWyQRPDV (O 7ULEXQDO &RQVWLWXFLRQDO 7(0$ /DRUJDQL]DFLyQDGPLQLVWUDWLYD/RVyUJDQRVDGPLQLVWUDWLYRVÏUJDQRVFROHJLDGRV/RVSULQFLSLRV GH OD RUJDQL]DFLyQ DGPLQLVWUDWLYD FRPSHWHQFLD HILFDFLD MHUDUTXtD FRRUGLQDFLyQ GHVFHQWUDOL]DFLyQ\GHVFRQFHQWUDFLyQ 7(0$ /DRUJDQL]DFLyQDGPLQLVWUDWLYDHVSDxROD/RV0LQLVWURV6HFUHWDULRVGH(VWDGR6XEVHFUHWDULRV\ 'LUHFWRUHV *HQHUDOHV /D $GPLQLVWUDFLyQ 3HULIpULFD GHO (VWDGR ORV 'HOHJDGRV \ 6XEGHOHJDGRV GHO*RELHUQR 7(0$ /RV2UJDQLVPRVS~EOLFRVFRQFHSWRFODVHV\UpJLPHQMXUtGLFR/D$GPLQLVWUDFLyQFRQVXOWLYD 7(0$ /D RUJDQL]DFLyQ WHUULWRULDO GHO (VWDGR ODV &RPXQLGDGHV $XWyQRPDV &RQVWLWXFLyQ \ FRPSHWHQFLDV/RV(VWDWXWRVGH$XWRQRPtD 7(0$ /DRUJDQL]DFLyQWHUULWRULDOGHO(VWDGROD$GPLQLVWUDFLyQ/RFDO/D3URYLQFLD\HO0XQLFLSLR2WUDV HQWLGDGHVORFDOHV 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD $SUREDFLyQ \ SURPXOJDFLyQ (VWUXFWXUD \ FRQWHQLGR &RPSHWHQFLDV DVXPLGDV SRU OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRVGHDPSOLDFLyQGHFRPSHWHQFLDV/DUHIRUPDGHO(VWDWXWR 7(0$ (O RUGHQDPLHQWR MXUtGLFR /D &RQVWLWXFLyQ /DV /H\HV FRQFHSWR \ FODVHV /DV GLVSRVLFLRQHV GHO HMHFXWLYRFRQIXHU]DGH/H\'HFUHWRVOH\HV\'HFUHWRVOHJLVODWLYRV/RVUHJODPHQWRVFRQFHSWR\ FODVHV/RV7UDWDGRV,QWHUQDFLRQDOHV i Pág. 12740 boc.cantabria.es CVE-2019-3750 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /DV ,QVWLWXFLRQHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR /D $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPDGH&DQWDEULDORVyUJDQRVVXSHULRUHV\ORVyUJDQRVGLUHFWLYRV&RQVHMHURV6HFUHWDULRV *HQHUDOHV'LUHFWRUHV*HQHUDOHV\6XEGLUHFWRUHV*HQHUDOHV/DV&RQVHMHUtDV 233/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (ODFWRDGPLQLVWUDWLYR&RQFHSWR&ODVHV(OHPHQWRVVXEMHWLYRV(OHPHQWRVREMHWLYRV(OHPHQWRV IRUPDOHVHQSDUWLFXODUODPRWLYDFLyQ(OVLOHQFLRDGPLQLVWUDWLYR 7(0$ /D HILFDFLD GH ORV DFWRV DGPLQLVWUDWLYRV 3UHVXSXHVWRV HQ HVSHFLDO OD QRWLILFDFLyQ \ OD SXEOLFDFLyQ/DHMHFXFLyQGHODFWRDGPLQLVWUDWLYR(MHFXWLYLGDG\HMHFXFLyQIRU]RVD 7(0$ /D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV ,UUHJXODULGDGHV QR LQYDOLGDQWHV([FHSFLRQHVDODLQYDOLGH]GHORVDFWRVWUDQVPLVLELOLGDGFRQYHUVLyQFRQVHUYDFLyQ\ FRQYDOLGDFLyQ5HYRFDFLyQ\UHYLVLyQGHORVDFWRVDGPLQLVWUDWLYRV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR 3ULQFLSLRV JHQHUDOHV ,QWHUHVDGRV $EVWHQFLyQ \ UHFXVDFLyQ 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ \ WHUPLQDFLyQ GHO SURFHGLPLHQWR %UHYH UHIHUHQFLD D ORV SURFHGLPLHQWRV GH UHVSRQVDELOLGDGSDWULPRQLDO\GHQDWXUDOH]DVDQFLRQDGRUD 7(0$ /RV UHFXUVRV DGPLQLVWUDWLYRV FRQFHSWR \ FODVHV (O UHFXUVR GH DO]DGD GH UHSRVLFLyQ \ HO H[WUDRUGLQDULR GH UHYLVLyQ /DV UHFODPDFLRQHV HFRQyPLFRDGPLQLVWUDWLYDV %UHYH UHIHUHQFLD D OD /H\ GH &DQWDEULD GH 5pJLPHQ -XUtGLFR GHO *RELHUQR GH OD $GPLQLVWUDFLyQ \ GHO 6HFWRU 3~EOLFR ,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD 7(0$ /RV FRQWUDWRV S~EOLFRV FRQFHSWR \ FODVHV (VWXGLR GH ORV HOHPHQWRV GH ORV FRQWUDWRV DGPLQLVWUDWLYRV 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV *(67,Ï1'(3(5621$/ 7(0$ (OSHUVRQDODOVHUYLFLRGHOD$GPLQLVWUDFLyQ&ODVHV\UHJXODFLyQQRUPDWLYD(OUpJLPHQMXUtGLFRGH OD)XQFLyQ3~EOLFD(O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR \ OD /H\ GH &DQWDEULD GHGHPDU]RGHOD)XQFLyQ3~EOLFD 7(0$ (O SHUVRQDO IXQFLRQDULR DO VHUYLFLR GHO *RELHUQR GH &DQWDEULD OD UHODFLyQ MXUtGLFRHVWDWXWDULD $GTXLVLFLyQ \ SpUGLGD GH OD FRQGLFLyQ GH IXQFLRQDULR 6HOHFFLyQ GH IXQFLRQDULRV 3URYLVLyQ GH SXHVWRVGHWUDEDMR6LWXDFLRQHVDGPLQLVWUDWLYDV 7(0$ /RVGHUHFKRV\GHEHUHVGHORVIXQFLRQDULRVGHOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH &DQWDEULD 'HUHFKRV GH FDUiFWHU SURIHVLRQDO 'HUHFKRV HFRQyPLFRV 'HUHFKRV VRFLDOHV 'HUHFKRVFROHFWLYRV(OGHUHFKRGHKXHOJD\UHSUHVHQWDFLyQ/RVGHEHUHVGHORVIXQFLRQDULRV 7(0$ ,QFRPSDWLELOLGDGHV GH ORV IXQFLRQDULRV 5pJLPHQ GLVFLSOLQDULR /D UHVSRQVDELOLGDG GH ORV IXQFLRQDULRV(VSHFLDOUHIHUHQFLDDOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (OSHUVRQDOODERUDODOVHUYLFLRGHODV$GPLQLVWUDFLRQHV3~EOLFDV'HUHFKRV\'HEHUHV(OFRQWUDWR ODERUDO FRQWHQLGR PRGDOLGDGHV VXVSHQVLyQ \ H[WLQFLyQ 1HJRFLDFLyQ /DERUDO &RQIOLFWRV \ FRQYHQLRVFROHFWLYRV CVE-2019-3750 7(0$ i Pág. 12741 boc.cantabria.es 234/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$/D 6HJXULGDG 6RFLDO (O 7H[WR 5HIXQGLGR GH OD /H\ *HQHUDO GH OD 6HJXULGDG 6RFLDO FDPSR GH DSOLFDFLyQ\HVWUXFWXUDGHOVLVWHPDGHOD6HJXULGDG6RFLDO&RQFHSWR\SULQFLSDOHVFDUDFWHUtVWLFDV GHODDILOLDFLyQ\ODFRWL]DFLyQ$FFLyQSURWHFWRUDFRQWLQJHQFLDV FRPXQHV\SURIHVLRQDOHV \WLSRV GHSUHVWDFLRQHV 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV *(67,Ï1),1$1&,(5$ 7(0$ (O 'HUHFKR )LQDQFLHUR HO 'HUHFKR 3UHVXSXHVWDULR 3ULQFLSLRV *HQHUDOHV GHO 'HUHFKR 3UHVXSXHVWDULR FRQWHQLGRV HQ OD &RQVWLWXFLyQ (VSDxROD HO (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD OD /H\ GH )LQDQ]DV GH &DQWDEULD ODV /H\HV GH 3UHVXSXHVWRV *HQHUDOHV GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULDOD/H\*HQHUDO3UHVXSXHVWDULD 7(0$ /RV3UHVXSXHVWRV*HQHUDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD5HJXODFLyQHQOD/H\GH )LQDQ]DV GH &DQWDEULD \ HQ ODV /H\HV DQXDOHV GH 3UHVXSXHVWRV (VWUXFWXUD \ FRQWHQLGR GHO SUHVXSXHVWR &ODVLILFDFLyQ RUJiQLFD HFRQyPLFD \ IXQFLRQDO (ODERUDFLyQ \ DSUREDFLyQ GH ORV 3UHVXSXHVWRV /D /H\ 2UJiQLFD GH GH DEULO GH (VWDELOLGDG 3UHVXSXHVWDULD \ 6RVWHQLELOLGDG)LQDQFLHUDGHODV$GPLQLVWUDFLRQHV3~EOLFDV 7(0$ /D&RQWDELOLGDG3~EOLFDFRQFHSWRVXMHWR\ILQHV/D&RQWDELOLGDG3~EOLFDHQOD/H\GH)LQDQ]DV /D3ODQLILFDFLyQ&RQWDEOH3ODQ*HQHUDOGH&RQWDELOLGDG3~EOLFDSDUD&DQWDEULDDQWHFHGHQWHV\ iPELWRGHDSOLFDFLyQ3ULQFLSLRV&RQWDEOHV*UXSRVGH&XHQWDV 7(0$ /RVGHUHFKRVGHOD+DFLHQGD$XWRQyPLFDFRQFHSWR\FODVHV/D$GPLQLVWUDFLyQGHORVGHUHFKRV \ VXV SUHUURJDWLYDV 5HFXUVRV UHFLELGRV GHO (VWDGR \ GH OD 8QLyQ (XURSHD (O HQGHXGDPLHQWR PRGDOLGDGHV\VXUpJLPHQMXUtGLFR(VWUXFWXUDGHOSUHVXSXHVWRGHLQJUHVRV 7(0$ /RVFUpGLWRVSUHVXSXHVWDULRVFRQFHSWR/RVFUpGLWRVLQLFLDOHV0RGLILFDFLRQHVGHFUpGLWR&UpGLWRV H[WUDRUGLQDULRV 6XSOHPHQWRV GH FUpGLWR 7UDQVIHUHQFLDV GH FUpGLWR *HQHUDFLRQHV GH FUpGLWR $PSOLDFLRQHVGHFUpGLWRH,QFRUSRUDFLyQGHUHPDQHQWHV3UyUURJDGHORVSUHVXSXHVWRV 7(0$ (OJDVWRS~EOLFRHQ&DQWDEULD/DHMHFXFLyQGHOSUHVXSXHVWRGHJDVWRV3URFHGLPLHQWRJHQHUDOGH HMHFXFLyQ GHO JDVWR S~EOLFR \ SURFHGLPLHQWRV HVSHFLDOHV ÏUJDQRV FRPSHWHQWHV )DVHV GHO SURFHGLPLHQWRGHSDJRGRFXPHQWRVFRQWDEOHVTXHLQWHUYLHQHQ/DOLTXLGDFLyQGHOSUHVXSXHVWR\ HO FLHUUH GHO HMHUFLFLR &RQWURO GHO JDVWR S~EOLFR &ODVHV (VSHFLDO UHIHUHQFLD GH FRQWURO GH OHJDOLGDG(O7ULEXQDOGH&XHQWDV 7(0$ /RV 7ULEXWRV FRQFHSWR QDWXUDOH]D \ FODVHV /D /H\ *HQHUDO 7ULEXWDULD HVWUXFWXUD \ SULQFLSLRV JHQHUDOHV 7(0$ /D/H\*HQHUDO7ULEXWDULDKHFKRLPSRQLEOHVXMHWRSDVLYR\UHVSRQVDEOHV%DVHLPSRQLEOH\EDVH OLTXLGDEOHWLSRGHJUDYDPHQFXRWD\GHXGDWULEXWDULD 7(0$ /DILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV/H\GHGHGLFLHPEUHGHO6LVWHPD GH)LQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDVGHUpJLPHQFRP~Q\FLXGDGHVFRQ(VWDWXWRGH $XWRQRPtD/DV)XHQWHVGHILQDQFLDFLyQGHODV&RPXQLGDGHV$XWyQRPDV5HFXUVRVSURFHGHQWHV GHO6LVWHPDGH)LQDQFLDFLyQ$XWRQyPLFDLQJUHVRVWULEXWDULRVSURSLRV\HVSHFLDOUHIHUHQFLDDODV WDVDV \ VX UpJLPHQ MXUtGLFR /RV SUHFLRV S~EOLFRV 2WURV LQJUHVRV SURSLRV GH ODV &RPXQLGDGHV $XWyQRPDV WUDQVIHUHQFLDV FRUULHQWHV \ GH FDSLWDO LQJUHVRV SDWULPRQLDOHV HQDMHQDFLyQ GH LQYHUVLRQHVUHDOHVLQJUHVRVILQDQFLHURV CVE-2019-3750 i Pág. 12742 boc.cantabria.es 235/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 25*$1,=$&,Ï1'(/$62),&,1$63Ò%/,&$6 7(0$ &RQFHSWRGHLQIRUPiWLFD/DXQLGDGFHQWUDOGHSURFHVR/DSHULIHULDGHXQRUGHQDGRU8QLGDGHV GHHQWUDGD\VDOLGD6LVWHPDRSHUDWLYR 7(0$ (VWUXFWXUD \ DOPDFHQDPLHQWR GH GDWRV 7LSRV GH ILFKHURV 0pWRGRV GH DFFHVR /DV EDVHV GH GDWRV\KRMDVGHFiOFXOR(OWUDWDPLHQWRGHWH[WRV 7(0$ /D GRFXPHQWDFLyQ DGPLQLVWUDWLYD VX QDWXUDOH]D \ VX IXQFLyQ $QiOLVLV GH ORV GRFXPHQWRV DGPLQLVWUDWLYRVPiVKDELWXDOHVLQVWDQFLDFHUWLILFDGRDQXQFLRLQIRUPHUHVROXFLyQFRPXQLFDFLyQ \QRWLILFDFLyQ)RUPDFLyQGHOH[SHGLHQWH'RFXPHQWDFLyQGHDSR\RLQIRUPDWLYR 7(0$ (O5HJLVWURGHHQWUDGD\VDOLGDGHGRFXPHQWRV(O'HFUHWRGHGHMXOLRSRUHOTXHVH UHJXOD HO UpJLPHQ MXUtGLFR GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD HQ HO XVRGHPHGLRVHOHFWUyQLFRVHQVXDFWLYLGDGDGPLQLVWUDWLYD\VXVUHODFLRQHVFRQORVFLXGDGDQRV (O 'HFUHWR GH GH PDU]R SRU HO TXH VH UHJXOD HO 5pJLPHQ -XUtGLFR \ 2UJDQL]DWLYR GH OD $WHQFLyQ&LXGDGDQD\GHOHMHUFLFLRGHOD)XQFLyQ$GPLQLVWUDWLYDGH5HJLVWURHQOD$GPLQLVWUDFLyQGHOD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ (O DUFKLYR GH ORV GRFXPHQWRV DGPLQLVWUDWLYRV &ODVHV GH DUFKLYR \ FULWHULRV GH RUGHQDFLyQ (O DFFHVRDORVGRFXPHQWRVDGPLQLVWUDWLYRVVXVOLPLWDFLRQHV\IRUPDVGHDFFHVR CVE-2019-3750 7(0$ /RVGHUHFKRVGHORVFLXGDGDQRV/DDWHQFLyQDOS~EOLFRDFRJLGDHLQIRUPDFLyQDOFLXGDGDQR/D LQIRUPDFLyQ DGPLQLVWUDWLYD (O 0DQXDO GH $WHQFLyQ DO &LXGDGDQR \ OD &DUWD GH 'HUHFKRV GH OD &LXGDGDQtD7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR i Pág. 12743 boc.cantabria.es 236/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(5327e&1,&2$8;,/,$5 '(/,1($17( 0$7(5,$6(63(&Ë),&$6 i Pág. 12744 7(0$ È/*(%5$ 1~PHURV QDWXUDOHV IUDFFLRQDULRV \ GHFLPDOHV 3RWHQFLDV \ UDtFHV ([SUHVLRQHV DOJHEUDLFDV \ RSHUDFLRQHV HQWUH HOODV (FXDFLRQHV GH \ JUDGR 6LVWHPDVGHHFXDFLRQHV 7(0$ 75,*2120(75Ë$7ULiQJXORV5HVROXFLyQGHWULiQJXORVSODQRV\HVIpULFRV6XSHUILFLH GHODVILJXUDVSODQDV9ROXPHQGHORVFXHUSRV)XQFLRQHVFLUFXODUHV 7(0$ *(20(75Ë$$1$/Ë7,&$&RRUGHQDGDV\PpWRGRVIXQGDPHQWDOHV7UDQVIRUPDFLyQGH FRRUGHQDGDV 5HSUHVHQWDFLyQ GH HFXDFLRQHV HQ ORV HMHV FDUWHVLDQRV 3ODQR UHFWD \ SXQWRHQHOHVSDFLR6XSHUILFLHVFXUYDV 7(0$ &5248,6 < '(7$//(6 &216758&7,926 )LQDOLGDG \ DSOLFDFLRQHV 3URFHGLPLHQWRV PDWHULDOHV \ ~WLOHV HPSOHDGRV 5HSUHVHQWDFLyQ JUiILFD GH GHWDOOHV FRQVWUXFWLYRVHQODDUTXLWHFWXUD\ODREUDFLYLO(VFDODVKDELWXDOHV 7(0$ (6&$/$6 'HWHUPLQDFLyQ GH OD HVFDOD GH XQ GLEXMR (VFDOD QXPpULFD \ JUiILFD $PSOLDFLRQHV\UHGXFFLRQHV(VFDODVHQ$XWR&DG 7(0$ $&27$&,Ï1(OHPHQWRVHPSOHDGRVHQODDFRWDFLyQ1RUPDVGHDFRWDFLyQ$FRWDFLyQ HQODFRQVWUXFFLyQ\HQHOGLEXMRWRSRJUiILFR 7(0$ 6,67(0$6'(5(35(6(17$&,Ï13ODQRVDFRWDGRV 7(0$ 6,67(0$6 '( 5(35(6(17$&,Ï1 3HUVSHFWLYD $[RQRPpWULFD (VSHFLDO DWHQFLyQ D ODSHUVSHFWLYD&DEDOOHUD 7(0$ 6,67(0$6'(5(35(6(17$&,Ï13HUVSHFWLYD&yQLFD 7(0$ 5(35(6(17$&,Ï1'(3,(=$6)RUPDVGHUHSUHVHQWDFLyQ&RUWHV=RQDVRFXOWDV 7(0$ ',6(f2 $6,67,'2 325 25'(1$'25 6RIWZDUHV PiV KDELWXDOHV \ FDPSRV GH DSOLFDFLyQ7UDEDMRHQ'\'(VFDODV(VSDFLRPRGHOR\HVSDFLRSDSHO3ODQRV 7(0$ 35(6(17$&,Ï1 < 38%/,&$&,Ï1 '( 3/$126 )RUPDWRV GH SDSHO *HVWLyQ GH IXHQWHV WLSRJUiILFDV 'LVSRVLWLYRV GH VDOLGD $UFKLYR \ UHSURGXFFLyQ GH SODQRV (QFDUSHWDGR\HQFXDGHUQDFLyQ)RUPDWRV\SOHJDGRGHSODQRV 7(0$ )272*5$)Ë$ $e5($ < )272*5$0(75Ë$ 'HILQLFLyQ $SOLFDFLRQHV 2UJDQL]DFLyQ GHORVWUDEDMRV(OHPHQWRVXWLOL]DGRV2UWRIRWRJUDItD 7(0$ &$572*5$)Ë$3UR\HFFLRQHVFDUWRJUiILFDV&ODVHV\IXQGDPHQWRV'LIHUHQFLDVHQWUH FRRUGHQDGDV SRODUHV UHFWDQJXODUHV \ JHRJUiILFDV 0DSD SODQR \ FDUWD &DUWRJUDItD GLJLWDO&DUWRJUDItDHQODUHG 7(0$ 352<(&&,Ï1870'HILQLFLyQ+XVRV'DWXP6LVWHPDVGHSRVLFLRQDPLHQWRJOREDO boc.cantabria.es CVE-2019-3750 237/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ i Pág. 12745 7(0$ 6,67(0$6'(,1)250$&,Ï1*(2*5È),&$ *,6 &RQFHSWR\ILQDOLGDG5HODFLyQ \FRQH[LyQFRQWDEODV\EDVHVGHGDWRVH[WHUQDV*HQHUDFLyQ\XWLOLGDGGHORVPDSDV WHPiWLFRV'LIHUHQFLDVHQWUH*,6\&$' 7(0$ 12&,21(6 '( 7232*5$)Ë$ 7RSRJUDItD SDUD HODERUDFLyQ GH SUR\HFWRV \ VHJXLPLHQWR\FRQWUROGHREUDV,QVWUXPHQWRV\DSDUDWRV 7(0$ &È/&8/2 '( 683(5),&,(6 < 92/Ò0(1(6 '( (;3/$1$&,21(6 ÈUHD GH RFXSDFLyQ ÈUHD GH ORV WDOXGHV 'HWHUPLQDFLyQ GH ODV iUHDV GH ORV SHUILOHV WUDQVYHUVDOHV )yUPXOD GHO SULVPDWRLGH )yUPXOD GH OD PHGLD GH ODV VHFFLRQHV H[WUHPDV)yUPXODGHODVHFFLyQPHGLD0pWRGRVDSUR[LPDGRV 7(0$ 5(35(6(17$&,Ï1 '(/ 7(55(12 &XUYDV GH QLYHO HQ ' \ ' 3HUILOHV ORQJLWXGLQDOHV\WUDQVYHUVDOHV5HSUHVHQWDFLyQHQ'0DTXHWDV 7(0$ 5(3/$17(2 'HILQLFLyQ \ REMHWLYRV 0pWRGRV GH UHSODQWHR HQ WRSRJUDItD \ REUDV GH FRQVWUXFFLyQ(OHPHQWRV\DSDUDWRVQHFHVDULRV 7(0$ 352<(&72'(2%5$6(VWUXFWXUDGRFXPHQWRVEiVLFRVQRUPDWLYDVHQFDUSHWDGR\ HQFXDGHUQDFLyQ)RUPDWRV\SOHJDGRGHSODQRV 7(0$ 352<(&72 '( 2%5$6 0HGLFLRQHV \ SUHVXSXHVWRV FRQFHSWR WLSRV \ SURJUDPDV LQIRUPiWLFRV 7(0$ (/ &Ï',*2 7e&1,&2 '( (',),&$&,Ï1 'HILQLFLyQ &RQWHQLGR ÈPELWR GH DSOLFDFLyQ([LJHQFLDVEiVLFDV 7(0$ 5('(6 '( ',675,%8&,Ï1 (OHFWULFLGDG $OXPEUDGR $EDVWHFLPLHQWR 6DQHDPLHQWR &RPXQLFDFLRQHV(OHPHQWRV\UHSUHVHQWDFLyQ 7(0$ (/ &$7$6752 6LVWHPD GH LQIRUPDFLyQ FDWDVWUDO %LHQHV LQPXHEOHV /D UHIHUHQFLD FDWDVWUDO/DFDUWRJUDItDFDWDVWUDO$SOLFDFLRQHV 7(0$ &$55(7(5$6 /H\ GH &DUUHWHUDV GH &DQWDEULD 3ODQLILFDFLyQ HVWXGLRV \ SUR\HFWRV 8VR\GHIHQVDGHODVFDUUHWHUDV 7(0$ &$55(7(5$6 2EUDV GH H[SODQDFLRQHV \ GUHQDMH 8QLGDGHV GH REUD PDWHULDOHV PDTXLQDULDGHHMHFXFLyQPHGLFLRQHV\FRQWUROGHFDOLGDGGHODREUDHMHFXWDGD 7(0$ &$55(7(5$6 2EUDV GH DILUPDGR VHxDOL]DFLyQ EDOL]DPLHQWR \ GHIHQVDV 8QLGDGHV GHREUDPDWHULDOHVPDTXLQDULDGHHMHFXFLyQPHGLFLRQHV\FRQWUROGHFDOLGDG 7(0$ 38(5726 /H\ GH 3XHUWRV GH &DQWDEULD 'HFUHWR GH WUDQVIHUHQFLDV HQ PDWHULD GH SXHUWRV D OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 8VR GHO GRPLQLR S~EOLFR PDUtWLPR WHUUHVWUH 7(0$ 38(5726 2EUDV PDUtWLPDV GH GHIHQVD H[WHULRUHV 7LSRV GH HVWUXFWXUDV GH SURWHFFLyQ(OHPHQWRVGHORVGLTXHV 7(0$ 6(*85,'$'<6$/8'(1/$62%5$6'(&216758&&,Ï11RUPDWLYD(VWXGLR\ (VWXGLREiVLFRGHVHJXULGDG\VDOXG3ODQGHVHJXULGDG/LEURGHLQFLGHQFLDV boc.cantabria.es CVE-2019-3750 238/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(5327e&1,&2$8;,/,$5 ,1)250È7,&$ 0$7(5,$6(63(&Ë),&$6 %/248(,7HFQRORJtDEiVLFD ,QIRUPiWLFD EiVLFD 5HSUHVHQWDFLyQ \ FRPXQLFDFLyQ GH OD LQIRUPDFLyQ HOHPHQWRV FRQVWLWXWLYRV GH XQ VLVWHPD GH LQIRUPDFLyQ &DUDFWHUtVWLFDV \ IXQFLRQHV $UTXLWHFWXUD GHRUGHQDGRUHV&RPSRQHQWHVLQWHUQRVGHORVHTXLSRVPLFURLQIRUPiWLFRV 7(0$ 3HULIpULFRV FRQHFWLYLGDG \ DGPLQLVWUDFLyQ (OHPHQWRV GH LPSUHVLyQ (OHPHQWRV GH DOPDFHQDPLHQWR(OHPHQWRVGHYLVXDOL]DFLyQ\GLJLWDOL]DFLyQ 7(0$ 7LSRV DEVWUDFWRV \ (VWUXFWXUDV GH GDWRV 2UJDQL]DFLRQHV GH ILFKHURV $OJRULWPRV )RUPDWRVGHLQIRUPDFLyQ\ILFKHURV 7(0$ 6LVWHPDV RSHUDWLYRV &DUDFWHUtVWLFDV \ HOHPHQWRV FRQVWLWXWLYRV 6LVWHPDV :LQGRZV 6LVWHPDV8QL[\/LQX[6LVWHPDVRSHUDWLYRVSDUDGLVSRVLWLYRVPyYLOHV 7(0$ 6LVWHPDV GH JHVWLyQ GH EDVHV GH GDWRV UHODFLRQDOHV RULHQWDGRV D REMHWRV \ 1R64/ FDUDFWHUtVWLFDV\FRPSRQHQWHV 7(0$ ,7,/ )XQGDPHQWRV EiVLFRV )XQFLRQHV SURFHVRV \ UROHV &LFOR GH YLGD GH ORV SURGXFWRVGHWHFQRORJtDGHODLQIRUPDFLyQ 7(0$ /HJLVODFLyQ HQ PDWHULD GH VHJXULGDG GH OD LQIRUPDFLyQ (VTXHPD 1DFLRQDO GH 6HJXULGDG iPELWR GH DSOLFDFLyQ SULQFLSLRV EiVLFRV UHVSXHVWD D LQFLGHQWHV GH VHJXULGDG 3ROtWLFD GH 6HJXULGDG GH OD ,QIRUPDFLyQ GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULDREMHWLYRVGLUHFWULFHV\SULQFLSLRV 7(0$ /HJLVODFLyQ HQ PDWHULD GH SURWHFFLyQ GH GDWRV SHUVRQDOHV 'HILQLFLRQHV HVHQFLDOHV GDWRV SHUVRQDOHV WUDWDPLHQWR ILFKHUR UHVSRQVDEOH GHO WUDWDPLHQWR HQFDUJDGR GHO WUDWDPLHQWR GHVWLQDWDULR WHUFHUR YLRODFLyQ GH OD VHJXULGDG \ DXWRULGDG GH FRQWURO 3ULQFLSLRV &DWHJRUtDV HVSHFLDOHV GH GDWRV SHUVRQDOHV 'HUHFKRV GH ORV LQWHUHVDGRV *DUDQWtDGHORV'HUHFKRV'LJLWDOHV 7(0$ 1RUPDWLYD HQ PDWHULD GH $GPLQLVWUDFLyQ HOHFWUyQLFD HVSHFLDO UHIHUHQFLD D OD &RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ ,QIUDHVWUXFWXUDV VHUYLFLRV FRPXQHV \ FRPSDUWLGRV SDUD OD LQWHURSHUDELOLGDG HQWUH $GPLQLVWUDFLRQHVS~EOLFDV&O#YHOD&DUSHWD&LXGDGDQDHO6LVWHPDGH,QWHUFRQH[LyQ GH5HJLVWURVOD3ODWDIRUPDGH,QWHUPHGLDFLyQGH'DWRV\RWURVVHUYLFLRV CVE-2019-3750 7(0$ i Pág. 12746 boc.cantabria.es 239/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ %/248(,,'HVDUUROORGHVLVWHPDV 7(0$ 0RGHOR FRQFHSWXDO GH GDWRV (QWLGDGHV DWULEXWRV \ UHODFLRQHV 5HJODV GH PRGHOL]DFLyQ 'LDJUDPDV GH IOXMR GH GDWRV 5HJODV GH FRQVWUXFFLyQ 'HVFRPSRVLFLyQ HQQLYHOHV)OXMRJUDPDV 7(0$ 'LVHxR GH EDVHV GH GDWRV 'LVHxR OyJLFR \ ItVLFR (O PRGHOR OyJLFR UHODFLRQDO 1RUPDOL]DFLyQ 7(0$ /HQJXDMHV GH SURJUDPDFLyQ 5HSUHVHQWDFLyQ GH WLSRV GH GDWRV 2SHUDGRUHV ,QVWUXFFLRQHV FRQGLFLRQDOHV %XFOHV \ UHFXUVLYLGDG 3URFHGLPLHQWRV IXQFLRQHV \ SDUiPHWURV9HFWRUHV\UHJLVWURV(VWUXFWXUDGHXQSURJUDPD 7(0$ /HQJXDMHV GH LQWHUURJDFLyQ GH EDVHV GH GDWRV (VWiQGDU $16, 64/ 3URFHGLPLHQWRV DOPDFHQDGRV(YHQWRV\GLVSDUDGRUHV 7(0$ 'LVHxR \ SURJUDPDFLyQ RULHQWDGD D REMHWRV (OHPHQWRV \ FRPSRQHQWHV VRIWZDUH REMHWRV FODVHV KHUHQFLD PpWRGRV VREUHFDUJD 9HQWDMDV H LQFRQYHQLHQWHV 3DWURQHV GHGLVHxR\OHQJXDMHGHPRGHODGRXQLILFDGR 80/ 7(0$ $UTXLWHFWXUD -DYD (( \ SODWDIRUPD1(7 FRPSRQHQWHV SHUVLVWHQFLD \ VHJXULGDG &DUDFWHUtVWLFDVHOHPHQWRV\IXQFLRQHVHQHQWRUQRV-DYD&&\1HW 7(0$ $UTXLWHFWXUD GH VLVWHPDV FOLHQWHVHUYLGRU \ PXOWLFDSDV FRPSRQHQWHV \ RSHUDFLyQ $UTXLWHFWXUDVGHVHUYLFLRVZHE\SURWRFRORVDVRFLDGRV 7(0$ $SOLFDFLRQHV ZHE 'HVDUUROOR ZHE IURQWHQG \ HQ VHUYLGRU /HQJXDMHV +70/ ;0/ \ VXVGHULYDFLRQHV1DYHJDGRUHV\OHQJXDMHVGHSURJUDPDFLyQZHE/HQJXDMHVGHVFULSW 7(0$ $FFHVLELOLGDG GLVHxR XQLYHUVDO \ XVDELOLGDG $FFHVR \ XVDELOLGDG GH ODV WHFQRORJtDV SURGXFWRV\VHUYLFLRVUHODFLRQDGRVFRQODVRFLHGDGGHODLQIRUPDFLyQ&RQILGHQFLDOLGDG \GLVSRQLELOLGDGGHODLQIRUPDFLyQHQSXHVWRVGHXVXDULRILQDO 7(0$ +HUUDPLHQWDV &$6( FDUDFWHUtVWLFDV 5HSRVLWRULRV HVWUXFWXUD \ DFWXDOL]DFLyQ *HQHUDFLyQ GH FyGLJR \ GRFXPHQWDFLyQ 3URJUDPDV SDUD FRQWURO GH YHUVLRQHV 3ODWDIRUPDVGHGHVDUUROORFRODERUDWLYRGHVRIWZDUH %/248(,,,6LVWHPDV\FRPXQLFDFLRQHV i Pág. 12747 7(0$ $GPLQLVWUDFLyQ GHO VLVWHPD RSHUDWLYR \ VRIWZDUH GH EDVH )XQFLRQHV \ UHVSRQVDELOLGDGHV$FWXDOL]DFLyQPDQWHQLPLHQWR\UHSDUDFLyQGHOVLVWHPDRSHUDWLYR 7(0$ $GPLQLVWUDFLyQGHEDVHVGHGDWRV)XQFLRQHV\UHVSRQVDELOLGDGHV$GPLQLVWUDFLyQGH VHUYLGRUHVGHFRUUHRHOHFWUyQLFR3URWRFRORVGHFRUUHRHOHFWUyQLFR 7(0$ $GPLQLVWUDFLyQ GH UHGHV GH iUHD ORFDO *HVWLyQ GH XVXDULRV *HVWLyQ GH GLVSRVLWLYRV 0RQLWRUL]DFLyQ\FRQWUROGHWUiILFR 7(0$ &RQFHSWRVGHVHJXULGDGGHORVVLVWHPDVGHLQIRUPDFLyQ6HJXULGDGItVLFD6HJXULGDG OyJLFD $PHQD]DV \ YXOQHUDELOLGDGHV ,QIUDHVWUXFWXUD ItVLFD GH XQ &3' DFRQGLFLRQDPLHQWR \ HTXLSDPLHQWR 6LVWHPDV GH JHVWLyQ GH LQFLGHQFLDV &RQWURO UHPRWRGHSXHVWRVGHXVXDULR 7(0$ &RPXQLFDFLRQHV0HGLRVGHWUDQVPLVLyQ0RGRVGHFRPXQLFDFLyQ(TXLSRVWHUPLQDOHV \HTXLSRVGHLQWHUFRQH[LyQ\FRQPXWDFLyQ 7(0$ 5HGHV GH FRPXQLFDFLRQHV 5HGHV GH FRQPXWDFLyQ \ UHGHV GH GLIXVLyQ &RPXQLFDFLRQHVPyYLOHVHLQDOiPEULFDV boc.cantabria.es CVE-2019-3750 240/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ (O PRGHOR 7&3,3 \ HO PRGHOR GH UHIHUHQFLD GH LQWHUFRQH[LyQ GH VLVWHPDV DELHUWRV 26, GH,623URWRFRORV7&3,3 7(0$ ,QWHUQHW DUTXLWHFWXUD GH UHG 2ULJHQ HYROXFLyQ \ HVWDGR DFWXDO 3ULQFLSDOHV VHUYLFLRV 3URWRFRORV+773+7736\66/7/6 7(0$ 6HJXULGDG \ SURWHFFLyQ HQ UHGHV GH FRPXQLFDFLRQHV 6HJXULGDG SHULPHWUDO $FFHVR UHPRWR VHJXUR D UHGHV 5HGHV SULYDGDV YLUWXDOHV 931 6HJXULGDG HQ HO SXHVWR GHO XVXDULR 7(0$ 5HGHV ORFDOHV 7LSRORJtD 7pFQLFDV GH WUDQVPLVLyQ 0pWRGRV GH DFFHVR 'LVSRVLWLYRV GHLQWHUFRQH[LyQ CVE-2019-3750 7(0$ i Pág. 12748 boc.cantabria.es 241/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2, &8(5327e&1,&2$8;,/,$5 ,163(&725$1$/,67$ 0$7(5,$6(63(&Ë),&$6 7(0$ (VWDGRV GH OD PDWHULD 3URSLHGDGHV ItVLFDV \ TXtPLFDV &DPELRV GH HVWDGR 0H]FODV \ GLVROXFLRQHV6XVWDQFLDSXUD(OHPHQWRV\FRPSXHVWRV 7(0$ (VWUXFWXUD DWyPLFD ÈWRPR SDUWtFXODV HOHPHQWDOHV GHO PLVPR (VWUXFWXUD HOHFWUyQLFD \ VX LPSRUWDQFLDHQODUHDFWLYLGDGGHORVHOHPHQWRV1~PHURDWyPLFR\SHVRDWyPLFR 7(0$ (VWUXFWXUDGHODPDWHULDFRQFHSWRGHPROpFXOD/RVHQODFHV(VWXGLRGHOHQODFHLyQLFRFRYDOHQWH \PHWiOLFR3URSLHGDGHVGHORVFRPSXHVWRVLyQLFRVGHODVVXVWDQFLDVFRYDOHQWHV\PHWiOLFDV 7(0$ 5HDFFLRQHV TXtPLFDV 0HFDQLVPR GH ODV UHDFFLRQHV TXtPLFDV 9HORFLGDG GH UHDFFLyQ 5HDFWLYLGDG 7(0$ &DUDFWHUtVWLFDV JHQHUDOHV GH ODV GLVROXFLRQHV 'LVROXFLRQHV UHJXODGRUDV 'LVROXFLyQ GH OtTXLGRV HQOtTXLGRV([WUDFFLyQ 7(0$ )RUPDV GH H[SUHVDU \ FDOFXODU OD FRQFHQWUDFLyQ GH ODV GLVROXFLRQHV 3URFHGLPLHQWRV GH SUHSDUDFLyQ\QRUPDOL]DFLyQGHUHDFWLYRV\VROXFLRQHVSDWUyQ 7(0$ 3UHSDUDFLyQ\FRQVHUYDFLyQGHODVPXHVWUDVSDUDHODQiOLVLVHQHOODERUDWRULR0pWRGRVTXtPLFRV JHQHUDOHVGHDSOLFDFLyQHQHODQiOLVLVGHDOLPHQWRV 7(0$ $QiOLVLVFXDOLWDWLYR\FXDQWLWDWLYR&DUDFWHUtVWLFDV\VXDSOLFDFLyQHQHODQiOLVLVGHDOLPHQWRV 7(0$ &RQFHSWRV JHQHUDOHV GH DQiOLVLV YROXPpWULFR 0pWRGRV YROXPpWULFRV GH DQiOLVLV FXDQWLWDWLYR 9DORUDFLyQ 7(0$ $QiOLVLV LQVWUXPHQWDO &RQFHSWRV EiVLFRV GH ORV PpWRGRV HOHFWURTXtPLFR SRWHQFLRPpWULFRV FRQGXFWLPpWULFRV (VSHFWURIRWRPHWUtD XYYLVLEOH $SOLFDFLyQ GH HVWRV PpWRGRV DO DQiOLVLV GH DOLPHQWRV 7(0$ 0pWRGRV FURPDWRJUiILFRV &URPDWRJUDItD GH FDSD ILQD FURPDWRJUDItD GH JDVHV \ GH OtTXLGRV $SOLFDFLyQGHHVWRVPpWRGRVDODQiOLVLVGHDOLPHQWRV 7(0$ (O iWRPR GH FDUERQR /RV HQODFHV HQWUH iWRPRV GH FDUERQR &RQFHSWR GH JUXSR IXQFLRQDO 1RPHQFODWXUD\IRUPXODFLyQGHKLGURFDUEXURV)XQFLRQHVR[LJHQDGDV\QLWURJHQDGDV 7(0$ 5HDFFLRQHV RUJiQLFDV GH ORV SULQFLSDOHV JUXSRV IXQFLRQDOHV VXVWLWXFLyQ DGLFLyQ HOLPLQDFLyQ 5HDFWLYRVRUJiQLFRV +LGUDWRV GH FDUERQR 0RQRVDFiULGRV 'LVDFiULGRV 3ROLVDFiULGRV &RQFHSWRV EiVLFRV GH ORV PpWRGRVHPSOHDGRVSDUDVXDQiOLVLVHQORVDOLPHQWRV i Pág. 12749 boc.cantabria.es CVE-2019-3750 7(0$ 242/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ *UDVDV\DFHLWHVÈFLGRVJUDVRVeVWHUHV&RQFHSWRVEiVLFRVGHORVPpWRGRVHPSOHDGRVSDUDVX DQiOLVLVHQORVDOLPHQWRV 7(0$ 3URWHtQDV \ VX FODVLILFDFLyQ $PLQRiFLGRV $PLQDV &RQFHSWRV EiVLFRV GH ORV PpWRGRV HPSOHDGRVSDUDVXDQiOLVLVHQORVDOLPHQWRV 7(0$ $JXDVGHFRQVXPRKXPDQR1RUPDWLYDDSOLFDEOHWLSRVGHDQiOLVLV7RPDGHPXHVWUDV\HQYtRDO ODERUDWRULRSDUDVXDQiOLVLV 7(0$ &RQFHSWRV EiVLFRV GH ORV PpWRGRV GH DQiOLVLV GH DJXDV S+ FRQGXFWLYLGDG R[LGDELOLGDG QLWUDWRVQLWULWRVFORUXURVDOFDOLQLGDGWRWDOVXOIDWRVGXUH]D 7(0$ 3URGXFWRVGHODSHVFDPROXVFRVELYDOYRVYLYRV\HTXLQRGHUPRVWXQLFDGRV\JDVWHUySRGRVYLYRV 3UHSDUDFLyQGHPXHVWUDVSDUDHODQiOLVLVPLFURELROyJLFR7pFQLFDVGHDQiOLVLV 7(0$ 3URGXFWRVGHSHVFDFRQVHUYDV\VHPLFRQVHUYDV&RQFHSWRVEiVLFRVGHORVPpWRGRVGHDQiOLVLV GHFORUXURV1%97KLVWDPLQDPHWDOHVSHVDGRV 7(0$ /HFKH\SURGXFWRVOiFWHRV&RQFHSWRVEiVLFRVGHORVSULQFLSDOHVPpWRGRVGHDQiOLVLVGHODOHFKH 1LWUDWRV\QLWULWRVHQTXHVR 7(0$ &DUQHV \ SURGXFWRV FiUQLFRV &RQFHSWRV EiVLFRV GH ORV SULQFLSDOHV PpWRGRV GH DQiOLVLV ItVLFR TXtPLFRV6XOILWRVQLWUDWRV\QLWULWRV 7(0$ 5HVLGXRVHQSURGXFWRVGHRULJHQDQLPDO&RQFHSWRVEiVLFRVGHORVPpWRGRVGHDQiOLVLVItVLFR TXtPLFRV'HWHUPLQDFLyQGHLQKLELGRUHV 7(0$ 7(0$ 0HGLRVGHFXOWLYR7LSRV3UHSDUDFLyQ\FRQWURO 7pFQLFDV GH VLHPEUD HQ PLFURELRORJtD 3UHSDUDFLyQ GH PXHVWUDV \ GLOXFLRQHV SDUD HO DQiOLVLV PLFURELROyJLFRGHDOLPHQWRV 7(0$ (VWXGLRPLFURELROyJLFRGHDJXDVGHFRQVXPRKXPDQR\DJXDVGHEHELGDHQYDVDGDV7pFQLFDV GHDQiOLVLV 7(0$ /HFKH\SURGXFWRVOiFWHRV3UHSDUDFLyQGHPXHVWUDVSDUDHODQiOLVLVPLFURELROyJLFR7pFQLFDVGH DQiOLVLV 7(0$ &DUQH \ SURGXFWRV FiUQLFRV 3UHSDUDFLyQ GH PXHVWUDV SDUD HO DQiOLVLV PLFURELROyJLFR 7pFQLFDV GHDQiOLVLV 7(0$ &RQVHUYDV \ VHPLFRQVHUYDV 3UHSDUDFLyQ GH PXHVWUDV SDUD ORV DQiOLVLV PLFURELROyJLFRV (VWDELOLGDGPLFURELROyJLFD7pFQLFDVGHDQiOLVLV 7(0$ 3URGXFWRVGHEROOHUtDSDVWHOHUtD\UHSRVWHUtD3UHSDUDFLyQGHPXHVWUDV$QiOLVLVPLFURELROyJLFR $QiOLVLVGHJOXWHQ 7pFQLFDVSDUDFRQWUROPLFURELROyJLFRGHDPELHQWH\VXSHUILFLHV CVE-2019-3750 7(0$ i Pág. 12750 boc.cantabria.es 243/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD 7(0$ 7(0$ &RQWUROGHFDOLGDGGHORVHQVD\RV %XHQDVSUiFWLFDVGHODERUDWRULR6LVWHPDGHFDOLGDG$FUHGLWDFLyQGHXQODERUDWRULRGHDQiOLVLVGH DOLPHQWRV 7(0$ 5LHVJRV ODERUDOHV OLJDGRV DO WUDEDMR HQ XQ ODERUDWRULR ([SRVLFLyQ ODERUDO D DJHQWHV TXtPLFRV CVE-2019-3750 ItVLFRV\ELROyJLFRV(YDOXDFLyQ\FRQWUROGHOULHVJR i Pág. 12751 boc.cantabria.es 244/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(5327e&1,&2$8;,/,$5 ,16758&725'(%8&(2352)(6,21$/ 0$7(5,$6(63(&Ë),&$6 i Pág. 12752 boc.cantabria.es CVE-2019-3750 %/248(,/HJLVODFLyQ 7(0$ 2UGHQGHGHRFWXEUHGHSRUODTXHVHDSUXHEDQODVQRUPDVGHVHJXULGDG SDUD HO HMHUFLFLR GH ODV DFWLYLGDGHV VXEDFXiWLFDV &DStWXOR , 'LVSRVLFLRQHV JHQHUDOHV&DStWXOR,,%XFHRSURIHVLRQDO&DStWXOR,,,%XFHRGHSRUWLYRUHFUHDWLYR &DStWXOR,9'LVSRVLFLRQHVFRPSOHPHQWDULDV 7(0$ 2UGHQGHGHMXOLRGHSRUODTXHVHPRGLILFDQODVQRUPDVGHVHJXULGDGSDUD HOHMHUFLFLRGHDFWLYLGDGHVVXEDFXiWLFDVDSUREDGDVSRU2UGHQGHGHRFWXEUHGH 5HVROXFLyQ GH GH MXOLR GH GH OD 'LUHFFLyQ *HQHUDO GH OD 0DULQD 0HUFDQWH SRU OD TXH VH DFWXDOL]DQ ODV QRUPDV GH VHJXULGDG SDUD OD SUiFWLFD GHO EXFHRGHSRUWLYRUHFUHDWLYRDOVXPLQLVWURGHVXSHUILFLH5HVROXFLyQGHGHIHEUHUR GHGHOD'LUHFFLyQ*HQHUDOGHOD0DULQD0HUFDQWHSRUODTXHVHDFWXDOL]DQ GHWHUPLQDGRV SUHFHSWRV UHODFLRQDGRV FRQ ODV WDEODV GH GHVFRPSUHVLyQ GH ODV QRUPDVGHVHJXULGDGSDUDHOHMHUFLFLRGHDFWLYLGDGHVVXEDFXiWLFDVDSUREDGDVSRU OD2UGHQGHGHRFWXEUHGH 7(0$ 5HVROXFLyQGHGHHQHURGHGHOD'LUHFFLyQ*HQHUDOGH(PSOHRSRUODTXH VH UHJLVWUD \ SXEOLFD HO ,, &RQYHQLR FROHFWLYR GH EXFHR SURIHVLRQDO \ PHGLRV KLSHUEiULFRV &DStWXOR , 'LVSRVLFLRQHV JHQHUDOHV $UWtFXORV D &DStWXOR ,, 2UJDQL]DFLyQGHOWUDEDMR&DStWXOR,,,-RUQDGDKRUDULRV\GHVFDQVRV&DStWXOR9 6HJXULGDG\VDOXGODERUDO&DStWXOR9,,5pJLPHQGLVFLSOLQDULR5HVROXFLyQGHGH RFWXEUHGHGHOD'LUHFFLyQ*HQHUDOGH(PSOHRSRUODTXHVHUHJLVWUD\SXEOLFD HO$FWDGHODFXHUGRGHPRGLILFDFLyQGHO&RQYHQLRFROHFWLYRGHEXFHRSURIHVLRQDO\ PHGLRV KLSHUEiULFRV \ HO DFXHUGR VREUH 1RUPDV GH VHJXULGDG HQ DFWLYLGDGHV VXEDFXiWLFDV$QH[R,1RUPDVGHVHJXULGDGHQDFWLYLGDGHVVXEDFXiWLFDV 7(0$ 5HDO'HFUHWRGHGHDEULOSRUHOTXHVHDSUXHEDOD,QVWUXFFLyQWpFQLFD FRPSOHPHQWDULD 0,( $3 GHO 5HJODPHQWR GH DSDUDWRV D SUHVLyQ UHIHUHQWH D LQVWDODFLRQHVGHFDUJDHLQVSHFFLyQGHERWHOODVGHHTXLSRVUHVSLUDWRULRVDXWyQRPRV SDUDDFWLYLGDGHVVXEDFXiWLFDV\WUDEDMRVGHVXSHUILFLH 7(0$ /H\GHGHQRYLHPEUHGHSUHYHQFLyQGH5LHVJRV/DERUDOHV&DStWXOR, 2EMHWRiPELWRGHDSOLFDFLyQ\GHILQLFLRQHV$UWtFXORV\&DStWXOR,,3ROtWLFDHQ PDWHULDGHSUHYHQFLyQGHULHVJRVSDUDSURWHJHUODVHJXULGDG\ODVDOXGHQHOWUDEDMR $UWtFXORV\&DStWXOR,,,'HUHFKRV\REOLJDFLRQHV$UWtFXORV \ &DStWXOR ,9 6HUYLFLRV GH SUHYHQFLyQ $UWtFXOR ELV 3UHVHQFLD GH ORV UHFXUVRVSUHYHQWLYRV 7(0$ 5HDO'HFUHWRGHGHPD\RVREUHGLVSRVLFLRQHVPtQLPDVGHVHJXULGDG \ VDOXG UHODWLYDV D OD XWLOL]DFLyQ SRU ORV WUDEDMDGRUHV GH HTXLSRV GH SURWHFFLyQ LQGLYLGXDO$UWtFXORVD(QUHODFLyQDORVDQH[RV,\,,GHOSUHVHQWH5HDO'HFUHWR TXp HTXLSRV GH SURWHFFLyQ LQGLYLGXDO \ HQ TXp VLWXDFLRQHV UHODFLRQDGDV FRQ ODV DFWLYLGDGHV SURSLDV GHO VHFWRU GHO EXFHR SURIHVLRQDO VRQ QHFHVDULRV HTXLSRV GH SURWHFFLyQLQGLYLGXDO 7(0$ 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHHVWDEOHFHQODVGLVSRVLFLRQHV PtQLPDVGHVHJXULGDG\VDOXGSDUDODXWLOL]DFLyQSRUORVWUDEDMDGRUHVGHORVHTXLSRV GHWUDEDMR$UWtFXORVD$QH[R,'LVSRVLFLRQHVPtQLPDVDSOLFDEOHVDORVHTXLSRV GHWUDEDMR$QH[R,,'LVSRVLFLRQHVUHODWLYDVDODXWLOL]DFLyQGHORVHTXLSRVGHWUDEDMR 245/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 5HDO'HFUHWRGHGHMXOLRSRUHOTXHVHHVWDEOHFHQODVGLVSRVLFLRQHV PtQLPDV GH VHJXULGDG \ VDOXG HQ HO WUDEDMR D ERUGR GH ORV EXTXHV GH SHVFD $UWtFXORVD$QH[R,'LVSRVLFLRQHVPtQLPDVGHVHJXULGDG\GHVDOXGDSOLFDEOHV DORVEXTXHVGHSHVFDQXHYRV$QH[R,,'LVSRVLFLRQHVPtQLPDVGHVHJXULGDG\GH VDOXGDSOLFDEOHVDORVEXTXHVGHSHVFDH[LVWHQWHV$QH[R,9'LVSRVLFLRQHVPtQLPDV GHVHJXULGDG\GHVDOXGUHODWLYDVDORVHTXLSRVGHSURWHFFLyQLQGLYLGXDO 7(0$ 5LHVJRVSURIHVLRQDOHV'DxRVGHULYDGRVGHOWUDEDMR&RQFHSWRGHSHOLJUR\ULHVJR $FFLGHQWHV GH WUDEDMR ± ,QYHVWLJDFLyQ GH DFFLGHQWHV FRPR WpFQLFD SUHYHQWLYD $QiOLVLV\HYDOXDFLyQJHQHUDOGHOULHVJRGHDFFLGHQWHV(QIHUPHGDGSURIHVLRQDO\ RWUDV SDWRORJtDV GHULYDGDV GHO WUDEDMR ± 3UHYHQFLyQ \ SURWHFFLyQ ± 7LSRV GH WpFQLFDVGHSUHYHQFLyQ 7(0$ 1RUPDVGHVHxDOL]DFLyQHQVHJXULGDG3URWHFFLyQFROHFWLYDHLQGLYLGXDO±3ODQHV GHHPHUJHQFLD\DXWRSURWHFFLyQ(TXLSRVGHSULPHUDLQWHUYHQFLyQ %/248(,,7HFQRORJtDJHQHUDO\WHFQRORJtDGHEXFHR 7(0$ 6WDQGDUG 0DULQH 1DYLJDWLRQDO 9RFDEXODU\ &DUDFWHUtVWLFDV EiVLFDV GH ODV FRPXQLFDFLRQHVPDUtWLPDVHQLQJOpV3URFHGLPLHQWRGHGHOHWUHR OHWUDV\Q~PHURV 7(0$ 6WDQGDUG 0DULQH 1DYLJDWLRQDO 9RFDEXODU\ 3DODEUDV LQGLFDGRUDV GH VRFRUUR XUJHQFLD \ VHJXULGDG 5HSHWLFLyQ GLVWDQFLDV KRUDV 8VR GH WpUPLQRV DPELJXRV 3RVLFLyQUHODWLYDDERUGR'LPHQVLRQHVSULQFLSDOHVGHOEXTXH3DUWHVGHOEXTXHPiV LPSRUWDQWHVGLPHQVLRQHVSULQFLSDOHVGHOEXTXHFDERVXVDGRVHQHODPDUUH 7(0$ 6WDQGDUG 0DULQH 1DYLJDWLRQDO 9RFDEXODU\ 7pUPLQRV XVDGRV HQ PHWHRURORJtD PDUHDV 7(0$ 0HWHRURORJtD 'HILQLFLyQ 9DULDEOHV PHWHRUROyJLFDV SULQFLSDOHV 8QLGDGHV HPSOHDGDVHQPHWHRURORJtD,QVWUXPHQWRVGHPHGLGD2EVHUYDFLyQHLQWHUSUHWDFLyQ GHOEDUyPHWUR\WHUPyPHWURLQWHUSUHWDFLyQGHODVSHFWRGHOFLHORSDUDHOSURQyVWLFR IRUPDFLyQ\WLSRVGHQXEHV 7(0$ 3UHVLyQDWPRVIpULFD3UHVLyQQRUPDO%RUUDVFDV\DQWLFLFORQHV IUHQWHVIRUPDFLyQ GHOYLHQWRFLUFXODFLyQJHQHUDOGHOYLHQWRHQHOKHPLVIHULRQRUWHYLHQWRUHDO\YLHQWR DSDUHQWHWpUPLQRVUHODFLRQDGRVFRQHOYLHQWREULVDVFRVWHUDVHVFDODXVDGDSDUD GHILQLUODLQWHQVLGDGGHOYLHQWR\ODPDU5HODFLyQHQWUHLQWHQVLGDGGHOYLHQWR\HVWDGR GHODPDU 7(0$ 2FHDQRJUDItD 3URSLHGDGHV GHO DJXD GH PDU &RUULHQWHV &LUFXODFLyQ RFHiQLFD 2ODV7LSRVGHRODVIRUPDFLyQGHRODV\WHRUtDGH2ODV 7(0$ 7UD]DGRGHODOtQHDGHHMHV%RFLQDV3URSXOVRUHV7LPRQHV+pOLFHVWUDQVYHUVDOHV )ODSV \ HVWDELOL]DGRUHV 7RPDV GH IRQGR ÈQRGRV 0DUFDV HQ HO FDVFR HQ OD LQVSHFFLyQVXEPDULQD,QVSHFFLyQVXEPDULQDGHOEXTXH 7(0$ 3ODQRV GHO EXTXH SODQR GH GLVSRVLFLyQ JHQHUDO SODQR GH IRUPDV SODQRV GH GHVDUUROOR GHO IRUUR SODQRV GH GHWDOOHV GH LQVSHFFLyQ VXEPDULQD SODQRV GH FRPSDUWLPHQWDGRSODQRVGHKLHUURV\]RQDVUHVLVWHQWHVSODQRGH]RQDHVWDQFD 7(0$ &RQVWUXFFLyQ QDYDO HQ EXTXHV 0DGHUD 3ROLpVWHU UHIRU]DGR FRQ ILEUD GH YLGULR DFHUR DOXPLQLR 9HQWDMDVH LQFRQYHQLHQWHV GH FDGD XQR GH HOORV &RQVWUXFFLyQ \ PDQWHQLPLHQWRGHFDGDXQRGHHOORV 7(0$ (VWDELOLGDG HQ DYHUtDV 0HGLRV GH DFWXDFLyQ DQWH YtDV GH DJXD (VWDELOLGDG HQ YDUDGDV\SXHVWDVDIORWH 7(0$ %XFHR DXWyQRPR 'HILQLFLyQ (OHPHQWRV GHO HTXLSR 5HJXODGRUHV %RWHOODV *ULIHUtDV &iOFXOR GH DXWRQRPtD ,7&(3 %RWHOODV GH (TXLSRV 5HVSLUDWRULRV $XWyQRPRV 7(0$ *HQHUDOLGDGHV \ QRUPDV GH VHJXULGDG 6HxDOHV (O FRPSDxHUR (PEDUFDFLyQ HQ VXSHUILFLH3HUVRQDO\RUJDQL]DFLyQ3UHSDUDFLyQGHRSHUDFLRQHVGHEXFHR i Pág. 12753 boc.cantabria.es CVE-2019-3750 7(0$ 246/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ %XFHR FRQ VXPLQLVWUR GH DLUH GHVGH VXSHUILFLH (OHPHQWRV GHO HTXLSR 3URFHGLPLHQWRV GH HPHUJHQFLD 7pFQLFDV GH EXFHR &DVFRV \ PDVFDURQHV 8PELOLFDOHV 7(0$ 7pFQLFDV GH E~VTXHGD %~VTXHGD FLUFXODU &XDGUDQWHV %XFHDGRU UHPROFDGR 2ULHQWDFLyQ\QDYHJDFLyQVXEDFXiWLFDV 7(0$ 6DOYDPHQWR GH EXTXHV FRQFHSWR JHQHUDO 5HFXUVRV WpFQLFRV XWLOL]DGRV HQ HO VDOYDPHQWR GH EXTXHV &RQFHSWR GH DYHUtD HQ EXTXHV 3ODQWHDPLHQWR GH ODV RSHUDFLRQHVGHVDOYDPHQWRGHEXTXHV&ODVLILFDFLyQQDXIUDJLRV 7(0$ 6DOYDPHQWR GH EXTXHV (OHPHQWRV EiVLFRV \ DX[LOLDUHV GH WUDEDMR $FKLTXH SRU ERPEDV $FKLTXH SRU DLUH $SDUHMRV GHVGH OD SOD\D /HYDQWDPLHQWR %XTXHV HPEDUUDQFDGRV0DWHULDOQHFHVDULR 7(0$ 7UDEDMRV SDUD HO UHIORWDPLHQWR \ GHVJXDFH GH EXTXHV KXQGLGRV 2SHUDFLRQHV SUHOLPLQDUHV(VWDELOLGDGDGHFXDGDHQODVRSHUDFLRQHVGHUHIORWDPLHQWRGHEXTXHV 'HVJXDFH $FKLTXH 0DQJXHUDV \ VRSODGR %XTXHV KXQGLGRV FRQ TXLOOD DUULED %XTXHVFRQTXLOODDOVROHQVXSHUILFLH 7(0$ /LPSLH]DGHEXTXHVKXQGLGRVHQSXHUWRV \FDQDOHV 6DOYDPHQWR 'LVSHUVLyQFRQ H[SORVLYRV$VLHQWRGHXQEXTXHHQIRQGR7UDEDMRV\UHSDUDFLRQHVHQREUDYLYD ,QWURGXFFLyQ 0DWHULDOHV 3DOOHWHV 7XUDIDOODV 3DQHOHV 7DSRQHV &XxDV &RIIHUGDPV3HUQRV&HPHQWR0DVLOOD6ROGDGXUD 7(0$ 2EUDV KLGUiXOLFDV 1RFLRQHV JHQHUDOHV &RQVWUXFFLRQHV $QiOLVLV VREUH OD UHVLVWHQFLDGHOWHUUHQR5HSODQWHRV&LPHQWDFLyQ&RQVWUXFFLyQGHPXURV 7(0$ 2EUDV KLGUiXOLFDV 2EUDV HQ UtRV 3UHVDV 3HTXHxDV \ JUDQGHV SUHVDV 3XHQWHV 'UDJDGRV&RQVWUXFFLRQHVHQODJRV\SDQWDQRV2EUDVHQSOD\DV$QiOLVLVGHGDxRV 7(0$ 3XHUWRV &RPSRVLFLyQ ItVLFD GH SXHUWRV 'iUVHQDV 'LTXHV GH DEULJR (VSLJRQHV (VFROOHUDV 0XHOOHV 2EUDV FRPSOHPHQWDULDV 3URFHGLPLHQWRV JHQHUDOHV SDUD OD LQVSHFFLyQVXEPDULQDGHSXHUWRV2EMHWLYRV3URFHGLPLHQWRV'RFXPHQWDFLyQGHXQ LQIRUPH 7(0$ 0DWHULDOHVFRPXQHVHQODVREUDVKLGUiXOLFDV\VXXWLOL]DFLyQ%ORTXHVSUHIDEULFDGRV %ORTXHV QDWXUDOHV 7HWUiSRGRV 3LORWHV 7DEOHVWDFDV $WDJXtDV &HPHQWR +RUPLJyQ 7(0$ ,QVWDODFLRQHVGHVWLQDGDVODFRQVWUXFFLyQ\UHSDUDFLRQHVGHEXTXHV*HQHUDOLGDGHV VREUHODRUJDQL]DFLyQGHIDFWRUtDV\DVWLOOHURVQDYDOHV'HVFULSFLyQFODVLILFDFLyQ\ FDUDFWHUtVWLFDV GH 'LTXHV VHFRV 'LTXHV IORWDQWHV 9DUDGHURV ,QVWDODFLRQHV GH ERWDGXUD 7(0$ 2WURV WUDEDMRV KDELWXDOHV FRQ SDUWLFLSDFLyQ GH HTXLSRV GH EXFHR 'UDJDGRV &ODVLILFDFLyQ\FDUDFWHUtVWLFDV&ODVHV\WLSRVGHORVPDWHULDOHVGHGUDJDGR7LSRV GH EXTXHV XWLOL]DGRV HQ ODV RSHUDFLRQHV GH GUDJDGR (PLVDULRV *HQHUDOLGDGHV &LPHQWDFLyQ &RQVWUXFFLyQ GHO HPLVDULR )DOORV HQ HO HPLVDULR ,QVSHFFLyQ UHSDUDFLyQ \ PDQWHQLPLHQWR 3URWHFFLyQ FRQWUD OD FRUURVLyQ TXH DIHFWD D ORV PDWHULDOHVXWLOL]DGRVHQODFRQVWUXFFLyQGHOHPLVDULR$UUHFLIHVDUWLILFLDOHV7LSRVGH DUUHFLIHV\VXVFDUDFWHUtVWLFDV 7(0$ +HUUDPLHQWDV VXEDFXiWLFDV PDQXDOHV FODVLILFDFLyQ \ HQXPHUDFLyQ +HUUDPLHQWDV GHFRUWH+HUUDPLHQWDVGHSHUIRUDFLyQ+HUUDPLHQWDVGHURVFDGR1RUPDVEiVLFDV VREUH HO PDQHMR GH OD KHUUDPLHQWD PDQXDO HQ WUDEDMRV VXEDFXiWLFRV \ VX PDQWHQLPLHQWR 7(0$ +HUUDPLHQWDV 0HFiQLFDV FODVLILFDFLyQ +HUUDPLHQWDV GH DLUH FRPSULPLGR +HUUDPLHQWDVKLGUiXOLFDV\SLVWRODGHSHUQRV&ULWHULRVJHQHUDOHVGHPDQWHQLPLHQWR GHKHUUDPLHQWDVPHFiQLFDV'HVFULSFLyQ\PDQHMRGH*ORERV&KXSRQDRPDQJD GHVXFFLyQ+HUUDPLHQWDVGHOLPSLH]D 7(0$ 9RODGXUDV VXEPDULQDV 1RUPDV GH VHJXULGDG &RQFHSWRV JHQHUDOHV VREUH ORV H[SORVLYRV FRQYHQFLRQDOHV &DUJDV H[SORVLYDV &DOFXOR \ GLVSRVLFLyQ $UWLILFLRV \ i Pág. 12754 boc.cantabria.es CVE-2019-3750 247/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ DFFHVRULRV 3UHSDUDFLyQ \ IRUPD GH GDU IXHJR D FDUJDV 'LVSHUVLyQ PHGLDQWH YRODGXUDHQRSHUDFLRQHVGHGHVJXDFH([WUDFFLyQGHKpOLFHV 7(0$ &RUWHVXEPDULQR*HQHUDOLGDGHV(TXLSRVGHSURWHFFLyQLQGLYLGXDO(OHPHQWRVGHOD LQVWDODFLyQ GH FRUWH VXEPDULQR 7pFQLFDV GH FRUWH VXEPDULQR 2[LFRUWH 6RSOHWH 2[LDUFR/DQ]DV$UFRPHWDO(OHFWURGRV5DGLDOHV 7(0$ *HQHUDOLGDGHV GH OD VROGDGXUD VXEPDULQD (TXLSRV GH SURWHFFLyQ LQGLYLGXDO (OHPHQWRV GH OD LQVWDODFLyQ GH VROGDGXUD VXEPDULQD 6ROGDGXUD VXEPDULQD FRQ DUFRPHWiOLFR(OHFWURGRV 7(0$ &iPDUDV GH GHVFRPSUHVLyQ (PSOHR 7LSRV GH FiPDUDV GH GHVFRPSUHVLyQ 5HTXLVLWRVEiVLFRVTXHGHEHQFXPSOLUODVFiPDUDVGHGHVFRPSUHVLyQ6XPLQLVWUR GHJDVHV9HORFLGDGGHVXPLQLVWURGHJDVHV&iOFXORVGHYROXPHQ5HJtPHQHVGH YHQWLODFLyQ 3ULQFLSLRV VREUH HO PDQHMR GH FiPDUDV GH GHVFRPSUHVLyQ 7DEODV GHVFRPSUHVLyQHQVXSHUILFLH7UDWDPLHQWRVHQFiPDUDGHGHVFRPSUHVLyQ 7(0$ &DPSDQDGHEXFHRK~PHGD\FDPSDQDGHEXFHRVHFD'HVFULSFLyQWpFQLFDGHVXV FRPSRQHQWHV 6X IXQFLRQDPLHQWR \ XWLOLGDG 1RUPDV EiVLFDV GH VHJXULGDG HQ OD XWLOL]DFLyQGHFDPSDQDVK~PHGDV\VHFDV 7(0$ 'LVHxR GH XQ VLVWHPD GH EXFHR &DPSDQD GH EXFHR &iPDUD GH WUDQVIHUHQFLD &iPDUDGHGHVFRPSUHVLyQHQVXSHUILFLH&iPDUDGHUHVFDWHSDUDHOSURFHGLPLHQWR GHDEDQGRQRGHOEXTXH 7(0$ ,QPHUVLRQHVDJUDQSURIXQGLGDG,QWHUYHQFLyQFRQDLUH,QWHUYHQFLyQFRQPH]FODVGH JDVHV%XFHRD6DWXUDFLyQ %/248( ,,, )tVLFD $SOLFDGD )LVLRORJtD GHO %XFHR \ SULPHURV DX[LOLRV HQ DFWLYLGDGHV VXEDFXiWLFDV 7(0$ /D PDWHULD ItVLFD &RQFHSWR HVWDGRV ItVLFRV GH OD PDWHULD \ VXV SURSLHGDGHV 6LVWHPDGHXQLGDGHV\VXVHTXLYDOHQFLDVHQPHFiQLFD 7(0$ &RQFHSWRV ItVLFRV GH )XHU]D 'HQVLGDG \ SHVR HVSHFtILFR 3UHVLyQ 3UHVLyQ DWPRVIpULFD\SUHVLyQDEVROXWD3UHVLyQPDQRPpWULFD,QWURGXFFLyQHLPSRUWDQFLDGH OD PLVPD D ODV DFWLYLGDGHV VXEDFXiWLFDV \ PHGLRV KLSHUEiULFRV 3ULQFLSLR GH $UTXtPHGHV 7(0$ 7HRUtD FLQpWLFD GH ORV JDVHV /H\HV GH JDVHV 'LIXVLyQ \ GLVROXFLyQ GH JDVHV HQ OtTXLGRV&iOFXORGHODVSUHVLRQHVSDUFLDOHVGHORVJDVHVDGHWHUPLQDGDV$7$V 7(0$ %LRItVLFDGHORVPHGLRVKLSHUEiULFRV\VXEDFXiWLFRV(QHUJtD/X]6RQLGR&DORU 7UDQVPLVLyQGHOFDORU(VFDODVWHUPRPpWULFDVFRQVXVHTXLYDOHQFLDV 7(0$ $QDWRPtD \ ILVLRORJtD GHO FXHUSR KXPDQR $SDUDWR UHVSLUDWRULR VLVWHPD DXGLWLYR VLVWHPDQHUYLRVRFHQWUDO\DSDUDWRFDUGLRYDVFXODU 7(0$ 7HRUtD GH OD GHVFRPSUHVLyQ +RMDV GH UHJLVWUR GH LQPHUVLRQHV ,QPHUVLRQHV VLQ GHVFRPSUHVLyQ \ FRQ GHVFRPSUHVLyQ ,QPHUVLRQHV VXFHVLYDV ,QPHUVLRQHV HQ DOWLWXG ,QPHUVLRQHV FRQ IDFWRU GH VHJXULGDG ,QPHUVLRQHV FRQWLQXDV ,QPHUVLRQHV FRQGHVFRPSUHVLyQGHVXSHUILFLH 7(0$ 5HVROXFLyQ GH GH IHEUHUR GH SUHFHSWRV UHODFLRQDGRV FRQ ODV WDEODV GH GHVFRPSUHVLyQ 7DEODV XWLOL]DGDV &RQFHSWR %DVHV ELRItVLFDV ILVLROyJLFDV GH VX DSOLFDFLyQ\UHJODVEiVLFDVGHVXDSOLFDFLyQ 7(0$ 3URFHGLPLHQWRV GH GHVFRPSUHVLyQ SDUD EXFHR FRQ DLUH 3URFHGLPLHQWRV GH GHVFRPSUHVLyQFRQVXPLQLVWURGHPH]FODGHJDVHVGHVGHVXSHUILFLH 7(0$ 0H]FODVGHJDVHVUHVSLUDWRULDV3URIXQGLGDGHVHTXLYDOHQWHV 7(0$ 3DWRORJtDV UHODFLRQDGDV FRQ ORV DFFLGHQWHV GH EXFHR \ RWURV DPELHQWHV KLSHUEiULFRV$KRJDPLHQWR2WLWLV%DURWUDXPDV7R[LFLGDGHV i Pág. 12755 boc.cantabria.es CVE-2019-3750 248/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ CVE-2019-3750 7(0$ 3DWRORJtDV UHODFLRQDGDV FRQ ORV DFFLGHQWHV GH EXFHR \ RWURV DPELHQWHV KLSHUEiULFRV 6REUHH[SDQVLyQ SXOPRQDU 9HORFLGDG DVFHQVR 1HXPRWRUD[ (PEROLVPRDUWHULDOJDVHRVR 7(0$ 3DWRORJtDV UHODFLRQDGDV FRQ ORV DFFLGHQWHV GH EXFHR \ RWURV DPELHQWHV KLSHUEiULFRV (QIHUPHGDG GHVFRPSUHVLYD OHYH \ (QIHUPHGDG GHVFRPSUHVLYD JUDYH0HWRGRORJtDGHODUHFRPSUHVLyQ 7(0$ %XFHRHQDSQHD5LHVJRV6tQFRSHV 7(0$ 173(QIHUPHGDGHVSURIHVLRQDOHVVXEDFXiWLFDVYLJLODQFLDGHODVDOXG 7(0$ 3ULQFLSLRVJHQHUDOHVGHOVRFRUULVPR9DORUDFLyQGHODFFLGHQWDGR 7(0$ 7UDXPDWLVPRV$OWHUDFLRQHVGHODFRQVFLHQFLD$VIL[LD 7(0$ 5&36RSRUWHYLWDOEiVLFR i Pág. 12756 boc.cantabria.es 249/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(5327e&1,&2$8;,/,$5 3527(&&,Ï1&,9,/ 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12757 /D3URWHFFLyQ&LYLOHQ(XURSDHO0HFDQLVPR(XURSHRGH3URWHFFLyQ&LYLO2WURVRUJDQLVPRV LQWHUQDFLRQDOHVGH3URWHFFLyQ&LYLO (O6LVWHPD1DFLRQDOGH3URWHFFLyQ&LYLOHQ(VSDxDOD/H\ (O6LVWHPDGH3URWHFFLyQ&LYLOHQ&DQWDEULD0DUFR/HJDO (O6LVWHPDGH3URWHFFLyQ&LYLOHQ&DQWDEULD0DUFRLQVWUXPHQWDO\RUJDQL]DWLYR (PHUJHQFLDVHQ&DQWDEULDWLSRVSHOLJURVLGDG\ULHVJRV %~VTXHGDUHVFDWH\VDOYDPHQWRHQFRVWDDFDQWLODGRV\SOD\DVHQ&DQWDEULDPDUFRVOHJDOH LQVWUXPHQWDOFRRUGLQDFLyQ\SURFHGLPLHQWRV %~VTXHGD UHVFDWH \ VDOYDPHQWR HQ PRQWDxD HQ &DQWDEULD PDUFRV OHJDO H LQVWUXPHQWDO FRRUGLQDFLyQ\SURFHGLPLHQWRV 5HVFDWH \ VDOYDPHQWR HQ W~QHOHV HQ &DQWDEULD WLSRORJtD PDUFRV OHJDO H LQVWUXPHQWDO FRRUGLQDFLyQ\SURFHGLPLHQWRV %~VTXHGDUHVFDWH\VDOYDPHQWRGHSHUVRQDVGHVDSDUHFLGDVHQHOPHGLRUXUDOHQ&DQWDEULD PDUFRVOHJDOHLQVWUXPHQWDOFRRUGLQDFLyQ\SURFHGLPLHQWRV %~VTXHGDUHVFDWH\VDOYDPHQWRGHHVSHOHRVRFRUURHQHOPHGLRUXUDOHQ&DQWDEULDPDUFRV OHJDOHLQVWUXPHQWDOFRRUGLQDFLyQ\SURFHGLPLHQWRV $FFLGHQWHV FRQ P~OWLSOHV YtFWLPDV HQ &DQWDEULD WLSRORJtD PDUFRV OHJDO H LQVWUXPHQWDO FRRUGLQDFLyQ\SURFHGLPLHQWRVGHDVLVWHQFLDDODVYtFWLPDV\DVXVIDPLOLDUHV 3ODQHVWHUULWRULDOHVGH3URWHFFLyQ&LYLOHQ&DQWDEULD (PHUJHQFLDVGH3URWHFFLyQ&LYLOSRULQFHQGLRVIRUHVWDOHVHQ&DQWDEULD (PHUJHQFLDVGH3URWHFFLyQ&LYLOSRULQXQGDFLRQHVHQ&DQWDEULD (PHUJHQFLDVGH3URWHFFLyQ&LYLOHQHOWUDQVSRUWHGH0HUFDQFtDV3HOLJURVDVHQ&DQWDEULD (PHUJHQFLDVGH3URWHFFLyQ&LYLOHQLQVWDODFLRQHV6(9(62HQ&DQWDEULD /RV3ODQHVGH$XWRSURWHFFLyQHQ&DQWDEULD (OYROXQWDULDGRGH3URWHFFLyQ&LYLOHQ&DQWDEULD )RUPDFLyQHQ&DQWDEULDHQPDWHULDGH3URWHFFLyQ&LYLO\(PHUJHQFLDV (OVLVWHPDGHUDGLRWHOHFRPXQLFDFLRQHVGHHPHUJHQFLDVHQ&DQWDEULD 6$5 FRQ +HOLFySWHUR &DUDFWHUtVWLFDV JHQHUDOHV GH XQ KHOLFySWHUR $HURGLQiPLFD GH XQ KHOLFySWHUR+HOLFySWHUR%HOO &50DHURQiXWLFR&RPXQLFDFLyQ&RQFLHQFLDVLWXDFLRQDO&XOWXUDGHVHJXULGDG 6$5 0DU 2SHUDFLRQHV FRQ KHOLFySWHUR %~VTXHGD6$5 (PHUJHQFLDV D ERUGR GH DHURQDYH 6$5$X[LOLRSUHVWDGRSRUODVDHURQDYHV6$50DWHULDO6$5 (O QDGDGRU GH UHVFDWH 6XSHUYLYHQFLD HQ OD PDU 'LVSRVLWLYRV FROHFWLYRV GH VDOYDPHQWR $EDQGRQRGHXQKHOLFySWHURHQHOPDU 9XHORGHUHVFDWHHQPRQWDxD7pFQLFDVDHPSOHDU0HWHRURORJtDTXHLQIOX\H HQHOYXHORHQ PRQWDxD 5HVFDWHHQPRQWDxDFRQKHOLFySWHUR7LSRVGHPLVLRQHV0DWHULDO(TXLSDPLHQWRSHUVRQDO 5HVFDWHHQ%DUUDQFRV(OPHGLR7LSRVGHPLVLRQHV0DWHULDO(TXLSDPLHQWRSHUVRQDO 5HVFDWHHQFXHYDV0DWHULDOXWLOL]DGR1XGRV&DPLOOD7UDFFLyQ'HVFHQVRV3ROHDV 5HVFDWH VXEDFXiWLFR 3UHSDUDFLyQ ,QPHUVLyQ 7pFQLFDV GH E~VTXHGD \ UDVWUHR %XFHR QRFWXUQRRHQDJXDVVLQYLVLELOLGDG%XFHRHQDOWLWXG%XFHRHQFDYLGDGHV boc.cantabria.es CVE-2019-3750 250/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ CVE-2019-3750 7(0$ 7(0$ 5HVFDWH \ VDOYDPHQWR HQ LQXQGDFLRQHV \ UtRV (OHPHQWRV GH ULHVJR HQ UtRV SDQWDQRV H LQXQGDFLRQHV7pFQLFDVGHUHVFDWHDFXiWLFR7pFQLFDVGHFUXFHGHXQUtR0RQWDMHGHOtQHDVGH VHJXULGDG0DWHULDOGHUHVFDWH 3ULPHURVDX[LOLRV&yGLJR3$67ULDMHHQDFFLGHQWHVGHP~OWLSOHVYtFWLPDV5&3 EiVLFD 3ULPHURVDX[LOLRV9DORUDFLyQGHOSDFLHQWHSROLWUDXPDWL]DGRPDQHMRGHOSDFLHQWHKLSRWpUPLFR TXHPDGXUDV i Pág. 12758 boc.cantabria.es 251/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(5327e&1,&2$8;,/,$5 6$1,'$'$0%,(17$/ 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ /D 6DOXG 3~EOLFD &RQFHSWR (YROXFLyQ 3ULQFLSLRV GH ODV DFWXDFLRQHV GH VDOXG S~EOLFD 'HWHUPLQDQWHVGHODVDOXG $VSHFWRVJHQHUDOHVGHOD/H\GHGHDEULO*HQHUDOGH6DQLGDG/H\ GH GH RFWXEUH *HQHUDO GH OD 6DOXG 3~EOLFD \ /H\ GH GH GLFLHPEUH GH 2UGHQDFLyQ6DQLWDULDGH&DQWDEULDHQUHODFLyQDOD6DQLGDG$PELHQWDO 3ROtWLFD DPELHQWDO HQ OD 8QLyQ (XURSHD DFWXDFLRQHV HQ PDWHULD GH VDQLGDG DPELHQWDO &RQYHQLRGH$DUKXVVREUHHODFFHVRDODLQIRUPDFLyQ 0pWRGRV\WpFQLFDVGHFRQWURORILFLDOLQVSHFFLyQ\DXGLWRUtD(ODFWDGHLQVSHFFLyQ 7RPDGHPXHVWUDV\DQiOLVLVGHPXHVWUDVPHGLRDPELHQWDOHV/HJLVODFLyQDSOLFDEOH (TXLSRVGHPHGLGDXWLOL]DGRVHQVDQLGDGDPELHQWDO&DOLEUDFLyQ\PDQWHQLPLHQWRGHORV PLVPRV 1RUPDWLYDUHJXODGRUDGHORVFULWHULRVVDQLWDULRVGHFDOLGDGGHODJXDGHFRQVXPRKXPDQR &RQFHSWRGH=RQDGHDEDVWHFLPLHQWRGHDJXDGHFRQVXPRKXPDQR,QIUDHVWUXFWXUDVTXH HQJORED7UDWDPLHQWRVGHSRWDELOL]DFLyQGHODJXDGHFRQVXPRKXPDQR6XVWDQFLDVSDUDHO WUDWDPLHQWRGHODJXDGHFRQVXPRKXPDQR (O6LVWHPDGH,QIRUPDFLyQ1DFLRQDOGH$JXDGH&RQVXPRKXPDQR 6,1$& $JXDV GH FRQVXPR 7RPD GH PXHVWUDV 3DUiPHWURV PLFURELROyJLFRV \ ItVLFRTXtPLFRV &ULWHULRVDQDOtWLFRVSDUDODFODVLILFDFLyQGHXQDPXHVWUD³DSWDSDUDFRQVXPR´ $JXDVUHVLGXDOHV,PSDFWRHQODVDOXGS~EOLFD9LJLODQFLD\FRQWURO 5DGLDFWLYLGDGHQDJXDGHFRQVXPRKXPDQR1RUPDWLYDGHDSOLFDFLyQ $JXDVGHEDxR1RUPDWLYDUHJXODGRUDGHODJHVWLyQGHODFDOLGDGGHODVDJXDVGHEDxR 6LVWHPDGHLQIRUPDFLyQVDQLWDULDVREUHODFDOLGDGGHODVDJXDVGHEDxR $JXDV GH EDxR 7RPD GH PXHVWUDV 3DUiPHWURV D DQDOL]DU &ULWHULRV DQDOtWLFRV SDUD OD FODVLILFDFLyQDQXDO\HVWDGRGHODFDOLGDGGHODVDJXDVGHEDxR 3LVFLQDVGH8VR3~EOLFR1RUPDWLYDDSOLFDEOH&DOLGDGVDQLWDULDGHODJXD$XWRFRQWURO 3LVFLQDV GH 8VR 3~EOLFR 5HTXLVLWRV HVWUXFWXUDOHV \ FXHVWLRQHV UHODFLRQDGDV FRQ OD VHJXULGDGGHORVXVXDULRV /HJLRQHORVLV,PSRUWDQFLDVDQLWDULDGHODOHJLRQHORVLV,QVWDODFLRQHVGHULHVJRGHOHJLRQHOD 3ULQFLSDOHVRSHUDFLRQHVGHPDQWHQLPLHQWRIUHQWHDODOHJLRQHOD )RUPDFLyQGHOSHUVRQDOTXHUHDOL]DHOPDQWHQLPLHQWRKLJLpQLFRVDQLWDULRGHLQVWDODFLRQHV GHULHVJRGHOHJLRQHOD+RPRORJDFLyQGHHQWLGDGHVGHIRUPDFLyQHQOHJLRQHOD 5HJODPHQWR5($&+VREUHSURGXFWRVTXtPLFRVÈPELWRGHDSOLFDFLyQ)LFKDVGHGDWRVGH VHJXULGDG/D$JHQFLD(XURSHDGH3URGXFWRV4XtPLFRV 5HJODPHQWR&/33ULQFLSDOHVUHTXLVLWRVGHHWLTXHWDGR\HQYDVDGRGHSURGXFWRVTXtPLFRV i Pág. 12759 boc.cantabria.es CVE-2019-3750 7(0$ 252/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7LSRV GH ELRFLGDV 3ULQFLSDOHV UHTXLVLWRV GH DXWRUL]DFLyQFRPXQLFDFLyQ GH ELRFLGDV (O 5HJLVWUR 2ILFLDO GH (VWDEOHFLPLHQWRV \ 6HUYLFLRV %LRFLGDV GH &DQWDEULD /LEUR 2ILFLDO GH 0RYLPLHQWRGHELRFLGDV1RUPDWLYDDSOLFDEOH 5HTXLVLWRVGHIRUPDFLyQSDUDUHVSRQVDEOHVWpFQLFRV\DSOLFDGRUHVGHELRFLGDV&RQWUROGH HQWLGDGHVGHIRUPDFLyQGHELRFLGDV &RQWURORILFLDOGHSURGXFWRVTXtPLFRV(O6LVWHPDGH,QWHUFDPELR5iSLGRGH,QIRUPDFLyQ VREUH3URGXFWRV4XtPLFRV 6,5,34 &RQWDPLQDFLyQDWPRVIpULFD3ULQFLSDOHVHIHFWRVGHORVFRQWDPLQDQWHVDWPRVIpULFRVVREUH ODVDOXGKXPDQD1RUPDWLYDDSOLFDEOH ,QIRUPHV VHFWRULDOHV GH VDQLGDG DPELHQWDO HQ ORV SURFHGLPLHQWRV GH (YDOXDFLyQ \ &RPSUREDFLyQ$PELHQWDO3ULQFLSDOHVSURFHGLPLHQWRV1RUPDWLYDGHDSOLFDFLyQ (YDOXDFLyQGH,PSDFWRHQ6DOXG &OLPD \ 6DOXG 3ULQFLSDOHV UHSHUFXVLRQHV GHO FDPELR FOLPiWLFR VREUH OD VDOXG 3ODQ GH DFWXDFLRQHVSUHYHQWLYDVFRQWUDORVHIHFWRVGHOH[FHVRGHWHPSHUDWXUDVVREUHODVDOXG *HVWLyQGHGHQXQFLDV&RPSHWHQFLDVGHODVGLVWLQWDVDGPLQLVWUDFLRQHV (OUXLGR\VXLPSDFWRVREUHODVDOXGS~EOLFD9LJLODQFLD\FRQWURO 5DGLDFLRQHVLRQL]DQWHV\QRLRQL]DQWHVHIHFWRVSDUDODVDOXG 3ULQFLSDOHVHQIHUPHGDGHVWUDQVPLWLGDVSRUYHFWRUHV9LJLODQFLD\PHGLGDVGHFRQWURO $HURELRORJtD)XQGDPHQWRV\PHGLGDVGHYLJLODQFLD 5HVLGXRVFRQWHPSODGRVHQHO3ODQGH5HVLGXRVGH&DQWDEULD'HILQLFLyQGHORVGLVWLQWRV UHVLGXRVFRQWHPSODGRVHQHO3ODQ6,$&$1 i Pág. 12760 boc.cantabria.es CVE-2019-3750 7(0$ 253/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD $1(;2,, &8(5327e&1,&2$8;,/,$5 0$7(5,$6&2081(6 /D&RQVWLWXFLyQ(VSDxRODGH'HUHFKRVIXQGDPHQWDOHV\OLEHUWDGHVS~EOLFDV3URWHFFLyQGH ORV GHUHFKRV IXQGDPHQWDOHV 2UJDQL]DFLyQ WHUULWRULDO GHO (VWDGR HVSHFLDO UHIHUHQFLD D ODV &RPXQLGDGHV$XWyQRPDV 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD (O SURFHVR DXWRQyPLFR GH &DQWDEULD LQLFLDWLYD DXWRQyPLFDWUDPLWDFLyQ\DSUREDFLyQGHO(VWDWXWRGH$XWRQRPtD&RPSHWHQFLDVDVXPLGDVSRUOD &RPXQLGDG $XWyQRPD GH &DQWDEULD 0HFDQLVPRV FRPSOHPHQWDULRV GH DPSOLDFLyQ GH FRPSHWHQFLDV 7(0$ /D RUJDQL]DFLyQ LQVWLWXFLRQDO GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD (O 3DUODPHQWR (O 3UHVLGHQWH(O*RELHUQR5HODFLRQHVHQWUHHO3DUODPHQWR\HO*RELHUQR 7(0$ /RV yUJDQRV GH *RELHUQR \ $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD UpJLPHQ MXUtGLFRSULQFLSLRVHVWUXFWXUD\FRPSHWHQFLDV/D+DFLHQGD3~EOLFDGHOD&RPXQLGDG$XWyQRPD GH&DQWDEULD 7(0$ (O DFWR DGPLQLVWUDWLYR &RQFHSWR FODVHV \ HOHPHQWRV (O UpJLPHQ MXUtGLFR GHO VLOHQFLR DGPLQLVWUDWLYR 7(0$ (ILFDFLDGHORVDFWRVDGPLQLVWUDWLYRV3UHVXSXHVWRV(MHFXWLYLGDG6XVSHQVLyQGHODHILFDFLD/D LQYDOLGH] GHO DFWR DGPLQLVWUDWLYR &ODVHV GH YLFLRV \ VXV HIHFWRV 7UDQVPLVLELOLGDG FRQYHUVLyQ FRQVHUYDFLyQ\FRQYDOLGDFLyQ 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR \ FODVHV 3ULQFLSLRV 6X UHJXODFLyQ HQ HO GHUHFKR SRVLWLYR 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q )DVHV GHO SURFHGLPLHQWR LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ\WHUPLQDFLyQGHOSURFHGLPLHQWR 7(0$ /RVUHFXUVRVDGPLQLVWUDWLYRV&RQFHSWR\QDWXUDOH]D&ODVHV5pJLPHQMXUtGLFRGHORVGLIHUHQWHV UHFXUVRV HQ OD /H\ GHO 3URFHGLPLHQWR $GPLQLVWUDWLYR &RP~Q GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV %UHYH UHIHUHQFLD D OD /H\ GH &DQWDEULD GH GH QRYLHPEUH GH 5pJLPHQ -XUtGLFR GHO *RELHUQRGHOD$GPLQLVWUDFLyQ\GHO6HFWRU3~EOLFR,QVWLWXFLRQDOGHOD&RPXQLGDG$XWyQRPD 7(0$ (O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR , &ODVHV GH SHUVRQDO DO VHUYLFLR GH ODV $GPLQLVWUDFLRQHV 3~EOLFDV $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 6LWXDFLRQHV DGPLQLVWUDWLYDV 7(0$ (O5HDO'HFUHWR/HJLVODWLYRGHGHRFWXEUHSRUHOTXHVHDSUXHEDHO7H[WR5HIXQGLGR GHOD/H\GHO(VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR ,, 'HUHFKRV\GHEHUHVGHORVHPSOHDGRV S~EOLFRV&yGLJRGHFRQGXFWD\UpJLPHQGLVFLSOLQDULR 7(0$ /D )XQFLyQ 3~EOLFD HQ OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD &ODVHV GH SHUVRQDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQ $GTXLVLFLyQ \ SpUGLGD GH OD UHODFLyQ GH VHUYLFLR 'HUHFKRV\GHEHUHVGHORVIXQFLRQDULRV'HUHFKRVHFRQyPLFRVGHORVIXQFLRQDULRV5HWULEXFLRQHV EiVLFDV\FRPSOHPHQWDULDV'HUHFKRVSDVLYRV\6HJXULGDG6RFLDOGHORVIXQFLRQDULRV 7(0$ 5HSUHVHQWDFLyQ \ SDUWLFLSDFLyQ GH ORV IXQFLRQDULRV S~EOLFRV /H\ 2UJiQLFD GH /LEHUWDG 6LQGLFDO /D QHJRFLDFLyQ FROHFWLYD OD UHSUHVHQWDFLyQ \ OD SDUWLFLSDFLyQ LQVWLWXFLRQDO HQ HO 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR CVE-2019-3750 7(0$ i Pág. 12761 boc.cantabria.es 254/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 &RQVHMHUtDGH3UHVLGHQFLD\-XVWLFLD 'LUHFFLyQ*HQHUDOGH)XQFLyQ3~EOLFD /D /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 5HJODPHQWR GH ORV 6HUYLFLRVGH3UHYHQFLyQ 5HDO'HFUHWRGHGHHQHUR 7(0$ 7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR%UHYHUHIHUHQFLDDOD /H\GH&DQWDEULDGHGHPDU]RGH7UDQVSDUHQFLDGHOD$FWLYLGDG3~EOLFD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV 7(0$ /D 8QLyQ (XURSHD $QWHFHGHQWHV \ REMHWLYRV /RV 7UDWDGRV IXQGDFLRQDOHV \ VXV UHIRUPDV /D DGKHVLyQGH(VSDxDDOD&((/DV,QVWLWXFLRQHV&RPXQLWDULDV(O&RQVHMR(XURSHRHO&RQVHMR \OD&RPLVLyQ(XURSHDHO3DUODPHQWR(XURSHRHO7ULEXQDOGH-XVWLFLD&RPSRVLFLyQIXQFLRQHV\ FRPSHWHQFLDV 7(0$ /DV OLEHUWDGHV EiVLFDV GHO VLVWHPD FRPXQLWDULR \ HO LQWHUYHQFLRQLVPR S~EOLFR /DV SROtWLFDV FRPXQHV/DSROtWLFDUHJLRQDO\VXLQFLGHQFLDHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD CVE-2019-3750 7(0$ i Pág. 12762 boc.cantabria.es 255/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(532'(7e&1,&26$8;,/,$5(6'(/0(',21$785$/ 0217(6 0$7(5,$6(63(&Ë),&$6 i Pág. 12763 7(0$ /D /H\ GH GH QRYLHPEUH GH 0RQWHV FRQFHSWR GH PRQWH FRPSHWHQFLDV GH ODV GLIHUHQWHV$GPLQLVWUDFLRQHVFODVLILFDFLyQ\UpJLPHQMXUtGLFRGHORVPRQWHV/DSURSLHGDGIRUHVWDO HQ&DQWDEULD(O&DWiORJRGH0RQWHVGH8WLOLGDG3~EOLFDGH&DQWDEULD'HVOLQGH\DPRMRQDPLHQWR 7(0$ /D/H\GHGHQRYLHPEUHGH0RQWHVJHVWLyQIRUHVWDOVRVWHQLEOHSODQLILFDFLyQIRUHVWDO \ RUGHQDFLyQ GH PRQWHV DSURYHFKDPLHQWRV IRUHVWDOHV UpJLPHQ VDQFLRQDGRU WLSLILFDFLyQ \ FODVLILFDFLyQGHODVLQIUDFFLRQHVPHGLGDVFDXWHODUHVVDQFLRQHV 7(0$ /RVLQFHQGLRVIRUHVWDOHVHQOD/H\GHGHQRYLHPEUH(O3ODQ(VSHFLDOGH3URWHFFLyQ &LYLOGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDVREUH,QFHQGLRV)RUHVWDOHV ,QIRFDQW SULQFLSDOHV FRQWHQLGRV (O 3ODQ (VWUDWpJLFR GH 3UHYHQFLyQ \ /XFKD &RQWUD ORV ,QFHQGLRV )RUHVWDOHV HQ &DQWDEULD 7(0$ (O'HFUHWRGHGHIHEUHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORSHUDWLYRGHOD 'LUHFFLyQ*HQHUDOGH0RQWHV\&RQVHUYDFLyQGHOD1DWXUDOH]DHQODERUHVGHOXFKDFRQWUDLQFHQGLRV IRUHVWDOHV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 3HUVRQDO GHO 2SHUDWLYR )XQFLRQHV GH ORV 7pFQLFRV$X[LOLDUHVGHO0HGLR1DWXUDOHQHO2SHUDWLYR2UJDQL]DFLyQGHOSHUVRQDOGHO2SHUDWLYR 2UJDQL]DFLyQ GH ORV VHUYLFLRV HVSHFLDOHV GH ORV 7pFQLFRV $X[LOLDUHV GHO 0HGLR 1DWXUDO 0HGLRV UHFXUVRV\RSHUDWLYLGDG 7(0$ /DV 'LUHFWLYDV &( GH GH QRYLHPEUH \ &(( GH GH PD\R 2EMHWLYRV \ SULQFLSDOHV FRQWHQLGRV /D /H\ GH GH GLFLHPEUH GHO 3DWULPRQLR 1DWXUDO \ OD %LRGLYHUVLGDG \ OD /H\ GH GH GLFLHPEUH GH 3DUTXHV 1DFLRQDOHV SULQFLSDOHV GLVSRVLFLRQHVHQPDWHULDGHFRQVHUYDFLyQGHODVHVSHFLHVVLOYHVWUHV\GHORVHVSDFLRVQDWXUDOHV SURWHJLGRV 7(0$ /D /H\ GH &DQWDEULD GH GH PD\R GH &RQVHUYDFLyQ GH OD 1DWXUDOH]D GLVSRVLFLRQHV JHQHUDOHVFDWHJRUtDVMXUtGLFDVGHSURWHFFLyQGHORVHVSDFLRVQDWXUDOHVSURWHJLGRVUHJXODFLyQGH OD FRQVHUYDFLyQ GH OD IORUD \ IDXQD VLOYHVWUHV RUJDQL]DFLyQ DGPLQLVWUDWLYD LQYHVWLJDFLyQ LQIRUPDFLyQHGXFDFLyQ\SDUWLFLSDFLyQ 7(0$ /D /H\ GH &DQWDEULD GH GH PD\R GH &RQVHUYDFLyQ GH OD 1DWXUDOH]D UpJLPHQ VDQFLRQDGRUWLSLILFDFLyQ\FODVLILFDFLyQGHODVLQIUDFFLRQHVVDQFLRQHVGHFRPLVRVREOLJDFLyQGH UHVWDXUDFLyQHLQGHPQL]DFLyQSRUGDxRVGLVSRVLFLRQHVDGLFLRQDOHV 7(0$ /D /H\ GH &DQWDEULD GH GH MXOLR GH &D]D GLVSRVLFLRQHV JHQHUDOHV RUJDQL]DFLyQ DGPLQLVWUDWLYDHVSHFLHVFLQHJpWLFDVWLSRVGHWHUUHQRVFLQHJpWLFRV\VXVSULQFLSDOHVFDUDFWHUtVWLFDV WLSRVGHWHUUHQRVQRFLQHJpWLFRV\VXVSULQFLSDOHVFDUDFWHUtVWLFDV 7(0$ /D/H\GH&DQWDEULDGHGHMXOLRGH&D]DGRFXPHQWDFLyQSDUDHOHMHUFLFLRGHODFD]D OLFHQFLDGHFD]DSUXHEDVGHDSWLWXGFODVLILFDFLyQGHORVFD]DGRUHVPHGLRV\PRGDOLGDGHVGHFD]D SURKLELFLRQHV HQ EHQHILFLR GH OD FD]D DXWRUL]DFLRQHV H[FHSFLRQDOHV H[SORWDFLyQ LQWURGXFFLyQ WUDQVSRUWH\FRPHUFLDOL]DFLyQGHODFD]D5HJXODFLyQGHODFHWUHUtD 7(0$ /D /H\ GH &DQWDEULD GH GH MXOLR GH &D]D UpJLPHQ GH UHVSRQVDELOLGDG SRU GDxRV UpJLPHQ VDQFLRQDGRU WLSLILFDFLyQ \ FODVLILFDFLyQ GH ODV LQIUDFFLRQHV VDQFLRQHV FRPSHWHQFLD PHGLGDVFDXWHODUHVFRPLVRVUHWLUDGD\UHVFDWHGHDUPDV boc.cantabria.es CVE-2019-3750 %/248(, 256/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /D /H\ GH &DQWDEULD GH GH DEULO GH 3HVFD HQ $JXDV &RQWLQHQWDOHV GLVSRVLFLRQHV JHQHUDOHVRUJDQL]DFLyQDGPLQLVWUDWLYDPHGLRV\PRGDOLGDGHVGHSHVFDOLFHQFLD\SHUPLVRVGH SHVFDFODVLILFDFLyQGHODVDJXDVFRQWLQHQWDOHVSODQLILFDFLyQGHORVDSURYHFKDPLHQWRVSURWHFFLyQ \FRQVHUYDFLyQGHODVHVSHFLHVSLVFtFRODV\GHVXKiELWDW 7(0$ /D /H\ GH &DQWDEULD GH GH DEULO GH 3HVFD HQ $JXDV &RQWLQHQWDOHV H[SORWDFLyQ WUDQVSRUWH\FRPHUFLDOL]DFLyQGHODSHVFDUpJLPHQVDQFLRQDGRUWLSLILFDFLyQ\FODVLILFDFLyQGHODV LQIUDFFLRQHVVDQFLRQHVFRPSHWHQFLDPHGLGDVFDXWHODUHVFRPLVRV 7(0$ 1RUPDWLYDDQXDOGHFD]D\SHVFDHQ&DQWDEULD2UGHQSRUODTXHVHUHJXODODSUiFWLFDGHODFD]D GXUDQWH OD WHPSRUDGD FLQHJpWLFD HQ HO WHUULWRULR GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD H[FHSWXDQGRHOLQFOXLGRHQOD5HVHUYD5HJLRQDOGH&D]D6DMD2UGHQSRUODTXHVHDSUXHEDHOSODQ DQXDO GH FD]D HQ OD 5HVHUYD 5HJLRQDO GH &D]D 6DMD 1RUPDWLYD DQXDO GH SHVFD HQ DJXDV FRQWLQHQWDOHV 2UGHQ SRU OD TXH VH GLFWDQ ODV QRUPDV SDUD HO HMHUFLFLR GH OD SHVFD HQ DJXDV FRQWLQHQWDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD %/248(,, i Pág. 12764 7(0$ 3ULQFLSDOHV HFRVLVWHPDV GH &DQWDEULD \ VXV SUREOHPDV GH FRQVHUYDFLyQ PiV VLJQLILFDWLYRV /RV KiELWDWVGHOD'LUHFWLYD&((GHGHPD\RHQ&DQWDEULDGHVFULSFLyQGHORVKiELWDWVPiV UHOHYDQWHVGLVWULEXFLyQ\SUREOHPDVGHFRQVHUYDFLyQ 7(0$ (OPHGLRIRUHVWDOGH&DQWDEULDGHVFULSFLyQ\GLVWULEXFLyQGHODVSULQFLSDOHVIRUPDFLRQHVKHUEiFHDV PDWRUUDOHV \ ERVTXHV GH &DQWDEULD (YROXFLyQ KLVWyULFD GH OD FXELHUWD IRUHVWDO GH &DQWDEULD \ IDFWRUHVLQFLGHQWHV 7(0$ (O3ODQ)RUHVWDOGH&DQWDEULD2EMHWLYRV(MHV\3URJUDPDVGH$FWXDFLyQ3ULQFLSDOHVPHGLGDV(O HVFHQDULRWHUULWRULDOGH&DQWDEULD 7(0$ /RVLQFHQGLRVIRUHVWDOHVHQ&DQWDEULD&DXVDV\GLVWULEXFLyQDQXDO)DFWRUHVTXHLQIOX\HQHQOD SURSDJDFLyQ GH ORV LQFHQGLRV ([WLQFLyQ PHGLRV \ PDWHULDOHV 7iFWLFDV GH H[WLQFLyQ 1RUPDV JHQHUDOHVGHDFWXDFLyQHQXQLQFHQGLR0HGLGDVGHVHJXULGDG 7(0$ 5HSREODFLRQHV IRUHVWDOHV 0pWRGRV GH UHSREODFLyQ &XLGDGRV FXOWXUDOHV GH ODV UHSREODFLRQHV 9LYHURV IRUHVWDOHV 5HFROHFFLyQ \ FRQVHUYDFLyQ GH VHPLOODV VHOHFWDV 5RGDOHV VHPLOOHURV HQ &DQWDEULD 7(0$ $SURYHFKDPLHQWRV PDGHUDEOHV DSHR GHVUDPDGR GHVFRUWH]DGR WURQ]DGR 0HGLFLRQHV \ FXELFDFLRQHV VHJ~Q ODV PRGDOLGDGHV GH OLTXLGDFLyQ GH ORV DSURYHFKDPLHQWRV IRUHVWDOHV 3URFHGLPLHQWRVGHDIRUR 7(0$ (QIHUPHGDGHV\SODJDVIRUHVWDOHVPiVFRPXQHVHQ&DQWDEULD'HVFULSFLyQGDxRV\WUDWDPLHQWRV 7(0$ 6HJXULGDG HQ ORV WUDEDMRV IRUHVWDOHV \ HQ XVR GH OD PDTXLQDULD IRUHVWDO 0HGLGDV SUHYHQWLYDV \ HTXLSRVGHSURWHFFLyQ 7(0$ &DUWRJUDItDOHFWXUDLQWHUSUHWDFLyQ\XVRGHPDSDVHQORVWUDEDMRVGHYLJLODQFLD\VHJXLPLHQWRHQ HOPHGLRQDWXUDO(VFDODV&RRUGHQDGDVJHRJUiILFDV\FRRUGHQDGDV8708VRGHO*36HQWUDEDMRV GHFDPSR 7(0$ /RV (VSDFLRV 1DWXUDOHV 3URWHJLGRV HQ OD QRUPDWLYD GH &DQWDEULD &DWHJRUtDV MXUtGLFDV GH SURWHFFLyQ\GHILQLFLyQGHODVPLVPDV&RPSHWHQFLD\SURFHGLPLHQWRGHGHFODUDFLyQ3ODQHVGH 2UGHQDFLyQ GH ORV 5HFXUVRV 1DWXUDOHV \ ILJXUDV GH SODQHDPLHQWR GH ORV (VSDFLRV 1DWXUDOHV 3URWHJLGRVSURFHGLPLHQWRGHHODERUDFLyQDSUREDFLyQ\FRQWHQLGRVPtQLPRV 7(0$ /D 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV /RV 3DUTXHV 1DFLRQDOHV 3DUTXHV1DWXUDOHV\0RQXPHQWRV1DWXUDOHVGH&DQWDEULDVLWXDFLyQJHRJUiILFDH[WHQVLyQYDORUHV QDWXUDOHVPiVVLJQLILFDWLYRVSUREOHPiWLFDGHFRQVHUYDFLyQHQXPHUDFLyQGHORVLQVWUXPHQWRVGH RUGHQDFLyQ\SODQHDPLHQWRHQYLJRUHQFDGDXQRGHHOORV boc.cantabria.es CVE-2019-3750 257/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 7(0$ /D5HGGH(VSDFLRV1DWXUDOHV3URWHJLGRVGH&DQWDEULDODV]RQDVGHOD5HG(FROyJLFD(XURSHD 1DWXUD6LWXDFLyQJHRJUiILFDHVSHFLHV\KiELWDWVPiVVLJQLILFDWLYRV 'HOLWRVFRQWUDORVUHFXUVRVQDWXUDOHV\HOPHGLRDPELHQWH'HOLWRVUHODWLYRVDODSURWHFFLyQGHOD IORUD\ODIDXQD'HOLWRVGHLQFHQGLRVIRUHVWDOHV %/248(,,, i Pág. 12765 7(0$ /DVHVSHFLHVGHOD'LUHFWLYD&(GHGHQRYLHPEUHHQ&DQWDEULDHQXPHUDFLyQGHODV HVSHFLHVPiVUHSUHVHQWDWLYDVSULQFLSDOHVFDUDFWHUtVWLFDVHFROyJLFDV\GLVWULEXFLyQHQ&DQWDEULD SUREOHPDVGHFRQVHUYDFLyQ 7(0$ /DVHVSHFLHVGHOD'LUHFWLYD&((GHGHPD\RHQ&DQWDEULDHQXPHUDFLyQGHORVJUXSRV RHVSHFLHVPiVUHSUHVHQWDWLYDVSULQFLSDOHVFDUDFWHUtVWLFDVHFROyJLFDV\GLVWULEXFLyQHQ&DQWDEULD SUREOHPDVGHFRQVHUYDFLyQ 7(0$ /DV HVSHFLHV DPHQD]DGDV HQ OD QRUPDWLYD GH &DQWDEULD FDWHJRUtDV MXUtGLFDV GH SURWHFFLyQ HO &DWiORJR5HJLRQDOGH(VSHFLHV$PHQD]DGDVSURWHFFLyQ\HIHFWRVMXUtGLFRVGHODFDWDORJDFLyQ(O &DWiORJR1DFLRQDOGH(VSHFLHV$PHQD]DGDVHQXPHUDFLyQ\EUHYHGHVFULSFLyQGHODVHVSHFLHV FDWDORJDGDV ³HQ SHOLJUR GH H[WLQFLyQ´ ³VHQVLEOHV D OD DOWHUDFLyQ GHO KiELWDW´ \ ³YXOQHUDEOHV´ SUHVHQWHVHQ&DQWDEULD 7(0$ 3REODFLyQGLVWULEXFLyQSUREOHPDVGHFRQVHUYDFLyQHLQVWUXPHQWRVSDUDODUHFXSHUDFLyQGHORVR SDUGR\GHOXURJDOORFDQWiEULFRHQ&DQWDEULD 7(0$ /DV SULQFLSDOHV HVSHFLHV GH FD]D PHQRU HQ &DQWDEULD FDUDFWHUtVWLFDV ELROyJLFDV \ HFROyJLFDV 'HVFULSFLyQ GH ODV PRGDOLGDGHV GH FD]D PiV UHOHYDQWHV HQ &DQWDEULD SHUtRGRV GH FD]D 3ULQFLSDOHVSUREOHPDVGHFRQVHUYDFLyQ\FULWHULRVEiVLFRVGHJHVWLyQGHODFD]DPHQRU 7(0$ /DV SULQFLSDOHV HVSHFLHV GH FD]D PD\RU HQ &DQWDEULD FDUDFWHUtVWLFDV ELROyJLFDV \ HFROyJLFDV 'HVFULSFLyQ GH ODV PRGDOLGDGHV GH FD]D PiV UHOHYDQWHV HQ &DQWDEULD SHUtRGRV GH FD]D 3ULQFLSDOHVSUREOHPDVGHFRQVHUYDFLyQ\FULWHULRVEiVLFRVGHJHVWLyQGHODFD]DPD\RU 7(0$ /RV GDxRV SURGXFLGRV SRU ODV HVSHFLHV GH IDXQD VLOYHVWUH HQ &DQWDEULD 3ULQFLSDOHV HVSHFLHV UHVSRQVDEOHVFDUDFWHUtVWLFDVGHORVGDxRVSURGXFLGRV0pWRGRVGHYDORUDFLyQGHORVWURIHRVHQODV HVSHFLHVGHFD]DPD\RUYHQDGRFRU]RUHEHFRMDEDOt\ORER 7(0$ /RVLQVWUXPHQWRVGHRUGHQDFLyQ\SODQLILFDFLyQFLQHJpWLFDVHQODQRUPDWLYDGH&DQWDEULDWLSRV iPELWRGHDSOLFDFLyQ\FRQWHQLGRPtQLPRSURFHGLPLHQWRGHDSUREDFLyQ/DV'LUHFWULFHV5HJLRQDOHV SDUD OD 2UGHQDFLyQ \ $SURYHFKDPLHQWR 6RVWHQLEOH GH ORV 5HFXUVRV &LQHJpWLFRV GH &DQWDEULD FRPDUFDVFLQHJpWLFDVUHJXODFLyQGHODVUHSREODFLRQHVFLQHJpWLFDV]RQDVGHFD]DLQWHQVLYDFD]D VHPEUDGD]RQDVGHDGLHVWUDPLHQWRGHSHUURV 7(0$ /D5HVHUYD5HJLRQDOGH&D]D6DMDGHVFULSFLyQJHQHUDOFRPDUFDVFLQHJpWLFDV\ORWHVGHFD]D HVSHFLHVSULQFLSDOHV\PRGDOLGDGHVGHFD]DSUDFWLFDGDV 7(0$ $UPDV \ PXQLFLRQHV GH FD]D 1RUPDWLYD DSOLFDEOH D ODV DUPDV GH FD]D &DUDFWHUtVWLFDV GH ORV GLIHUHQWHVWLSRVGHDUPDVDXWRUL]DGDVSDUDODFD]D&DOLEUHV\PXQLFLRQHVDXWRUL]DGDVSDUDODFD]D 5HJODVGHVHJXULGDGSDUDHOXVRGHODVDUPDV\GXUDQWHHOHMHUFLFLRGHODFD]D 7(0$ /DV HVSHFLHV REMHWR GH SHVFD HQ &DQWDEULD SULQFLSDOHV FDUDFWHUtVWLFDV ELROyJLFDV \ HFROyJLFDV GLVWULEXFLyQ(OVDOPyQDWOiQWLFRHQ&DQWDEULDHYROXFLyQKLVWyULFDGHODVSHVTXHUtDVFLFORELROyJLFR \UHTXHULPLHQWRVHFROyJLFRVSUREOHPDVGHFRQVHUYDFLyQ\PHGLGDVGHJHVWLyQHQ&DQWDEULD 7(0$ 0pWRGRVGHFHQVRDSOLFDEOHVDODJHVWLyQGHODIDXQDVLOYHVWUHSULQFLSDOHVWpFQLFDVGHLQYHQWDULR\ VHJXLPLHQWR GH SREODFLRQHV 3HVFD HOpFWULFD SURFHGLPLHQWR \ PHGLGDV GH VHJXULGDG D DSOLFDU ,QIRUPDFLyQREWHQLEOHGHODDFWLYLGDGFLQHJpWLFD\SLVFtFRODFRQWHQLGRVPtQLPRVGHODVILFKDVGH FDPSRSDUDHOVHJXLPLHQWRGHFDFHUtDV\DFWLYLGDGGHORVSHVFDGRUHVGDWRVGHPD\RULQWHUpVTXH VHSXHGHQREWHQHU boc.cantabria.es CVE-2019-3750 258/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &8(5327e&1,&26$8;,/,$5(6'(/0(',21$785$/ 3(6&$ 0$7(5,$6(63(&Ë),&$6 %/248(,1RUPDWLYD\2UGHQDFLyQ 7(0$ &DUDFWHUtVWLFDV GHO OLWRUDO \ GH ORV SXHUWRV SHVTXHURV GH &DQWDEULD SODWDIRUPD FRQWLQHQWDO \ SULQFLSDOHVFDODGHURV%UHYHGHVFULSFLyQGHORV3XHUWRVSHVTXHURV 7(0$ &RPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD UHIHUHQWHV DO VHFWRU SHVTXHUR HQXPHUDFLyQ\EUHYHGHVFULSFLyQ 7(0$ /DRUGHQDFLyQPDULVTXHUD\ORVFXOWLYRVPDULQRV&RQFHSWRGHFRQFHVLyQDXWRUL]DFLyQEDQFR QDWXUDO7LSRVGHHVWDEOHFLPLHQWRVPDULVTXHURV\GHFXOWLYRVPDULQRV 7(0$ 5HJXODFLyQGHODSHVFDPDUtWLPDSURIHVLRQDOGHQWURGHDJXDVLQWHULRUHV2UGHQGHGHMXQLR GHGHOD&RQVHMHUtDGH*DQDGHUtD$JULFXOWXUD\3HVFDGHO*RELHUQRGH&DQWDEULD 7(0$ 3HVFDPDUtWLPDGHUHFUHR1RUPDWLYDUHJXODGRUD\GHVDUUROORGHODPLVPD 7(0$ ,QVSHFFLyQ\YLJLODQFLDHQPDWHULDGHSHVFDPDUtWLPDHQ&DQWDEULD 'HFUHWRGHGH QRYLHPEUH /D IXQFLyQ LQVSHFWRUD GHQXQFLDV PHGLGDV FDXWHODUHV GHFRPLVR GH OD SHVFD \ ELHQHV 7(0$ $VSHFWRV IXQGDPHQWDOHV GH ODV QRUPDV SDUD HO FRQWURO GH OD SULPHUD YHQWD GH SURGXFWRV SHVTXHURV1RUPDOL]DFLyQ\WLSLILFDFLyQ/XJDUGHGHVHPEDUTXHGHORVSURGXFWRVSHVTXHURV 7UDQVSRUWH KDVWD OD SULPHUD YHQWD 5HJODPHQWR &( Q GHO &RQVHMR GH GH QRYLHPEUH SRU HO TXH VH HVWDEOHFH XQ UpJLPHQ FRPXQLWDULR GH FRQWURO SDUD JDUDQWL]DU HO FXPSOLPLHQWRGHODVQRUPDVGHODSROtWLFDSHVTXHUDFRP~Q 7(0$ 3ULPHUD YHQWD 'LVSRVLFLRQHV UHODWLYDV D OD FDOLGDG GH ORV SURGXFWRV SHVTXHURV IUHVFRV ,GHQWLILFDFLyQ GH ORV SURGXFWRV SHVTXHURV IUHVFRV UHIULJHUDGRV R FRFLGRV (WLTXHWDGR &RQWHQLGR\IRUPDWRGHODVQRWDVGHSULPHUDYHQWD 7(0$ &RQWURO GHO WUDQVSRUWH \ FRPHUFLDOL]DFLyQ GH ORV SURGXFWRV SHVTXHURV 2EMHWR \ MXVWLILFDFLyQ GHO SURJUDPD GH LQVSHFFLyQ 3URFHGLPLHQWR GH FRQWURO VLVWHPD GH PHGLFLyQ VLVWHPD GH PXHVWUHRFXPSOLPHQWDFLyQGHODFWDGHLQVSHFFLyQQRUPDWLYDDSOLFDGD 7(0$ /HJLVODFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD UHJXODGRUD GH ODV LQIUDFFLRQHV \ VDQFLRQHV HQ PDWHULD GH SHVFD PDUtWLPD /H\ GH &DQWDEULD GH GH GLFLHPEUH GH 0HGLGDV )LVFDOHV \ $GPLQLVWUDWLYDV 5HVSRQVDELOLGDG LQIUDFFLRQHV VDQFLRQHV FULWHULRV GH YDORUDFLyQyUJDQRVFRPSHWHQWHV\SUHVFULSFLyQ 7(0$ (VSDFLRV PDUtWLPRV FRQFHSWR GH PDU WHUULWRULDO \ ]RQD HFRQyPLFD H[FOXVLYD 'HILQLFLyQ GH DJXDV LQWHULRUHV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD $VSHFWRV HVHQFLDOHV GH OD UHJXODFLyQGHODVDJXDVLQWHULRUHVGH&DQWDEULDHQODSHVFDSURIHVLRQDO CVE-2019-3750 i Pág. 12766 boc.cantabria.es 259/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ %/248(,,3HVFD 7(0$ /D SHVFD SURIHVLRQDO HQ &DQWDEULD HPEDUFDFLRQHV 1RFLRQHV JHQHUDOHV GH VX SREODFLyQ SHVTXHUD\DVSHFWRVEiVLFRVGHVXRUJDQL]DFLyQVRFLDOHPSUHVDULDO\HFRQyPLFD 7(0$ /DV DUWHV PHQRUHV FODVLILFDFLyQ GH ODV PLVPDV 7LSRV \ FDUDFWHUtVWLFDV SULQFLSDOHV /DV YRODQWDVUDVFRV\SDODQJUHGHIRQGRGHVFULSFLyQ\FDUDFWHUtVWLFDVSULQFLSDOHV 7(0$ /DV SHVTXHUtDV SHOiJLFDV HQ HO &DQWiEULFR SULQFLSDOHV HVSHFLHV eSRFDV GH SHVFD \ DUWHV XWLOL]DGDV,PSRUWDQFLDHFRQyPLFD1RUPDWLYD\UHJXODFLyQ 7(0$ /DV SHVTXHUtDV GHPHUVDOHV \ EHQWyQLFDV SULQFLSDOHV HVSHFLHV eSRFDV GH SHVFD \ DUWHV XWLOL]DGDV,PSRUWDQFLDHFRQyPLFD1RUPDWLYD\UHJXODFLyQ 7(0$ (OPDULVTXHRHQ&DQWDEULDSULQFLSDOHVHVSHFLHV\~WLOHV1RUPDWLYD,PSRUWDQFLDHFRQyPLFD /DSHVFDGHODDQJXODHQOD&RPXQLGDG$XWyQRPDGH&DQWDEULD1RUPDWLYD\UHJXODFLyQ 7(0$ /RVPROXVFRVGHLQWHUpVFRPHUFLDOHQ&DQWDEULDSULQFLSDOHVHVSHFLHV5DVJRVJHQHUDOHVPiV FDUDFWHUtVWLFRVGHORVPROXVFRV7DOODVPtQLPDV\PHGLFLyQ 7(0$ /RV FUXVWiFHRV GH LQWHUpV FRPHUFLDO HQ &DQWDEULD SULQFLSDOHV HVSHFLHV 5DVJRV JHQHUDOHV PiVFDUDFWHUtVWLFRVGHORVFUXVWiFHRV7DOODVPtQLPDV\PHGLFLyQ 7(0$ 5DVJRV JHQHUDOHV PiV FDUDFWHUtVWLFRV GH ORV SHFHV SHOiJLFRV GHPHUVDOHV \ EHQWyQLFRV GH LQWHUpVFRPHUFLDOHQ&DQWDEULD7DOODVPtQLPDV 7(0$ /D FDSWXUD GH FHER YLYR HVSHFLHV DXWRUL]DGDV FDQWLGDG Pi[LPD \ XWHQVLOLRV SHUPLWLGRV +RUDULR 7(0$ /DV DOJDV PDULQDV VXV FODVHV \ SULQFLSDOHV HVSHFLHV GH LQWHUpV FRPHUFLDO 5HJXODFLyQ HQ &DQWDEULDGHVXH[WUDFFLyQ\UHFRJLGD 7(0$ 0DQLSXODFLyQ GHO SHVFDGR GHVFRPSRVLFLyQ GHO SHVFDGR FXLGDGRV D WHQHU FRQ HO SHVFDGR DQWHV\GHVSXpVGHLQWURGXFLUORHQODERGHJDRQHYHUDFRQVHUYDFLyQHQKLHORHQDJXDGHPDU UHIULJHUDGDFRQJHODFLyQFRQJHODFLyQSRUGHVKLGUDWDFLyQGHVHFDFLyQVDOD]yQHVWHULOL]DFLyQ 7(0$ /RV GHOLWRV UHODWLYRV D OD SURWHFFLyQ GH OD IORUD \ IDXQD HQ PDWHULD GH SHVFD \ PDULVTXHR 5HJXODFLyQGHOFyGLJRSHQDO\ODVQRUPDVTXHFRQILJXUDQORVGHOLWRV i Pág. 12767 7(0$ 5DGLRFRPXQLFDFLRQHV PDUtWLPDV EDQGD GH PX\ DOWDV IUHFXHQFLDV VHUYLFLR GH HVFXFKD UDGLRWHOHIyQLFDHQORVEXTXHVSURFHGLPLHQWR\IUHFXHQFLDVGHHQODFHFRQHVWDFLRQHVFRVWHUDV \ EDUFRV PHQVDMHV GH VRFRUUR XUJHQFLD \ VHJXULGDG (O 6LVWHPD 0XQGLDO GH 6RFRUUR \ 6HJXULGDG0DUtWLPD/ODPDGDVHOHFWLYDGLJLWDO 7(0$ *RELHUQRGHXQDHPEDUFDFLyQUHJODVJHQHUDOHVGHPDQLREUD(IHFWRVFRPELQDGRVGHOPRWRU \GHODKpOLFH&RUULHQWHVJHQHUDGDVSRUODVKpOLFHV&LDERJD8WLOL]DFLyQGHODQFODSDUDKDFHU FDEH]DVREUHHOOD&XUYDGHHYROXFLyQ0DQLREUDGHODUJDGR\YLUDGRGHXQDUHGGHFHUFRHQ ODSHVFDGHEDMXUD 7(0$ ,GHD JHQHUDO GH OD LQIOXHQFLD GHO YLHQWR \ OD FRUULHQWH HQ OD PDQLREUD GHO EXTXH 0DQLREUDV $WUDFDUVLQYLHQWRQLFRUULHQWH$WUDFDUFRQYLHQWRGHIXHUDSHUSHQGLFXODUDOPXHOOH$WUDFDUFRQ YLHQWR GH WLHUUD SHUSHQGLFXODU DO PXHOOH $WUDFDU GH SXQWD 0DQLREUD SDUD DEDUORDUVH D RWUD HPEDUFDFLyQ 'HVDWUDFDU HQWUH EDUFRV DEDUORDGRV $PDUUDU D XQD ER\D &tUFXOR GH ERUQHR *DUUHR9LJLODQFLDGXUDQWHHOIRQGHR boc.cantabria.es CVE-2019-3750 %/248( ,,, 1DYHJDFLyQ 0DQLREUD 7HRUtD GHO %XTXH 5DGLRFRPXQLFDFLRQHV 6HJXULGDG &RQWDPLQDFLyQ 260/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (QWUDGDV\VDOLGDVHQSXHUWRV\UtDV1DYHJDFLyQFRQPDOWLHPSR1RUPDVJHQHUDOHVDVHJXLU HQORVFDQDOHVSUHFDXFLRQHVHQODQDYHJDFLyQHQDJXDVLQWHULRUHVPDQLREUD\SUHFDXFLRQHV HQHOSDVRGHEDUUDV\ERFDQDVFRQHOYLHQWRFRUULHQWHVGHPDUHD\IRUPDFLyQGHRODVWRPD GH HQILODFLRQHV REVWiFXORV FHUFDQRV JREHUQDU DOUHGHGRU GH XQ SXQWR ILMR PDQWHQLHQGR OD GLVWDQFLD SUHFDXFLRQHV JHQHUDOHV HQ OD QDYHJDFLyQ FRQ PDO WLHPSR YHORFLGDG GH PDQLREUD FRQ PDO WLHPSR IRUPDV GH UHFLELU OD PDU HPSOHR GHO DQFOD IORWDQWH \ OD YHOD GH FDSD HQ EDUFRVFRQSRFRSRUWHXWLOL]DFLyQGHODQFODIORWDQWHHQORVSHVTXHURVHPSOHRGHODFHLWH 0DQLREUD GH IRQGHR \ DPDUUH D ER\DV (OHFFLyQ GHO IRQGHDGHUR WHRUtD GHO IRQGHR SUHSDUDWLYRV SDUD HO IRQGHR GH UH]RQHV \ DQFORWHV 3HUPDQHQFLD HQ IRQGHDGHUR 9LUDGR GH UH]RQHV 3UHSDUDWLYRV SDUD HO IRQGHR GH DQFODV )RQGHR FRQ XQ DQFOD HQ PDUFKD DYDQWH R DWUiV /HYDU HO DQFOD $JXDQWDU FRQ PDO WLHPSR DO DQFOD \ FRQWURO GHO JDUUHR )LODU SRU RMR 2ULQFDU(QJDOJDU$PDUUHGHER\DV5HYLUDUKDFLHQGRFDEH]DVREUHXQDER\D 7(0$ 3ULQFLSLRVEiVLFRVGHHVWDELOLGDGDSOLFDGRVDORVEXTXHVGHSHVFD'HVSOD]DPLHQWRHPSXMH FHQWURGHJUDYHGDGFHQWURGHFDUHQDPHWDFHQWUR 7(0$ &RQGLFLRQHVTXHLQIOX\HQHQODSUiFWLFDHQODVXELGD\EDMDGDGHOFHQWURGHJUDYHGDGRHQOD SRVLFLyQGHOPHWDFHQWUR/DPDQJDHOIUDQFRERUGRODVFDUJDVDOWDVHOPRYLPLHQWRGHSHVRV VXVSHQGLGRVODVVXSHUILFLHVOLEUHVORVKLHORVHQODVHVWUXFWXUDVODHVWDQTXHLGDGHOFDODGRHO HPEDUTXH GH JROSHV GH PDU 6LJQRV H[WHUQRV TXH QRV GDQ XQD LGHD GH OD HVWDELOLGDG SUHFDXFLRQHVJHQHUDOHVFiOFXORGHOYDORUDSUR[LPDGRGHODDOWXUDPHWDFpQWULFDSRUHOSHULRGR GHEDODQFH 7(0$ /DVRSHUDFLRQHVGHUHPROTXH\YDUDGD(OUHPROTXHHQODSHVFDGHEDMXUDUHFRPHQGDFLRQHV SDUDODSUHSDUDFLyQ\UHDOL]DFLyQGHOUHPROTXHORQJLWXGGHOUHPROTXHJREHUQDUUHPROFDGRU\ UHPROFDGRUHPROTXHGHDOWXUD ERXEDND HOUHPROTXHHQDOWDPDUHOUHPROTXHGHUHVFDWH JRELHUQRGHIRUWXQDODYDUDGDYROXQWDULDHLQYROXQWDULDPHGLGDVDWRPDUDQWHVGHODYDUDGD VDOYDPHQWRGHEXTXHVYDUDGRVSRUPHGLRGHUHPROFDGRUHV 7(0$ $ERUGDMHV'HWHUPLQDFLyQGHULHVJRGHDERUGDMH9tDVGHDJXDSUiFWLFDVGHWDSRQDPLHQWRGH YtDV GH DJXD FRQ WDSRQHV GH PDGHUD \ WDSRQHV GH WHOD DOPRKDGDV \ FROFKRQHV SDOOHWHGH FROLVLyQ DFKLTXH DSXQWDODPLHQWR KRPEUH DO DJXD VDOYDPHQWR GH QiXIUDJRV PDQLREUD GH UHFRJLGDGHVGHEXTXHV\ERWHV 7(0$ 6XSHUYLYHQFLD HQ OD PDU FLUFXQVWDQFLDV TXH FRQGXFHQ D XQD VLWXDFLyQ GH HPHUJHQFLD DEDQGRQR GH EXTXH HTXLSR DGLFLRQDO SDUD VXSHUYLYHQFLD FDUWHOHV GH LQVWUXFFLyQ GH RUGHQ RSHUDFLRQDOSDORV\DSDUHMRVGHERWHVVDOYDYLGDVRHPEDUFDFLRQHVVLPLODUHVDQFODIORWDQWH GHVFULSFLyQDUPDGR\PDQHMR 7(0$ 6XSHUYLYHQFLD HQ OD PDU (QFHQGLGR \ PDQHMR GHO PRWRU SUHFDXFLRQHV GXUDQWH OD PDUFKD SDUDGDYDUDUERWHVHQODSOD\DDUULEDUDXQDFRVWDSDVRGHURPSLHQWHVPDQHMRGHEDOVDV VDOYDYLGDV \ VX HTXLSR XWLOL]DFLyQ GH FKDOHFRV \ DURV VDOYDYLGDV HOHPHQWRV GH SHWLFLyQ GH DX[LOLRHOSUR\HFWRUVXPDQHMROXFHV\EHQJDODVXWLOL]DFLyQ 7(0$ /XFKD FRQWUD LQFHQGLRV 7HRUtD R QDWXUDOH]D GHO IXHJR 3URSDJDFLyQ GH LQFHQGLRV RUJDQL]DFLyQ GH HIHFWLYRV KXPDQRV PpWRGRV GH H[WLQFLyQ GH LQFHQGLRV ULHVJRV SURYRFDGRV SRU HO KXPR HTXLSRV HVSHFLDOHV GH SURWHFFLyQ HQWUDGD HQ FRPSDUWLPHQWRV LQFHQGLDGRV VLQ YLVLELOLGDG WUDMHV SURWHFWRUHV XVR GH HTXLSRV GH UHVSLUDFLyQ DXWyQRPRV SUHFDXFLRQHV JHQHUDOHV HQ OD H[WLQFLyQ GH LQFHQGLRV PDQHMR GH H[WLQWRUHV \ PDQJXHUDV SUiFWLFDV FRQWUDLQFHQGLRV FRQ ERPEDV \ PDQJXHUDV GHWHFWRUHV GH LQFHQGLRV QRUPDV JHQHUDOHV GH H[WLQFLyQ CVE-2019-3750 7(0$ i Pág. 12768 boc.cantabria.es 261/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 3ULPHURVDX[LOLRV/RVSULPHURVDX[LOLRVPpWRGRVGHUHVSLUDFLyQDUWLILFLDOPpWRGRGH6LOYHVWUH PpWRGR GH 6FKDHIIHU PpWRGR ERFD D ERFD SHOLJUR GH KHPRUUDJLDV \ PHGLGDV EiVLFDV DSURSLDGDV IUDFWXUDV TXHPDGXUDV FRQJHODFLyQ UHVFDWH \ WUDQVSRUWH GH DFFLGHQWDGRV FRQRFLPLHQWRGHORVERWLTXLQHVGHDERUGR 7(0$ &RQWDPLQDFLyQ GHO PHGLR DPELHQWH PDULQR DUWtFXORV \ GH OD /H\ GH GH QRYLHPEUH GH 3XHUWRV GHO (VWDGR \ GH OD 0DULQD 0HUFDQWH 1RUPDV SDUD SUHYHQLU OD FRQWDPLQDFLyQ PDULQD SRU GHVFDUJDV GH UHVLGXRV GHVGH ORV EXTXHV HQ ORV VLJXLHQWHV VXSXHVWRV DJXDV ROHRVDV DFHLWHV \ UHVLGXRV GH FRPEXVWLEOH X RWURV KLGURFDUEXURV DJXDV VXFLDVEDVXUDVVyOLGDV CVE-2019-3750 7(0$ i Pág. 12769 boc.cantabria.es 262/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2,, &8(532'(7e&1,&26$8;,/,$5(6'(/0(',21$785$/ 0$7(5,$6&2081(6 /D 8QLyQ (XURSHD /RV 7UDWDGRV &RPXQLWDULRV \ HO $FWD ÒQLFD (O 7UDWDGR GH 0DDVWULFKW (O 7UDWDGR GH $PVWHUGDP (O 7UDWDGR SRU HO TXH VH HVWDEOHFH XQD &RQVWLWXFLyQ SDUD (XURSD (O 7UDWDGRGH/LVERD/DV,QVWLWXFLRQHV&RPXQLWDULDV 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH'HUHFKRVIXQGDPHQWDOHV\OLEHUWDGHVS~EOLFDV3URWHFFLyQGH ORV GHUHFKRV IXQGDPHQWDOHV 2UJDQL]DFLyQ WHUULWRULDO GHO (VWDGR HVSHFLDO UHIHUHQFLD D ODV &RPXQLGDGHV$XWyQRPDV 7(0$ /H\ 2UJiQLFD (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD 2UJDQL]DFLyQ GH OD &RPXQLGDG $XWyQRPDGH&DQWDEULD7tWXORVFRPSHWHQFLDOHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7(0$ /RVyUJDQRVGHJRELHUQR\DGPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD(O*RELHUQR GH&DQWDEULDODHVWUXFWXUDDGPLQLVWUDWLYD 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR &RQFHSWR \ FODVHV 3ULQFLSLRV 6X UHJXODFLyQ HQ HO GHUHFKR SRVLWLYR(OSURFHGLPLHQWRJHQHUDO 7(0$ /D SRWHVWDG VDQFLRQDGRUD HQ ODV $GPLQLVWUDFLRQHV 3~EOLFDV 3URFHGLPLHQWR VDQFLRQDGRU /D SUiFWLFDGHODGHQXQFLD 7(0$ (OSURFHGLPLHQWRGHUHVSRQVDELOLGDGSDWULPRQLDO$SOLFDFLyQHQHOiPELWRGHODVFRPSHWHQFLDVGH OD&RQVHMHUtDGH0HGLR5XUDO3HVFD\$OLPHQWDFLyQ 7(0$ /D/H\GH&DQWDEULDGHGHPDU]RGH)XQFLyQ3~EOLFD&ODVHVGHSHUVRQDODOVHUYLFLR GHOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD3URYLVLyQGHSXHVWRV'HUHFKRV\ GHEHUHVGHORVIXQFLRQDULRV6LWXDFLRQHVDGPLQLVWUDWLYDV5pJLPHQGLVFLSOLQDULR 7(0$ 5HSUHVHQWDFLyQ \ SDUWLFLSDFLyQ GH ORV IXQFLRQDULRV S~EOLFRV /H\ 2UJiQLFD GH /LEHUWDG 6LQGLFDO /D QHJRFLDFLyQ FROHFWLYD OD UHSUHVHQWDFLyQ \ OD SDUWLFLSDFLyQ LQVWLWXFLRQDO HQ HO 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR%iVLFRGHO(PSOHDGR3~EOLFR 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV CVE-2019-3750 7(0$ i Pág. 12770 boc.cantabria.es 263/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 &8(532*(1(5$/$8;,/,$5 i Pág. 12771 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH(VWUXFWXUD\FRQWHQLGR'HUHFKRV\GHEHUHVIXQGDPHQWDOHV/DV JDUDQWtDVGHORVGHUHFKRVIXQGDPHQWDOHV\ODVOLEHUWDGHVS~EOLFDV/DVXVSHQVLyQGHORVGHUHFKRV\ OLEHUWDGHV5HIRUPDGHOD&RQVWLWXFLyQ 7(0$ /D &RURQD )XQFLRQHV GHO 5H\ HQ OD &RQVWLWXFLyQ GH 6XFHVLyQ \ UHJHQFLD (O UHIUHQGR /D &DVDGHO5H\ 7(0$ /DV &RUWHV *HQHUDOHV FRPSRVLFLyQ DWULEXFLRQHV \ IXQFLRQDPLHQWR /D HODERUDFLyQ GH ODV OH\HV 5HODFLRQHVFRQHO*RELHUQR(O'HIHQVRUGHO3XHEOR 7(0$ (O*RELHUQR\OD$GPLQLVWUDFLyQ(O3UHVLGHQWHGHO*RELHUQR(O&RQVHMRGH0LQLVWURV/RV0LQLVWURV 6HFUHWDULRV GH (VWDGR 6XEVHFUHWDULRV \ 'LUHFWRUHV *HQHUDOHV /D $GPLQLVWUDFLyQ 3HULIpULFD GHO (VWDGRORV'HOHJDGRV\6XEGHOHJDGRVGHO*RELHUQR 7(0$ /D RUJDQL]DFLyQ WHUULWRULDO GHO (VWDGR /DV &RPXQLGDGHV $XWyQRPDV &RQVWLWXFLyQ \ (VWDWXWRV GH $XWRQRPtD/D$GPLQLVWUDFLyQORFDOODSURYLQFLDHOPXQLFLSLR\RWUDVHQWLGDGHVORFDOHV 7(0$ /D 8QLyQ (XURSHD /DV LQVWLWXFLRQHV GH OD 8QLyQ (XURSHD HO &RQVHMR (XURSHR HO &RQVHMR HO 3DUODPHQWROD&RPLVLyQHO7ULEXQDOGH-XVWLFLDHO7ULEXQDOGH&XHQWDV7LSRORJtD\HIHFWRVGHODV IXHQWHVGHOGHUHFKRFRPXQLWDULRWUDWDGRVUHJODPHQWRVGLUHFWLYDV\GHFLVLRQHV 7(0$ (O 3RGHU -XGLFLDO \ HO 7ULEXQDO &RQVWLWXFLRQDO (O &RQVHMR *HQHUDO GHO 3RGHU -XGLFLDO (O 7ULEXQDO 6XSUHPR(O0LQLVWHULR)LVFDO/D2UJDQL]DFLyQ-XGLFLDO(VSDxROD(O7ULEXQDO&RQVWLWXFLRQDO 7(0$ (O(VWDWXWRGH$XWRQRPtDSDUD&DQWDEULD$QWHFHGHQWHVKLVWyULFRVGHOD&RPXQLGDG$XWyQRPDGH &DQWDEULD EUHYH UHIHUHQFLD D OD SURYLQFLD GH ORV QXHYH YDOOHV \ D OD SURYLQFLD GH 6DQWDQGHU \ OD 'LSXWDFLyQ 3URYLQFLDO /D HWDSD SUHDXWRQyPLFD HQ &DQWDEULD $SUREDFLyQ \ SURPXOJDFLyQ GHO (VWDWXWRGH$XWRQRPtDSDUD&DQWDEULD/DVVXFHVLYDVUHIRUPDVGHO(VWDWXWR 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /DV LQVWLWXFLRQHV GH DXWRJRELHUQR (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR \ OD $GPLQLVWUDFLyQ /DV FRPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ /RV yUJDQRV GH JRELHUQR \ DGPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD HVWUXFWXUD RUJDQL]DWLYD\UpJLPHQMXUtGLFR 7(0$ (O RUGHQDPLHQWR MXUtGLFR /D &RQVWLWXFLyQ /DV /H\HV FRQFHSWR \ FODVHV /DV GLVSRVLFLRQHV GHO HMHFXWLYR FRQ IXHU]D GH /H\ 'HFUHWRVOH\HV \ 'HFUHWRV OHJLVODWLYRV /RV UHJODPHQWRV FRQFHSWR \ FODVHV/RV7UDWDGRV,QWHUQDFLRQDOHV 7(0$ (O DFWR DGPLQLVWUDWLYR FRQFHSWR FODVHV \ HOHPHQWRV /D PRWLYDFLyQ (O VLOHQFLR DGPLQLVWUDWLYR /D HILFDFLDODQRWLILFDFLyQ\ODSXEOLFDFLyQ/DHMHFXFLyQGHORVDFWRVDGPLQLVWUDWLYRV 7(0$ /RV LQWHUHVDGRV (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ \ WHUPLQDFLyQGHOSURFHGLPLHQWR%UHYHUHIHUHQFLDDORVSURFHGLPLHQWRVGHUHVSRQVDELOLGDGSDWULPRQLDO \GHQDWXUDOH]DVDQFLRQDGRUD 7(0$ 1XOLGDG \ DQXODELOLGDG GH ORV DFWRV DGPLQLVWUDWLYRV /D UHYLVLyQ \ OD UHYRFDFLyQ GH ORV DFWRV DGPLQLVWUDWLYRV/RVUHFXUVRVDGPLQLVWUDWLYRVFRQFHSWR\FODVHV 7(0$ (O SHUVRQDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD /D UHODFLyQ MXUtGLFRHVWDWXWDULD $GTXLVLFLyQ \ SpUGLGD GH OD FRQGLFLyQ GH IXQFLRQDULR 6LWXDFLRQHV DGPLQLVWUDWLYDV-XELODFLyQ\GHUHFKRVSDVLYRV boc.cantabria.es CVE-2019-3750 0$7(5,$6&2081(6 264/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ 'HUHFKRV \ GHEHUHV GH ORV IXQFLRQDULRV GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD6LVWHPDGHUHWULEXFLRQHV,QFRPSDWLELOLGDGHV5pJLPHQGLVFLSOLQDULR3URYLVLyQGHSXHVWRV \SURPRFLyQSURIHVLRQDO 7(0$ /D 6HJXULGDG 6RFLDO (O 7H[WR 5HIXQGLGR GH OD /H\ *HQHUDO GH OD 6HJXULGDG 6RFLDO FDPSR GH DSOLFDFLyQ\HVWUXFWXUDGHOVLVWHPDGHOD6HJXULGDG6RFLDO&RQFHSWR\SULQFLSDOHVFDUDFWHUtVWLFDVGH OD DILOLDFLyQ \ OD FRWL]DFLyQ $FFLyQ SURWHFWRUD FRQWLQJHQFLDV FRPXQHV \ SURIHVLRQDOHV \ WLSRV GH SUHVWDFLRQHV 7(0$ &RQFHSWRGHLQIRUPiWLFD/DXQLGDGFHQWUDOGHSURFHVR/DSHULIHULDGHXQRUGHQDGRU8QLGDGHVGH HQWUDGD\VDOLGD6LVWHPDRSHUDWLYR 7(0$ (VWUXFWXUD\DOPDFHQDPLHQWRGHGDWRV7LSRVGHILFKHURV0pWRGRVGHDFFHVR/DVEDVHVGHGDWRV\ KRMDVGHFiOFXOR(OWUDWDPLHQWRGHWH[WRV 7(0$ /D GRFXPHQWDFLyQ DGPLQLVWUDWLYD 6X QDWXUDOH]D \ VX IXQFLyQ $QiOLVLV GH ORV GRFXPHQWRV DGPLQLVWUDWLYRVPiVKDELWXDOHVLQVWDQFLDFHUWLILFDGRDQXQFLRLQIRUPHUHVROXFLyQFRPXQLFDFLyQ\ QRWLILFDFLyQ (O UHJLVWUR GH HQWUDGD \ VDOLGD GH GRFXPHQWRV 5HTXLVLWRV HQ OD SUHVHQWDFLyQ GH GRFXPHQWRV(ODUFKLYRFRQFHSWRFODVHV\SULQFLSDOHVFULWHULRVGHRUGHQDFLyQ 7(0$ /RV GHUHFKRV GH ORV FLXGDGDQRV /D DWHQFLyQ DO S~EOLFR DFRJLGD H LQIRUPDFLyQ DO FLXGDGDQR (O 0DQXDO GH $WHQFLyQ DO &LXGDGDQR \ OD &DUWD GH 'HUHFKRV GH OD &LXGDGDQtD (O DFFHVR D ORV GRFXPHQWRVDGPLQLVWUDWLYRV6XVOtPLWHV 7(0$ 7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGHODV SHUVRQDV UHVSRQVDEOH \ HQFDUJDGR GHO WUDWDPLHQWR 'HOHJDGR GH SURWHFFLyQ GH GDWRV HQ ODV $GPLQLVWUDFLRQHV3~EOLFDV 0$7(5,$6(63(&Ë),&$6 ,QWURGXFFLyQDO6LVWHPD2SHUDWLYRHOHQWRUQR0LFURVRIW:LQGRZV7UDEDMRHQHOHQWRUQRJUiILFR GH:LQGRZVYHQWDQDVLFRQRVPHQ~VFRQWH[WXDOHV\FXDGURVGHGLiORJR(OHVFULWRULRODEDUUDGH WDUHDV\HOPHQ~LQLFLR 7(0$ (OH[SORUDGRUGH$UFKLYRVHQ:LQGRZV*HVWLyQGHFDUSHWDV\DUFKLYRV(O%XVFDGRUGH$UFKLYRV \$SOLFDFLRQHV/DLPSUHVLyQGHGRFXPHQWRV/DKHUUDPLHQWD5HFRUWHV 7(0$ 3URFHVDGRUHVGHWH[WRV0LFURVRIW:RUG3ULQFLSDOHVIXQFLRQHV\XWLOLGDGHV(GLFLyQIRUPDWRH LQVHUFLyQ'HVFULSFLyQGHODVSULQFLSDOHVSHVWDxDVHQODFLQWDGHRSFLRQHV 7(0$ *HVWLyQ GH ODV 7DEODV HQ HO SURFHVDGRU GH 7H[WR :RUG 3ODQWLOODV &RPELQDFLyQ GH FRUUHVSRQGHQFLD3URWHJHUXQGRFXPHQWR 7(0$ +RMDVGHFiOFXOR0LFURVRIW([FHO3ULQFLSDOHVIXQFLRQHV\XWLOLGDGHV&RQFHSWRVEiVLFRVOLEURV KRMDV FHOGDV 'HVFULSFLyQ GH ODV SULQFLSDOHV SHVWDxDV HQ OD FLQWD GH RSFLRQHV )yUPXODV \ IXQFLRQHV*UiILFRV/DLQWURGXFFLyQ\JHVWLyQGHGDWRV3URWHJHUXQOLEUR CVE-2019-3750 7(0$ i Pág. 12772 boc.cantabria.es 265/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ &RUUHR(OHFWUyQLFR\0LFURVRIW2XWORRN&RQFHSWRVHOHPHQWDOHV\IXQFLRQDPLHQWR/DVFXHQWDV GHFRUUHRFRQILJXUDUFXHQWDVGHFRUUHR&RPSRQHU\HQYLDUFRUUHR5HFLELU\JHVWLRQDUFRUUHR/D OLEUHWDGHGLUHFFLRQHV/LVWDGHFDUSHWDV/LVWDGHFRQWDFWRV/LVWDGHWDUHDV&DOHQGDULR 7(0$ /D5HG,QWHUQHWRULJHQHYROXFLyQ\HVWDGRDFWXDO&RQFHSWRVEiVLFRVVREUHSURWRFRORV\VHUYLFLRV HQ ,QWHUQHW 1DYHJDFLyQ IDYRULWRV KLVWRULDO E~VTXHGD 1DYHJDGRUHV GH ,QWHUQHW IXQFLRQHV \ FDUDFWHUtVWLFDV CVE-2019-3750 7(0$ i Pág. 12773 boc.cantabria.es 266/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 &8(532*(1(5$/$8;,/,$5 3(5621$6&21',6&$3$&,'$' 0$7(5,$6&2081(6 i Pág. 12774 /D&RQVWLWXFLyQ(VSDxRODGH(VWUXFWXUD\FRQWHQLGR'HUHFKRV\GHEHUHVIXQGDPHQWDOHV/DV JDUDQWtDVGHORVGHUHFKRVIXQGDPHQWDOHV\ODVOLEHUWDGHVS~EOLFDV/DVXVSHQVLyQGHORVGHUHFKRV\ OLEHUWDGHV5HIRUPDGHOD&RQVWLWXFLyQ 7(0$ /D &RURQD )XQFLRQHV GHO 5H\ HQ OD &RQVWLWXFLyQ GH 6XFHVLyQ \ UHJHQFLD (O UHIUHQGR /D &DVDGHO5H\ 7(0$ /DV &RUWHV *HQHUDOHV FRPSRVLFLyQ DWULEXFLRQHV \ IXQFLRQDPLHQWR /D HODERUDFLyQ GH ODV OH\HV 5HODFLRQHVFRQHO*RELHUQR(O'HIHQVRUGHO3XHEOR 7(0$ (O*RELHUQR\OD$GPLQLVWUDFLyQ(O3UHVLGHQWHGHO*RELHUQR(O&RQVHMRGH0LQLVWURV/RV0LQLVWURV 6HFUHWDULRV GH (VWDGR 6XEVHFUHWDULRV \ 'LUHFWRUHV *HQHUDOHV /D $GPLQLVWUDFLyQ 3HULIpULFD GHO (VWDGRORV'HOHJDGRV\6XEGHOHJDGRVGHO*RELHUQR 7(0$ /D RUJDQL]DFLyQ WHUULWRULDO GHO (VWDGR /DV &RPXQLGDGHV $XWyQRPDV &RQVWLWXFLyQ \ (VWDWXWRV GH $XWRQRPtD/D$GPLQLVWUDFLyQORFDOODSURYLQFLDHOPXQLFLSLR\RWUDVHQWLGDGHVORFDOHV 7(0$ /D 8QLyQ (XURSHD /DV LQVWLWXFLRQHV GH OD 8QLyQ (XURSHD HO &RQVHMR (XURSHR HO &RQVHMR HO 3DUODPHQWROD&RPLVLyQHO7ULEXQDOGH-XVWLFLDHO7ULEXQDOGH&XHQWDV7LSRORJtD\HIHFWRVGHODV IXHQWHVGHOGHUHFKRFRPXQLWDULRWUDWDGRVUHJODPHQWRVGLUHFWLYDV\GHFLVLRQHV 7(0$ (O 3RGHU -XGLFLDO \ HO 7ULEXQDO &RQVWLWXFLRQDO (O &RQVHMR *HQHUDO GHO 3RGHU -XGLFLDO (O 7ULEXQDO 6XSUHPR(O0LQLVWHULR)LVFDO/D2UJDQL]DFLyQ-XGLFLDO(VSDxROD(O7ULEXQDO&RQVWLWXFLRQDO 7(0$ (O(VWDWXWRGH$XWRQRPtDSDUD&DQWDEULD$QWHFHGHQWHVKLVWyULFRVGHOD&RPXQLGDG$XWyQRPDGH &DQWDEULD EUHYH UHIHUHQFLD D OD SURYLQFLD GH ORV QXHYH YDOOHV \ D OD SURYLQFLD GH 6DQWDQGHU \ OD 'LSXWDFLyQ 3URYLQFLDO /D HWDSD SUHDXWRQyPLFD HQ &DQWDEULD $SUREDFLyQ \ SURPXOJDFLyQ GHO (VWDWXWRGH$XWRQRPtDSDUD&DQWDEULD/DVVXFHVLYDVUHIRUPDVGHO(VWDWXWR 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /DV LQVWLWXFLRQHV GH DXWRJRELHUQR (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR \ OD $GPLQLVWUDFLyQ /DV FRPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ /RV yUJDQRV GH JRELHUQR \ DGPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD HVWUXFWXUD RUJDQL]DWLYD\UpJLPHQMXUtGLFR 7(0$ (O RUGHQDPLHQWR MXUtGLFR /D &RQVWLWXFLyQ /DV /H\HV FRQFHSWR \ FODVHV /DV GLVSRVLFLRQHV GHO HMHFXWLYR FRQ IXHU]D GH /H\ 'HFUHWRVOH\HV \ 'HFUHWRV OHJLVODWLYRV /RV UHJODPHQWRV FRQFHSWR \ FODVHV/RV7UDWDGRV,QWHUQDFLRQDOHV 7(0$ (O DFWR DGPLQLVWUDWLYR FRQFHSWR FODVHV \ HOHPHQWRV /D PRWLYDFLyQ (O VLOHQFLR DGPLQLVWUDWLYR /D HILFDFLDODQRWLILFDFLyQ\ODSXEOLFDFLyQ/DHMHFXFLyQGHORVDFWRVDGPLQLVWUDWLYRV 7(0$ /RV LQWHUHVDGRV (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q LQLFLDFLyQ RUGHQDFLyQ LQVWUXFFLyQ \ WHUPLQDFLyQGHOSURFHGLPLHQWR%UHYHUHIHUHQFLDDORVSURFHGLPLHQWRVGHUHVSRQVDELOLGDGSDWULPRQLDO \GHQDWXUDOH]DVDQFLRQDGRUD 7(0$ 1XOLGDG \ DQXODELOLGDG GH ORV DFWRV DGPLQLVWUDWLYRV /D UHYLVLyQ \ OD UHYRFDFLyQ GH ORV DFWRV DGPLQLVWUDWLYRV/RVUHFXUVRVDGPLQLVWUDWLYRVFRQFHSWR\FODVHV boc.cantabria.es CVE-2019-3750 7(0$ 267/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ (O SHUVRQDO DO VHUYLFLR GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD /D UHODFLyQ MXUtGLFRHVWDWXWDULD $GTXLVLFLyQ \ SpUGLGD GH OD FRQGLFLyQ GH IXQFLRQDULR 6LWXDFLRQHV DGPLQLVWUDWLYDV-XELODFLyQ\GHUHFKRVSDVLYRV 7(0$ 'HUHFKRV \ GHEHUHV GH ORV IXQFLRQDULRV GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD6LVWHPDGHUHWULEXFLRQHV,QFRPSDWLELOLGDGHV5pJLPHQGLVFLSOLQDULR3URYLVLyQGHSXHVWRV \SURPRFLyQSURIHVLRQDO 7(0$ /D 6HJXULGDG 6RFLDO (O 7H[WR 5HIXQGLGR GH OD /H\ *HQHUDO GH OD 6HJXULGDG 6RFLDO FDPSR GH DSOLFDFLyQ\HVWUXFWXUDGHOVLVWHPDGHOD6HJXULGDG6RFLDO&RQFHSWR\SULQFLSDOHVFDUDFWHUtVWLFDVGH OD DILOLDFLyQ \ OD FRWL]DFLyQ $FFLyQ SURWHFWRUD FRQWLQJHQFLDV FRPXQHV \ SURIHVLRQDOHV \ WLSRV GH SUHVWDFLRQHV 7(0$ &RQFHSWRGHLQIRUPiWLFD/DXQLGDGFHQWUDOGHSURFHVR/DSHULIHULDGHXQRUGHQDGRU8QLGDGHVGH HQWUDGD\VDOLGD6LVWHPDRSHUDWLYR 7(0$ (VWUXFWXUD\DOPDFHQDPLHQWRGHGDWRV7LSRVGHILFKHURV0pWRGRVGHDFFHVR/DVEDVHVGHGDWRV\ KRMDVGHFiOFXOR(OWUDWDPLHQWRGHWH[WRV 7(0$ /D GRFXPHQWDFLyQ DGPLQLVWUDWLYD 6X QDWXUDOH]D \ VX IXQFLyQ $QiOLVLV GH ORV GRFXPHQWRV DGPLQLVWUDWLYRVPiVKDELWXDOHVLQVWDQFLDFHUWLILFDGRDQXQFLRLQIRUPHUHVROXFLyQFRPXQLFDFLyQ\ QRWLILFDFLyQ (O UHJLVWUR GH HQWUDGD \ VDOLGD GH GRFXPHQWRV 5HTXLVLWRV HQ OD SUHVHQWDFLyQ GH GRFXPHQWRV(ODUFKLYRFRQFHSWRFODVHV\SULQFLSDOHVFULWHULRVGHRUGHQDFLyQ 7(0$ /RV GHUHFKRV GH ORV FLXGDGDQRV /D DWHQFLyQ DO S~EOLFR DFRJLGD H LQIRUPDFLyQ DO FLXGDGDQR (O 0DQXDO GH $WHQFLyQ DO &LXGDGDQR \ OD &DUWD GH 'HUHFKRV GH OD &LXGDGDQtD (O DFFHVR D ORV GRFXPHQWRVDGPLQLVWUDWLYRV6XVOtPLWHV 7(0$ 7UDQVSDUHQFLDDFFHVRDODLQIRUPDFLyQS~EOLFD\QRUPDVGHEXHQJRELHUQR 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGHODV SHUVRQDV UHVSRQVDEOH \ HQFDUJDGR GHO WUDWDPLHQWR 'HOHJDGR GH SURWHFFLyQ GH GDWRV HQ ODV $GPLQLVWUDFLRQHV3~EOLFDV 0$7(5,$6(63(&Ë),&$6 i Pág. 12775 7(0$ ,QWURGXFFLyQDO6LVWHPD2SHUDWLYRHOHQWRUQR0LFURVRIW:LQGRZV7UDEDMRHQHOHQWRUQRJUiILFR GH:LQGRZVYHQWDQDVLFRQRVPHQ~VFRQWH[WXDOHV\FXDGURVGHGLiORJR(OHVFULWRULRODEDUUDGH WDUHDV\HOPHQ~LQLFLR 7(0$ (OH[SORUDGRUGH$UFKLYRVHQ:LQGRZV*HVWLyQGHFDUSHWDV\DUFKLYRV(O%XVFDGRUGH$UFKLYRV \$SOLFDFLRQHV/DLPSUHVLyQGHGRFXPHQWRV/DKHUUDPLHQWD5HFRUWHV 7(0$ 3URFHVDGRUHVGHWH[WRV0LFURVRIW:RUG3ULQFLSDOHVIXQFLRQHV\XWLOLGDGHV(GLFLyQIRUPDWRH LQVHUFLyQ'HVFULSFLyQGHODVSULQFLSDOHVSHVWDxDVHQODFLQWDGHRSFLRQHV 7(0$ *HVWLyQ GH ODV 7DEODV HQ HO SURFHVDGRU GH 7H[WR :RUG 3ODQWLOODV &RPELQDFLyQ GH FRUUHVSRQGHQFLD3URWHJHUXQGRFXPHQWR 7(0$ +RMDV GH FiOFXOR 0LFURVRIW ([FHO 3ULQFLSDOHV IXQFLRQHV \ XWLOLGDGHV &RQFHSWRV EiVLFRV OLEURV KRMDV FHOGDV 'HVFULSFLyQ GH ODV SULQFLSDOHV SHVWDxDV HQ OD FLQWD GH RSFLRQHV )yUPXODV \ IXQFLRQHV*UiILFRV/DLQWURGXFFLyQ\JHVWLyQGHGDWRV3URWHJHUXQOLEUR boc.cantabria.es CVE-2019-3750 268/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ &RUUHR(OHFWUyQLFR\0LFURVRIW2XWORRN&RQFHSWRVHOHPHQWDOHV\IXQFLRQDPLHQWR/DVFXHQWDV GHFRUUHRFRQILJXUDUFXHQWDVGHFRUUHR&RPSRQHU\HQYLDUFRUUHR5HFLELU\JHVWLRQDUFRUUHR/D OLEUHWDGHGLUHFFLRQHV/LVWDGHFDUSHWDV/LVWDGHFRQWDFWRV/LVWDGHWDUHDV&DOHQGDULR 7(0$ /D5HG,QWHUQHWRULJHQHYROXFLyQ\HVWDGRDFWXDO&RQFHSWRVEiVLFRVVREUHSURWRFRORV\VHUYLFLRV HQ ,QWHUQHW 1DYHJDFLyQ IDYRULWRV KLVWRULDO E~VTXHGD 1DYHJDGRUHV GH ,QWHUQHW IXQFLRQHV \ FDUDFWHUtVWLFDV CVE-2019-3750 7(0$ i Pág. 12776 boc.cantabria.es 269/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 $*583$&,Ï1352)(6,21$/'(68%$/7(5126 0$7(5,$6&2081(6 7(0$ /D&RQVWLWXFLyQ(VSDxRODGH(VWUXFWXUD\FRQWHQLGR'HUHFKRV\GHEHUHVIXQGDPHQWDOHV /DV JDUDQWtDV GH ORV GHUHFKRV IXQGDPHQWDOHV \ ODV OLEHUWDGHV S~EOLFDV /D VXVSHQVLyQ GH ORV GHUHFKRV\OLEHUWDGHV 7(0$ /DV &RUWHV *HQHUDOHV (O *RELHUQR \ OD $GPLQLVWUDFLyQ HQ OD &RQVWLWXFLyQ 5HODFLRQHV HQWUH HO *RELHUQR\ODV&RUWHV*HQHUDOHV 7(0$ /DRUJDQL]DFLyQWHUULWRULDOGHO(VWDGR/DV&RPXQLGDGHV$XWyQRPDVFRQVWLWXFLyQ\(VWDWXWRVGH $XWRQRPtD/D$GPLQLVWUDFLyQ/RFDOSURYLQFLDVPXQLFLSLRV\RWUDVHQWLGDGHVORFDOHV 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /D HWDSD SUHDXWRQyPLFD HQ &DQWDEULD $SUREDFLyQ \ SURPXOJDFLyQGHO(VWDWXWRGH$XWRQRPtDSDUD&DQWDEULD/DVVXFHVLYDVUHIRUPDVGHO(VWDWXWR 7(0$ (O (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD /DV LQVWLWXFLRQHV GH DXWRJRELHUQR (O 3DUODPHQWR (O 3UHVLGHQWH (O *RELHUQR \ OD $GPLQLVWUDFLyQ /DV FRPSHWHQFLDV GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 7(0$ /RVyUJDQRVGHJRELHUQR\DGPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULDHVWUXFWXUD DGPLQLVWUDWLYD\UpJLPHQMXUtGLFR 7(0$ (O DFWR DGPLQLVWUDWLYR FRQFHSWR FODVHV \ HOHPHQWRV (ILFDFLD \ HIHFWLYLGDG GHO DFWR DGPLQLVWUDWLYR/RVUHFXUVRVDGPLQLVWUDWLYRVFRQFHSWR\FODVHV 7(0$ (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRQFHSWR \ FODVHV (O SURFHGLPLHQWR DGPLQLVWUDWLYR FRP~Q LQLFLDFLyQRUGHQDFLyQLQVWUXFFLyQ\WHUPLQDFLyQGHOSURFHGLPLHQWR 7(0$ /D GRFXPHQWDFLyQ DGPLQLVWUDWLYD $QiOLVLV GH ORV SULQFLSDOHV GRFXPHQWRV LQVWDQFLD FHUWLILFDGR DQXQFLRLQIRUPHUHVROXFLyQFRPXQLFDFLyQ\QRWLILFDFLyQ)RUPDFLyQGHXQH[SHGLHQWH 7(0$ (OSHUVRQDOIXQFLRQDULRDOVHUYLFLRGHOD$GPLQLVWUDFLyQGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD $GTXLVLFLyQ\SpUGLGDGHODFRQGLFLyQGHIXQFLRQDULR6LWXDFLRQHVDGPLQLVWUDWLYDV 7(0$ 'HUHFKRV\GHEHUHVGHORVIXQFLRQDULRV6LVWHPDGHUHWULEXFLRQHV,QFRPSDWLELOLGDGHV5pJLPHQ GLVFLSOLQDULR 7(0$ 3ROtWLFDV GH LJXDOGDG GH JpQHUR 3ROtWLFDV FRQWUD OD YLROHQFLD GH JpQHUR 1RUPDWLYD YLJHQWH 'LVFDSDFLGDG\GHSHQGHQFLD 7(0$ /D SURWHFFLyQ GH GDWRV /H\ 2UJiQLFD GH GH GLFLHPEUH GH 3URWHFFLyQ GH 'DWRV 3HUVRQDOHV\JDUDQWtDGHORVGHUHFKRVGLJLWDOHV3ULQFLSLRVGHSURWHFFLyQGHGDWRVGHUHFKRVGH ODVSHUVRQDVUHVSRQVDEOH\HQFDUJDGRGHOWUDWDPLHQWR'HOHJDGRGHSURWHFFLyQGHGDWRVHQODV $GPLQLVWUDFLRQHV3~EOLFDV 0$7(5,$6(63(&Ë),&$6 i Pág. 12777 /DV &RQVHMHUtDV GHO *RELHUQR GH &DQWDEULD yUJDQRV SULQFLSDOHV FHQWURV GHSHQGLHQWHV \ VX XELFDFLyQItVLFD(QWLGDGHVDGVFULWDVRGHSHQGLHQWHVGHODV&RQVHMHUtDV\VXXELFDFLyQItVLFD boc.cantabria.es CVE-2019-3750 7(0$ 270/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ /D RUJDQL]DFLyQ DGPLQLVWUDWLYD HVSDxROD 'HSHQGHQFLDV GH OD $GPLQLVWUDFLyQ HVWDWDO HQ &DQWDEULD5HODFLyQSULQFLSDOHVIXQFLRQHV\XELFDFLyQItVLFD 7(0$ /D RUJDQL]DFLyQ MXGLFLDO HVSDxROD /RV yUJDQRV MXGLFLDOHV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULDHQXPHUDFLyQSULQFLSDOHVFRPHWLGRV\XELFDFLyQItVLFD 7(0$ /D/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV/DERUDOHV/DSUHYHQFLyQGHORV ULHVJRV ODERUDOHV HQ HO HMHUFLFLR GH ODV IXQFLRQHV SURSLDV GHO SHUVRQDO SHUWHQHFLHQWH DO &XHUSR *HQHUDO6XEDOWHUQR 7(0$ $OPDFHQDPLHQWR \ PRYLPLHQWRV GH PDWHULDO 7UDVODGR GH FDUJD /D SUHYHQFLyQ GH ULHVJRV ODERUDOHVHQHOPDQHMRGHFDUJDV 7(0$ /DDWHQFLyQDOFLXGDGDQR5HFHSFLyQ\WHOHIRQtD9LJLODQFLD\FRQWURODODVSHUVRQDVTXHDFFHGDQ D ODV GHSHQGHQFLDV GHO *RELHUQR UHJLRQDO 5HXQLRQHV \ DFWXDFLRQHV GH FRPXQLFDFLyQ SUHSDUDFLyQGHORFDOHV\PDWHULDOHV1RUPDVGHSURWRFROR 7(0$ 7UDEDMRV FRQ PDWHULDOHV \ PDTXLQDULD GH RILFLQD 5HSURJUDItD 'HVWUXFFLyQ GH GRFXPHQWDFLyQ (QVREUDGR(WLTXHWDGR*XLOORWLQDGR(QFXDGHUQDFLyQ*UDSDGR7DODGUDGR7LSRVGHSDSHO 7(0$ /DQRWLILFDFLyQGHGRFXPHQWRVDGPLQLVWUDWLYRV3UiFWLFDGHODQRWLILFDFLyQ&RUUHVSRQGHQFLDWLSRV GHHQYtRV)UDQTXHR&HUWLILFDGRV$FXVHVGHUHFLER7HOHJUDPDV5HHPEROVRV*LURV CVE-2019-3750 i Pág. 12778 boc.cantabria.es 271/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2 $*583$&,Ï1352)(6,21$/'(68%$/7(5126 3(5621$6&21',6&$3$&,'$',17(/(&78$/ 0$7(5,$6&2081(6 7(0$Ò1,&2/D$GPLQLVWUDFLyQ)XQFLRQDPLHQWRGHOD$GPLQLVWUDFLyQVHJ~QOD&RQVWLWXFLyQ1LYHOHVGHOD $GPLQLVWUDFLyQ S~EOLFD 2UJDQL]DFLyQ GH OD $GPLQLVWUDFLyQ GHO (VWDGR \ GH OD &RPXQLGDG $XWyQRPD GH &DQWDEULD/DLJXDOGDGHQOD$GPLQLVWUDFLyQS~EOLFD(PSOHDGRVS~EOLFRVWLSRVGHUHFKRV\REOLJDFLRQHV(O LQJUHVR HQ OD $GPLQLVWUDFLyQ S~EOLFD /D LJXDOGDG HQ OD $GPLQLVWUDFLyQ S~EOLFD /D WUDQVSDUHQFLD HQ OD $GPLQLVWUDFLyQS~EOLFD CVE-2019-3750 0$7(5,$6(63(&Ë),&$6 7(0$&RQWUROGHDFFHVRLGHQWLILFDFLyQLQIRUPDFLyQDWHQFLyQ\UHFHSFLyQGHSHUVRQDOYLVLWDQWH 7(0$5HFHSFLyQGLVWULEXFLyQ\HQWUHJDGHSDTXHWHUtD\GRFXPHQWDFLyQ 7(0$0DQHMRGHPiTXLQDVUHSURGXFWRUDV\RWUDVDQiORJDV 7(0$)UDQTXHRGHSyVLWRHQWUHJDUHFRJLGD\GLVWULEXFLyQGHFRUUHVSRQGHQFLD 7(0$5HDOL]DFLyQGHUHFDGRVRILFLDOHVIXHUD\GHQWURGHOFHQWURGHWUDEDMR 7(0$,QIRUPDFLyQGHDQRPDOtDVRLQFLGHQFLDVHQHOFHQWURGHWUDEDMR i Pág. 12779 boc.cantabria.es 272/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2$57(6*5È),&$6 ,035(6,Ï1 0$7(5,$6(63(&Ë),&$6 7(0$ $QWHFHGHQWHV HYROXFLyQ \ HVWDGR DFWXDO GH ODV $UWHV *UiILFDV (VWUXFWXUD JHQHUDO \ GHSDUWDPHQWDOSXHVWRVGHWUDEDMR\IXQFLRQHVGHXQDRUJDQL]DFLyQGH$UWHV*UiILFDV 7(0$ 'HVFULSFLyQ GH ODV IDVHV GH HODERUDFLyQ GH XQ SURGXFWR JUiILFR &RQFHSWR HTXLSR \ PDTXLQDULDSURSLDGHODHWDSDGHLPSUHVLyQ 7(0$ 7HRUtDGHOFRORU/DOX]&tUFXORFURPiWLFR6tQWHVLVDGLWLYD6tQWHVLVVXVWUDFWLYD0HGLFLyQ\ UHSUHVHQWDFLyQGHOFRORU(VSDFLRVGHFRORUJHVWLyQGHOFRORUFDOLEUDFLyQ\SHUILOHV,&& 7(0$ 'LVHxR \ PDTXHWDFLyQ 7HFQRORJtD 3') 3URJUDPDV ,QGHVLQJ ,OXVWUDWRU $FUREDW 3URIHVLRQDO 7(0$ 0RQWDMH FRPSDJLQDFLyQ \ SURFHVDGR GH SODQFKDV GH LPSUHVLyQ &DUDFWHUtVWLFDV \ IXQFLRQDPLHQWRGHODPDTXLQDULDTXHLQWHUYLHQHHQHVWHSURFHVR3URJUDPDGHLPSRVLFLyQ 3UHSVGH.RGDN 7(0$ )RWRJUDItD DSOLFDGD D ODV DUWHV JUiILFDV &RQFHSWRV EiVLFRV 7UDWDPLHQWR \ SURFHVR GH LPiJHQHV 6FDQHUV FRQFHSWR \ FDUDFWHUtVWLFDV 3URJUDPDV 3KRWRVKRS ,PDJHQ GLVFRQWLQXD&RQFHSWRGHWUDPD\DWULEXWRV 7(0$ 'HQVLWRPHWUtDFRQFHSWRPDJQLWXGHVXVR\DSOLFDFLRQHV 7(0$ 3URFHGLPLHQWRV GH LPSUHVLyQ 7LSRV 3URFHVR JUiILFR 9DULDEOHV DPELHQWDOHV \ ILVLFRTXtPLFDVTXHLQWHUYLHQHQHQODLPSUHVLyQ 7(0$ 0iTXLQDV GH LPSUHVLyQ 2IIVHW 7LSRV SDUWHV \ IXQFLRQDPLHQWR (QWLQWDGR \ PRMDGR /LPSLH]DPDQWHQLPLHQWR\VHJXULGDG'LQiPLFDGHWUDEDMRFRQPiTXLQDV2IIVHW\UHVROXFLyQ GHSUREOHPDV 7(0$ 6RSRUWHV GH LPSUHVLyQ 3DSHO FODVHV SURSLHGDGHV \ FDUDFWHUtVWLFDV &RPSRUWDPLHQWR GH ORVVRSRUWHVHQHOSURFHVRGHLPSUHVLyQ 7(0$ 7LQWDVGHLPSUHVLyQ&RPSRVLFLyQ\FDUDFWHUtVWLFDV*DPDVGHWLQWDV&RPSRUWDPLHQWRGH ODVWLQWDVHQHOSURFHVRGHLPSUHVLyQ 7(0$ 0iTXLQDV GH LPSUHVLyQ GLJLWDO &DUDFWHUtVWLFDV SDUWHV \ HTXLSRV DX[LOLDUHV 3URFHVR GH LPSUHVLyQ 7(0$ 3RVWLPSUHVLyQ (O PDQLSXODGR \ DFDEDGR FRQFHSWRV \ PDTXLQDULD HPSOHDGD JXLOORWLQD SOHJDGRUDDO]DGRUDFRVHGRUDWURTXHODGRUDSUHQVD 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV /DERUDOHVFRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHODDFFLyQSUHYHQWLYD FRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRVGHOWUDEDMR&RQRFLPLHQWRVEiVLFRV VREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12780 boc.cantabria.es CVE-2019-3750 7(0$ /DHQFXDGHUQDFLyQ7LSRVRSHUDFLRQHV\SURFHGLPLHQWRVSUHYLRV2SHUDFLRQHVEiVLFDV\ RSHUDFLRQHVGHIUHVDGR\RFRVLGR0DTXLQDULDGHHQFXDGHUQDFLyQ 273/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2$57(6*5È),&$6 35(,035(6,Ï1 0$7(5,$6(63(&Ë),&$6 $QWHFHGHQWHV HYROXFLyQ \ HVWDGR DFWXDO GH ODV $UWHV *UiILFDV (VWUXFWXUD JHQHUDO \ GHSDUWDPHQWDOSXHVWRVGHWUDEDMR\IXQFLRQHVGHXQDRUJDQL]DFLyQGH$UWHV*UiILFDV 7(0$ (TXLSRVLQIRUPiWLFRV\UHGHV+DUGZDUH6RIWZDUH'LVSRVLWLYRVGHDOPDFHQDPLHQWR7LSRV GHRUGHQDGRUHVPiVFRPXQHV 7(0$ 7LSRV \ IXHQWHV 7LSRJUDItD GLJLWDO 7LSRV GH OHWUD \ IXHQWHV WLSRJUiILFDV (VWUXFWXUD GH ODV IXHQWHV7UDFNLQJ\.HUQLQJ 7(0$ 1RUPDV GH FRUUHFFLyQ 81( 1RUPDV JUDPDWLFDOHV RUWRJUiILFDV \ WLSRJUiILFDV 6LJQRVGHFRUUHFFLyQGHSUXHEDV 7(0$ 0DTXHWDFLyQ3URJUDPDGHPDTXHWDFLyQ$GREH,Q'HVLJQ)RUPDWRVGHOLPSUHVR7LWXODUHV WH[WRVHLPiJHQHV5HWtFXODFRPSRVLWLYD 7(0$ 'LVHxR ZHE 3URJUDPD $GREH 'UHDPZHDYHU 3UHSDUDFLyQ GH LPiJHQHV SDUD OD :HE &RQRFLPLHQWRVEiVLFRVGH+70/ 7(0$ 7HRUtDGHOFRORU(OFtUFXORFURPiWLFR/DJHVWLyQGHFRORUHQODVDSOLFDFLRQHV&RORUOX]\ SLJPHQWR&RORUHVFRPSOHPHQWDULRV6tQWHVLVDGLWLYD6tQWHVLVVXVWUDFWLYD 7(0$ 7UDWDPLHQWR GH LPiJHQHV GLJLWDOHV 3URJUDPD GH WUDWDPLHQWR GH LPiJHQHV $GREH 3KRWRVKRS ,PiJHQHV EDVDGDV HQ REMHWRV JUiILFRV ,PiJHQHV EDVDGDV HQ St[HOV (VFDQHDGRGHLPiJHQHV$MXVWHVSDUDLPSUHVLyQ 7(0$ )RUPDWRV GH DUFKLYRV GLJLWDOHV 9HFWRULDOPDSD GH ELWV )RUPDWRV VLQ SpUGLGD GH FDOLGDG )RUPDWRVFRQSpUGLGDGHFDOLGDG&RPSUHVLyQGHDUFKLYRVGHLPDJHQ 7(0$ 6DOLGDVGHPHGLRV&W3 FRPSXWHUWRSODWH ,PSRVLFLyQPRQWDMHFRPSDJLQDFLyQ3URFHVDGR GHSODQFKDV7UDPDVGHPHGLRVWRQRV/HQJXDMHGHGHVFULSFLyQGHSiJLQD SRVWVFULSW 7(0$ 7HFQRORJtD3')3URJUDPD$FUREDW3URIHVLRQDO 'LVWLOOHU &DUDFWHUtVWLFDV\FRPSUREDFLRQHV GHO3') 7(0$ 'LVHxRJUiILFR3URJUDPD$GREH,OOXVWUDWRU)XQGDPHQWRVGHO'LVHxR,GHQWLGDG&RUSRUDWLYD 7(0$ 7HUPLQRORJtD GHO SDSHO &RPSRVLFLyQ GHO SDSHO )DEULFDFLyQ GHO SDSHO 3DSHO \ PHGLR DPELHQWH&ODVLILFDFLyQGHSDSHO 7(0$ 3URFHGLPLHQWRVGHPDQLSXODGR&ODVHVGHHQFXDGHUQDFLyQ\PDWHULDOHV3OHJDGRV 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH5LHVJRV /DERUDOHVFRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHODDFFLyQSUHYHQWLYD FRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRVGHOWUDEDMR&RQRFLPLHQWRVEiVLFRV VREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12781 boc.cantabria.es CVE-2019-3750 7(0$ 274/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2683(5,25$1$/,67$'(/$%25$725,2 0$7(5,$6(63(&Ë),&$6 7(0$ 6LVWHPDV GH FDOLGDG HQ ODERUDWRULRV GH HQVD\R 0DQXDO GH FDOLGDG 3URFHGLPLHQWRV QRUPDOL]DGRV GH WUDEDMR 5HJLVWURV GH FDOLGDG &RQWUROHV LQWHUQRV GH FDOLGDG 'LYHUVDV IRUPDVGHH[SUHVLyQGHORVUHVXOWDGRVDQDOtWLFRV LQIRUPHV 7UD]DELOLGDG$FUHGLWDFLyQHQ ORVODERUDWRULRVGHHQVD\R\FDOLEUDFLyQ 7(0$ &DOLEUDFLyQ 0pWRGRV GH FDOLEUDFLyQ HQ SURFHGLPLHQWRV LQVWUXPHQWDOHV )XQGDPHQWRV \ DSOLFDFLRQHV &XUYDV GH FDOLEUDFLyQ 0DWHULDOHV GH UHIHUHQFLD (QVD\RV GH VLJQLILFDFLyQ (YDOXDFLyQGHODUHFWDGHUHJUHVLyQ 7(0$ 7RPD GH PXHVWUDV 0DQLSXODFLyQ FRQVHUYDFLyQ WUDQVSRUWH \ DOPDFHQDPLHQWR GH OD PXHVWUD 3ODQ GH PXHVWUHR 7LSRV GH PXHVWUHR $SDUDWRV XWLOL]DGRV HQ HO PXHVWUHR 5HODFLyQHQWUHHOWLSRGHPXHVWUD\HODQiOLVLV7UDWDPLHQWRGHODPXHVWUDSDUDHODQiOLVLV 7(0$ (UURUHV HQ PHGLFLRQHV 'HILQLFLyQ )XHQWHV GH HUURUHV 7LSRV GH HUURUHV )DFWRU GH FRUUHFFLyQ ([DFWLWXG \ SUHFLVLyQ 5HSHWLELOLGDG \ UHSURGXFLELOLGDG ,QFHUWLGXPEUH &RPSRQHQWHV GH OD LQFHUWLGXPEUH )XHQWHV GH LQFHUWLGXPEUH 'LVWULEXFLRQHV GH SUREDELOLGDG GH OD LQFHUWLGXPEUH ,QFHUWLGXPEUH WtSLFD ,QFHUWLGXPEUH FRPELQDGD ,QFHUWLGXPEUH H[SDQGLGD ([SUHVLyQ GH OD LQFHUWLGXPEUH 'LIHUHQFLDV HQWUH HUURU H LQFHUWLGXPEUH 7(0$ $QiOLVLV GH PXHVWUDV SRU HQVD\RV TXtPLFRV 0pWRGRV YROXPpWULFRV \ JUDYLPpWULFRV )XQGDPHQWRVEiVLFRVHQTXtPLFDDQDOtWLFD0ROJUDPR\HTXLYDOHQWHJUDPR(TXLOLEULRHQ ODVUHDFFLRQHVTXtPLFDV3UHSDUDFLyQGHGLVROXFLRQHV&iOFXORGHFRQFHQWUDFLRQHV 7(0$ 7pFQLFDV GH DQiOLVLV LQVWUXPHQWDO IXQGDPHQWRV \ DSOLFDFLRQHV 3RWHQFLRPHWUtDV (VSHFWURVFRSLDV HVSHFWURIRWRPHWUtDGH899LV(VSHFWURIRWRPHWUtDGHDEVRUFLyQHPLVLyQ DWyPLFDH,&3 &URPDWRJUDItDV 7(0$ 7pFQLFDV GH DQiOLVLV PLFURELROyJLFR IXQGDPHQWRV \ DSOLFDFLRQHV )LOWUDFLyQ VREUH PHPEUDQD7pFQLFDGHQ~PHURPiVSUREDEOH103'HWHUPLQDFLyQGHODHFRWR[LFLGDGSRU ELROXPLQLVFHQFLDFRQ9LEULR)LVFKHUL 7(0$ &DUDFWHUL]DFLyQ GH DJXDV UHVLGXDOHV XUEDQDV 3DUiPHWURV EiVLFRV GH FRQWURO \ PpWRGRV GHGHWHUPLQDFLyQDQDOtWLFD 7(0$ &RQWURO GH FDOLGDG HQ DJXDV GH FRQVXPR 3DUiPHWURV EiVLFRV GH FRQWURO \ PpWRGRV GH GHWHUPLQDFLyQDQDOtWLFD$JXDVGHFRQVXPRKXPDQR 7(0$ $QiOLVLV GH PXHVWUDV SRU HQVD\RV ItVLFRV (QVD\RV GH FDUDFWHUtVWLFDV GH PDWHULDOHV (QVD\RVPHFiQLFRVGHVWUXFWLYRV(QVD\RVPHFiQLFRVQRGHVWUXFWLYRVRGHGHIHFWRV 7(0$ &RPSRUWDPLHQWR HOiVWLFR GH ORV PDWHULDOHV &RPSRUWDPLHQWR SOiVWLFR GH ORV PDWHULDOHV &RPSRUWDPLHQWR YLVFRHOiVWLFR \ YLVFRSOiVWLFR GH ORV PDWHULDOHV 7HQVLyQ \ GHIRUPDFLyQ )OXHQFLD\UHODMDFLyQGHORVPDWHULDOHV i Pág. 12782 boc.cantabria.es CVE-2019-3750 7(0$ &RQWURO GH FDOLGDG GH REUDV S~EOLFDV (QVD\RV GH PDWHULDOHV \ GH XQLGDGHV GH REUD 3ULQFLSDOHVHQVD\RVHQFRQWUROGHFDOLGDGGHPRYLPLHQWRGHWLHUUDVILUPHV\HVWUXFWXUDV(O 3* 275/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$ &DUDFWHUtVWLFDV VXSHUILFLDOHV GH ORV SDYLPHQWRV 0DUFDV YLDOHV 7LSRV \ SURSLHGDGHV 6HxDOL]DFLyQ YHUWLFDO 7LSRV GH VHxDOHV &ODVHV GH UHWURUUHIOH[LyQ 3ULQFLSDOHV HQVD\RV 8WLOLGDGGHORVHQVD\RV0DTXLQDULDXWLOL]DGDHQORVHQVD\RV 7(0$ 3UHYHQFLyQ GH ULHVJRV ODERUDOHV HQ HO ODERUDWRULR $QiOLVLV GH ULHVJRV 3ODQLILFDFLyQ GH PHGLGDV SUHYHQWLYDV 6HxDOL]DFLyQ GH REUDV HQ HQVD\RV HQ H[WHULRUHV 3UHYHQFLyQ GHO ULHVJRGHOWUDEDMRFRQSURGXFWRVTXtPLFRV5HDFWLYRVTXtPLFRV0DQHMRGHILFKDVGHGDWRV GH VHJXULGDG (TXLSRV GH SURWHFFLyQ SHUVRQDO 3ODQ GH HPHUJHQFLD 5HJODV GH RUGHQ \ OLPSLH]D CVE-2019-3750 7(0$ 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 3ULQFLSLRV GH OD DFFLyQ SUHYHQWLYD FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV FRQFHSWR GH VDOXG \ IDFWRUHV GH ULHVJR GDxRV GHULYDGRV GHO WUDEDMR FRQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12783 boc.cantabria.es 276/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA ANEXO I CATEGORÍA PROFESIONAL TÉCNICO SUPERIOR DE INTEGRACIÓN SOCIAL MATERIAS ESPECÍFICAS TEMA 1.- Planificación del trabajo. Métodos. Técnicas de evaluación: inicial, de procesos, de recursos y resultados. TEMA 2.- Psicología del grupo. Formación y estructura del grupo. Distribución de roles. Importancia y posibilidades de dinamización del grupo. TEMA 3.- Técnicas de dinámica de grupo. Técnicas para la búsqueda de objeto. Técnicas para la orientación hacia las metas. Técnicas para la resolución de conflictos. TEMA 4.- El proceso de enseñanza-aprendizaje. Fundamentos básicos del aprendizaje. Educación formal. Educación no formal. TEMA 5.- Psicomotricidad y lenguaje. TEMA 6.- La transversalidad como eje vertebrador de la educación. Educación para el desarrollo. TEMA 7.- Educación para la salud: Prevención e higiene psicofísica. TEMA 8.- Educación para la salud: reglas higiénicas y dietéticas básicas. TEMA 9.- Actuación con las familias. Orientación y apoyo. Programas individualizados de rehabilitación. TEMA 10.- Programas de entrenamiento en habilidades personales y sociales. TEMA 11.- Programas de intervención en actividades de la vida diaria. Programas de intervención en el ocio y tiempo libre. TEMA 12.- Programas de tratamiento ocupacional en los procesos rehabilitadores y asistenciales. Alternativas laborales en centros residenciales. TEMA 13.- Niveles de intervención. El trabajo en equipo. Coordinación multiprofesional. TEMA 14.- Primeros auxilios. CVE-2019-3750 TEMA 15.- Objeto y principios básicos de la Ley 31/1995, de 8 de noviembre, de Prevención de Riesgos laborales: Principios de la acción preventiva; condiciones de trabajo y riesgos profesionales; concepto de salud y factores de riesgo; daños derivados del trabajo; conocimientos básicos sobre planes de emergencia y evacuación. i Pág. 12784 boc.cantabria.es 277/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2683(5,25(1('8&$&,Ï1,1)$17,/ 0$7(5,$6(63(&Ë),&$6 7(0$ (O DQiOLVLV GHO FRQWH[WR GLVHxR \ HYDOXDFLyQ GH OD LQWHUYHQFLyQ HGXFDWLYD (VWUDWHJLDV PHWRGROyJLFDV0DUFRQRUPDWLYR 7(0$ /DV QHFHVLGDGHV EiVLFDV HQ OD LQIDQFLD 3URJUDPDFLyQ GLVHxR LPSOHPHQWDFLyQ GH LQWHUYHQFLRQHV SDUD OD DGTXLVLFLyQ GH KiELWRV GH DXWRQRPtD SHUVRQDO 2UJDQL]DFLyQ GH HVSDFLRV\UHFXUVRV 7(0$ 'HWHUPLQDFLyQ GHO PRGHOR O~GLFR /D SODQLILFDFLyQ LPSOHPHQWDFLyQ \ HYDOXDFLyQ GH SUR\HFWRV\DFWLYLGDGHVGHLQWHUYHQFLyQO~GLFRUHFUHDWLYRV 7(0$ /D SODQLILFDFLyQ LPSOHPHQWDFLyQ GH HVWUDWHJLDV \ DFWLYLGDGHV IDYRUHFHGRUDV GHO GHVDUUROOR GHODH[SUHVLyQ\FRPXQLFDFLyQ6HOHFFLyQGHUHFXUVRV 7(0$ /DSODQLILFDFLyQHLPSOHPHQWDFLyQGHHVWUDWHJLDVDFWLYLGDGHV\UHFXUVRVGHLQWHUYHQFLyQHQ HOiPELWRVHQVRULDO\PRWRU 7(0$ (O PDUFR GH UHIHUHQFLD GHO GHVDUUROOR VRFLRDIHFWLYR 3ODQLILFDFLyQ LPSOHPHQWDFLyQ \ HYDOXDFLyQGHODLQWHUYHQFLyQHQHOGHVDUUROORDIHFWLYR\VRFLDO3VLFRORJtDHYROXWLYDGHOQLxR 7(0$ +DELOLGDGHV VRFLDOHV ,PSOHPHQWDFLyQ GH HVWUDWHJLDV \ WpFQLFDV TXH IDYRUH]FDQ OD UHODFLyQ VRFLDO\ODFRPXQLFDFLyQ 7(0$ 'LQDPL]DFLyQGHWUDEDMRHQJUXSR(YDOXDFLyQGHODFRPSHWHQFLDVRFLDO\GHORVSURFHVRVGH JUXSR 7(0$ /D SODQLILFDFLyQ LPSOHPHQWDFLyQ \ HYDOXDFLyQ GH SURJUDPDV \ DFWLYLGDGHV GH LQWHUYHQFLyQ VRFLRHGXFDWLYDFRQPHQRUHV 7(0$ 3URJUDPDFLyQ GH HVWUDWHJLDV HQ ORV WUDVWRUQRV GH FRQGXFWD \ FRQIOLFWRV PiV IUHFXHQWHV ,PSOHPHQWDFLyQGHHVWUDWHJLDVGHUHVROXFLyQGHFRQIOLFWRV\WRPDGHGHFLVLRQHV 7(0$ /DSODQLILFDFLyQHLPSOHPHQWDFLyQGHHVWUDWHJLDVDFWLYLGDGHV\UHFXUVRVGHLQWHUYHQFLyQHQ HOiPELWRFRJQLWLYR\SVLFRPRWUL] 7(0$ /DSODQLILFDFLyQLPSOHPHQWDFLyQ\HYDOXDFLyQGHODLQWHUYHQFLyQHQHOGHVDUUROORHQYDORUHV VH[XDOGHORVQLxRV\QLxDV 7(0$ 1LYHOHV GH LQWHUYHQFLyQ GHO 7pFQLFR 6XSHULRU HQ (GXFDFLyQ ,QIDQWLO (O WUDEDMR HQ HTXLSR &RRUGLQDFLyQPXOWLSURIHVLRQDOHLQWHUGLVFLSOLQDU,QWHUDFFLyQFRQODVIDPLOLDV 7(0$ 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV SULQFLSLRV GH OD DFFLyQ SUHYHQWLYD FRQFHSWR GH VDOXG \ IDFWRUHV GH ULHVJR GDxRV GHULYDGRV GHO WUDEDMR &RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12785 boc.cantabria.es CVE-2019-3750 7(0$ 3ULPHURVDX[LOLRV 278/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA ANEXO I CATEGORÍA PROFESIONAL ENCARGADO DE CULTIVOS MATERIAS ESPECÍFICAS TEMA 1.- Botánica agronómica. Identificación de las plantas. Ubicación geográfica de las diferentes especies vegetales. Características de las plantas cultivadas. Características de las plantas de jardín. Identificación de las características culturales de las especies forestales. TEMA 2.- Plantación y cuidados posteriores: evaluación del suelo y del clima. El riego. Características de injertos y de porta injertos. Sistemas de protección de cultivos: semilleros. Umbráculos. Protección contra heladas. Cortavientos. Rotación de cultivos. Métodos de transporte. Sistemas de conservación de productos hortícolas, cereales, leguminosos, plantas industriales, agrios, frutales. Control de calidad de productos agrícolas. Mecanización específica. TEMA 3.- Cultivos en invernadero. Tipos de invernadero. Instalaciones y materiales necesarios para cultivos y producción de plantas. Siembra y plantación. Riegos. Sustratos. Fertilización. Especies y variedades comerciales. Control de plagas y enfermedades en el invernadero. Control de malas hierbas. Recolección. Cultivo de frutales en viveros: injerto, poda y cuidados. TEMA 4.- Fitopatología. Organización del seguimiento del estado sanitario de las plantas. Programación del control fitosanitario. Organización y realización de la preparación y aplicación del producto fitosanitario TEMA 5.- Plagas y enfermedades de las plantas cultivadas. Enfermedades producidas por virus y bacterias. Enfermedades producidas por hongos y fanerógamas. Seguimiento y control de los agentes parasitarios. Métodos de conteo, control y captura. Protocolos de lucha integrada. Medios de lucha contra los enemigos de las plantas cultivadas. TEMA 6.- Seguridad e higiene en la manipulación de productos sanitarios: Normativa legal. Equipamiento de protección. Procesos y productos de limpieza, desinfección, esterilización, desinsectación y desratización. TEMA 7.- Reglamentación técnico-sanitaria para la fabricación y utilización de plaguicidas. TEMA 8.- Supervisión del almacenamiento y manipulación de productos fitosanitarios. Establecimiento de las medidas de protección en la preparación y aplicación de productos fitosanitarios. TEMA 9.- Protección del medio ambiente y limitación de la presencia de residuos en las plantas cultivadas tanto de origen químico como de origen animal. Coordinación de la gestión de residuos y productos fitosanitarios. TEMA 11.- Maquinaria e instalaciones agroforestales. Organización de la instalación y gestión del taller agrario. Supervisión de las operaciones de mecanizado básico y de soldadura. Control del funcionamiento de la maquinaria y equipos agroforestales y de jardinería. i Pág. 12786 boc.cantabria.es CVE-2019-3750 TEMA 10.- Topografía agraria. Interpretación de planos, fotografías aéreas y mapas. Organización de la recogida de datos en campo. Manejo de aparatos y medios topográficos. Representación de mapas y planos. Replanteo de puntos y figuras. 279/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA TEMA 12.- Programación del funcionamiento y mantenimiento de las instalaciones. Evaluación de averías y supervisión de reparaciones. Programación y supervisión del mantenimiento de maquinaria y equipos. TEMA 13.- Técnicas de educación ambiental. Características de la educación ambiental. Recopilación de documentación ambiental. Elaboración de recursos y materiales de difusión ambiental. Metodologías e instrumentos de difusión de la información ambiental. Interpretación ambiental. TEMA 14.- Defensa contra incendios forestales. Supervisión y organización de la prevención, vigilancia y detección de incendios forestales. Comunicación de la detección de un incendio forestal. Supervisión y organización de los trabajos de control y extinción de incendios forestales. Colaboración en las actividades de investigación de las causas de incendios forestales. Prevención de riesgos laborales y protección ambiental en el ámbito de los trabajos de defensa contra incendios forestales. CVE-2019-3750 TEMA 15.- Objeto y principios básicos de la Ley 31/1995, de 8 de noviembre, de Prevención de Riesgos Laborales: Condiciones de trabajo y riesgos profesionales; principios de la acción preventiva; concepto de salud y factores de riesgo; daños derivados del trabajo. Conocimientos básicos sobre planes de emergencia y evacuación. i Pág. 12787 boc.cantabria.es 280/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2'(&2&,1$ 0$7(5,$6(63(&Ë),&$6 i Pág. 12788 7(0$ /RFDOGHFRFLQD&RQGLFLRQHVTXHGHEHUHXQLUXQORFDOGHFRFLQD'HSDUWDPHQWRV GH FRFLQD)XQFLRQHV \ PLVLRQHV GH ORV PLVPRV (TXLSDPLHQWR 'LVWULEXFLyQ GHO WUDEDMRHQFRFLQD 7(0$ 0DTXLQDULDGHFRFLQD*HQHUDGRUHVGHFDORU\IUtR3HTXHxDPDTXLQDULD%DWHUtD GHFRFLQDPROGHV\KHUUDPLHQWDV 7(0$ ,QWURGXFFLyQ D OD KLJLHQH VDQLWDULD KLJLHQH DOLPHQWDULD \ PDQLSXODGRUHV GH DOLPHQWRV GHILQLFLRQHV /RV SHOLJURV ItVLFRV TXtPLFRV \ ELROyJLFRV HQ UHODFLyQ FRQ ORV DOLPHQWRV 5LHVJRV DVRFLDGRV \ PHGLGDV SUHYHQWLYDV 1RFLRQHV EiVLFDV GHPLFURELRORJtDDOLPHQWDULD(QIHUPHGDGHVGHWUDQVPLVLyQDOLPHQWDULD 7(0$ &RUUHFWDV SUiFWLFDV KLJLpQLFDV \ GH PDQLSXODFLyQ HQ UHVWDXUDFLyQ FROHFWLYD /HJLVODFLyQ REOLJDFLRQHV \ SURKLELFLRQHV $OPDFHQDPLHQWR GH DOLPHQWRV \ VX DGHFXDGDFRQVHUYDFLyQ6LVWHPDGHDXWRFRQWURO 7(0$ /LPSLH]D \ GHVLQIHFFLyQ GH ODV iUHDV GH PDQLSXODFLyQ 'LVSRVLFLyQ \ DOPDFHQDPLHQWRGHUHVLGXRV 7(0$ ,QIRUPDFLyQVREUHDOpUJHQRVDOHUJLDDOLPHQWDULDHLQWROHUDQFLDDOLPHQWDULD 7(0$ $OLPHQWRV QXWULFLyQ \ GLHWpWLFD &ODVHV GH DOLPHQWRV \ QXWULHQWHV +LGUDWRV GH FDUERQRJUDVDVSURWHtQDVYLWDPLQDVPLQHUDOHV&RQIHFFLyQGHPHQ~V\GLHWDV 7(0$ 6LVWHPDV\PpWRGRVGHFRQVHUYDFLyQ\UHJHQHUDFLyQGHSURGXFWRV 7(0$ +RUWDOL]DV +RUWDOL]DV GH WHPSRUDGD /LPSLH]D \ FRQVHUYDFLyQ 0pWRGRV GH FRFLQDGR(ODERUDFLRQHV/DVHQVDODGDV 7(0$ /HJXPEUHV VHFDV \ SDWDWDV &ODVHV FDOLGDG SURSLHGDGHV SUHHODERUDFLyQ DSOLFDFLRQHVFRQVHUYDFLyQ\FRFLQDGR3RWDMHVVRSDVFRQVRPpV\FUHPDV/DV JXDUQLFLRQHV 7(0$ +XHYRV&RQVHUYDFLyQ\JUDGRGHIUHVFXUD0pWRGRVGHFRFLQDGR/DVSDVWDV(O DUUR] 7(0$ 3HVFDGRV \ PDULVFRV /LPSLH]D \ FRQVHUYDFLyQ ,GHQWLILFDFLyQ GHO IUHVFRU 0pWRGRVGHFRFLQDGR&RUWH\UDFLRQDGRGHOSHVFDGR 7(0$ /DV FDUQHV 0pWRGRV GH FRFLQDGR 'HVSLHFH \ GHVJXDFH 'HQRPLQDFLyQ GH ODV SLH]DV/DVDYHV/DFD]D/RVGHVSRMRV boc.cantabria.es CVE-2019-3750 281/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ /RVSRVWUHV(ODERUDFLRQHVGHUHSRVWHUtD/RVTXHVRV\OiFWHRV/DVIUXWDV 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQ GH5LHVJRV/DERUDOHV&RQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRV GHODDFFLyQSUHYHQWLYDFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRV GHOWUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ CVE-2019-3750 7(0$ i Pág. 12789 boc.cantabria.es 282/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2'(3/$17$+,'52/Ï*,&$ 0$7(5,$6(63(&Ë),&$6 7(0$± 7UDWDPLHQWRItVLFRTXtPLFR &RDJXODFLyQ)ORFXODFLyQ'HFDQWDFLyQ7LSRVGHGHFDQWDGRUHV 7(0$± )LOWUDFLyQ 7LSRVGHILOWURV2SHUDFLyQGHODYDGRGHILOWURV6LVWHPDGHUHJXODFLyQGHOQLYHOGHORVILOWURV 7(0$± 'HVLQIHFFLyQGHDJXD &ULWHULRVGHFDOLGDGGHODJXDGHFRQVXPRKXPDQRQHFHVLGDGGHVXGHVLQIHFFLyQ'LIHUHQFLD HQWUH GHVLQIHFFLyQ \ HVWHULOL]DFLyQ (O FORUR \ HO KLSRFORULWR VyGLFR FRPR GHVLQIHFWDQWHV PHFDQLVPR GH DFFLyQ IRUPDV GH SUHVHQWDFLyQ 3HUGLGD GH GHVLQIHFWDQWH UHVLGXDO SUHYHQFLyQGHODIRUPDFLyQGHVXESURGXFWRV\SRVLEOHVHIHFWRVVREUHODVDOXG&DPELRGH FRQWHQHGRUHVGHFORURHQODV(7$3VPHGLGDVGHSURWHFFLyQSULPHURVDX[LOLRV 7(0$± 6XVWDQFLDVTXtPLFDVSDUDWUDWDPLHQWRGHDJXDSRWDEOH 3ROLKLGUR[LFORUXURVXOIDWRGH$OXPLQLR6XOIDWRGH$OXPLQLRHQSROYR+LGUy[LGR&iOFLFR8VRV SHOLJURV SUHYHQFLyQ \ PHGLGDV FRQWUD LQFHQGLRV \ YHUWLGR DFFLGHQWDO (IHFWRV SULPHURV DX[LOLRVDOPDFHQDPLHQWR\PDQLSXODFLyQ1RUPDVGHXVR\GRVLILFDFLyQ 7(0$± $OPDFHQDPLHQWRGHO$JXD3RWDEOH 'HSyVLWRV7LSRVGHGHSyVLWRVFDSDFLGDGPDWHULDOHV$VSHFWRV FRQVWUXFWLYRVFiPDUDVGH OODYHVFRQWUROGHQLYHOHV 7(0$± 7UDQVSRUWHGHDJXD &RQGXFFLRQHV 0DWHULDOHV GLiPHWURV SUHVLRQHV QRPLQDOHV WLSRV GH MXQWDV (OHPHQWRV GH FRQWUROGHXQDUHGGHDEDVWHFLPLHQWR%RPEDVKLGUiXOLFDV7LSRVFDUDFWHUtVWLFDV6LVWHPDV GHDUUDQTXH 7(0$± )HQyPHQRVWUDQVLWRULRVHQLQVWDODFLRQHVGHDEDVWHFLPLHQWR *ROSH GH DULHWH GHVFULSFLyQ GHO IHQyPHQR 7LHPSR GH FLHUUH GH YiOYXODV \ SDUDGD GH ERPEDV0pWRGRVSDUDUHGXFLUHOJROSHGHDULHWH&DYLWDFLyQ¢&XiQGRVHSURGXFH"(IHFWRV IRUPDVGHHYLWDUODFDYLWDFLyQ 7(0$± /H\ GH &DQWDEULD GH GH QRYLHPEUH GH $EDVWHFLPLHQWR \ 6DQHDPLHQWR GH $JXDVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD CVE-2019-3750 2EMHWR \ iPELWR GH OD /H\ 'HILQLFLRQHV 5pJLPHQ GH FRPSHWHQFLDV HQ PDWHULD GH DEDVWHFLPLHQWR \ VDQHDPLHQWR HQ &DQWDEULD ,QIUDHVWUXFWXUDV GH LQWHUpV GH OD &RPXQLGDG $XWyQRPD*DUDQWtDHQODSUHVWDFLyQGHORVVHUYLFLRVGHDEDVWHFLPLHQWR\VDQHDPLHQWR i Pág. 12790 boc.cantabria.es 283/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ 7(0$± 5HDO 'HFUHWR GH GH IHEUHUR SRU HO TXH VH HVWDEOHFHQ ORV FULWHULRV VDQLWDULRVGHODFDOLGDGGHODJXDGHFRQVXPRKXPDQR ÈPELWR GH DSOLFDFLyQ 'HILQLFLRQHV 5HVSRQVDELOLGDG \ FRPSHWHQFLD 7UDWDPLHQWR GH SRWDELOL]DFLyQ GHO DJXD GH FRQVXPR KXPDQR 3HUVRQDO &RQWURO GH OD FDOLGDG GHO DJXD GH FRQVXPR KXPDQR &RQWURO HQ HO JULIR GHO FRQVXPLGRU 3DUiPHWURV PLFURELROyJLFRV 3DUiPHWURVLQGLFDGRUHV 7(0$± 2EMHWR \ SULQFLSLRV EiVLFRV GH OD OH\ GH GH QRYLHPEUH GH SUHYHQFLyQ GH ULHVJRVODERUDOHV CVE-2019-3750 &RQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHODDFFLyQSUHYHQWLYDFRQFHSWR GH VDOXG \ IDFWRUHV GH ULHVJR GDxRV GHULYDGRV GHO WUDEDMR &RQRFLPLHQWRV EiVLFRV VREUH SODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12791 boc.cantabria.es 284/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&262&,26$1,7$5,2 0$7(5,$6(63(&Ë),&$6 3VLFRORJtD HYROXWLYD GH OD LQIDQFLD \ DGROHVFHQFLD VHJ~Q 3LDJHW \ 9LJRWVN\ (O DSUHQGL]DMHVRFLDO 7(0$ (WDSDV\FLFORVGHOVLVWHPDHGXFDWLYR3HUVRQDVFRQQHFHVLGDGHVHVSHFLDOHVOD HGXFDFLyQ HVSHFLDO 5HFXUVRV TXH RIUHFH OD HVFXHOD D ORV DOXPQRV FRQ QHFHVLGDGHVHGXFDWLYDVHVSHFLDOHV 7(0$ )DFWRUHVTXHLQIOX\HQHQHOFUHFLPLHQWR\GHVDUUROORItVLFRGHOQLxR 7(0$ /D ILJXUD GHO 7pFQLFR 6RFLRVDQLWDULR &RRUGLQDFLyQ \ WUDEDMR HQ HTXLSR FRQ HO FRQMXQWRGHSURIHVLRQDOHVGHOFHQWURGHWUDEDMR\VXUHSHUFXVLyQHQODFDOLGDGGH YLGD GH ORV UHVLGHQWHV 5HODFLyQ FRQ ODV IDPLOLDV 'HPDQGDV DFWXDOHV GH OD LQIDQFLD\DGROHVFHQFLD 7(0$ )XQFLRQHV GHO 7pFQLFR 6RFLRVDQLWDULR HQ ORV GLVWLQWRV iPELWRV GH WUDEDMR HGXFDWLYRV UHVLGHQFLDOHV RFXSDFLRQDOHV DOEHUJXHV FDPSDPHQWRV MXYHQLOHV \ WLHPSROLEUH&RQWURO\VHJXLPLHQWRGHODVSHUVRQDVDVXFDUJR 7(0$ $FWLYLGDGHVGHOD9LGD'LDULD $9' +DELOLGDGHV6RFLDOHV 7(0$ &DUDFWHUtVWLFDV EiVLFDV GH ODV SHUVRQDV FRQ ODV VLJXLHQWHV GLVFDSDFLGDGHV 3VtTXLFDV PRWyULFDV FHUHEUDOHV SOXULGHILFLHQWHV YLVXDOHV DXGLWLYDV \ FRQ WUDVWRUQRGHODSHUVRQDOLGDG3UREOHPDVTXHSODQWHDQ6XFXLGDGRHQHOFHQWUR 7(0$ $FWLYLGDGHV FUHDWLYDV HQ OD HGXFDFLyQ GH SHUVRQDV FRQ FDUDFWHUtVWLFDV HVSHFLDOHV+DELOLGDGHVItVLFDVFRQRFLPLHQWRGHOFXHUSRPRYLPLHQWR\HTXLOLEULR 7(0$ 8UJHQFLDV\HPHUJHQFLDVFRQFHSWRV3ULPHURVDX[LOLRV 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQ GH5LHVJRV/DERUDOHV3ULQFLSLRVGHODDFFLyQSUHYHQWLYDFRQGLFLRQHVGHWUDEDMR \ULHVJRVSURIHVLRQDOHVFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRV GHOWUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ CVE-2019-3750 7(0$ i Pág. 12792 boc.cantabria.es 285/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ $8;,/,$5'((1)(50(5Ë$ 0$7(5,$6(63(&Ë),&$6 7(0$ 3URPRFLyQ SUHYHQFLyQ \ HGXFDFLyQ SDUD OD VDOXG 3UHYHQFLyQ 3ULPDULD 6HFXQGDULD \ 7HUFLDULD&RQFHSWR\GHWHFFLyQSUHFR]GHSUREOHPDVGHVDOXG(SLGHPLRORJtDJHQHUDO \PHGLGDVGHSUHYHQFLyQGHODVHQIHUPHGDGHVWUDQVPLVLEOHV\FUyQLFDV 7(0$ 8UJHQFLDV\HPHUJHQFLDVFRQFHSWRV3ULPHURVDX[LOLRV 7(0$ $WHQFLyQ GHO DX[LOLDU GH HQIHUPHUtD DO SDFLHQWH HQFDPDGR +LJLHQH GHO SDFLHQWH 3UHYHQFLyQGH~OFHUDV\HVFDUDV)DFWRUHVGHULHVJR&DPELRVGHSRVWXUD7pFQLFDVGH GHDPEXODFLyQ 3URFHGLPLHQWR GH WRPD GH FRQVWDQWHV YLWDOHV *UiILFDV \ EDODQFH KtGULFR 7(0$ 'LHWpWLFD \ QXWULFLyQ &RQFHSWR &ODVLILFDFLyQ GH ORV DOLPHQWRV 3ULQFLSDOHV GLHWDV WHUDSpXWLFDV&XLGDGRVDSHUVRQDVFRQSUREOHPDVGHGHVQXWULFLyQ 7(0$ 2EWHQFLyQPDQLSXODFLyQ\FRQVHUYDFLyQGHPXHVWUDVELROyJLFDV6LVWHPDGHWUDQVSRUWH GHPXHVWUDV(IHFWRVGHODFRQVHUYDFLyQVREUHODVPXHVWUDV 7(0$ 6DOXGPHQWDO(SLGHPLRORJtD3DSHOGHODX[LOLDUGHHQIHUPHUtDDQWHHQIHUPRVPHQWDOHV \DHIHFWRVGHWR[LFRPDQtDVDOFRKROLVPR\GURJRGHSHQGHQFLDV 7(0$ $WHQFLyQ GHO DX[LOLDU GH HQIHUPHUtD DQWH HO SDFLHQWH JHULiWULFR &RQRFLPLHQWR GH ORV FDPELRV HQ HO SURFHVR GH HQYHMHFLPLHQWR 7pFQLFDV GH DERUGDMH DQWH VLWXDFLRQHV HVSHFLDOHV 7(0$ /H\GH&DQWDEULDGHGHPDU]RGHGHUHFKRV\VHUYLFLRVVRFLDOHV&RQFHSWR GH GHSHQGHQFLD *UDGRV 'HUHFKRV GH ODV SHUVRQDV HQ UHODFLyQ FRQ ORV VHUYLFLRV VRFLDOHV 'HUHFKRV HVSHFtILFRV GH ODV SHUVRQDV XVXDULDV GH FHQWURV \ VHUYLFLRV GH DWHQFLyQ+LVWRULD3HUVRQDO 7(0$ 3ULQFLSLRV GH GHVLQIHFFLyQ \ HVWHULOL]DFLyQ 7pFQLFDV /LPSLH]D GH PDWHULDO VDQLWDULR 9HQGDV\DSyVLWRV CVE-2019-3750 7(0$ 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV SULQFLSLRV GH OD DFFLyQSUHYHQWLYDFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRVGHOWUDEDMR &RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12793 boc.cantabria.es 286/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2'((;3/27$&,21(6$*523(&8$5,$6 0$7(5,$6(63(&Ë),&$6 &RQRFLPLHQWRVREUHHOPDQHMRGHUHSURGXFWRUHVERYLQRV &RQRFLPLHQWRVREUHHOPDQHMRGHJDQDGRYDFXQRGHFDUQH &RQRFLPLHQWRVREUHHOPDQHMRGHJDQDGRYDFXQRGHOHFKH &RQRFLPLHQWRVREUHHOPDQHMRGHPDTXLQDULDDJUtFROD &RQRFLPLHQWRVREUHHOPDQWHQLPLHQWRHKLJLHQHGHODVH[SORWDFLRQHV &RQRFLPLHQWRVREUHHOHQVLODGR\ODKHQLILFDFLyQ &RQRFLPLHQWRVREUHHOPDQHMRGH&HUFDV0DQWHQLPLHQWR\FRQVHUYDFLyQ &RQRFLPLHQWRVREUHSDVWRUHR\DERQDGR &RQRFLPLHQWR VREUH HO PDQHMR \ FRQWURO GH PDODV KLHUEDV \ SODQWDV LQYDVRUDV]DU]DVKHOHFKRVHWF0DQHMRGHKHUELFLGDV\SHVWLFLGDV 7(0$ 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 3ULQFLSLRV GH OD DFFLyQ SUHYHQWLYD FRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVFRQFHSWRGHVDOXG\IDFWRUHV GHULHVJRGDxRVGHULYDGRVGHOWUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHV GHHPHUJHQFLD\HYDFXDFLyQ CVE-2019-3750 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ i Pág. 12794 boc.cantabria.es 287/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 2),&,$/'(2),&,26)217$1(52 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 7(0$ ,QVWDODFLRQHVGHIRQWDQHUtD&RQFHSWRVIXQGDPHQWDOHVFDXGDOFRQVXPRYHORFLGDGGHO DJXDSUHVLyQSpUGLGDVGHFDUJD\JROSHGHDULHWH 5HGHV GH HYDFXDFLyQ GH DJXDV SOXYLDOHV GH HGLILFLRV &DQDORQHV SHVHEURQHV \ EDMDQWHV(OHPHQWRVFDUDFWHUtVWLFDVHMHFXFLyQ\PDWHULDOHV 5HGHVLQWHULRUHVGHDJXD&ODVLILFDFLyQJUXSRVGHSUHVLyQUHJXODFLyQ\GHSyVLWRV ,QVWDODFLRQHV GH FDOHIDFFLyQ \ $&6 &DOGHUDV 7LSRV SULQFLSLR GH IXQFLRQDPLHQWR \ HOHPHQWRVGHVHJXULGDG6LVWHPDVGHUHJXODFLyQ\FRQWURO 6LPERORJtD \ HVTXHPDV GH LQVWDODFLRQHV GH IRQWDQHUtD 'LVHxR \ PRQWDMH GH LQVWDODFLRQHV (OHPHQWRVGHLQVWDODFLRQHVGHIRQWDQHUtD7XEHUtDV\DFFHVRULRVYiOYXODVGLVSRVLWLYRV GH FRQWURO \ JULIHUtD VDQLWDULD $SDUDWRV VDQLWDULRV 7LSRV &RPSRQHQWHV 0RQWDMH GHVPRQWDMH\UHSDUDFLyQ 7pFQLFDVGHVROGDGXUDHPSOHDGDVHQLQVWDODFLRQHVGHIRQWDQHUtD %RPEDV \ JUXSRV GH SUHVLyQ /D ERPED FHQWUtIXJD &RPSRQHQWHV GH XQ JUXSR GH SUHVLyQ )RUPDOL]DFLyQ GH ORV SDUWHV GH WUDEDMR 5HYLVLyQ \ YHULILFDFLyQ GH ORV HTXLSRV \ KHUUDPLHQWDV 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV SULQFLSLRV GH OD DFFLyQSUHYHQWLYDFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRVGHOWUDEDMR &RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12795 boc.cantabria.es 288/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 2),&,$/'(2),&,26(/(&75,&,67$ 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 7(0$ (OHFWURWHFQLD /RV IHQyPHQRV HOpFWULFRV PDJQpWLFRV \ HOHFWURPDJQpWLFRV \ VXV DSOLFDFLRQHV&LUFXLWRVHOpFWULFRVGHFRUULHQWHFRQWLQXD\GHFRUULHQWHDOWHUQD &iOFXORVHQODVLQVWDODFLRQHVHOpFWULFDVGHEDMDWHQVLyQ3UHYLVLyQGHSRWHQFLDVVHFFLyQ GHFRQGXFWRUHVGHQVLGDGGHFRUULHQWHFDtGDVGHWHQVLyQHWF 0DQLREUD PDQGR \ SURWHFFLyQ HQ PHGLD \ EDMD WHQVLyQ *HQHUDOLGDGHV ,QWHUUXSWRUHV GLV\XQWRUHV VHFFLRQDGRUHV IXVLEOHV LQWHUUXSWRUHV DXWRPiWLFRV PDJQHWRWpUPLFRV LQWHUUXSWRUHVGLIHUHQFLDOHVHWF (O UHJODPHQWR HOHFWURWpFQLFR SDUD %DMD 7HQVLyQ (VWUXFWXUD H ,QVWUXFFLRQHV 7pFQLFDV FRPSOHPHQWDULDV &XDGURV HOpFWULFRV 0RQWDMH UHSDUDFLyQ \ PDQWHQLPLHQWR $XWRPDWLVPRV (TXLSRV GH YHULILFDFLyQ\PHGLGD 'LVHxR H LQWHUSUHWDFLyQ GH HVTXHPDV HOpFWULFRV 6LPERORJtD &iOFXOR GH OtQHDV HOpFWULFDVGHEDMDWHQVLyQ 6LVWHPDV GH DOLPHQWDFLyQ LQLQWHUUXPSLGD 6$, ,QVWDODFLyQ \ SULQFLSLR GH IXQFLRQDPLHQWR0DQWHQLPLHQWR\SXHVWDHQVHUYLFLR (TXLSRV GH SURWHFFLyQ LQGLYLGXDO 0HGLGDV GH VHJXULGDG HQ LQVWDODFLRQHV GH EDMD \ PHGLDWHQVLyQ )RUPDOL]DFLyQ GH ORV SDUWHV GH WUDEDMR 5HYLVLyQ \ YHULILFDFLyQ GH ORV HTXLSRV \ KHUUDPLHQWDV 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV SULQFLSLRV GH OD DFFLyQSUHYHQWLYDFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRVGHOWUDEDMR &RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12796 boc.cantabria.es 289/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 2),&,$/'(2),&,263,1725 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 7(0$ +HUUDPLHQWDV \ HTXLSDPLHQWR SDUD OD DSOLFDFLyQ GH SLQWXUDV 6XV FDUDFWHUtVWLFDV \ DGHFXDFLyQDWUDEDMRVHVSHFtILFRV0DQWHQLPLHQWRGHKHUUDPLHQWDV\HTXLSDPLHQWRSDUD ODDSOLFDFLyQGHSLQWXUDV/DSLQWXUDDSLVWROD(TXLSRV\DFFHVRULRV 3LQWXUDV\EDUQLFHV&RPSRVLFLyQ\FODVHV(OHFFLyQGHODSLQWXUDHQIXQFLyQGHOVRSRUWH\ VXH[SRVLFLyQ0H]FODGHFRORUHV'LVROYHQWHV\GHFDSDQWHV$GKHVLYRV 7pFQLFDV GH SLQWXUDV 3UHSDUDFLyQ \ UHSDUDFLyQ GH VXSHUILFLHV SDUD HO SLQWDGR HQ REUDV GH DOEDxLOHUtD KRUPLJyQ FHPHQWR \ HVFD\ROD 'HVFRQFKDGRV JULHWDV DJXMHURV \ KXPHGDGHV /RV DFDEDGRV HQ SLQWXUD EDUQL] R ODFD VHJ~Q HO VRSRUWH $GHFXDFLyQ GH ORV PLVPRV WpFQLFDV \ SURFHGLPLHQWRV GH DSOLFDFLyQ (VPDOWHV 7LSRV &RPSRVLFLyQ +HUUDPLHQWDV SDUDVXDSOLFDFLyQ 3LQWXUDV HVSHFLDOHV 8VRV GH HVWDV SLQWXUDV $QWLFRUURVLYDV $QWLiFLGR $QWLWpUPLFD ,JQtIXJD +LGUyIXJD &ORURFDXFKR )RVIRUHVFHQWH &RPSRVLFLyQ GH HVWDV SLQWXUDV +HUUDPLHQWDVSDUDVXDSOLFDFLyQ5HQGLPLHQWR 2WUDV SLQWXUDV 3LQWXUD DHURJUiILFD 0DWHULDOHV +HUUDPLHQWDV 8VRV 8WLOL]DFLyQ 6HJXULGDG 3LQWXUDV GHFRUDWLYDV HVSHFLDOHV WUDQVSDUHQFLDV HVWXFDGRV SROLFURPDGRV 3UHSDUDFLyQ+HUUDPLHQWDV0DWHULDOHV3LQWXUDVDOVLOLFDWR (O FRORU 7LSRV ySWLFRSLJPHQWDGR &tUFXOR FURPiWLFR )UtRV \ FDOLHQWHV &RPSOHPHQWDULRV/RVFRORUHVHQODVHJXULGDG&ODVLILFDFLyQGHODVSLQWXUDV7LSRV8VRV 5HQGLPLHQWRV'XUDFLyQ 6HJXULGDG HQ OD DSOLFDFLyQ GH SLQWXUDV (OHPHQWRV SDUD OD VHJXULGDG ItVLFD (OHPHQWRV SDUDODVHJXULGDGTXtPLFD2UJDQL]DFLyQGHODVWDUHDV )RUPDOL]DFLyQ GH ORV SDUWHV GH WUDEDMR 5HYLVLyQ \ YHULILFDFLyQ GH ORV HTXLSRV \ KHUUDPLHQWDV 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV/DERUDOHVFRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHODDFFLyQ SUHYHQWLYD FRQFHSWR GH VDOXG \ IDFWRUHV GH ULHVJR GDxRV GHULYDGRV GHO WUDEDMR &RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12797 boc.cantabria.es 290/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 7(0$ 7(0$ 2),&,$/'(2),&,26$87236,$ 0$7(5,$6(63(&Ë),&$6 7HUPLQRORJtD DQDWyPLFD JHQHUDO LGHQWLILFDFLyQ GH yUJDQRV \ DSDUDWRV VX ORFDOL]DFLyQHVSDFLDO 7pFQLFDV GH DSHUWXUD GHO FDGiYHU 7pFQLFDV GH DSHUWXUD GHO FDGiYHU HQ FDVRV HVSHFLDOHV QHRQDWRV 7pFQLFDV GH DSHUWXUD GH OD FROXPQD YHUWHEUDO $XWRSVLD JLQHFROyJLFD 1RUPDV GH SURWHFFLyQ HQHO OXJDU GH WUDEDMR PHGLGDV GH SURWHFFLyQ SHUVRQDOHV \ JHQHUDOHV1RUPDVGHSUHYHQFLyQ 0DQHMRGHOLQVWUXPHQWDOSUHSDUDFLyQOLPSLH]D\PDQWHQLPLHQWR 3UHSDUDFLyQGHVROXFLRQHVFRQVHUYDGRUDVIRUPRO\IRUPROWDPSRQDGR 0DQHMR GH PXHVWUDV ELROyJLFDV UHFRJLGD LQWURGXFFLyQ HQ UHFLSLHQWHV PDQHMR \ HQYtR&RQGLFLRQHVHVSHFLDOHVGHFDGDPXHVWUDGHSHQGLHQGRGHOHVWXGLRVROLFLWDGR &XVWRGLDGHOFDGiYHUGHODVPXHVWUDV\GHORVREMHWRVSHUVRQDOHV/DFDGHQDGH FXVWRGLDGHODVPXHVWUDV7pFQLFDVGHFRQVHUYDFLyQGHOFDGiYHU 'RFXPHQWRV PpGLFRIRUHQVHV JHVWLyQ GH VROLFLWXGHV GH DQiOLVLV WR[LFROyJLFRV KLVWRSDWROyJLFRVGHELRORJtDIRUHQVH\FULPLQROyJLFRV ,QIRUPiWLFDEiVLFDHQHO,QVWLWXWRGH0HGLFLQD/HJDO 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH 5LHVJRV/DERUDOHVFRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHOD DFFLyQ SUHYHQWLYD FRQFHSWR GH VDOXG \ IDFWRUHV GH ULHVJR GDxRV GHULYDGRV GHO WUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12798 boc.cantabria.es 291/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 7e&1,&2(1&216(59$&,Ï1'(/3$75,021,21$785$/ 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ CVE-2019-3750 (O0HGLR1DWXUDOGH&DQWDEULD8QLGDGHVDPELHQWDOHV3ULQFLSDOHVHFRVLVWHPDV /D 5HG GH (VSDFLRV 1DWXUDOHV 3URWHJLGRV GH &DQWDEULD 2EMHWLYRV 3ULQFLSDOHV FDUDFWHUtVWLFDV'HVFULSFLyQ\SUREOHPiWLFDGHFRQVHUYDFLyQ 7(0$ /D5HGGH3DUTXHV1DFLRQDOHVHVSDxROHV3ULQFLSDOHVFDUDFWHUtVWLFDV3UREOHPDV GHJHVWLyQ\FRQVHUYDFLyQ/H\GH3DUTXHV1DFLRQDOHV3ODQ'LUHFWRUGHOD 5HGGH3DUTXHV1DFLRQDOHV 7(0$ 3DUTXH 1DFLRQDO GH ORV 3LFRV GH (XURSD $QWHFHGHQWHV KLVWyULFRV 9DORUHV TXH SURSLFLDURQ VX GHFODUDFLyQ 5DVJRV GHILQLWRULRV PiV GHVWDFDGRV ÏUJDQRV GH JHVWLyQFRRUGLQDFLyQ\SDUWLFLSDFLyQ 7(0$ 3DUTXH1DFLRQDOGHORV3LFRVGH(XURSD$VSHFWRVVRFLRHFRQyPLFRVFXOWXUDOHV\ HWQRJUiILFRV8VRV\$SURYHFKDPLHQWRVWUDGLFLRQDOHVHQHO3DUTXH1DFLRQDO 7(0$ 3DUTXH1DFLRQDOGHORV3LFRVGH(XURSD&DUDFWHUtVWLFDVJHRJUiILFDVJHROyJLFDV\ FOLPiWLFDV%LRJHRJUDItD\YHJHWDFLyQGHO3DUTXH1DFLRQDOGHORV3LFRVGH(XURSD 7(0$ )ORUDGHO3DUTXH1DFLRQDOGHORV3LFRVGH(XURSD3ULQFLSDOHVHVSHFLHV(VWDGRGH FRQVHUYDFLyQ \ SHFXOLDULGDGHV GH VX JHVWLyQ )DXQD GHO 3DUTXH 1DFLRQDO GH ORV 3LFRVGH(XURSD3ULQFLSDOHVHVSHFLHV(VWDGRGHFRQVHUYDFLyQ\SHFXOLDULGDGHVGH VXJHVWLyQ 7(0$ 3DUTXH 1DFLRQDO GH ORV 3LFRV GH (XURSD 0DFL]RV GHO &RUQLyQ /RV 8UULHOOHV \ $QGDUD&DUDFWHUtVWLFDVSULQFLSDOHVGHFDGDXQR5XWDVOXJDUHV\YDORUHV\UHFXUVRV PiVUHOHYDQWHV 7(0$ (O 8VR 3~EOLFR \ OD (GXFDFLyQ $PELHQWDO HQ HO 3DUTXH 1DFLRQDO GH ORV 3LFRV GH (XURSD 3ULQFLSDOHV FDUDFWHUtVWLFDV \ HTXLSDPLHQWRV 3HUILO GHO YLVLWDQWH \ SUREOHPiWLFDGHVXJHVWLyQ 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQGH 5LHVJRV/DERUDOHVFRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHOD DFFLyQ SUHYHQWLYD FRQFHSWR GH VDOXG \ IDFWRUHV GH ULHVJR GDxRV GHULYDGRV GHO WUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12799 boc.cantabria.es 292/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 23(5$5,2'(0$17(1,0,(172 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ CVE-2019-3750 &RQRFLPLHQWRVREUHUHSDUDFLyQGHDYHUtDVVLPSOHVGHHOHFWULFLGDG &RQRFLPLHQWRVREUHUHSDUDFLyQGHDYHUtDVVLPSOHVGHIRQWDQHUtD &RQRFLPLHQWRVREUHUHSDUDFLyQGHDYHUtDVVLPSOHVGHDOEDxLOHUtD &RQRFLPLHQWRVREUHUHSDUDFLyQ\PDQWHQLPLHQWRGHPRELOLDULR\HQVHUHV &RQRFLPLHQWRGHOPRQWDMHDMXVWH\SXHVWDDSXQWRGHWRGRWLSRGHLQVWDODFLRQHVGH PHGLGD UHJXODFLyQ \ FRQWURO VLPSOH R DXWRPiWLFR GH WHPSHUDWXUD FDXGDOHV QLYHOHVGHDJXD\VLPLODUHV 7(0$ &RQRFLPLHQWRVREUHPRQWDMHGHHVWUDGRVWDULPDVHVFHQDULRVDVLHQWRVSXHVWDHQ PDUFKDGHDOWDYRFHVHTXLSRVGHP~VLFDSUR\HFFLyQHWF 7(0$ 0DQHMR\XWLOL]DFLyQGHHTXLSRV\PDTXLQDULD&RQWUROFRQVHUYDFLyQ\OLPSLH]DGHO PDWHULDO GH WUDEDMR 8WLOL]DFLyQ GH SURGXFWRV TXtPLFRV PDQHMR GH KHUELFLGDV \ SHVWLFLGDV(TXLSRVGHSURWHFFLyQLQGLYLGXDO 7(0$ 0DQWHQLPLHQWR OLPSLH]D H KLJLHQH GH PDTXLQDULD LQVWDODFLRQHV FXDGURV HOpFWULFRVWUDQVIRUPDGRUHVKHUUDPLHQWDVGHXVRSURIHVLRQDO\GHORVUHVLGXRVTXH VHSURGX]FDQSRUODHMHFXFLyQGHORVWUDEDMRVUHDOL]DGRV 7(0$ )RUPDOL]DFLyQ GH ORV SDUWHV GH WUDEDMR \ ILFKDV GH UHYLVLyQ \ YHULILFDFLyQ GH ORV LQVWUXPHQWRVHQODVGLIHUHQWHVUHSDUDFLRQHV 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQ GH 5LHVJRV /DERUDOHV FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV SULQFLSLRV GHODDFFLyQSUHYHQWLYDFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRV GHOWUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12800 boc.cantabria.es 293/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ CVE-2019-3750 $1(;2, &$7(*25Ë$352)(6,21$/ 23(5$5,2'(0217(6 0$7(5,$6(63(&Ë),&$6 7(0$ ,QFHQGLRV IRUHVWDOHV &RQRFLPLHQWR HQ FRPSRUWDPLHQWR GHO IXHJR \ IDFWRUHV TXH LQIOX\HQ HQVXSURSDJDFLyQ&RQRFLPLHQWRHQSUHYHQFLyQGHWHFFLyQ\WpFQLFDVGHH[WLQFLyQ 7(0$ 'HFUHWRGHGHIHEUHURSRUHOTXHVHDSUXHEDHO5HJODPHQWRGHORSHUDWLYRGH OXFKD FRQWUD LQFHQGLRV IRUHVWDOHV HQ OD &RPXQLGDG $XWyQRPD GH &DQWDEULD 2EMHWR SHUVRQDO GHO RSHUDWLYR RUJDQL]DFLyQ GHO SHUVRQDO GHO RSHUDWLYR PHGLRV \ UHFXUVRV GHO RSHUDWLYR 7(0$ 5HSREODFLRQHV IRUHVWDOHV 0pWRGRV GH UHSREODFLyQ HOLPLQDFLyQ GH OD YHJHWDFLyQ SUHH[LVWHQWH SUHSDUDFLyQ GHO WHUUHQR LPSODQWDFLyQ YHJHWDO &XLGDGRV SRVWHULRUHV SURWHFFLyQGHODVSODQWDVDERQDGRUHSRVLFLyQGHPDUUDV\GHVEURFH 7(0$ 9LYHURV )RUHVWDOHV 7pFQLFDV GH FXOWLYR GH SODQWDV IRUHVWDOHV &XOWLYR D UDt] GHVQXGD FXOWLYRHQHQYDVHRWURV(QYDVHV\VXEVWUDWRV7UDWDPLHQWRVILWRVDQLWDULRV 7(0$ 7UDWDPLHQWRVVHOYtFRODVSRGDVGHVEURFHVFODUDV\FODUHRV7pFQLFDVGHHMHFXFLyQ 7(0$ &RQRFLPLHQWRV EiVLFRV VREUH HMHFXFLyQ \ FRQVHUYDFLyQ GH LQIUDHVWUXFWXUDV IRUHVWDOHV DX[LOLDUHVFHUFDGRVDEUHYDGHURVGHSyVLWRVFRQWUDLQFHQGLRVFDSWDFLRQHVGHDJXDSDVRV FDQDGLHQVHVSRUWLOODVSLVWDV\VHQGHURV 7(0$ +HUUDPLHQWDVIRUHVWDOHV&RQRFLPLHQWRGHOPDQHMRPDQWHQLPLHQWR\WpFQLFDVGHVHJXULGDG GH ODV SULQFLSDOHV KHUUDPLHQWDV PHFiQLFDV XWLOL]DGDV HQ HO WUDEDMR IRUHVWDO PRWRVLHUUDV GHVEUR]DGRUDV\SRGDGRUDV+HUUDPLHQWDVPDQXDOHVFXLGDGR\PDQWHQLPLHQWR 7(0$ +HUUDPLHQWDV XWLOL]DGDV HQ OD H[WLQFLyQ GH LQFHQGLRV IRUHVWDOHV EDWHIXHJRV DQWRUFKD GH JRWHRH[WLQWRUGHPRFKLODSXODVNL0FOHRGD]DGD\SRGyQ 7(0$ 7pFQLFDVGHVHJXULGDGGHOSHUVRQDOTXHLQWHUYLHQHHQODH[WLQFLyQGHLQFHQGLRVIRUHVWDOHV 7pFQLFDVGHVHJXULGDG\VDOXGGHOSHUVRQDOHQORVWUDEDMRVGHWUDWDPLHQWRVVHOYtFRODV 7(0$ 2EMHWR \ SULQFLSLRV EiVLFRV GH OD /H\ GH GH QRYLHPEUH GH 3UHYHQFLyQ GH 5LHVJRV/DERUDOHVFRQGLFLRQHVGHWUDEDMR\ULHVJRVSURIHVLRQDOHVSULQFLSLRVGHODDFFLyQ SUHYHQWLYD GDxRV GHULYDGRV GHO WUDEDMR &RQRFLPLHQWRV EiVLFRV VREUH SODQHV GH HPHUJHQFLD\HYDFXDFLyQ i Pág. 12801 boc.cantabria.es 294/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ 23(5$5,2'(&$55(7(5$6 0$7(5,$6(63(&Ë),&$6 7(0$ CVE-2019-3750 /H\ GH &DQWDEULD GH GH GLFLHPEUH GH FDUUHWHUDV GH &DQWDEULD 7LSRV GH FDUUHWHUDV WLWXODULGDG \ FODVLILFDFLyQ (OHPHQWRV IXQFLRQDOHV GH XQD FDUUHWHUD &DWiORJR\GHQRPLQDFLRQHV 7(0$ 8VR \ GHIHQVD GH FDUUHWHUDV HQ OD /H\ GH &DUUHWHUDV GH &DQWDEULD =RQDV GH LQIOXHQFLD 2WUDV REUDV \ DFWLYLGDGHV /LPLWDFLyQ GH DFFHVRV 3XEOLFLGDG &LHUUHV 7UDPRVXUEDQRV\WUDYHVtDV$XWRUL]DFLRQHV\VDQFLRQHV 7(0$ &RQVHUYDFLyQGHFDUUHWHUDV0pWRGRVPDTXLQDULD\PDWHULDOHV 7(0$ 2SHUDFLRQHVGHFRQVHUYDFLyQREUDVGHWLHUUDGHVPRQWHV\WHUUDSOHQHVOLPSLH]DV GH DUFHQHV FXQHWDV \ DFHUDV PDQWHQLPLHQWR GH REUDV GH IiEULFD GUHQDMHV \ FDQDOL]DFLRQHV 7(0$ )LUPHV\SDYLPHQWRV0DWHULDOHVHPSOHDGRV&RQVHUYDFLyQ\UHSDUDFLyQ0H]FODV ELWXPLQRVDV7UDWDPLHQWRVVXSHUILFLDOHV%DFKHRV5LHJRVDVIiOWLFRV 7(0$ 6HxDOL]DFLyQQRUPDVJHQHUDOHVVHxDOL]DFLyQKRUL]RQWDO\YHUWLFDO6HxDOL]DFLyQGH REUDV%DUUHUDVGHVHJXULGDG\EDOL]DPLHQWR,QVWDODFLyQ\FRQVHUYDFLyQ 7(0$ &RQRFLPLHQWR\KDELOLGDGHQHOPDQHMRGHKHUUDPLHQWDV\XWHQVLOLRVPHFiQLFRV\ PDQXDOHVXWLOL]DGRVHQODFRQVHUYDFLyQGHFDUUHWHUDV 7(0$ 0HGLFLRQHV\FODVLILFDFLyQGHYHKtFXORV2UGHQDFLyQ\UHJXODFLyQGHODFLUFXODFLyQ HQODVRSHUDFLRQHVGHFRQVHUYDFLyQ\HQFDVRGHDFFLGHQWHV 7(0$ 9LDOLGDGLQYHUQDO7LSRVGHPDTXLQDULD7LSRVGHWUDWDPLHQWRV 7(0$ 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQ GH 5LHVJRV /DERUDOHV FRQGLFLRQHV GH WUDEDMR \ ULHVJRV SURIHVLRQDOHV SULQFLSLRV GHODDFFLyQSUHYHQWLYDFRQFHSWRGHVDOXG\IDFWRUHVGHULHVJRGDxRVGHULYDGRV GHOWUDEDMR&RQRFLPLHQWRVEiVLFRVVREUHSODQHVGHHPHUJHQFLD\HYDFXDFLyQ i Pág. 12802 boc.cantabria.es 295/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 DIRECCIÓN GENERAL DE FUNCIÓN PÚBLICA ANEXO I CATEGORÍA PROFESIONAL OPERARIO DE COCINA MATERIAS ESPECÍFICAS TEMA 1.TEMA 2.TEMA 3.TEMA 4.TEMA 5.TEMA 6.TEMA 7.- CVE-2019-3750 TEMA 8.TEMA 9.TEMA 10.- El local de cocina. Condiciones que debe reunir un local de cocina. Departamentos de cocina. Funciones y misiones de los mismos. Equipamiento. Maquinaria de cocina. Generadores de calor y frío. Pequeña maquinaria. Batería de cocina, moldes y herramientas. Aprovisionamiento de materias primas. Sistema de almacenamiento y criterios de ordenación. Términos culinarios. Técnicas básicas de pre-elaboración, cortes, racionado y preparaciones auxiliares de frutas y hortalizas. Introducción a la higiene sanitaria: higiene alimentaria y manipuladores de alimentos: definiciones. Los peligros físicos, químicos y biológicos en relación con los alimentos. Riesgos asociados y medidas preventivas. Correctas prácticas higiénicas y de manipulación en restauración colectiva. Legislación: obligaciones y prohibiciones. Almacenamiento de alimentos y su adecuada conservación. Limpieza y desinfección de las áreas de manipulación. Diversos tipos de limpieza, uso, manipulación y almacenamiento de productos químicos. EPIS de trabajo en el manejo de productos químicos. Clasificación, etiquetado y usos específicos en maquinaria y áreas de manipulación. Información sobre alérgenos: alergia alimentaria e intolerancia alimentaria. Sistemas y métodos de conservación y regeneración de productos. Objeto y principios básicos de la Ley 31/1995, de 8 de noviembre, de Prevención de Riesgos Laborales: Condiciones de trabajo y riesgos profesionales; principios de la acción preventiva; concepto de salud y factores de riesgo; daños derivados del trabajo. Conocimientos básicos sobre planes de emergencia y evacuación. i Pág. 12803 boc.cantabria.es 296/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ $1(;2, &$7(*25Ë$352)(6,21$/ (03/($'2'(6(59,&,26 0$7(5,$6(63(&Ë),&$6 7(0$ 7(0$ 7(0$ 7(0$ 7(0$ /LPSLH]DJHQHUDOGHGHSHQGHQFLDVWDOOHUHVHLQVWDODFLRQHV3ULRULGDG\RUGHQHQOD OLPSLH]D6LVWHPDVGHOLPSLH]D7LSRVGHEDUULGR\IUHJDGR /LPSLH]D GH SDUHGHV YHQWDQDV WHFKRV \ VXHORV FODVLILFDFLyQ GH ORV VXHORV /LPSLH]DGHPRELOLDULRFXLGDGRVHVSHFLDOHVHQORVDSDUDWRVRILPiWLFRV ,QVWUXPHQWRVGHOLPSLH]D 3URGXFWRV GH OLPSLH]D \ GHVLQIHFFLyQ &RPSRVLFLyQ H LQIRUPDFLyQ VREUH VXV FRPSRQHQWHV 6LJQLILFDGR GH ORV VtPERORV XWLOL]DGRV HQ ODV HWLTXHWDV GH ORV SURGXFWRV,GHQWLILFDFLyQGHORVSHOLJURV0DQHMRFRQVHUYDFLyQ\DOPDFHQDPLHQWR GHORVSURGXFWRVGHOLPSLH]D'RVLILFDFLyQ /LPSLH]DGHPDQFKDVHQVXHORV\PRELOLDULR 3UHSDUDFLyQ \ DWHQFLyQ GH FRPHGRUHV 0RQWDMH GH FRPHGRUHV PDWHULDO \ FRORFDFLyQGHOPLVPR7LSRORJtDGHVHUYLFLRVGHFRPHGRUHV5HWLUDGDGHEDQGHMDV GHFRPLGD $VSHFWRVHFROyJLFRVHQODOLPSLH]DWLSRVGHUHVLGXRV,GHQWLILFDFLyQ\WUDWDPLHQWR GHORVPLVPRV5HFRJLGD\HYDFXDFLyQ $FRQGLFLRQDPLHQWR GH KDELWDFLRQHV 3ULRULGDG \ RUGHQ HQ OD OLPSLH]D GH KDELWDFLRQHV /LPSLH]D GH ORV DVHRV /LPSLH]D GH ]RQDV FRPXQHV HQ FHQWURV S~EOLFRV &XLGDGR GH OD URSD VX FODVLILFDFLyQ HQ DWHQFLyQ DO WHMLGR 6LJQLILFDGR GH ORV VtPERORVXWLOL]DGRVHQODVHWLTXHWDVGHODURSD /DYDGR GH OD URSD 6LVWHPDV GH ODYDGR D PiTXLQD D PDQR HQ VHFR )DVHV GHO ODYDGR \ VHFDGR GH OD URSD ,QVWUXPHQWRV \ SURGXFWRV SDUD ODYDU OD URSD &ODVLILFDFLyQGHODURSDHQIXQFLyQGHOWHMLGRVXFLHGDGRSURFHGHQFLDVXVQRUPDV GHODYDGR/LPSLH]DGHPDQFKDVVREUHWHMLGR 3ODQFKDGRGHURSD0iTXLQDV\~WLOHVGHSODQFKDGRGHURSDVXXVR&ODVLILFDFLyQ GH OD URSD SDUD VX SODQFKDGR 1RUPDV GH SODQFKDGR HQ IXQFLyQ GHO WHMLGR OD WHPSHUDWXUDGHSODQFKDGR 2EMHWR\SULQFLSLRVEiVLFRVGHOD/H\GHGHQRYLHPEUHGH3UHYHQFLyQ GH 5LHVJRV /DERUDOHV 3ULQFLSLRV GH OD DFFLyQ SUHYHQWLYD FRQFHSWR GH VDOXG \ IDFWRUHVGHULHVJRGDxRVGHULYDGRVGHOWUDEDMR i Pág. 12804 CVE-2019-3750 boc.cantabria.es 297/298 MARTES, 14 DE MAYO DE 2019 - BOC NÚM. 91 ',5(&&,Ï1*(1(5$/'()81&,Ï13Ò%/,&$ *58326< $1(;2,, 0$7(5,$6&2081(6 7(0$/H\ GH GH GLFLHPEUH SRU OD TXH VH DSUXHED HO (VWDWXWR GH $XWRQRPtD SDUD &DQWDEULD7tWXOR3UHOLPLQDU7tWXOR,,QVWLWXFLRQHVGHOD&RPXQLGDG$XWyQRPDGH&DQWDEULD 7tWXOR ,, &RPSHWHQFLDV GH &DQWDEULD 7tWXOR ,,, 5pJLPHQ -XUtGLFR GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG$XWyQRPDGH&DQWDEULD7tWXOR9,/DUHIRUPDGHO(VWDWXWRGH$XWRQRPtD 7(0$(O 5HDO 'HFUHWR /HJLVODWLYR GH GH RFWXEUH SRU HO TXH VH DSUXHED HO 7H[WR 5HIXQGLGR GH OD /H\ GHO (VWDWXWR %iVLFR GHO (PSOHDGR 3~EOLFR 7tWXOR , 2EMHWR \ iPELWR GH DSOLFDFLyQ7tWXOR,,3HUVRQDODOVHUYLFLRGHODV$GPLQLVWUDFLRQHV3~EOLFDV7tWXOR,,,&DStWXOR, 'HUHFKRVGHORVHPSOHDGRVS~EOLFRV &DStWXOR9 'HUHFKRDODMRUQDGDGHWUDEDMRSHUPLVRV \YDFDFLRQHV &DStWXOR9, 'HEHUHVGHORVHPSOHDGRVS~EOLFRV&yGLJRGHFRQGXFWD 7tWXOR 9,,5pJLPHQGLVFLSOLQDULR 7(0$/H\GH&DQWDEULDGHGHPDU]RSDUDODLJXDOGDGHIHFWLYDHQWUHPXMHUHV\KRPEUHV 7tWXOR3UHOLPLQDU'LVSRVLFLRQHV*HQHUDOHV7tWXOR,&RPSHWHQFLDVIXQFLRQHVFRRUGLQDFLyQ\ ILQDQFLDFLyQ 7(0$9,,, &RQYHQLR &ROHFWLYR SDUD HO SHUVRQDO ODERUDO DO 6HUYLFLR GH OD $GPLQLVWUDFLyQ GH OD &RPXQLGDG GH &DQWDEULD 7tWXOR , 2EMHWR \ iPELWR GH DSOLFDFLyQ 7tWXOR ,, 2UJDQL]DFLyQ GHO 7UDEDMR 7tWXOR ,,, 3URYLVLyQ GH 9DFDQWHV 6HOHFFLyQ GH 3HUVRQDO \ &RQWUDWDFLyQ 7tWXOR ,9 )RUPDFLyQ \ 3HUIHFFLRQDPLHQWR GHO SHUVRQDO 7tWXOR 9 &ODVLILFDFLyQ 3URIHVLRQDO 7tWXOR ;,,, 6DOXGODERUDO CVE-2019-3750 2019/3750 i Pág. 12805 boc.cantabria.es 298/298