Contract

7.3.ESTATUTOS Y CONVENIOS COLECTIVOS

CONSEJERÍA DE ECONOMÍA, HACIENDA Y EMPLEO

DIRECCIÓN GENERAL DE TRABAJO

CVE-2014-11542 Resolución disponiendo la inscripción en el Registro y publicación del IV Convenio Colectivo de la empresa Draka Comteq Ibérica SL para el periodo 2013, 2014 y 2015.

Visto el texto del IV Convenio Colectivo de la empresa Draka Comteq Ibérica SL para el periodo 2013, 2014 y 2015 suscrito por la Comisión Negociadora del mismo, integrada por las personas designadas por la empresa en su representación y la representación de los tra- bajadores y, de conformidad con el artículo 90 del Real Decreto Legislativo 1/1995, de 24 xx xxxxx, por el que se aprueba el Texto Refundido de la Ley del Estatuto de los Trabajadores, y los artículos 2 y 8 del Real Decreto 713/2010, de 28 xx xxxx, sobre registro y depósito de los acuerdos y convenios colectivos de trabajo; y, en relación con lo señalado en el Real Decreto 1900/1996, de 2 xx xxxxxx, sobre traspaso de funciones y servicios de la Administración del Estado a la Comunidad Autónoma de Cantabria y Decreto 88/1996, de 3 de septiembre, sobre xxxxxxxx de funciones y servicios transferidos, así como el Decreto 9/2011, de 28 xx xxxxx, de reorganización de las Consejerías de la Administración de la Comunidad Autónoma de Can- tabria y el Decreto 87/2011, de 7 de julio, por el que se modifica parcialmente la Estructura Básica de las Consejerías del Gobierno de Cantabria.

ACUERDA

1.- Ordenar su inscripción en el Registro de Convenios y Acuerdos Colectivos de Trabajo de la Comunidad Autónoma de Cantabria, así como proceder a su depósito.

2.- Disponer la publicación de la presente Resolución y del texto del convenio colectivo de referencia en el Boletín Oficial de Cantabria.

CVE-2014-11542

Santander, 7 xx xxxxxx de 2014. La directora general de Trabajo, Xxxx Xxxxx Xxxxxxxxx Xxxxxxxxx.

,9 &219(1,2 &2/(&7,92 3529,1&,$/

3$5$ (/ 3(5621$/ '( /$ (035(6$ '5$.$ &207(4 ,%(5,&$, 6./.,

'( 0$/,$f2, (&$17$%5,$)

&$3Ë78/2 35,0(52

6(&&,Ï1 1. - È0%,72 '( $3/,&$&,Ï1 < 9,*(1&,$

&/È868/$ 1.

$) (O SUHVHQWH &RQYHQLR KD VLGR FRQFHUWDGR SRU OD &RPLVLyQ 1HJRFLDGRUD GHO ,9 &RQYHQLR &ROHFWLYR 3URYLQFLDO SDUD HO 3HUVRQDO GH OD (PSUHVD '5$.$ &207(4 ,%(5,&$, 6./. GH 0DOLDxR (&DQWDEULD), FRPSXHVWD SRU ORV VLJXLHQWHV PLHPEURV:

5(35(6(17$&,21 62&,$/

'RxD 6$5$ 6$1 (0(7(5,2 0$5$f21 &&.22. '. -RVp 5DPyQ 5($/ $1'5e6 &&.22. '. -RVp 0DQXHO )(51$1'(= &$6752 &&.22. '. -HVXV :ODGLPLU 3$/$8(/26 &25'(52 8.*.7.

5(35(6(17$1&,21 '( /$ (035(6$

'xD. %HDWUL] 0$57Ë1 '20Ë1*8(= '. /OXLV 7251( 5(9(57(5

'. )UDQFHVF 12//$ 0$*5,f$ '. $QJHO 3, /$675$

%) (O SUHVHQWH &RQYHQLR HV GH DSOLFDFLyQ, FRQ H[FOXVLyQ GH FXDOTXLHU RWUR, D WRGR HO SHUVRQDO TXH IRUPH SDUWH GH OD SODQWLOOD DFWLYD GH OD (PSUHVD 'UDND &RPWHT ,EpULFD, 6./. FXDOTXLHUD TXH VHD HO OXJDU HQ TXH SUHVWHQ VXV VHUYLFLRV.

1R REVWDQWH OR GLVSXHVWR HQ HO SiUUDIR DQWHULRU, \ FRQ OD VDOYHGDG GH OR SUHYLVWR HQ HO SiUUDIR VHJXQGR GH OD &OiXVXOD 16, TXHGDQ H[FOXLGRV GHO iPELWR GH DSOLFDFLyQ GHO SUHVHQWH &RQYHQLR &ROHFWLYR, D HIHFWRV GHO WUDWDPLHQWR VDODULDO, GHO HVWDEOHFLPLHQWR GH ORV LQFUHPHQWRV DQXDOHV, GHO VLVWHPD GH SURPRFLyQ, \ GH WRGRV ORV DVSHFWRV FRQWHQLGRV HQ ODV &OiXVXODV TXH DVt OR HVSHFLILTXHQ, WRGRV ORV HPSOHDGRV LQFOXLGRV HQ HO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV.

6LQ SHUMXLFLR GH OR GHWHUPLQDGR HQ HO SiUUDIR DQWHULRU, HO SHUVRQDO SHUWHQHFLHQWH D HVWH &ROHFWLYR GH

7UDEDMR SRU 2EMHWLYRV TXH RVWHQWH FODVH VDODULDO 00 X XXXXXXXX, XXXXXx XXX XXXXXXXXXX XXXXXXXXXXX:

‡ 6XV LQFUHPHQWRV VDODULDOHV VH DMXVWDUiQ D OR TXH GLVSRQJD DO HIHFWR HO &RQYHQLR &ROHFWLYR XXXXXXX XX XXXX XXXXXXX. 0X XXXXXXXX, OD &RPSDxtD, IXHUD GHO iPELWR GH DSOLFDFLyQ GHO &RQYHQLR, SRGUi DSOLFDU D ORV LQWHJUDQWHV GH HVWH JUXSR, LQGLYLGXDOPHQWH FRQVLGHUDGRV, SROtWLFDV VDODULDOHV FRPSOHPHQWDULDV D OD HVWDEOHFLGD HQ HO &RQYHQLR &ROHFWLYR, HQ IXQFLyQ GH VX SHUWHQHQFLD DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV.

CVE-2014-11542

‡ /DV SURPRFLRQHV GH HVWH SHUVRQDO FRQWDUiQ FRQ OD SDUWLFLSDFLyQ GH OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV, VDOYR TXH DIHFWHQ D 7LWXODGRV, 0DQGRV \ 6HFUHWDULDV, XXXX XX XXXXXX XXXXX XXXXXXxX XXXXXX XXXXXXXX X[XXXXXXX XX OD &RPSDxtD, WDQWR SDUD DGTXLULU GLFKDV FDWHJRUtDV SURIHVLRQDOHV, FRPR SDUD SURPRFLRQDU GHQWUR GH ODV PLVPDV.

&) 3DUD OD VROXFLyQ GH FXDOTXLHU FRQIOLFWR R GLVFUHSDQFLD GHULYDGD GH OD DSOLFDFLyQ R LQWHUSUHWDFLyQ GHO SUHVHQWH &RQYHQLR HQ ORV VXSXHVWRV GHO DUW. 82.3 75/(7, TXHGD HVWDEOHFLGR HQ ORV WpUPLQRV HVSHFLILFDGRV HQ ODV FOiXVXODV 33, 34 \ 35 GHO SUHVHQWH &RQYHQLR &ROHFWLYR, OD &RPLVLyQ 3DULWDULD.

/D &RPLVLyQ 3DULWDULD FRQRFHUi GH FXDQWDV FXHVWLRQHV SXHGDQ GHULYDUVH GH OD DSOLFDFLyQ GHO SUHVHQWH &RQYHQLR &ROHFWLYR.

/D &RPLVLyQ 3DULWDULD VH UHJXOD GH DFXHUGR D OR SUHYLVWR HQ ODV FOiXVXODV 33, 34 \ 35 GHO SUHVHQWH &RQYHQLR &ROHFWLYR.

8QD YH] UHVXHOWD OD GLVFUHSDQFLD SRU OD &RPLVLyQ 3DULWDULD, VL XQD GH ODV SDUWHV HVWLPDUD OD UHVROXFLyQ QR FRQIRUPH D VX GHUHFKR, SRGUi IRUPXODU GHPDQGD DQWH HO 2UJDQLVPR GH 5HVROXFLyQ H[WUDMXGLFLDO GH &RQIOLFWRV /DERUDOHV GH &DQWDEULD ( 25(&/$).

&/È868/$ 2.

(O SUHVHQWH &RQYHQLR HVWDUi YLJHQWH GXUDQWH ORV DxRV 2013, 2014 \ 2015.

6X GHQXQFLD VHUi XXXXXxXXXX XX XX XXXXX XX X[XXXXXXxX XXX XXXXX X, XX XX XXXX, XX FXDOTXLHUD GH ODV SUyUURJDV TXH IXHUDQ SDFWDGDV.

7UDQVFXUULGR HO SHUtRGR LQLFLDO XX XXXXXXXX XXXXXXXXXXX XX XX &XXXXXXX X, XX XX XXXX, XX OD SUyUURJD SDFWDGD; VHJXLUiQ DSOLFiQGRVH VXV &OiXVXODV FRQ HO PLVPR DOFDQFH \ FRQWHQLGR FRQ TXH IXHURQ SDFWDGDV, KDVWD WDQWR VH DSUXHEH \ XXXXX XX XXXXX XX XXXXX &XXXXXXX.

0(&&,X0 0x. - &203(16$&,Ï1 < $%625&,Ï1

&/È868/$ 3.

/DV FRQGLFLRQHV HFRQyPLFDV XXXXXXXX XX XXXX &XXXXXXX XXXXXXXXX XXX XXX YHQtDQ ULJLHQGR DQWHULRUPHQWH

\, D VX YH], VHUiQ DEVRUELEOHV SRU FXDOTXLHU PHMRUD XXXXXX XX XXX XXXXXXXXXXX XXXXxXXXXX XXX XXXXXX XXXXXXXXXXXX XXX OD (PSUHVD, SRU GLVSRVLFLRQHV OHJDOHV, FRQYHQFLRQDOHV, DGPLQLVWUDWLYDV R MXGLFLDOHV, VLHPSUH TXH FRQVLGHUDGDV JOREDOPHQWH \ HQ FyPSXWR DQXDO, VHDQ PiV IDYRUDEOHV SDUD ORV WUDEDMDGRUHV TXH ODV XXXXXXXXXX XX XX XXXXXXXX &XXXXXXX.

(X XXXXxX XXXX VHUi FRPSDWLEOH OD DSOLFDFLyQ GHO SUHVHQWH &RQYHQLR FRQ OD GH FRQGLFLRQHV \ GHUHFKRV, WDQWR JHQHUDOHV FRPR SHUVRQDOHV, SURFHGHQWHV GH RWUR &RQYHQLR. /D DSOLFDFLyQ R DSOLFDELOLGDG GH HVWH &RQYHQLR GHWHUPLQDUi DXWRPiWLFDPHQWH OD H[FOXVLyQ GH FXDOTXLHU RWUR.

&/È868/$ 4.

6H UHVSHWDUiQ ODV VLWXDFLRQHV R FRQGLFLRQHV, HVSHFLDOHV R FRPSOHPHQWDULDV D HVWH &RQYHQLR &ROHFWLYR, FRQVHFXHQWHV FRQ OD UHDOL]DFLyQ GHO WUDEDMR SRU REMHWLYRV R SDUWLFLSDFLyQ HQ SURJUDPDV HVSHFtILFRV GH HVSHFLDO QDWXUDOH]D, TXH SXGLHUDQ H[LVWLU R DSOLFDUVH HQ HO IXWXUR D WtWXOR SHUVRQDO, TXH KXELHVHQ VLGR LQGLYLGXDOPHQWH SDFWDGDV HQWUH OD (PSUHVD \ FXDOTXLHUD GH VXV WUDEDMDGRUHV; VLHPSUH TXH ODV FRQGLFLRQHV ODERUDOHV UHVXOWDQWHV XX XXXX, XXXXXXXXXXX XXXXXXXXXXXX \ XX XxXXXXX XXXXX, X[XXXXX XX XXX XXXXXXXXXX XXX FDUiFWHU JHQHUDO HQ HO SUHVHQWH &RQYHQLR SDUD OD &DWHJRUtD 3URIHVLRQDO / *UXSR 6DODULDO GH TXH VH WUDWH, PDQWHQLpQGRVH HVWULFWDPHQWH "DG SHUVRQDP".

CVE-2014-11542

(O SHUVRQDO HQ HVWD VLWXDFLyQ VHUi LGHQWLILFDGR FRPR SHUWHQHFLHQWH DO &ROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, \ HO LQJUHVR HQ HO PLVPR VHUi FRPXQLFDGR D OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV GHO &HQWUR GH 7UDEDMR D TXH SHUWHQH]FD HO HPSOHDGR, GHVSXpV GH VX DFHSWDFLyQ SRU HO LQWHUHVDGR.

&$3Ë78/2 6(*81'2 6(&&,Ï1 1. - -251$'$ '( 75$%$-2

&/È868/$ 5.

-RUQDGD $QXDO.- &RPR FRQVHFXHQFLD GH OD QHFHVLGDG GH DOFDQ]DU XQ PD\RU JUDGR GH XXXXXXXXXXXXXX, XXXXXXxX \ XXXXXXXX DO FOLHQWH, WRGRV ORV WUDEDMDGRUHV GH OD (PSUHVD HVWiQ VXMHWRV, GH DFXHUGR FRQ ODV QHFHVLGDGHV GH WUDEDMR TXH HQ FDGD PRPHQWR VH SURGX]FDQ, D GHVDUUROODU VX DFWLYLGDG XXXXXXXXXXXXXXX XX XXXXXXX XXXXXX, XXXXXXXX, X XXXX HO VLVWHPD GH WXUQRV HQ FXDOTXLHUD GH VXV PRGDOLGDGHV, HQ ORV WpUPLQRV \ FRQGLFLRQHV HVWDEOHFLGRV WDQWR HQ HVWD &OiXVXOD, FRPR HQ OD VLJXLHQWH.

/D MRUQDGD GH WUDEDMR SDUD WRGR HO SHUVRQDO GH OD &RPSDxtD VHUi GH 1.674 XXXXX XXXXXXX XX XXXXXXX XXXXXXXX XX 0000, 0000 \ 0000.

$PEDV SDUWHV DFXHUGDQ HO HVWDEOHFLPLHQWR GH OD SRVLELOLGDG GH PRGLILFDU OD GLVWULEXFLyQ GH OD MRUQDGD DQXDO, HQ ORV WpUPLQRV HVWDEOHFLGRV HQ HO SUHVHQWH &RQYHQLR &ROHFWLYR, PHGLDQWH OD WUDQVIHUHQFLD GH KRUDV SURGXFWLYDV GH pSRFDV GH PHQRU FDUJD GH WUDEDMR KDFLD DTXHOODV RWUDV HQ TXH VH SURGX]FD XQD PD\RU FRQFHQWUDFLyQ GH OD DFWLYLGDG, FRQ ORV REMHWLYRV GH DOFDQ]DU XQ PD\RU JUDGR GH FRPSHWLWLYLGDG, HO DVHJXUDPLHQWR HQ WRGR FDVR GH OD DWHQFLyQ \ VHUYLFLR DO FOLHQWH, \ OD UHGXFFLyQ DO PtQLPR GH ODV KRUDV H[WUDRUGLQDULDV.

/RV H[FHVRV R GHIHFWRV GH MRUQDGD TXH VH DFXPXOHQ DO ILQDO GHO DxR, FRPR FRQVHFXHQFLD GH XXXXX XXXXXXXXX XX XXXXXXXXXX XXXXXX, XX UHJXODUL]DUDQ SUHIHUHQWHPHQWH GHQWUR GHO DxR \ FRPR Pi[LPR FRQ DQWHULRULGDG DO 31 GH PDU]R GHO DxR VLJXLHQWH, UHVSHWDQGR, HQ WRGR FDVR, HO Q~PHUR GH KRUDV GH MRUQDGD DQXDO SUHYLVWR HQ HO SiUUDIR VHJXQGR GH HVWD &OiXVXOD.

'DGDV ODV FDUDFWHUtVWLFDV HVSHFLDOHV GH OD DFWLYLGDG GHVHPSHxDGD SRU ORV LQWHJUDQWHV GHO &ROHFWLYR SHUWHQHFLHQWH DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, VX MRUQDGD GH WUDEDMR, VHJ~Q QHFHVLGDGHV, VHUi GLVWULEXLGD GXUDQWH WRGR HO DxR QDWXUDO.

&/È868/$ 6. ',675,%8&,21 '( /$ -251$'$

1. -RUQDGD QRUPDO.- /D MRUQDGD QRUPDO GH WUDEDMR HV GH VLHWH KRUDV \ FXDUHQWD \ FLQFR PLQXWRV, FRQWLQXDGDV, GH WUDEDMR HIHFWLYR, SDUD WRGRV \ FDGD XQR GH ORV GtDV KiELOHV HVWDEOHFLGRV HQ HO FDOHQGDULR ODERUDO, R GHVSOD]DGRV, GH DFXHUGR FRQ OR SUHYLVWR HQ OD &OiXVXOD 5., FRQ XQ GHVFDQVR GH TXLQFH PLQXWRV, TXH QR FRQVWLWXLUi WLHPSR GH WUDEDMR HIHFWLYR \ VH GLVIUXWDUi DO ILQDO GH OD MRUQDGD.

2. -RUQDGD HVSHFLDO GH WUDEDMR ( 672 ).- /D MRUQDGD HVSHFLDO GH WUDEDMR HV GH RFKR KRUDV QHWDV GH WUDEDMR HIHFWLYR, FRQ XQD LQWHUUXSFLyQ GH DO PHQRV WUHLQWD PLQXWRV GXUDQWH OD MRUQDGD SDUD HIHFWXDU OD FRPLGD (HQ KRUDULR D GHWHUPLQDU SRU OD 'LUHFFLyQ GH OD (PSUHVD), VDOYR HQ DTXHOODV MRUQDGDV GH WUDEDMR HQ ODV TXH SRU UD]RQHV GH DMXVWH GH MRUQDGD DQXDO \ FDOHQGDULR ODERUDO VH HVWDEOH]FD XQD MRUQDGD GLVWLQWD. (VWDV H[FHSFLRQHV VHUiQ FRPXQLFDGDV RSRUWXQDPHQWH D ORV LQWHUHVDGRV PHGLDQWH $YLVR GH OD &RPSDxtD, TXH VHUi H[SXHVWR HQ ORV WDEORQHV XX XXXXXXX.

XXX-0000-00000

0. -XXXXXX XX XXXXXXX XX XX XXXXXXX XX 7XUQRV. /D MRUQDGD GH WUDEDMR HQ HO VLVWHPD GH WXUQRV HV OD VLJXLHQWH:

3.1. (Q HO WUDEDMR D WXUQRV. /RV WXUQRV GH PDxDQD, GH 6:00 D 14:00 KRUDV GH

/XQHV D 9LHUQHV, DPERV LQFOXVLYH, WXUQRV GH WDUGH GH 14:00 D 22:00 KRUDV GH /XQHV D 9LHUQHV, DPERV LQFOXVLYH, \ GH QRFKH GH 22:00 D 6:00 KRUDV ,FRPHQ]DQGR HO /XQHV D ODV 22:00 KRUDV \ WHUPLQDQGR HO

6iEDGR D ODV 6:00 KRUDV, VHUiQ GH RFKR KRUDV GLDULDV GH SUHVHQFLD, FRQWLQXDGDV \ FRQ XQ GHVFDQVR GH TXLQFH PLQXWRV, WRWDOL]DQGR VLHWH KRUDV \ WUHV FXDUWRV GLDULDV GH WUDEDMR HIHFWLYR.

3RU OD QDWXUDOH]D \ REMHWR GHO WUDEDMR D WXUQRV, ORV GHVFDQVRV TXH SDUD HO PLVPR VH GHWHUPLQDQ VH GLVIUXWDUiQ FRQ FDUiFWHU JHQHUDO KDFLD OD PLWDG GH OD MRUQDGD; DVHJXUiQGRVH XX XXXX XXXX XX XXXXXXXXXXX XX OD PLVPD SDUD VX HQODFH FRQ HO WXUQR VLJXLHQWH.

3.2. 7UDEDMR HQ WXUQR DOWHUQDWLYR.

(VWH WXUQR XXXx XXXXXXXX xXXXXXXXXX X XXX XxXX XXxXXXXXX XX XX XXXXXXXXXX xXX[X , XXXX OD GHQRPLQDFLyQ GH WXUQR DOWHUQDWLYR. (O SOXV GH GLFKR WXUQR VHUi GH 135 HXURV, SRU GtD GHWHUPLQDGR HQ HO FDOHQGDULR DGMXQWR SDUD ORV DxRV 2013, 2014 \ 2015. $QH[R ,.

(O SOXV HVWDEOHFLGR GH 000 XXXXX XX SDJDUi H[FOXVLYDPHQWH HQ ORV GtDV PDUFDGRV HQ HO $QH[R ,.

(VWH VLVWHPD GH WXUQR DOWHUQDWLYR HVWDEOHFHUi SHULRGRV GH URWDFLyQ GH 4 VHPDQDV, VHJ~Q SDUULOOD $QH[R ,,. (VWH SOXV GH 000 XXXXX XX XXXXXXXx GXUDQWH HO WLHPSR GHO YLJHQWH FRQYHQLR VLQ DMXVWHV QL YDULDFLyQ DOJXQD.

$ WDO ILQ VH FRQVWLWXLUi XQD &RPLVLyQ 3DULWDULD GH 6HJXLPLHQWR GH OD 3URGXFFLyQ GH FDUiFWHU FRQVXOWLYR, LQWHJUDGD SRU WUHV PLHPEURV GH OD 'LUHFFLyQ \ WUHV PLHPEURV GHO &RPLWp GH (PSUHVD, FRQ HO REMHWLYR GH TXH HVWRV ~OWLPRV HVWpQ LQIRUPDGRV VREUH OD HYROXFLyQ GH ODV FDUJDV GH WUDEDMR H[LVWHQWHV.

(VWD &RPLVLyQ VH UHXQLUi, DO PHQRV, FRQ SHULRGLFLGDG WULPHVWUDO \, HQ WRGR FDVR, FXDQGR VHD VROLFLWDGR SRU DOJXQD GH ODV SDUWHV.

(Q FDVR GH GLVFUHSDQFLD, VH LQIRUPDUi D OD 5HSUHVHQWDFLyQ 6LQGLFDO HQ HO VHQR GH OD &RPLVLyQ 3DULWDULD GHO &RQYHQLR.

&RQ UHIHUHQFLD DO WXUQR DOWHUQDWLYR, LQGLFDGR HQ FOiXVXOD 6, SXQWR 3.2, TXH XXXXXX XXXXXXXX X 00 XXXXXX, XX XXXXXXXx XX XXXXXXX XXX XXX XXXXXXXXXXX XX SURGXFFLyQ H[LVWHQWHV HQ FDGD PRPHQWR. $QH[R ,, (SDUULOOD WXUQR DOWHUQDWLYR).

/RV GtDV 1 \ 6 GH (QHUR, 1 GH 0D\R \ 24, 25 \ 31 GH 'LFLHPEUH, QR VH WUDEDMDUiQ HQ QLQJXQR GH ORV WXUQRV.

/D DSOLFDFLyQ GHO VLVWHPD GH WUDEDMR GH WXUQR DOWHUQDWLYR QR GHEHUi VHU LQIHULRU D FXDWUR VHPDQDV, VDOYR TXH OD FDtGD GH FDUJDV GH WUDEDMR SRU OR FXDO VH LQLFLy, MXVWLILTXHQ OD LPSRVLELOLGDG GH PDQWHQHUOR RSHUDWLYR.

6LHPSUH TXH ODV FLUFXQVWDQFLDV OR SHUPLWDQ, VH OOHYDUi D HIHFWR OD URWDFLyQ QHFHVDULD, FRQ REMHWR GH GDU OD Pi[LPD SDUWLFLSDFLyQ GHO SHUVRQDO HQ HVWH VLVWHPD GH WUDEDMR.

(Q FDVR GH VHU QHFHVDULD OD FRQWUDWDFLyQ GH SHUVRQDO HYHQWXDO SDUD OD UHDOL]DFLyQ GH HVWH VLVWHPD GH WUDEDMR, OD 'LUHFFLyQ GH 'UDND &RPWHT ,EpULFD 6./., WUDWDUi GH OOHYDUOD D FDER, VL IXHUD SRVLEOH \ GH PDQHUD SUHIHUHQWH, FRQ HO SHUVRQDO TXH DQWHULRUPHQWH KXELHUD SUHVWDGR VXV VHUYLFLRV FRQ FRQWUDWR HYHQWXDO.

$VLPLVPR OD 'LUHFFLyQ GH OD (PSUHVD WUDWDUi, HQ OD PHGLGD GH VXV SRVLELOLGDGHV, DWHQGHU ORV FDVRV VRFLDOHV TXH, HVWDQGR DFUHGLWDGD OD LPSRVLELOLGDG GH LQFRUSRUDUVH D HVWH VLVWHPD GH WUDEDMR, SUHVHQWH OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV.

3.3. 7UDEDMR XX XXXXX XXXXxXXXX. 0X XX\ XXXXxX XXXXXXXXXXXXX XXX XXXXX XX OD (PSUHVD XX XXXXXX XXXX XXXXXXXXX \ XXX XxXX XX XXXXXXXXXX.

&/$868/$ 6 %,6

CVE-2014-11542

-RUQDGD 3HUVRQDO 672

1.674 KRUDV GH WUDEDMR HIHFWLYR DxR.

3DUD HO SHUVRQDO 672 FRQ MRUQDGD SDUWLGD, VH HVWXGLDUi HO HVWDEOHFLPLHQWR GH MRUQDGD FRQWLQXDGD GH YHUDQR, VLHPSUH TXH SHUPLWD DWHQGHU D ODV QHFHVLGDGHV GH XXXXXX XX XXXXXXX.

,XXXXXXXXXXXXXXXXX XXX XXXXXXX XX XXXXXXXXXX XXX XX XXXXXXXX, XX ORV XXXXXXXXXX XXXXXX XX XXX XXX XX XXXXXXX X XX XXXXX XXX XxX, \ XX OD SRVLELOLGDG GH HVWDEOHFHU SDUD HO SHUVRQDO 672 MRUQDGD FRQWLQXDGD XX XXXXXX, XX XXXXXXXx XX XXXX XXXX, XX XxXXXXX XXXXX XXX 0.000 KRUDV GH MRUQDGD.

6(&&,21 2. - 9$&$&,21(6 < )(67,9,'$'(6

&/È868/$ 7.

1. /DV YDFDFLRQHV VHUiQ GH 30 GtDV QDWXUDOHV SDUD WRGR HO SHUVRQDO \ VH GLVIUXWDUiQ, SUHIHUHQWHPHQWH, HQ HO PHV GH $JRVWR.

6L HO SURJUDPD GH WUDEDMR OR UHTXLULHVH, SRGUi DPSOLDUVH HO SHULRGR GH YDFDFLRQHV D ORV PHVHV GH

-XQLR, -XOLR \ 6HSWLHPEUH, LQIRUPDQGR DO SHUVRQDO DIHFWDGR FRQ GRV PHVHV GH DQWHODFLyQ.

(O SHUVRQDO TXH YROXQWDULDPHQWH VROLFLWH VXV YDFDFLRQHV IXHUD GHO SHULRGR VHxDODGR HQ HO SiUUDIR DQWHULRU,

\ VLHPSUH TXH ODV QHFHVLGDGHV GH SURGXFFLyQ SHUPLWDQ FRQFHGHU OD VROLFLWXG, GLVIUXWDUi WUHLQWD \ FLQFR GtDV QDWXUDOHV, VLHPSUH TXH VHD GH IRUPD LQLQWHUUXPSLGD \ IXHUD GHO SHULRGR -XQLR-6HSWLHPEUH.

/DV H[FHSFLRQHV D HVWH UpJLPHQ JHQHUDO, VDOYR DTXpOODV TXH VH GHGX]FDQ GH DFXHUGRV LQGLYLGXDOHV, VHUiQ VRPHWLGDV D OD FRQVLGHUDFLyQ GH OD &RPLVLyQ 3DULWDULD.

2. /D ,QFDSDFLGDG 7HPSRUDO VREUHYHQLGD XQD YH] FRPHQ]DGDV pVWDV, QR LQWHUUXPSLUi HO FyPSXWR GH ODV PLVPDV VDOYR HQ FDVR GH KRVSLWDOL]DFLyQ. (Q WRGR FDVR, HO SHUtRGR RILFLDO GH GLVIUXWH GH YDFDFLRQHV ILQDOL]DUi HO 31 GH 'LFLHPEUH GH FDGD DxR.

&/È868/$ 8.

&DOHQGDULR GH )HVWLYLGDGHV.- (O FDOHQGDULR ODERUDO, SDUD FDGD XQR GH ORV DxRV GH YLJHQFLD GHO &RQYHQLR &ROHFWLYR, VHUi DFRUGDGR HQ HO VHQR GH OD &RPLVLyQ 3DULWDULD GHO &RQYHQLR QR PiV WDUGH XXX 00 XX (XXXX XX XXXX XxX. (X XXXX XX XX XXXXXXXX X XX XXXXXXX XXXXX XXXXX XXXXXX, XX 'XXXXXXxX XX OD &RPSDxtD HVWDEOHFHUi HO FDOHQGDULR ODERUDO DSOLFDEOH HQ HO &HQWUR GH 7UDEDMR; VLQ PHQRVFDER GH ODV DFFLRQHV OHJDOHV TXH DVLVWDQ D OD 5HSUHVHQWDFLyQ 6LQGLFDO.

6HUiQ YDFDFLRQDOHV ORV GtDV IHVWLYRV, LQKiELOHV D HIHFWRV ODERUDOHV, TXH OHJDOPHQWH VH GHWHUPLQHQ HQ FDGD ORFDOLGDG SRU ORV 2UJDQLVPRV FRPSHWHQWHV.

6HUiQ QR ODERUDEOHV, DGHPiV, WRGRV ORV ViEDGRV GHO DxR, VDOYR VX XWLOL]DFLyQ SDUD OD UHFXSHUDFLyQ GH KRUDV JHQHUDGDV SRU GHIHFWR, SXGLpQGRVH WDPELpQ UHFXSHUDU GLFKDV KRUDV, D FULWHULR GH OD 'LUHFFLyQ \ VL OD FDUJD GH WUDEDMR OR SHUPLWLHUD GH /XQHV D 9LHUQHV.

7DPELpQ VHUiQ YDFDFLRQDOHV ORV GtDV 24 \ 31 GH 'LFLHPEUH

&/È868/$ 9.

CVE-2014-11542

5pJLPHQ (VSHFLDO.- /DV YDFDFLRQHV \ IHVWLYLGDGHV GHO SHUVRQDO GH 6HUYLFLRV \ 0DQWHQLPLHQWR, VH HTXLSDUDUiQ VHJ~Q FRUUHVSRQGD, D ODV DQWHULRUPHQWH LQGLFDGDV, XX XxXXXXX XXXXX, XXXXXXxXXXXX, XX XXXX XXXX, X XXX XXXXXXXXXXX XX WDOHV VHUYLFLRV, HQ OD IRUPD TXH GLVSRQJD OD 'LUHFFLyQ GHO &HQWUR GH 7UDEDMR, SDUD VX SUHVWDFLyQ HIHFWLYD FRQ HO FDUiFWHU GH FRQWLQXLGDG \ SHUPDQHQFLD TXH ORV PLVPRV UHTXLHUDQ.

&$3Ë78/2 7(5&(52

6(&&,Ï1 1. ± ,1,&,$&,Ï1 '( /$ 5(/$&,Ï1 /$%25$/.

&/È868/$ 10.

1. /DV LQFRUSRUDFLRQHV GHO SHUVRQDO VH FRQVLGHUDUiQ UHDOL]DGDV D WtWXOR GH SUXHED, HVWDEOHFLpQGRVH, DO HIHFWR, XQRV SHUtRGRV GH SUXHED YDULDEOHV, GH DFXHUGR FRQ OD tQGROH GHO SXHVWR D FXEULU \ HO SHUtRGR GH IRUPDFLyQ DGLFLRQDO QHFHVDULR SDUD HO FRUUHFWR GHVHPSHxR GH ODV IXQFLRQHV DVLJQDGDV, FRQIRUPH D OD VLJXLHQWH HVFDOD:

$<8'$17(6 < 7e&1,&26 '( )$%5,&$&,Ï1:

‡ $\XGDQWHV \ 7pFQLFRV GH

)DEULFDFLyQ $ \ %,: 1 PHV

‡ 5HVWR SHUVRQDO XXX XXXXX 0XXXXXXXXXX 0 XXXXX

0x&0,&00, $'0,1,675$7,926 < 623257(6:

. 7RGR HO SHUVRQDO GH HVWRV JUXSRV: 2 PHVHV

7,78/$'26 < (48,9$/(17(6:

‡ &DVR *HQHUDO 12 PHVHV

‡ &DVRV FRQ SHUtRGR HVSHFLDO GH )RUPDFLyQ: 18 PHVHV

/RV SHUtRGRV GH SUXHED SUHYLVWRV SDUD SHUVRQDO WLWXODGR R HTXLYDOHQWH, VROR SRGUiQ DSOLFDUVH HQ HO FDVR HQ TXH HO HPSOHDGR FRQWUDWDGR QR KD\D WHQLGR XQD UHODFLyQ ODERUDO DQWHULRU FRQ OD

&RPSDxtD.

/RV FDVRV FRQ SHUtRGR HVSHFLDO GH IRUPDFLyQ, QHFHVDULR SDUD SRGHU FXEULU DGHFXDGDPHQWH GHWHUPLQDGRV SXHVWRV GH WUDEDMR, VHUiQ DFRUGDGRV SUHYLDPHQWH FRQ OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV, GHVSXpV GH LQIRUPDUOHV GH ORV PRWLYRV TXH OR MXVWLILFDQ.

1. /D VLWXDFLyQ GH ,QFDSDFLGDG 7HPSRUDO, 0DWHUQLGDG, $GRSFLyQ, R $FRJLPLHQWR TXH DIHFWHQ DO WUDEDMDGRU GXUDQWH HO SHUtRGR GH SUXHED, QR LQWHUUXPSLUiQ HO FyPSXWR GHO PLVPR.

2. 7UDQVFXUULGR HO SHUtRGR GH SUXHED VLQ TXH VH KD\D SURGXFLGR GHVHVWLPLHQWR SRU FXDOTXLHUD GH ODV SDUWHV, HO FRQWUDWR DGTXLULUi ILMH]D, FRPSXWiQGRVH D WRGRV ORV HIHFWRV HO WLHPSR FRUUHVSRQGLHQWH DO FLWDGR SHUtRGR.

&/È868/$ 11.

6H SRGUiQ IRUPDOL]DU FRQWUDWRV SRU REUD R VHUYLFLR GHWHUPLQDGR HQ ODV FRQGLFLRQHV \ WpUPLQRV TXH HVWDEOHFH OD OHJLVODFLyQ YLJHQWH.

$ HIHFWRV GH HVWH FRQWUDWR VH FRQVLGHUDQ WUDEDMRV R WDUHDV FRQ DXWRQRPtD \ VXVWDQWLYLGDG SURSLD TXH SXHGHQ FXEULUVH FRQ HVWD PRGDOLGDG FRQWUDFWXDO ORV VLJXLHQWHV:

1. /RV WUDEDMRV TXH VHDQ SHGLGRV SRU ORV FOLHQWHV GH IRUPD VLQJXODUL]DGD \ XXXXXX XXXXXXXXXX XXX XX XXXXXXX XXXXXXXX, X XX XXXXXXXX XXXXX.

CVE-2014-11542

2. 3URJUDPDV GH ,QYHVWLJDFLyQ \ 'HVDUUROOR GH QXHYRV SURGXFWRV, KDVWD HO PRPHQWR GH VX IDVH GH IDEULFDFLyQ.

6(&&,Ï1 2. ± 6$/$5,26

&/È868/$ 12.

$ HIHFWRV VDODULDOHV, ODV FDWHJRUtDV SURIHVLRQDOHV \ ORV SXHVWRV GH WUDEDMR TXH D FRQWLQXDFLyQ VH LQGLFDQ, VH DJUXSDQ GH DFXHUGR FRQ HO QLYHO GH VDODULR DVLJQDGR, GH OD VLJXLHQWH IRUPD:

*5832 &$7(*25Ë$6 < 38(6726

6$/$5,$/

$<8'$17(6 < 7e&1,&26 '( )$%5,&$&,Ï1

48( &2035(1'(

)-1	$\XGDQWH GH )DEULFDFLyQ	$
)-2	$\XGDQWH GH )DEULFDFLyQ	%
)-3	7pFQLFR GH )DEULFDFLyQ	$
)-4	7pFQLFR GH )DEULFDFLyQ	%
)-5	7pFQLFR GH )DEULFDFLyQ	&
)-6	7pFQLFR GH )DEULFDFLyQ	'
)-7	7pFQLFR GH )DEULFDFLyQ	(

*5832 &$7(*25Ë$6 < 38(6726

6$/$5,$/

(03/($'26

48( &2035(1'(

1 $X[LOLDU $GPLQLVWUDWLYR. $X[LOLDU GH 2UJDQL]DFLyQ. $X[LOLDU 7pFQLFR GH

/DERUDWRULR.

2 2ILFLDO 2. $GPLQLVWUDWLYR. 7pFQLFR GH 2UJDQL]DFLyQ GH 2. $QDOLVWD GH 2 GH /DERUDWRULR. $OPDFHQHUR. &RPSUDGRU HQ SOD]D.

3 *UDEDGRU-&RPSUREDGRU GH GDWRV.

4 2ILFLDO 1. $GPLQLVWUDWLYR. 7pFQLFR GH 2UJDQL]DFLyQ GH 1. $QDOLVWD GH 1 GH /XXXXXXXXXX. 0XXXXXXX 0xXXXXX.

0 (XXXXXXXX. 0XXXXXXX ,XXXXXxXXXX. 6HFUHWDULD.

6 -HIH 2. $GPLQLVWUDWLYR. -HIH GH 2UJDQL]DFLyQ GH 2. -HIH GH 2 GH

/DERUDWRULR. 0DHVWUR GH 7DOOHU GH 2. 2SHUDGRU ,QIRUPiWLFR 3ULQFLSDO. 3URJUDPDGRU ,QIRUPiWLFR.

7 0DHVWUR GH 7DOOHU. 3URJUDPDGRU ,QIRUPiWLFR 3ULQFLSDO.

8 -HIH GH 1. $GPLQLVWUDWLYR. 7pFQLFR 3ULQFLSDO. -HIH GH 2UJDQL]DFLyQ GH 1.

-HIH GH 7DOOHU. 0XXXXX. ,XXXXXXXX 0xXXXXX. 0XXXXXXX 0XXXXXXXX. $QDOLVWD

CVE-2014-11542

,QIRUPiWLFR. $\XGDQWH 0xXXXXX 0XXXXXXXX. 'XXXXXXXX.

0 ,XXXXXXXX 0XXXXXXX. /XXXXXXXXX. -HIH GH $GPLQLVWUDFLyQ.

10 7LWXODGR 0XXXXXXX 0XXXXX. 0XXXX GH OLEUH GHVLJQDFLyQ GH OD 'LUHFFLyQ.

7RGR HO SHUVRQDO GH OD (PSUHVD TXHGD DGVFULWR DO *UXSR 6DODULDO TXH OH FRUUHVSRQGD VHJ~Q OD WDEOD SUHFHGHQWH, GH DFXHUGR FRQ VX FDWHJRUtD SURIHVLRQDO R SXHVWR GH WUDEDMR.

1R REVWDQWH, D HIHFWRV H[FOXVLYDPHQWH VDODULDOHV \ D WtWXOR SHUVRQDO, ORV HPSOHDGRV GH SXHVWRV R FDWHJRUtDV TXH QR WHQJDQ YtD GH SURPRFLyQ QDWXUDO SRGUiQ VHU HTXLSDUDGRV D *UXSR VXSHULRU DO TXH OHV FRUUHVSRQGD FXDQGR, D MXLFLR GH OD (PSUHVD, OD HVSHFLDO UHVSRQVDELOLGDG R QDWXUDOH]D GH OD IXQFLyQ HQFRPHQGDGD, D~Q VLHQGR SURSLD GH VX FDWHJRUtD SURIHVLRQDO R SXHVWR GH WUDEDMR, DVt OR MXVWLILTXH.

&/È868/$ 13.

(O SHUVRQDO GH OD (VFDOD GH 7pFQLFRV GH )DEULFDFLyQ FRWL]DUi D OD 6HJXULGDG 6RFLDO HQ ORV VLJXLHQWHV JUXSRV:

$\XGDQWH GH )DEULFDFLyQ $: *UXSR 10

$\XGDQWH GH )DEULFDFLyQ %: *UXSR 09 7pFQLFR GH )DEULFDFLyQ $: *UXSR 09

7pFQLFR GH )DEULFDFLyQ %, &, ' \ (: *UXSR 08

(O FRQMXQWR GH WUDEDMDGRUHV FODVLILFDGRV FRPR 7pFQLFRV GH )DEULFDFLyQ, VH GLVWULEXLUi GH OD VLJXLHQWH IRUPD:

7pFQLFRV GH )DEULFDFLyQ $ ()-3)

7pFQLFRV GH )DEULFDFLyQ % ()-4)

7pFQLFRV GH )DEULFDFLyQ & ()-5)

7pFQLFRV GH )DEULFDFLyQ ' ()-6)

7pFQLFRV GH )DEULFDFLyQ ( ()-7)

6H HVWDEOHFHUiQ SRUFHQWDMHV GH FDGD FDWHJRUtD GH DFXHUGR D ORV QXHYRV HVWXGLRV TXH VH GHVDUUROODUiQ HQ OD &RPLVLyQ 3DULWDULD GH 3URPRFLRQHV.

&/È868/$ 14.

/DV UHWULEXFLRQHV JDUDQWL]DGDV HVWiQ FRQVWLWXLGDV SRU HO 6DODULR %DVH \ HO 3OXV &RQYHQLR, SDUD FDGD

CVE-2014-11542

*UXSR 6DODULDO, \ VRQ ODV TXH VH LQGLFDQ D FRQWLQXDFLyQ:

*5832 6$/$5,$/	6DODULR %DVH (XURV/PHV	3OXV &RQYHQLR (XURV/PHV	727$/ (XURV/PHV
7e&1,&26 '( )$%5,&$&,Ï1
F1	804,49	545,60	1.350,09
F2	1.005,62	682,00	1.687,62
F3	1.023,44	682,67	1.706,11
F4	1.060,55	684,04	1.744,59
F5	1.123,84	697,76	1.821,60
F6	1.196,15	697,77	1.893,92
F7	1.272,70	697,77	1.970,47

EMPLEADOS

01	1.005,62	453,33	1.458,95
02	1.023,44	463,51	1.486,95
03	1.060,55	483,86	1.544,41
04	1.123,84	489,11	1.612,95
05	1.196,16	517,65	1.713,81
06	1.296,64	542,65	1.839,29
07	1.408,63	570,50	1.979,13
08	1.533,40	601,60	2.135,00
09	1.675,13	636,97	2.312,10
10	1.715,03	644,21	2.359,24

/DV UHWULEXFLRQHV XXXXXXX]XXXX XXXXXXXXXX XX XXXX 0XXXX XX XXXXXXXxX DO SHUVRQDO TXH QR VH HQFXHQWUH WUDEDMDQGR EDMR HO 6LVWHPD GH ,QFHQWLYR *OREDO, R TXH, WUDEDMDQGR EDMR HVWH, REWHQJD XQ

ËQGLFH GH ,QFHQWLYR *OREDO LQIHULRU D 100, SRU FDXVDV LPSXWDEOHV D ORV WUDEDMDGRUHV.

/DV UHWULEXFLRQHV XXXXXXXXXX XX XX XXXXXXXXXX 0XXXX 6DODULDO VH SHUFLELUiQ HQ KRUDV RUGLQDULDV, GRPLQJRV, IHVWLYRV, YDFDFLRQHV \ JUDWLILFDFLRQHV H[WUDRUGLQDULDV.

(O 3OXV &RQYHQLR FRQVWLWX\H, SRU VX FDUiFWHU \ QDWXUDOH]D, XQ FRPSOHPHQWR SRU FDOLGDG

\ FDQWLGDG GH WUDEDMR, DXQTXH QR YD\D XQLGR D XQ VLVWHPD GH UHWULEXFLyQ SRU UHQGLPLHQWR \ WLHQH HO FDUiFWHU GH FRPSOHPHQWR GH SURGXFWLYLGDG QR DEVRUELEOH.

&/È868/$ 15.

/DV UHWULEXFLRQHV PtQLPDV JDUDQWL]DGDV, SDUD HO SHUVRQDO SHUWHQHFLHQWH DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, FRQ &ODVH 6DODULDO LJXDO R LQIHULRU D 52, HVWiQ FRQVWLWXLGDV SRU HO 6DODULR %DVH \ HO &RPSOHPHQWR 3HUVRQDO ³(´ 0tQLPR, SDUD FDGD &ODVH 6DODULDO, \ VRQ ODV TXH VH LQGLFDQ D FRQWLQXDFLyQ:

&. 3HUVRQDO "("

CVE-2014-11542

&/$6( 6DODULR %DVH 0tQLPR 727$/

6$/$5,$/ (XURV/PHV (XURV/PHV (XURV/PHV

42	1.005,62	655,72	1.661,34
43	1.023,44	666,20	1.689,64
44	1.060,55	685,88	1.746,43
45	1.123,84	694,49	1.818,33
46	1.196,16	724,30	1.920,46
47	1.296,64	750,49	2.047,13
48	1.408,63	780,62	2.189,25
49	1.533,40	813,33	2.346,73
50	1.675,13	846,64	2.521,77
51/52	1.715,03	854,35	2.569,38

&/È868/$ 16.

/D UHWULEXFLyQ SHUVRQDO GHO FROHFWLYR QR SHUWHQHFLHQWH DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV HVWDUi FRQVWLWXLGD SRU OD UHWULEXFLyQ JDUDQWL]DGD TXH FRUUHVSRQGD VHJ~Q OD &OiXVXOD 26. \, HQ VX FDVR, VHJ~Q OD &OiXVXOD 14., PiV ORV &RPSOHPHQWRV 3HUVRQDOHV GH $QWLJHGDG \ GH WLSR ³$´ \ ³%´, TXH HYHQWXDOPHQWH, SXGLHUD VHU GH DSOLFDFLyQ D WtWXOR LQGLYLGXDO.

/D UHWULEXFLyQ JDUDQWL]DGD SDUD HO SHUVRQDO SHUWHQHFLHQWH DO &ROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, VHUi OD FRUUHVSRQGLHQWH DO WRWDO HVWDEOHFLGR HQ OD 7DEOD 6DODULDO GH OD &OiXVXOD 15.

/RV &RPSOHPHQWRV 3HUVRQDOHV VRQ SHUFHSFLRQHV VDODULDOHV DGLFLRQDOHV, TXH GHULYDQ GH FRQGLFLRQHV SHUVRQDOHV GHO WUDEDMDGRU \ OH VRQ UHFRQRFLGDV SRU OD (PSUHVD D WtWXOR LQGLYLGXDO, FRQ OD QDWXUDOH]D \ FDUDFWHUtVWLFDV TXH VHJXLGDPHQWH VH LQGLFDQ:

&RPSOHPHQWR 3HUVRQDO "$"

7LHQH VX RULJHQ HQ OD DEVRUFLyQ GH 3OXVHV )LMRV R 6DODULR %DVH \ VH DFWXDOL]D FRQ ORV PLVPRV LQFUHPHQWRV TXH H[SHULPHQWH HO 6DODULR %DVH. 7LHQH HO FDUiFWHU GH DEVRUELEOH HQ FDVR GH SURPRFLyQ SRU FDPELR GH *UXSR 6DODULDO R &DPELR GH &ODVLILFDFLyQ QR QDWXUDO.

&RPSOHPHQWR 3HUVRQDO ³%´

(V FDUDFWHUtVWLFR GHO SHUVRQDO, QR SHUWHQHFLHQWH DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYR, \ WLHQH VX RULJHQ HQ OD VXVWLWXFLyQ GH SOXVHV, QR ILMRV. 7LHQH FDUiFWHU GH QR DEVRUELEOH \ VH DFWXDOL]DUi HQ ORV PLVPRV LQFUHPHQWRV TXH H[SHULPHQWH HO 6DODULR %DVH.

&RPSOHPHQWR 3HUVRQDO "("

(V HO FDUDFWHUtVWLFR GHO SHUVRQDO SHUWHQHFLHQWH DO &ROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, \ WLHQH VX RULJHQ HQ OD DVLJQDFLyQ SRU SDUWH GH OD &RPSDxtD GH SHUFHSFLRQHV HFRQyPLFDV DGLFLRQDOHV, HQ IXQFLyQ GH OD DSOLFDFLyQ GH FRQRFLPLHQWRV HVSHFLDOHV, SRU UHDOL]DU VX WUDEDMR SRU XXXXXXXXX X XXX XXXXXXXXXX XX XXXXXXXXX X XXXXX XXXXXXXXX XXXXXXXXXXXXXXXXX R IXQFLRQHV HVSHFtILFDV TXH, D MXLFLR GH OD &RPSDxtD, PHUH]FDQ WDO DVLJQDFLyQ.

7HQGUi ODV VLJXLHQWHV FDUDFWHUtVWLFDV, VHJ~Q HO FROHFWLYR GH TXH VH WUDWH:

&RQ &ODVH 6DODULDO 53 R VXSHULRU.- 6X FXDQWtD WRWDO VHUi UHYLVDEOH SRU LQLFLDWLYD GH OD &RPSDxtD \ WLHQH HO FDUiFWHU GH DEVRUELEOH HQ UHODFLyQ FRQ ORV LQFUHPHQWRV TXH SXHGD H[SHULPHQWDU ODV 7DEODV 6DODULDOHV, LQFOXLGD OD HVSHFtILFD SDUD ODV FODVHV VDODULDOHV 52 R LQIHULRU, \ GHPiV FRQFHSWRV UHWULEXWLYRV FRQWHQLGRV HQ HO &RQYHQLR &ROHFWLYR, DVt FRPR FRQ UHVSHFWR D OD DSOLFDFLyQ GH VXV FRQFHSWRV YDULDEOHV, GH SXHVWR GH WUDEDMR R SRU FDOLGDG R FDQWLGDG TXH VHDQ FRPSOHPHQWDULRV R DGLFLRQDOHV D ODV 7DEODV 6DODULDOHV.

&RQ &ODVH 6DODULDO 52 R LQIHULRU.- $O &RPSOHPHQWR 3HUVRQDO ³(´ PtQLPR TXH VH LQGLFD HQ OD 7DEOD 6DODULDO GH OD &OiXVXOD 15., OH VHUi GH DSOLFDFLyQ ORV LQFUHPHQWRV VDODULDOHV FRQIRUPH D OR HVWDEOHFLGR HQ OD &OiXVXOD 1, SiUUDIR WHUFHUR GHO &RQYHQLR &ROHFWLYR.

CVE-2014-11542

(Q FDVR GH H[LVWLU, HO PLVPR WUDWDPLHQWR LQGLFDGR SDUD ODV &ODVHV 53 R VXSHULRU, WHQGUi OD GLIHUHQFLD HQWUH HO &RPSOHPHQWR 3HUVRQDO ³(´ PtQLPR HVWDEOHFLGR HQ OD WDEOD VDODULDO TXH OHV HV GH DSOLFDFLyQ, \ HO UHDOPHQWH DVLJQDGR D FDGD WUDEDMDGRU D WtWXOR LQGLYLGXDO.

&/È868/$ 17.

1. /D LQFOXVLyQ HQ HO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV VHUi RIUHFLGD SRU OD &RPSDxtD \ VHUi GH DFHSWDFLyQ XXXXXXXXXX XXX XXXXX XXX XXXXXXXXXX. 0X XXXXXXXX, XX XXXXXX XX ODV FDUDFWHUtVWLFDV GHO SXHVWR GH WUDEDMR, WRGRV ORV FRQVLGHUDGRV FRPR GH FODVH VDODULDO 52 R VXSHULRU TXHGDUiQ LQFOXLGRV HQ HO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV.

2. $O SHUVRQDO LQFOXLGR HQ HO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV QR OH VHUiQ GH DSOLFDFLyQ ODV 7DEODV 6DODULDOHV, ORV VLVWHPDV GH LQFUHPHQWRV VDODULDOHV HVWDEOHFLGRV HQ HO SUHVHQWH &RQYHQLR &ROHFWLYR, QL DTXHOODV RWUDV FOiXVXODV GHO PLVPR HQ ODV TXH H[SUHVDPHQWH DVt VH GHWHUPLQH, VDOYR OR HVSHFLDOPHQWH HVWDEOHFLGR SDUD HO SHUVRQDO GH HVWH &ROHFWLYR FRQ &ODVH 6DODULDO 52 R LQIHULRU, \ OR HVWDEOHFLGR HQ OD &OiXVXOD 16.

3. &XDQGR XQ WUDEDMDGRU VH LQWHJUH HQ HO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, SURYHQLHQWH GHO VLVWHPD JHQHUDO FRQWHPSODGR HQ HO &RQYHQLR &ROHFWLYR, VXV FRQFHSWRV UHWULEXWLYRV VHUiQ ORV VLJXLHQWHV:

$. 6$/$5,2 %$6( / &203/(0(172 '( $17,*h('$'/ /RV TXH YLQLHVH SHUFLELHQGR KDVWD HO PRPHQWR GH VX LQFRUSRUDFLyQ DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV.

%. &203/(0(172 3(5621$/ ³(´.- &RPSUHQGH OD VXPD GH ODV FXDQWtDV FRUUHVSRQGLHQWHV D ORV FRQFHSWRV VDODULDOHV HVWDEOHFLGRV HQ OD &OiXVXOD 26., H[FHSWR HO 6DODULR %DVH, \ GHO &RPSOHPHQWR 3HUVRQDO GH WLSR ³$´ TXH YLQLHVH SHUFLELHQGR KDVWD HO PRPHQWR.

&/È868/$ 18.

(Q FDVR GH TXH HO HPSOHDGR VROLFLWDVH OD UHQXQFLD DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV SDUD YROYHU D UHJLUVH SRU ODV FRQGLFLRQHV JHQHUDOHV GHO &RQYHQLR &ROHFWLYR, \ IXHUD DFHSWDGD SRU OD &RPSDxtD, OD UHWULEXFLyQ TXHGDUi FRPSXHVWD SRU ORV VLJXLHQWHV FRQFHSWRV VDODULDOHV:

$. 7$%/$ 6$/$5,$/ (&/È868/$ 14. / &203/(0(172 '( $17,*h('$'.-

/RV FRUUHVSRQGLHQWHV DO SXHVWR GH WUDEDMR GHVHPSHxDGR.

%. &203/(0(172 3(5621$/ ³$´.- (O TXH WXYLHVH DQWHV GH VX LQFRUSRUDFLyQ DO

6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, VL WLHQH OD PLVPD FODVH VDODULDO TXH OD DVLJQDGD HQ HO PRPHQWR GH GLFKD LQFRUSRUDFLyQ.

&XDQGR OD FODVH VDODULDO VHD VXSHULRU D OD DVLJQDGD HQ HO PRPHQWR GH OD LQFRUSRUDFLyQ DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, VHUi HO TXH UHVXOWH GH GHGXFLU OD SDUWH FRUUHVSRQGLHQWH GH HVWH FRPSOHPHQWR SHUVRQDO GHULYDGR GH OD SURPRFLyQ HIHFWXDGD, DO TXH WXYLHVH DQWHV GH GLFKD LQFRUSRUDFLyQ, VHJ~Q QRUPDWLYD LQWHUQD GH OD (PSUHVD.

&. ,1&(17,92 */2%$/.- (O TXH FRUUHVSRQGD DO SXHVWR GH WUDEDMR GHVHPSHxDGR \ ÈUHD D OD TXH SHUWHQH]FD, HQ ORV WpUPLQRV \ FRQGLFLRQHV HVWDEOHFLGRV HQ OD &OiXVXOD 26.

6(&&,Ï1 3. - 48,148(1,26

CVE-2014-11542

&/È868/$ 19.

/RV 4XLQTXHQLRV VH FDOFXODUiQ WRPDQGR FRPR EDVH, SDUD FDGD *UXSR R &ODVH 6DODULDO, HO YDORU TXH ILJXUD HQ OD FROXPQD ³6DODULR %DVH´ HQ 7DEOD 6DODULDO \ VX LPSRUWH WHQGUi OD FRQVLGHUDFLyQ GH ³&RPSOHPHQWR 3HUVRQDO´. (O LPSRUWH GH FDGD TXLQTXHQLR VHUi GHO 5% GHO 6DODULR %DVH.

6H DERQDUi DO PHV VLJXLHQWH GH FXPSOLUVH HO TXLQTXHQLR.

6(&&,Ï1 4. - 3/86(6

&/È868/$ 20.

1 /RV 3OXVHV UHJODPHQWDULRV GH WUDEDMR: 7y[LFR, 3HQRVR, \ 3HOLJURVR VHUiQ GHO YHLQWH SRU FLHQWR VREUH HO 6DODULR %DVH PiV HO FRPSOHPHQWR SHUVRQDO \ VH DERQDUiQ SRU GtD WUDEDMDGR.

2 (O 3OXV GH 7UDEDMR 1RFWXUQR VHUi GHO FLQFXHQWD SRU FLHQWR GHO 6DODULR %DVH, \ VH SHUFLELUi SRU GtD WUDEDMDGR.

$ HVWRV HIHFWRV VH HVWDEOHFH FRPR SHUtRGR GH WUDEDMR QRFWXUQR HO FRPSUHQGLGR HQWUH ODV YHLQWLGyV KRUDV \ ODV VHLV KRUDV.

3DUD VX GHYHQJR VH FRPSXWDUiQ DTXHOODV LQWHUUXSFLRQHV UHJODPHQWDULDV TXH IRUPHQ SDUWH GH OD MRUQDGD ODERUDO.

(VWH 3OXV QR VHUi GH DSOLFDFLyQ DO SHUVRQDO FRQWUDWDGR SDUD HVWH SURSyVLWR.

3. (O SHUVRQDO TXH WUDEDMH HQ UpJLPHQ GH WXUQRV (PDxDQD/WDUGH, PDxDQD/QRFKH, WDUGH/QRFKH R PDxDQD/WDUGH/QRFKH) SHUFLELUi XQ 3OXV SRU GtD WUDEDMDGR HTXLYDOHQWH DO TXLQFH SRU FLHQWR GH VX 6DODULR %DVH.

4. $ OD UHDOL]DFLyQ GHO WUDEDMR GH OD PRGDOLGDG GHO GHQRPLQDGR WXUQR DOWHUQDWLYR, OH VHUi GH DSOLFDFLyQ OD FDQWLGDG GH 135 HXURV HQ ORV GtDV GHWHUPLQDGRV HQ ORV FDOHQGDULRV GH WXUQR DOWHUQDWLYR HQ HO

$QH[R , HQ 2013, 2014 \ 0000, XXXXXXX XXX XX WUDEDMHQ FRPR PtQLPR FXDWUR KRUDV GH OD MRUQDGD ODERUDO.

$ HIHFWRV GHO FiOFXOR GH ORV LPSRUWHV FRUUHVSRQGLHQWHV D ORV SOXVHV DQWHULRUPHQWH LQGLFDGRV, HO YDORU HQ HXURV/KRUD VHUi HO HTXLYDOHQWH D GLYLGLU HO VDODULR EDVH GHO WUDEDMDGRU HQ HXURV/PHV, SRU OD FDQWLGDG UHVXOWDQWH GH PXOWLSOLFDU ODV KRUDV GH MRUQDGD QRUPDO GLDULD ILMDGD HQ HO SUHVHQWH &RQYHQLR SRU WUHLQWD GtDV.

5. (VWRV SOXVHV WDPELpQ VHUiQ GH DSOLFDFLyQ DO SHUVRQDO SHUWHQHFLHQWH DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, FRQ FODVH VDODULDO 52 R LQIHULRU. 1R DIHFWDUiQ DO SHUVRQDO FRQ FODVH VDODULDO 53 R VXSHULRU, D TXLHQHV OD &RPSDxtD DSOLFDUi VX QRUPDWLYD LQWHUQD VREUH SROtWLFD VDODULDO SDUD HVWH &ROHFWLYR.

6(&&,Ï1 5. - *5$7,),&$&,21(6 (;75$25',1$5,$6

&/È868/$ 21.

/DV *UDWLILFDFLRQHV ([WUDRUGLQDULDV GH -XOLR \ 'LFLHPEUH VHUiQ GH XQ PHV GH VXHOGR R WUHLQWD GtDV GH VDODULR.

(O GHYHQJR GH HVWDV JUDWLILFDFLRQHV VHUi SURUUDWHDGR SRU VHPHVWUHV QDWXUDOHV, FRPSXWiQGRVH D HVWRV HIHFWRV FRPR WLHPSR WUDEDMDGR HO SDVDGR HQ VLWXDFLyQ GH ,QFDSDFLGDG 7HPSRUDO GHULYDGD GH HQIHUPHGDG R DFFLGHQWH GH WUDEDMR.

6(&&,Ï1 6. - +25$6 (;75$25',1$5,$6

CVE-2014-11542

&/È868/$ 22.

1. /DV SDUWHV ILUPDQWHV GHO SUHVHQWH &RQYHQLR DVXPHQ H[SUHVDPHQWH HO FULWHULR GH UHGXFFLyQ GH ODV KRUDV H[WUDRUGLQDULDV DO QLYHO PiV EDMR TXH UHVXOWH FRPSDWLEOH FRQ HO DGHFXDGR DSURYHFKDPLHQWR GH ORV UHFXUVRV LQGXVWULDOHV GH OD (PSUHVD, DVt FRPR FXDQGR UHVXOWHQ QHFHVDULDV SDUD KDFHU SRVLEOH HO FXPSOLPLHQWR GH FRPSURPLVRV \ QHFHVLGDGHV RSHUDWLYDV TXH QR XX\XX XXXXXX XXX XXXXXXXXXXXX XXX XXXXXXXXXXXX, \ XXX OD REVHUYDQFLD GH ORV UHTXLVLWRV HVWDEOHFLGRV HQ OD OHJLVODFLyQ YLJHQWH.

/RV YDORUHV GH OD KRUD H[WUDRUGLQDULD SDUD ODV GLVWLQWDV FDWHJRUtDV VHUiQ ODV VLJXLHQWHV:

9$/25

*5832 6$/$5,$/	(XURV/+RUD ([WUD
7e&1,&26 '( )$%5,&$&,21
)1	13,56
)2	16,94
)3	17,11
)4	17,50
)5	18,44
)6	19,35
)7	20,33
(03/($'26
01	15,58
02	15,80
03	16,39
04	17,12
05	18,12
06	19,42
07	20,84
08	22,44
09	24,24
10	24,68

(O YDORU KRUD LQFOXLGR HQ OD WDEOD SUHFHGHQWH HQJORED WRGRV ORV FRQFHSWRV SRU ORV TXH WUDGLFLRQDOPHQWH VH KDQ XXXXXX XXXXXXXX XXX XXXXX X[XXXXXXXXXXXXX.

(X XXXXXXXXXXX XXXXXXXX XX XXX XXXXX X[XXXXXXXXXXXXX DIHFWDUi D OD HILFDFLD PHGLD SRQGHUDGD, XWLOL]DGD SDUD HO SDJR GHO ,QFHQWLYR *OREDO.

2. $ FULWHULR GH OD 'LUHFFLyQ GH OD &RPSDxtD, ODV KRUDV H[WUDRUGLQDULDV SRGUiQ GLVIUXWDUVH FRQ WLHPSR FRPSHQVDWRULR R DERQDUVH, FRQIRUPH D ODV QRUPDV HVWDEOHFLGDV XX XX XXXXXXXX XXXXXXXX.

(X XXXX XX XXXXXXXX XXX XXXXXX XXXXXXXXXXXXX, pVWH VH UHDOL]DUi D UD]yQ GH XQD KRUD \ FXDUHQWD \ FLQFR PLQXWRV GH GHVFDQVR SRU FDGD KRUD H[WUDRUGLQDULD UHDOL]DGD.

3. 1R VH FRPSXWDUiQ GHQWUR GHO OtPLWH HVWDEOHFLGR HQ OD OHJLVODFLyQ YLJHQWH ODV KRUDV TXH KD\DQ VLGR FRPSHQVDGDV FRQ GHVFDQVR GXUDQWH HO DxR QDWXUDO \ HO SULPHU VHPHVWUH GHO DxR VLJXLHQWH D VX UHDOL]DFLyQ.

4. 'DGD OD QDWXUDOH]D \ FDUDFWHUtVWLFDV SURSLDV GHO SHUVRQDO DGVFULWR YROXQWDULDPHQWH DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, HO FREUR R FRPSHQVDFLyQ GH ODV KRUDV H[WUDRUGLQDULDV QR VHUi GH DSOLFDFLyQ D HVWH FROHFWLYR GH SHUVRQDV.

6(&&,Ï1 7. - 3$*2 325 %$1&2

CVE-2014-11542

&/È868/$ 23.

/RV XXXXXXXX XXXXXXXXXX XX XXXxX XXXXXXXXX XXXXXXXX XXXXXXXXXXXXX XXXXXXXX, XXXX xXXXX XXXXX XXXXXXXXXXX SDUD HOOR. $ HVWH ILQ, WRGR HO SHUVRQDO HVWi REOLJDGR D IDFLOLWDU D OD (PSUHVD ORV GDWRV GH FXHQWD HQ HVWDEOHFLPLHQWR EDQFDULR R &DMD GH $KRUURV.

&$3Ë78/2 &8$572

6(&&,Ï1 1 - 6,67(0$ '( ,1&(17,92 */2%$/

&/È868/$ 24.

(O 6LVWHPD GH ,QFHQWLYR *OREDO VXVWLWX\H DO 6LVWHPD GH 3ULPDV 0.7.0. XX *XXXX XX XXXX XXXXXX XXXx XX XXXXXXXXX, \ XX UHJXODUi GH DFXHUGR FRQ HO VLJXLHQWH PDUFR GH FRQGLFLRQHV:

1. (O 6LVWHPD GH ,QFHQWLYR *OREDO VH DSOLFDUi HQ IXQFLyQ GH XQ ,QGLFH GH ,QFHQWLYR *OREDO, DEUHYLDGDPHQWH ,.,.*., TXH VH FRUUHVSRQGHUi FRQ OD HILFDFLD UHDO PHGLD SRQGHUDGD GH OD

)iEULFD, FDOFXODGD PHGLDQWH HO 6LVWHPD 0.7.0., HQ ORV PLVPRV WpUPLQRV TXH KDVWD DKRUD KDQ VLGR KDELWXDOHV.

(O UHQGLPLHQWR FRPSXWDEOH SRU HVWH 6LVWHPD VHUi HO REWHQLGR SRU HO FRQMXQWR GH OD SODQWLOOD TXH SDUWLFLSD GLUHFWDPHQWH HQ OD SURGXFFLyQ. (O 5HQGLPLHQWR 0tQLPR ([LJLEOH HV HO TXH SXHGH DOFDQ]DU OD SODQWLOOD SURGXFWLYD HIHFWXDQGR VX WUDEDMR HQ FRQGLFLRQHV QRUPDOHV, VLQ JUDQGHV IDWLJDV ItVLFDV QL PHQWDOHV, FRQ XQ HVIXHU]R UD]RQDEOH \ VLQ GHWULPHQWR GH VX LQWHJULGDG, \ FRUUHVSRQGH HQ HVWH 6LVWHPD D XQ ,QGLFH GH

,QFHQWLYR *OREDO LJXDO D 100((.5. 96), HTXLYDOHQWH HQ WpUPLQRV GH HVIXHU]R D XQD HILFDFLD 100 HQ HO 6LVWHPD 0.7.0.

6H FRQVLGHUD FRPR 3HUVRQDO 3DUWLFLSDQWH 'LUHFWR DO SHUVRQDO FODVLILFDGR RUJDQL]DWLYDPHQWH FRPR SHUVRQDO GLUHFWR D OD 3URGXFFLyQ, UHDOL]DQGR WDUHDV LQFOXLGDV HQ ODV SDXWDV GH IDEULFDFLyQ. (O UHVWR GHO SHUVRQDO VH FRQVLGHUD FRPR 3HUVRQDO 3DUWLFLSDQWH ,QGLUHFWR,

(O SHUVRQDO SHUWHQHFLHQWH DO &ROHFWLYR LQWHJUDGR HQ HO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV QR SHUFLELUi FDQWLGDG DOJXQD HQ FRQFHSWR GH ,QFHQWLYR *OREDO.

2. (O ,QGLFH GH ,QFHQWLYR *OREDO VHUi ~QLFR \ VH HODERUDUi VREUH OD EDVH GH OD DFWLYLGDG JOREDO.

3. (O ,QFHQWLYR *OREDO, FRPR FRQFHSWR UHWULEXWLYR GHULYDGR GHO 6LVWHPD GH ,QFHQWLYR *OREDO, WHQGUi OD FRQVLGHUDFLyQ GH &RPSOHPHQWR SRU FDQWLGDG \ FDOLGDG GH WUDEDMR. (VWH FRPSOHPHQWR QR WHQGUi FDUiFWHU GH FRQVROLGDEOH. 6X SHUFHSFLyQ HPSH]DUi DO DOFDQ]DUVH HO 5HQGLPLHQWR 0tQLPR ([LJLEOH, TXH TXHGD HVWDEOHFLGR HQ HO ,QGLFH GH ,QFHQWLYR *OREDO LJXDO D 100.

4. (O ,QFHQWLYR *OREDO QR VH DERQDUi HQ VLWXDFLRQHV GH UHJXODFLyQ GH HPSOHR R DXVHQFLD DO WUDEDMR. (Q HVWDV VLWXDFLRQHV VH DSOLFDUi OD 7DEOD 6DODULDO GH OD &OiXVXOD 14.

6X SHUFHSFLyQ VHUi LQFRPSDWLEOH FRQ HO GHYHQJR GH SULPDV R GH FXDOTXLHU RWUR FRQFHSWR GH QDWXUDOH]D DQiORJD, \ QR VHUi GH DSOLFDFLyQ DO SHUVRQDO SHUWHQHFLHQWH DO &ROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV.

5. (O ,QFHQWLYR *OREDO VH XXXXXXXXx XX XXXXXXX XXXXXXXXXXXXX, XXXXXXX XXX XX XXXXXXX XX ,XXXXX XX ,QFHQWLYR *OREDO QR LQIHULRU D 100, \ SRU ODV FXDQWtDV TXH, SDUD FDGD *UXSR 6DODULDO, VH GHWHUPLQDQ HQ OD &OiXVXOD 26.

&/$868/$ 25.

CVE-2014-11542

$ HIHFWRV VDODULDOHV, HO SHUVRQDO TXH UHDOLFH VX WUDEDMR EDMR HO 6LVWHPD GH ,QFHQWLYR *OREDO, DO XXXXX X XXXXXXXXXX XX XX XXXXX, \ XXXXXXXX XXXXXXX]XX XX xXXX \ XXXXXXX XQ ,.,.*. XX XXXXXXXX X 000, XXXXXx XX XXXXXXXX XXX XXXXXXX XXX OD 7DEOD 6DODULDO FRQWHQLGD HQ OD &OiXVXOD 14 GHO SUHVHQWH &RQYHQLR, \ SHUFLELUi XQ VX OXJDU ODV UHWULEXFLRQHV HVWDEOHFLGDV HQ OD &OiXVXOD 26.

&/È868/$ 26.

/DV SHUFHSFLRQHV JDUDQWL]DGDV SDUD HO SHUVRQDO TXH WUDEDMH EDMR HO 6LVWHPD GH ,QFHQWLYR *OREDO FRQ XQ ËQGLFH GH ,QFHQWLYR *OREDO QR LQIHULRU D 100 ((.5. 96), R FXDQGR pVWH VHD LQIHULRU SRU FDXVDV QR LPSXWDEOHV DO WUDEDMDGRU, HVWiQ FRQVWLWXLGDV SRU HO 6DODULR %DVH \ HO ,QFHQWLYR *OREDO SDUD FDGD *UXSR 6DODULDO, \ VRQ ODV TXH VH LQGLFDQ D FRQWLQXDFLyQ, GHVGH HO GtD 1 GH (QHUR GH 2013.

*5832 6$/$5,$/	6DODULR %DVH (XURV/PHV	,QFHQWLYR *OREDO (XURV/PHV	727$/ (XURV/PHV
7e&1,&26 '( )$%5,&$&,Ï1
F1	804,49	701,84	1.506,33
F2	1.005,62	877,31	1.882,93
F3	1.023,44	878,07	1.901,51
F4	1.060,55	880,32	1.940,87
F5	1.123,84	916,21	2.040,05
F6	1.196,15	918,08	2.114,23
F7	1.272,70	919,92	2.192,62
(03/($'26
01	1.005,62	655,72	1.661,34
02	1.023,44	666,20	1.689,64
03	1.060,55	685,88	1.746,43
04	1.123,84	694,49	1.818,33
05	1.196,16	724,30	1.920,46
06	1.296,64	750,49	2.047,13
07	1.408,63	780,62	2.189,25
08	1.533,40	813,33	2.346,73
09	1.675,13	846,64	2.521,77
10	1.715,03	854,35	2.569,38

/DV UHWULEXFLRQHV XXXXXXXXXX XX XXX XXXXXX XXXXXXXXXXX XX SHUFLELUiQ HQ KRUDV RUGLQDULDV, GRPLQJRV, IHVWLYRV, YDFDFLRQHV \ JUDWLILFDFLRQHV H[WUDRUGLQDULDV.

(O ,QFHQWLYR *OREDO FRQVWLWX\H, SRU VX FDUiFWHU \ XXXXXXXX]X, XX XXXXXXXXXXX XXX XXXXXXXX XX XXXXXXX XXX XXXXXXX XXXXXXXX, XXXXX DO 6LVWHPD GH ,QFHQWLYR *OREDO TXH VH GHVFULEH HQ HO SUHVHQWH &DStWXOR.

6(&&,21 2 .- 5(75,%8&,21 9$5,$%/(

CVE-2014-11542

&/È868/$ 26.%,6

1. $0%,72 '( $3/,&$&,Ï1:

$SOLFDEOH H[FOXVLYDPHQWH D HPSOHDGRV GH OD SODQWLOOD DFWLYD GH OD (PSUHVD '5$.$ &207(4

,%(5,&$ 6./. QR SHUWHQHFLHQWHV DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV.

2. &$5$&7(5,67,&$6 *(1(5$/(6:

(VWH 3URJUDPD HV LQFRPSDWLEOH FRQ FXDOTXLHU RWUR HVTXHPD GH 5HWULEXFLyQ 9DULDEOH GH QDWXUDOH]D DQiORJD R HTXLYDOHQWH.

‡ (O 3HUVRQDO DIHFWDGR SRU HVWH 3URJUDPD WLHQH DVLJQDGR XQ YDORU 7DUJHW (1LYHO 100% GH FRQVHFXFLyQ GH 2EMHWLYRV HVWDEOHFLGRV) GH XQ 2,0% GHO 6DODULR 3HUVRQDO D 31 GH 'LFLHPEUH GHO DxR FRUUHVSRQGLHQWH D ORV 2EMHWLYRV HVWDEOHFLGRV.

‡ 6H GHILQH HO 6DODULR 3HUVRQDO D 31 GH 'LFLHPEUH GHO DxR FRUUHVSRQGLHQWH D ORV 2EMHWLYRV HVWDEOHFLGRV FRPR OD VXPD GH ORV LPSRUWHV GH ORV VLJXLHQWHV FRQFHSWRV GH OD HVWUXFWXUD VDODULDO: 6DODULR %DVH, ,QFHQWLYR *OREDO, &RPSOHPHQWR 3HUVRQDO ³$´, &RPSOHPHQWR $QWLJHGDG \ &RPSOHPHQWR ³%´.

‡ (O SDJR GHO LPSRUWH GH OD 5HWULXXXXxX 0XXLDEOH VH UHDOL]DUi DO DxR VLJXLHQWH \, H[FOXVLYDPHQWH D ORV HPSOHDGRV TXH ILJXUHQ HQ OD SODQWLOOD DFWLYD GH OD (PSUHVD, HQ HO PRPHQWR GH VX DERQR, XQD YH] FRQRFLGR HO 5HVXOWDGR GH WRGRV ORV 2EMHWLYRV HVWDEOHFLGRV, HQ IXQFLyQ GHO QLYHO GH FRQVHFXFLyQ GH ORV PLVPRV, HQ EDVH DO 6DODULR 3HUVRQDO DQXDOL]DGR D 31 GH 'LFLHPEUH GHO DxR FRUUHVSRQGLHQWH D ORV 2EMHWLYRV HVWDEOHFLGRV \ ODV KRUDV GH SUHVHQFLD GH FDGD SHUVRQD HQ HO DxR GHO HMHUFLFLR. $ SDUWLU GH OD IHFKD GH OD ILUPD GH HVWH FRQYHQLR, HQ ORV FDVRV GH FDXVD GH EDMD HQ OD &RPSDxtD, VH DERQDUi HO LPSRUWH GH OD 5HWULEXFLyQ 9DULDEOH HQ OD OLTXLGDFLyQ FRUUHVSRQGLHQWH, XWLOL]DQGR ORV UDWLRV H[LVWHQWHV D OD IHFKD GH OD EDMD.

‡ /RV LPSRUWHV GHYHQJDGRV SRU OD DSOLFDFLyQ GH HVWH 3URJUDPD GH 5HWULEXFLyQ 9DULDEOH QR WLHQHQ FDUiFWHU GH FRQVROLGDEOHV HQ OD 5HWULEXFLyQ.

‡ /D 'LUHFFLyQ GH OD &RPSDxtD VH UHVHUYD HO GHUHFKR GH UHQRYDU DQXDOPHQWH, PRGLILFDU R DQXODU HVWH 3URJUDPD.

3. 2%-(7,926:

‡ (O LPSRUWH GH OD 5HWULEXFLyQ 9DULDEOH HVWi EDVDGR HQ HO QLYHO GH FRQVHFXFLyQ GH ORV 2EMHWLYRV TXH VHJXLGDPHQWH VH LQGLFDQ, SDUD ORV TXH OD 'LUHFFLyQ GH OD (PSUHVD ILMDUi 3 YDORUHV (0tQLPR, 7DUJHW \ 0i[LPR) SDUD PHGLU VX QLYHO GH FRQVHFXFLyQ:

0XXXXXXX	0XXXXX	0XXX	0XXXX 0xXXXX	0XXXX 7DUJHW	9DORU 0i[LPR
. 9(17$6	. (XURV	40%	80% V/%XGJHW	%XGJHW	120% V/%XGJHW
. (),&$&,$ 5($/%		15%	90% V/%XGJHW	%XGJHW	110% V/%XGJHW
. '(63(5',&,2 %		15%	110% V/%XGJHW	%XGJHW	90% V/%XGJHW
'.'.3. ((QWUHJDV) %		30%	90% V/%XGJHW	%XGJHW	100% V/%XGJHW
727$/		100%
3HUIRUPDQFH			0%	100%	200%
% V/6DODULR 3HUVRQDO D 31 'LFLHPEUH			0%	2%	4%

4. 9$/25$&,21 '(/ 1,9(/ '( &216(&8&,21 < &$/&8/2 '(/ ,03257( '( /$ 5(75,%8&,21 9$5,$%/(:

‡ /D YDORUDFLyQ GHO 1LYHO GH &RQVHFXFLyQ (FiOFXOR GHO 3HUIRUPDQFH) GH FDGD XQR GH ORV 2EMHWLYRV HVWDEOHFLGRV VH UHDOL]DUi GH OD IRUPD VLJXLHQWH:

$. 6L HO 5HVXOWDGR GHO 2EMHWLYR HVWi FRPSUHQGLGR HQWUH HO 9DORU 0tQLPR \ HO 9DORU 7DUJHW: 3HUIRUPDQFH 5HVXOWDGR ± 9DORU 0tQLPR .[ 100

9DORU 7DUJHW ± 9DORU 0tQLPR

CVE-2014-11542

%. 6L HO 5HVXOWDGR XXX 0XXXXXXX XXXx XXXXXXXXXXX XXXXX XX 0XXXX 0XXXXX \ XX 0XXXX 0i[LPR:

3HUIRUPDQFH 100 + 0XXXXXXXX x 0XXXX 0XXXXX .[ 100

9DORU 0x[XXX x 0XXXX 0XXXXX

‡ 3DUD HO FiOFXOR GHO LPSRUWH GH OD 5HWULEXFLyQ 9DULDEOH VH SURFHGHUi FRPR D FRQWLQXDFLyQ VH LQGLFD:

,PSRUWH GH OD 5HWULEXFLyQ 9DULDEOH 6DODULR 3HUVRQDO $QXDOL]DGR D 31 'LFLHPEUH [ 2% (7DUJHW) [ 3HUIRUPDQFH 7RWDO GH ORV REMHWLYRV.

3DUD ORV DxRV 2013, 2014 \ 2015 HVWD 5HWULEXFLyQ 9DULDEOH VH FDOFXODUi FRQIRUPH D ORV SDUiPHWURV TXH VH ILMDUiQ SRU OD &RPSDxtD \ VHUiQ H[SXHVWRV SDUD FRQRFLPLHQWR GH WRGRV ORV WUDEDMDGRUHV.

'LFKRV SDUiPHWURV VHUiQ HVWXGLDGRV SRU OD &RPLVLyQ 3DULWDULD.

&$3Ë78/2 48,172

6(&&,Ï1 Ò1,&$ ± '(63/$=$0,(1726 < ',(7$6

&/È868/$ 27.

&RPSHQVDFLyQ SRU JDVWRV GH YLDMH. /D FRPSHQVDFLyQ GLDULD SRU JDVWRV GH YLDMH GHVGH HO 1 GH (QHUR GH 2013 VHUi GH 71,50 (XURV EUXWRV.

(VWH UpJLPHQ GH FRPSHQVDFLyQ GLDULD SRU JDVWRV GH YLDMHV QR VHUi DSOLFDEOH FRQ FDUiFWHU JHQHUDO HQ &HXWD, 0HOLOOD, %DOHDUHV, &DQDULDV \ $QGRUUD. (Q VX OXJDU, ORV WUDEDMDGRUHV GHVSOD]DGRV D HVWRV SXQWRV UHFLELUiQ HO LPSRUWH GH ORV JDVWRV GH KRWHO, PiV XQD GLHWD GH 43,84 (XURV SRU GtD. /D PHGLD GLHWD HQ HVWH UpJLPHQ VHUi GH 21 HXURV.

(VWRV FRQFHSWRV WLHQHQ SRU VX FDUiFWHU \ QDWXUDOH]D OD FRQVLGHUDFLyQ \ HIHFWRV MXUtGLFRV GH LQGHPQL]DFLyQ R VXSOLGR, TXHGDQGR VX XXXXXXX XXXXXXXXX X XXX XX XXXXXXXXXX XXXXXXX XXXXXX XXX UD]yQ XXX XXXXXXX XX XXXXXXXXX XXXXXXXX, XXX XXXXX XXX XXXXXXXXXX XXX OD (PSUHVD.

&$3Ë78/2 6(;72 6(&&,Ï1 1. - %(1(),&,26 62&,$/(6

&/È868/$ 28.

/RV HPSOHDGRV GH 'UDND &RPWHT ,EpULFD, 6./. GHO &HQWUR GH 7UDEDMR GH 0DOLDxR (&DQWDEULD) TXH HVWXYLHUDQ HQ DOWD XXXXXX XX XX XXXXXXXXX XXXXXX XXX XXXXXX XX XXXXXXX XX 0XXXXxX XX XxX 0 XX $JRVWR GH 2013

\ XX\XX XXXXXXXXX XX XX XXXXX XXXXX XXX XxX 0 XX (QHUR GHO PLVPR DxR, SHUFLELUiQ HQ OD QyPLQD GHO PHV GH $JRVWR OD FDQWLGDG GH 1120, 25 HXURV.

/D SDJD GH EHQHILFLRV VRFLDOHV VH GHYHQJDUi SRU DxRV QDWXUDOHV.

(Q FDVR XX XXXXXXX XXXXX XX XxX 0 XX (XXXX \ XX 00 XX -XOLR, DPERV LQFOXVLYH, HQ OD QyPLQD GHO PHV GH $JRVWR SHUFLELUiQ XQD GRFHDYD SDUWH GH OD FDQWLGDG WRWDO SRU FDGD PHV WUDEDMDGR FRPSUHQGLGR HQWUH OD IHFKD GH LQJUHVR \ HO 31 GH 'LFLHPEUH XXX XXXXX XxX, XXXXX XXXXXXXXX.

(X XXXX XX XXXXXXX XXXXX XX XxX 0 XX $JRVWR \ HO 31 GH 'LFLHPEUH, DPERV LQFOXVLYH,

HQ OD QyPLQD GHO PHV GH 'LFLHPEUH SHUFLELUiQ XQD GRFHDYD SDUWH GH OD FDQWLGDG WRWDO SRU FDGD PHV WUDEDMDGR FRPSUHQGLGR HQWUH OD IHFKD GH LQJUHVR \ HO 31 GH 'LFLHPEUH GHO PLVPR DxR, DPERV LQFOXVLYH.

CVE-2014-11542

(Q FDVR GH FDXVDU EDMD HQ OD &RPSDxtD VLQ KDEHU SHUFLELGR HVWH EHQHILFLR, VH SHUFLELUi HQ OD OLTXLGDFLyQ XQD GRFHDYD SDUWH GH OD FDQWLGDG WRWDO SRU FDGD PHV FRPSUHQGLGR HQWUH HO 1 GH (QHUR \ OD IHFKD GH EDMD, DPEDV LQFOXVLYH (FDVRV PHQFLRQDGRV HQ ORV SiUUDIRV VHJXQGR \ WHUFHUR), R HQWUH OD IHFKD GH LQJUHVR \ OD GH EDMD, DPERV LQFOXVLYH (FDVR PHQFLRQDGR HQ HO SiUUDIR FXDUWR).

(Q ORV VXSXHVWRV PHQFLRQDGRV HQ ORV SiUUDIRV VHJXQGR \ WHUFHUR, VL HO HPSOHDGR FDXVDUD EDMD HQ OD &RPSDxtD HQWUH HO 1 GH $JRVWR \ HO 31 GH 'LFLHPEUH, VH OH GHVFRQWDUi XQD GRFHDYD SDUWH GH OD FDQWLGDG WRWDO SRU FDGD PHV FRPSUHQGLGR HQWUH OD IHFKD GH EDMD \ HO 31 GH 'LFLHPEUH, DPERV LQFOXVLYH.

/DV IUDFFLRQHV GH PHV VH FRQVLGHUDUiQ FRPR PHVHV FRPSOHWRV, WDQWR SDUD DERQRV FRPR SDUD GHVFXHQWRV. 'DGD OD QDWXUDOH]D GH ORV GLVWLQWRV FRQFHSWRV TXH KDQ SDVDGR D LQWHJUDUVH XX XXXX XXXXX, XX XXXXxX XXXX XXXXX XX XXXxXXXX XX SDJD H[WUDRUGLQDULD QL UHWULEX\H OD SUHVWDFLyQ GH WUDEDMR, SRU OR TXH, D ORV HIHFWRV TXH OHJDOPHQWH FRUUHVSRQGDQ, QR WLHQH FDUiFWHU VDODULDO.

6(&&,Ï1 2. - &5e',726 3$5$ 9,9,(1'$6

&/È868/$ 29.

'XUDQWH HO SHUtRGR GH YLJHQFLD GH HVWH &RQYHQLR VH FRQFHGHUiQ FUpGLWRV SDUD OD DGTXLVLFLyQ GH YLYLHQGDV, VHJ~Q ODV QRUPDV HVWDEOHFLGDV. $ HVWH ILQ VH FUHD XQ IRQGR GH 54.000 (XURV, SDUD FDGD XQR GH ORV DxRV, SDUD HO SHUVRQDO QR SHUWHQHFLHQWH DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV R TXH SHUWHQHFLHQGR DO PLVPR WHQJD DVLJQDGD XQD &ODVH 6DODULDO 52 y LQIHULRU.

/D (PSUHVD DSOLFDUi D HVWRV SUpVWDPRV XQ LQWHUpV YDULDEOH HTXLYDOHQWH DO LQWHUpV OHJDO XXX XXXXXX XX XXXX XxX.

0(&&,X0 0x.- 6(*852 '( $&&,'(17(6

&/È868/$ 29.%,6

3DUD ORV DxRV 2013, 2014 \ 2015 HO VHJXUR GH DFFLGHQWHV GH WRGRV ORV WUDEDMDGRUHV GH 'UDND &RPWHT ,EpULFD, 6./. FRQWHPSODUi HQ OD SyOL]D FREHUWXUD GH IDOOHFLPLHQWR SRU LQIDUWR GH PLRFDUGLR.

&/È868/$ 30.

&$3Ë78/2 6e37,02

6(&&,Ï1 1. - ,1&$3$&,'$' 7(0325$/

$O SHUVRQDO QR SHUWHQHFLHQWH DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, VH OH JDUDQWL]D OD SHUFHSFLyQ GHO FLHQ SRU FLHQ GH OD UHWULEXFLyQ HVWDEOHFLGD HQ OD &OiXVXOD 26 TXH WHQJD DVLJQDGD, PiV ORV FRPSOHPHQWRV GH DQWLJHGDG \ GH WLSR ³$´ \ ³%´ TXH WXYLHVHQ.

$O SHUVRQDO SHUWHQHFLHQWH DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, VH OH JDUDQWL]D OD SHUFHSFLyQ GHO FLHQ SRU FLHQ GHO 6DODULR %DVH XXXXXXXXXXX XX XX &XxXXXXX 00x XXX XXXXX XXXXXXXX, XxX XXX XXXXXXXXXXXX XX XXXXXxXXXX \ XX WLSR ³(´ TXH WXYLHVHQ.

/D GLIHUHQFLD X[XXXXXXX XXXXX XX XXXXXXXXxX XXX XXXXXXXXXX XXXXXXXXXXX \ XX XXXXXXX XXXXXXX]XXX, XX XXXXXXx, PLHQWUDV H[LVWDQ IRQGRV, GH ORV H[FHGHQWHV HFRQyPLFRV TXH VH SURGX]FDQ DQXDOPHQWH, XQD YH] GHGXFLGDV ODV UHVHUYDV \ GHPiV FRVWHV TXH VHDQ LPSXWDEOHV, GH OD JHVWLyQ GHO 5pJLPHQ *HQHUDO GH OD 6HJXULGDG 6RFLDO, UHVSHFWR GHO DERQR GH ODV SUHVWDFLRQHV HFRQyPLFDV GHULYDGDV GH OD LQFDSDFLGDG WHPSRUDO SRU HQIHUPHGDG FRP~Q R DFFLGHQWH QR ODERUDO, FRPR FRQVHFXHQFLD GH OD DXWRUL]DFLyQ DGPLQLVWUDWLYD GH FRODERUDFLyQ YROXQWDULD GH OD (PSUHVD. 6L ORV H[FHGHQWHV HFRQyPLFRV VH DJRWDUDQ D OR ODUJR GHO DxR, OD (PSUHVD VH KDUi FDUJR GH ORV FRPSOHPHQWRV JDUDQWL]DGRV HQ HVWD &OiXVXOD.

CVE-2014-11542

(VWH FRPSOHPHQWR GHMDUi GH SHUFLELUVH, HQ WRGR FDVR, FXDQGR HO WUDEDMDGRU UHVFLQGD VX FRQWUDWR FRQ OD (PSUHVD, SRU FXDOTXLHU FDXVD R FLUFXQVWDQFLD, LPSXWDEOH R QR DO WUDEDMDGRU.

(Q FDVR GH TXH OD EDMD VH SURGX]FD SRU HO UHFRQRFLPLHQWR GH XQD LQFDSDFLGDG SHUPDQHQWH HQ FXDOTXLHUD GH VXV JUDGRV, \ HQ UHODFLyQ FRQ ORV GHUHFKRV UHFRQRFLGRV HQ HVWD &OiXVXOD, VH FRQVLGHUDUi FRPR IHFKD GH OD EDMD OD TXH GHWHUPLQH OD 5HVROXFLyQ DGPLQLVWUDWLYD SDUD ILMDU ORV HIHFWRV HFRQyPLFRV GH

OD SUHVWDFLyQ, UHJXODUL]iQGRVH FRQVHFXHQWHPHQWH, VL SURFHGH, WRGRV ORV LPSRUWHV TXH VH KD\DQ SHUFLELGR GXUDQWH OD VLWXDFLyQ GH LQFDSDFLGDG WHPSRUDO.

/RV GHVFDQVRV SRU PDWHUQLGDG VHUiQ FRQVLGHUDGRV D HVWRV HIHFWRV HFRQyPLFRV, FRPR ORV GH LQFDSDFLGDG WHPSRUDO.

6(&&,Ï1 2. - $17,&,3$&,Ï1 '( /$ -8%,/$&,Ï1

&/È868/$ 31.

/D (PSUHVD FRPSOHPHQWDUi D VX FDUJR, FRQ FDUiFWHU GH LQGHPQL]DFLyQ, HO LPSRUWH GH OD SHQVLyQ TXH SXGLHUD FRUUHVSRQGHU DO SHUVRQDO TXH VH MXELOH XXXXXXXXXXXXXXX XXXXX XX XXXXXXX XX XXXX XX 65 DxRV R OD TXH FRUUHVSRQGD FXDQGR VHD HIHFWLYD OD MXELODFLyQ , KDVWD HO FLHQ SRU FLHQ GH OD UHWULEXFLyQ HVWDEOHFLGD HQ OD &OiXVXOD 26 TXH WHQJD DVLJQDGD, PiV ORV FRPSOHPHQWRV GH DQWLJHGDG \ GH WLSR ³$´ \ ³%´ TXH WXYLHVHQ HQ FDVR GH QR SHUWHQHFHU DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV \, KDVWD HO FLHQ SRU FLHQ GHO 6DODULR %DVH XXXXXXXXXXX XX XX &XxXXXXX 00x XXX XXXXX XXXXXXXX, XxX XXX XXXXXXXXXXXX XX XXXXXxXXXX \ XX WLSR ³(´ TXH WXYLHVHQ, HQ FDVR GH SHUWHQHFHU DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, DPERV HQ EDVH DQXDO, HQ HO PRPHQWR GH SDVDU D OD VLWXDFLyQ DQWLFLSDGD GH MXELODFLyQ, \ KDVWD TXH FXPSOD ORV 65 DxRV GH HGDG R OD TXH FRUUHVSRQGD FXDQGR VHD HIHFWLYD OD MXELODFLyQ VL, GH DFXHUGR FRQ HO 5pJLPHQ *HQHUDO GH OD 6HJXULGDG 6RFLDO, WXYLHVH GHUHFKR D MXELODFLyQ SHQVLRQDGD, \ VLHPSUH TXH D MXLFLR GH OD (PSUHVD, ODV FLUFXQVWDQFLDV GHO HPSOHDGR \ ODV UD]RQHV TXH DGX]FD SDUD DQWLFLSDU VX MXELODFLyQ DVt OR MXVWLILFDVHQ.

&/$868/$ 31 %,6

$ XXXXXX XX XX XXXXXXX XX XXXXX XXX 0XXX XX 3HQVLRQHV GH (PSOHR GH $SRUWDFLyQ 'HILQLGD, OD (PSUHVD FRPSOHPHQWDUi, D VX FDUJR, FRQ FDUiFWHU GH LQGHPQL]DFLyQ, HO LPSRUWH GH OD SHQVLyQ TXH SXGLHUD FRUUHVSRQGHU DO SHUVRQDO TXH, WHQLHQGR OD FRQGLFLyQ GH PXWXDOLVWD ODERUDO DQWHV GHO GtD 1 GH (QHUR GH 1967, VH MXELOH DQWLFLSDGDPHQWH DQWHV GH FXPSOLU OD HGDG GH 65 DxRV R OD TXH FRUUHVSRQGD FXDQGR VHD HIHFWLYD OD MXELODFLyQ, KDVWD HO FLHQ SRU FLHQ GH OD UHWULEXFLyQ HVWDEOHFLGD HQ OD &OiXVXOD 26 TXH WHQJD DVLJQDGD, PiV ORV FRPSOHPHQWRV GH DQWLJHGDG \ GH WLSR ³$´ \ ³%´ TXH WXYLHVHQ, HQ FDVR GH QR SHUWHQHFHU DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, \, KDVWD HO FLHQ SRU FLHQ GHO VDODULR

%DVH XXXXXXXXXXX XX XX &XxXXXXX 00x XXX XXXXX XXXXXXXX, XxX XXX XXXXXXXXXXXX XX XXXXXxXXXX \ XX WLSR

³(´ TXH WXYLHVHQ, HQ FDVR GH SHUWHQHFHU DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, HQ DPERV FDVRV HQ EDVH DQXDO, HQ HO PRPHQWR GH SDVDU D OD VLWXDFLyQ GH MXELODFLyQ, \ KDVWD TXH FXPSOD OD HGDG GH 65 DxRV R OD TXH FRUUHVSRQGD FXDQGR VHD HIHFWLYD OD MXELODFLyQ VL, GH DFXHUGR FRQ HO 5pJLPHQ *HQHUDO GH OD 6HJXULGDG 6RFLDO, WXYLHVH GHUHFKR D MXELODFLyQ SHQVLRQDGD D ORV 60 DxRV GH HGDG, \ VLHPSUH TXH, D MXLFLR GH OD (PSUHVD, ODV FLUFXQVWDQFLDV GHO HPSOHDGR \ ODV UD]RQHV TXH DGX]FD SDUD DQWLFLSDU VX MXELODFLyQ DVt OR MXVWLILFDVHQ.

/DV SHUFHSFLRQHV D SDUWLU GH OD MXELODFLyQ DQWLFLSDGD \ KDVWD ORV 00 XxXX, XX XXXXXXXXXXxX XXXX XX LQGLFD:

1. 3HQVLyQ GH OD 6HJXULGDG 6RFLDO SRU -XELODFLyQ, TXH OHJDOPHQWH FRUUHVSRQGD DO WUDEDMDGRU.

2. 3HQVLyQ SRU -XELODFLyQ GHULYDGD GHO 3ODQ GH 3UHYLVLyQ GH OD &RPSDxtD. $ HVWRV HIHFWRV, \ FRQ LQGHSHQGHQFLD GH OD IRUPD GH FREUR TXH HOLMD HO WUDEDMDGRU, OD SUHVWDFLyQ GHULYDGD GH ODV DSRUWDFLRQHV GH OD (PSUHVD DO 3ODQ GH 3HQVLRQHV GH (PSOHR GH $SRUWDFLyQ 'HILQLGD VH FDOFXODUi FRPR XQD 5HQWD LQPHGLDWD GH VXSHUYLYHQFLD FRQ UHYHUVLyQ GHO 50% GH VX LPSRUWH DO FyQ\XJH, VL SURFHGH.

3. &RPSOHPHQWR GH OD (PSUHVD, KDVWD TXH FXPSOD ORV 65 DxRV GH HGDG, FRQVLVWHQWH HQ OD GLIHUHQFLD GH ODV UHWULEXFLRQHV UHIOHMDGDV HQ HO SULPHU SiUUDIR \ OD VXPD GH ODV LQGLFDGDV HQ ORV DSDUWDGRV 1

CVE-2014-11542

\ 2 DQWHULRUHV.

&$3,78/2 2&7$92

6(&&,21 35,0(5$.- 6(*85,'$' < 6$/8' /$%25$/

&/$868/$ 32

/D SURWHFFLyQ GH OD VDOXG GH ORV WUDEDMDGRUHV FRQVWLWX\H XQ REMHWLYR EiVLFR \ SULRULWDULR GH ODV SDUWHV ILUPDQWHV \ FRQVLGHUDQ TXH SDUD DOFDQ]DUOR VH UHTXLHUH HO HVWDEOHFLPLHQWR \ SODQLILFDFLyQ GH XQD DFFLyQ SUHYHQWLYD HQ ORV FHQWURV GH WUDEDMR TXH WHQJDQ SRU ILQ OD HOLPLQDFLyQ R UHGXFFLyQ GH ORV ULHVJRV HQ VX RULJHQ, D SDUWLU GH VX HYDOXDFLyQ, DGRSWDQGR ODV PHGLGDV QHFHVDULDV, WDQWR HQ OD FRUUHFFLyQ GH OD VLWXDFLyQ H[LVWHQWH, FRPR HQ OD HYDOXDFLyQ WpFQLFD \ RUJDQL]DWLYD GH OD HPSUHVD, SDUD DGDSWDU HO WUDEDMR D OD SHUVRQD

\ SURWHJHU VX VDOXG.

(Q FXDQWDV PDWHULDV DIHFWHQ D OD SUHYHQFLyQ GH OD VDOXG \ D OD VHJXULGDG GH ORV WUDEDMDGRUHV, VHUiQ GH DSOLFDFLyQ ODV GLVSRVLFLRQHV XXXXXXXXXX XX XX /X\ 00/0000, XX 0 XX 0XXXXXXXX, XX 3UHYHQFLyQ GH 5LHVJRV

/XXXXXXXX, DVt FRPR HQ HO 5HDO 'HFUHWR 39/1997, GH 17 GH (QHUR, GH ORV 6HUYLFLRV GH 3UHYHQFLyQ, \ QRUPDWLYD FRQFRUGDQWH.

$ HVWRV HIHFWRV, DPEDV SDUWHV DFXHUGDQ DERUGDU OD DSOLFDFLyQ GHO SiUUDIR DQWHULRU, HQ FRQVRQDQFLD FRQ ORV FULWHULRV \ GHFODUDFLRQHV JHQHUDOHV SUHYLVWDV HQ OD PHQFLRQDGD OHJLVODFLyQ, DVt FRPR FRQ ORV VLJXLHQWHV:

'HOHJDGRV GH 3UHYHQFLyQ.- /RV 'HOHJDGRV GH 3UHYHQFLyQ VHUiQ GHVLJQDGRV SRU \ HQWUH ORV UHSUHVHQWDQWHV GHO SHUVRQDO, FRQIRUPH D OD HVFDOD HVWDEOHFLGD HQ HO DUWtFXOR 35 GH OD /H\ 31/1995.

(Q OR TXH VH UHILHUH D VXV GHUHFKRV \ GHEHUHV VH HVWDUi D OR SUHYLVWR HQ ORV DUWtFXORV 36 \ 37 GH OD /H\ 31/1995.

&RPLWp GH 6HJXULGDG \ 6DOXG.- (O &RPLWp GH 6HJXULGDG \ 6DOXG HV HO yUJDQR SDULWDULR \ FROHJLDGR GH SDUWLFLSDFLyQ GHVWLQDGR D OD FRQVXOWD UHJXODU \ SHULyGLFD GH ODV DFWXDFLRQHV GH OD (PSUHVD HQ PDWHULD GH 3UHYHQFLyQ GH 5LHVJRV /DERUDOHV.

(VWH &RPLWp HVWDUi IRUPDGR SRU ORV 'HOHJDGRV GH 3UHYHQFLyQ, GH XQD SDUWH, \ SRU ORV UHSUHVHQWDQWHV GH OD (PSUHVD, HQ Q~PHUR LJXDO DO GH ORV 'HOHJDGRV GH 3UHYHQFLyQ, GH OD RWUD.

6H UHXQLUi WULPHVWUDOPHQWH \ VLHPSUH TXH OR VROLFLWH DOJXQD GH ODV UHSUHVHQWDFLRQHV HQ HO PLVPR. (O &RPLWp DGRSWDUi VXV SURSLDV QRUPDV GH IXQFLRQDPLHQWR.

(Q FXDQWR D VXV FRPSHWHQFLDV \ IDFXOWDGHV VH HVWDUi D OR GLVSXHVWR HQ HO DUWtFXOR 39 GH OD /H\ 31/1995.

6(&&,21 6(*81'$.- 35202&,21(6 /$%25$/(6, )250$&,21 < 6$/8'

/$%25$/ &/$868/$ 32 %,6

)RUPDFLyQ, 6DOXG /DERUDO, 3URPRFLRQHV

$. 3(5621$/ 12 672

3URPRFLRQHV: 6H FUHDUi XQD &RPLVLyQ SDUD WDO HIHFWR.

CVE-2014-11542

$O REMHWR GH FRQVHQVXDU XQ SURJUDPD D GHVDUUROODU, GXUDQWH HO SHULRGR 2013, 2014 \ 2015 TXH FRQWHPSOH DVSHFWRV GH IRUPDFLyQ, VDOXG ODERUDO \ SURPRFLRQHV, DPEDV SDUWHV HQWLHQGHQ OD QHFHVLGDG GH FUHDFLyQ GH XQD FRPLVLyQ SDULWDULD TXH GHVDUUROODUi VX DFWLYLGDG GH DFXHUGR FRQ OD VLJXLHQWH UHJXODFLyQ:

1. &RPSXHVWD SRU 3 PLHPEURV SRU SDUWH GH OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV \ RWURV 3 SRU SDUWH GH OD 5HSUHVHQWDFLyQ GH OD (PSUHVD, DQDOL]DUi ODV SURSXHVWDV TXH DPEDV SDUWHV SUHVHQWHQ HQ PDWHULD GH IRUPDFLyQ \ VDOXG ODERUDO DVt FRPR ODV GHVYLDFLRQHV H[LVWHQWHV HQWUH ODV WDUHDV UHDOL]DGDV \ OD FDWHJRUtD SURIHVLRQDO GHO SHUVRQDO TXH ODV UHDOL]D.

2. 'HO DQiOLVLV UHDOL]DGR VH HVWDEOHFHUi, XQ SODQ, TXH FRQWHPSODQGR ORV GLIHUHQWHV DVSHFWRV \ DSUREDGR SRU DPEDV SDUWHV, VHUi GHVDUUROODGR D OR ODUJR GHO SHULRGR 2014 \ 2015.

3. (Q WRGRV ORV FDVRV VH H[FHSW~DQ ORV FDPELRV D FDWHJRUtDV \ SXHVWRV TXH LPSOLTXHQ DXWRULGDG R PDQGR, DVt FRPR ORV UHODWLYRV D 7LWXODGRV, 6HFUHWDULDV \ GHPiV GH OLEUH GHVLJQDFLyQ SRU SDUWH GH OD (PSUHVD.

4. (O 3ODQ GH 3URPRFLRQHV TXH TXHGH GHOLPLWDGR HQ ORV DSDUWDGRV SUHFHGHQWHV DVt FRPR ODV DFFLRQHV IRUPDWLYDV FRUUHVSRQGLHQWHV, VH GHVDUUROODUi HQ HO SHULRGR 2014 \ 2015.

/D DSOLFDFLyQ GH HVWH 3ODQ GH 3URPRFLRQHV VH UHDOL]DUi GH DFXHUGR D ODV QRUPDV \ SURFHGLPLHQWRV TXH WLHQH HVWDEOHFLGRV OD &RPSDxtD HQ EDVH D VX VLVWHPD GH 9DORUDFLyQ GH 3XHVWRV GH 7UDEDMR, \ HQ JHQHUDO, FRQ ORV GHPiV FULWHULRV TXH pVWD YLHQH DSOLFDQGR KDELWXDOPHQWH \ VH DMXVWDUi, HQ WRGR FDVR, D OD HVWUXFWXUD RUJDQL]DWLYD \ SODQWLOODV GH SHUVRQDO GHILQLGRV SRU OD (PSUHVD.

3DUD SRGHU EHQHILFLDUVH GH XQD SURPRFLyQ VHUi SUHFLVR TXH HO FDQGLGDWR KD\D FRPSOHWDGR XQ SHUtRGR PtQLPR GH VHLV PHVHV, GHVHPSHxDQGR VDWLVIDFWRULDPHQWH ODV WDUHDV FRQWHQLGDV HQ OD GHVFULSFLyQ WLSLILFDGD GHO SXHVWR GH WUDEDMR GH TXH VH WUDWH.

$O SODQ GH 3URPRFLRQHV TXH TXHGD GHOLPLWDGR HQ ORV DSDUWDGRV SUHFHGHQWHV, OH VHUi DVLJQDGR HQ FDGD XQR GH ORV DxRV GH UHIHUHQFLD, OD GRWDFLyQ HFRQyPLFD TXH GHWHUPLQH OD 'LUHFFLyQ GH OD &RPSDxtD.

5. /D DSOLFDFLyQ, DVt FRPR OD UHVROXFLyQ GH FXDQWDV GXGDV R GLVFUHSDQFLDV SXGLHUDQ SUHVHQWDUVH, VHUiQ UHVSRQVDELOLGDG GH OD &RPLVLyQ 3DULWDULD GH &RQYHQLR.

%.3(5621$/ 672

(O 3ODQ GH 3URPRFLRQHV SDUD HO SHUVRQDO SHUWHQHFLHQWH DO FROHFWLYR VXMHWR DO 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV, FRQ &ODVH 6DODULDO LQIHULRU D 52, GXUDQWH ORV DxRV 2013, 2014 \ 2015, VH UHJXODUi GH OD IRUPD VLJXLHQWH:

1. 6H FUHDUi XQD &RPLVLyQ 3DULWDULD GH 3URPRFLRQHV FRPSXHVWD SRU 3 PLHPEURV SRU SDUWH GH OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV \ RWURV 3 SRU SDUWH GH OD 5HSUHVHQWDFLyQ GH OD (PSUHVD, TXH DQDOL]DUiQ \ DFRUGDUiQ OD DSOLFDFLyQ GH ORV FDPELRV GH &DWHJRUtD 3URIHVLRQDO/3XHVWRV GH 7UDEDMR, DVt FRPR ODV DFFLRQHV GH IRUPDFLyQ FRUUHVSRQGLHQWHV D ORV PLVPRV. $FRUGDUiQ, DVLPLVPR, OD DSOLFDFLyQ GH ORV FDPELRV GH &ODVH 6DODULDO YDORUDGRV KDVWD OD &ODVH 6DODULDO 52 LQFOXVLYH.

2. (Q WRGRV ORV FDVRV VH H[FHSW~DQ ORV FDPELRV D FDWHJRUtD, SXHVWR R WUDEDMR R FODVH VDODULDO GH ORV 7LWXODGRV, 0DQGRV \ 6HFUHWDULDV.

3. $O 3ODQ GH 3URPRFLRQHV TXH TXHGD GHOLPLWDGR HQ ORV DSDUWDGRV SUHFHGHQWHV, OH VHUi DVLJQDGR HQ FDGD XQR GH ORV DxRV GH UHIHUHQFLD, OD GRWDFLyQ HFRQyPLFD TXH GHWHUPLQH OD 'LUHFFLyQ GH OD &RPSDxtD.

4. /D DSOLFDFLyQ GH HVWH 3ODQ GH 3URPRFLRQHV VH UHDOL]DUi GH DFXHUGR D ODV QRUPDV \ SURFHGLPLHQWRV TXH WLHQH HVWDEOHFLGRV OD &RPSDxtD VREUH OD EDVH GH VX VLVWHPD GH 9DORUDFLyQ GH 3XHVWRV GH 7UDEDMR \ HVWUXFWXUD RUJDQL]DWLYD \ SODQWLOODV GH SHUVRQDO GHILQLGRV SRU OD (PSUHVD.

CVE-2014-11542

3DUD SRGHU EHQHILFLDUVH GH XQD SURPRFLyQ VHUi SUHFLVR TXH HO FDQGLGDWR KD\D FRPSOHWDGR XQ SHUtRGR PtQLPR GH VHLV PHVHV, GHVHPSHxDQGR VDWLVIDFWRULDPHQWH ODV WDUHDV FRQWHQLGDV HQ OD GHVFULSFLyQ WLSLILFDGD GHO SXHVWR GH WUDEDMR UHDOL]DGD SRU OD (PSUHVD.

5. 'DGR HO FROHFWLYR DO TXH YD GLULJLGR \, TXH ORV IRQGRV XXXXXX XX XXXXXX XX XX XXXXXXXXX XX 0XXxXXXX 0XXXXXXX XX XQ FROHFWLYR PiV DPSOLR, OD UHVROXFLyQ GH FXDQWDV GXGDV R GLVFUHSDQFLDV SXGLHUDQ SUHVHQWDUVH, VHUiQ VRPHWLGDV D XQD &RPLVLyQ IRUPDGD SRU HO 3UHVLGHQWH \ 6HFUHWDULR GHO

&RPLWp GH (PSUHVD \ GRV SHUVRQDV GHVLJQDGDV SRU OD 'LUHFFLyQ GH OD (PSUHVD. 6REUH ODV GHVFULSFLRQHV GH SXHVWRV LQGLFDGDV SDUD HO SHUVRQDO GH 6LVWHPD GH 7UDEDMR SRU 2EMHWLYRV HQ HO SUHVHQWH $FXHUGR 6HJXQGR VH LQIRUPDUi SRU OD 5HSUHVHQWDFLyQ GH OD (PSUHVD D OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV.

&$3Ë78/2 129(12 6(&&,Ï1 35,0(5$ - &20,6,Ï1 3$5,7$5,$

&/È868/$ 33.

(Q HO SOD]R GH XQ PHV, D FRQWDU GHVGH OD IHFKD GH OD ILUPD GH HVWH &RQYHQLR, VH FRQVWLWXLUi OD &RPLVLyQ 3DULWDULD, TXH FRQRFHUi SUHFHSWLYDPHQWH GH FXDQWDV FXHVWLRQHV SXHGDQ GHULYDUVH GH OD DSOLFDFLyQ GHO PLVPR.

/D &RPLVLyQ HVWDUi FRPSXHVWD SRU 10 PLHPEURV: GH FLQFR PLHPEURV 5HSUHVHQWDQWHV GH ORV 7UDEDMDGRUHV, GHVLJQDGRV SRU HO &RPLWp GH (PSUHVD, GH HQWUH VXV PLHPEURV, H LJXDO Q~PHUR GH

5HSUHVHQWDQWHV GH OD (PSUHVD QRPEUDGRV SRU OD 'LUHFFLyQ GH OD PLVPD.

/D 6HFUHWDUtD GH OD &RPLVLyQ 3DULWDULD HVWDUi FRQVWLWXLGD SRU WUHV GH VXV PLHPEURV; GRV SRU OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV \ XQR SRU OD 'LUHFFLyQ GH OD (PSUHVD.

/D &RPLVLyQ 3DULWDULD VH UHXQLUi D SHWLFLyQ GH FXDOTXLHUD GH ODV SDUWHV, SDUD WUDWDU GH DVXQWRV SURSLRV GH VX FRPSHWHQFLD, GHQWUR GHO SOD]R GH ORV RFKR XxXX XXXXXXXXXX X XX XXXXXXXXXXXX XXXXXXX \ XXX H[SUHVLyQ GH ORV SXQWRV D WUDWDU.

/D &RPLVLyQ 3DULWDULD TXHGD IRUPDGD SRU ORV VLJXLHQWHV PLHPEURV: (1 5(35(6(17$&,Ï1 '( /26 75$%$-$'25(6:

'RxD 6$5$ 6$1 (0(7(5,2 0$5$f21 '. -RVp 5DPyQ 5($/ $1'5e6

'. -RVp 0DQXHO )(51$1'(= &$6752

'. -HVXV :ODGLPLU 3$/$=8(/26 &25'(52 (1 5(35(6(17$&,Ï1 '( /$ (035(6$:

'xD. %HDWUL] 0$57Ë1 '20Ë1*8(= '. /OXLV 7251( 5(9(57(5

'. )UDQFHVF 12//$ 0$*5,f$ '. $QJHO 3, /$675$

/RV PLHPEURV GH OD &RPLVLyQ 3DULWDULD, HQ FDVR GH IDOOHFLPLHQWR, HQIHUPHGDG SURORQJDGD, R FXDOTXLHU FLUFXQVWDQFLD VREUHYHQLGD TXH OOHYH DSDUHMDGD VX GHVYLQFXODFLyQ FRQ OD HPSUHVD, VHUiQ VXVWLWXLGRV SRU OD SDUWH TXH ORV QRPEUy, SUHYLD FRPXQLFDFLyQ DO UHVWR GH ORV PLHPEURV.

CVE-2014-11542

/D 6HFUHWDULD GH OD &RPLVLyQ 3DULWDULD HVWDUi FRPSXHVWD SRU: (1 5(35(6(17$&,Ï1 '( /26 75$%$-$'25(6:

'. -RVp 5DPyQ 5($/ $1'5e6

'. -RVp 0DQXHO )(51$1'(= &$6752

(1 5(35(6(17$&,Ï1 '( /$ (035(6$:

'xD. %HDWUL] 0$57Ë1 '20Ë1*8(=

&/È868/$ 34.

$PEDV SDUWHV DFXHUGDQ VRPHWHU D OD &RPLVLyQ 3DULWDULD FXDQWDV GXGDV, GLVFUHSDQFLDV \ FRQIOLFWRV SXGLHUDQ SURGXFLUVH FRPR FRQVHFXHQFLD GH OD DSOLFDFLyQ GHO &RQYHQLR, FRQ FDUiFWHU SUHYLR D FXDOTXLHU UHFODPDFLyQ HQ YtD DGPLQLVWUDWLYD R MXULVGLFFLRQDO.

&/È868/$ 35.

(VWD &RPLVLyQ HMHUFHUi VXV IDFXOWDGHV VLQ SHUMXLFLR GH ODV TXH FRUUHVSRQGHQ D OD -XULVGLFFLyQ FRPSHWHQWH.

6(&&,21 2.- )20(172 '( (03/(2

&/$868/$ 35. %,6

)RPHQWR GH HPSOHR

$QDOL]DGDV ODV FDUJDV GH WUDEDMR \ ODV YDULDFLRQHV, TXH FRPR FRQVHFXHQFLD GH ODV PLVPDV, KD WHQLGR OD SODQWLOOD GH SHUVRQDO, HQ ORV ~OWLPRV DxRV, DPEDV SDUWHV HQWLHQGHQ TXH VH KD GH WRPDU DFFLRQHV TXH HYLWHQ HO PDQWHQLPLHQWR GH SHUVRQDO LQDFWLYR, HQ pSRFDV GH FDtGDV GH SHGLGRV, D OD YH] TXH VH KDJD SRVLEOH OD WUDQVIRUPDFLyQ GH FRQWUDWRV HYHQWXDOHV HQ LQGHILQLGRV.

(Q EDVH D OR DQWHULRUPHQWH H[SXHVWR VH HVWDEOHFHQ ORV VLJXLHQWHV DFXHUGRV:

/DV WUDQVIRUPDFLRQHV VH OOHYDUiQ D HIHFWR VHJ~Q HO FDOHQGDULR HVWDEOHFLGR DO ILQDO GH HVWH SXQWR VLHPSUH \ FXDQGR QR H[LVWDQ FLUFXQVWDQFLDV DGYHUVDV, GHELGDPHQWH GRFXPHQWDGDV, TXH LPSRVLELOLWHQ OOHYDUOR D FDER.

(O SHUVRQDO GH QXHYR LQJUHVR \ HO DIHFWDGR SRU OD WUDQVIRUPDFLyQ GH VX FRQWUDWR, GH HYHQWXDO D LQGHILQLGR, GLVIUXWDUi GH VX SHULRGR GH YDFDFLRQHV D OR ODUJR GH WRGR HO DxR.

(O SHUVRQDO FRQ FRQWUDWR GH WUDEDMR HYHQWXDO \ FRQ PiV GH GRV DxRV GH XXXXXxXXXX XX XX XXXXXXXX XXXXXXXX, XX LQFRUSRUDUi D OD (PSUHVD XQ PHV FRPR $\XGDQWH GH )DEULFDFLyQ $ ()-1), SDVDQGR DO PHV VLJXLHQWH D $\XGDQWH GH )DEULFDFLyQ % ()-2). (O SHUVRQDO FRQ FRQWUDWR GH WUDEDMR HYHQWXDO \ FRQ PHQRV GH GRV DxRV GH XXXXXxXXXX XX XX XXXXXXXX XXXXXXXX, XX LQFRUSRUDUi D OD (PSUHVD FRPR $\XGDQWH GH

)DEULFDFLyQ $ ()-1), ORV PHVHV QHFHVDULRV SDUD TXH HQWUH OD GXUDFLyQ GHO FRQWUDWR DQWHULRU \ HO QXHYR FRQWUDWR VXPHQ GRV DxRV; XQD YH] DOFDQ]DGD OD DQWLJHGDG VHUi SURPRFLRQDGR D $\XGDQWH GH )DEULFDFLyQ

% ()-2).

7UDQVIRUPDFLRQHV GH HYHQWXDOHV D ILMRV:

&RQWUDWDFLRQHV: 6H UHDOL]DUDQ ODV WUDQVIRUPDFLRQHV GHWHUPLQDGDV SRU ORV &RQWUDWRV GH 5HOHYR.

&$3Ë78/2 '(&,02

6(&&,Ï1 Ò1,&$ - 5(35(6(17$17(6 '( /26 75$%$-$'25(6

&/È868/$ 36.

/RV ÏUJDQRV GH 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV VH HOHJLUiQ FRQIRUPH D OR GLVSXHVWR HQ HO 'HFUHWR

/HJLVODWLYR 1/1995, GH 24 GH 0DU]R.

CVE-2014-11542

(Q WRGR FDVR, OD FRPSRVLFLyQ GH ODV 5HSUHVHQWDFLRQHV 6LQGLFDOHV GHEHUi DMXVWDUVH D OR OHJDOPHQWH HVWDEOHFLGR GH DFXHUGR FRQ ODV SODQWLOODV UHDOHV GH FDGD &HQWUR GH 7UDEDMR.

&/È868/$ 37.

/RV PLHPEURV GHO &RPLWp GH (PSUHVD, GLVSRQGUiQ FRQ FDUiFWHU JHQHUDO GHO FUpGLWR GH KRUDV PHQVXDOHV SDUD ODV DFWLYLGDGHV SURSLDV GH OD UHSUHVHQWDFLyQ TXH RVWHQWDQ, SUHYLVWR HQ HO $UWž. 68.H GH OD /H\ GHO (VWDWXWR GH ORV 7UDEDMDGRUHV.

(O &RPLWp GH (PSUHVD SRGUi DFRUGDU OD DFXPXODFLyQ GH ODV KRUDV GH TXH GLVSRQH OD WRWDOLGDG GH VXV PLHPEURV FRPR FUpGLWR PHQVXDO \ GLVWULEXLUODV HQWUH XQR R YDULRV GH ORV PLVPRV, VLQ TXH HOOR UHGXQGH HQ SHUMXLFLR GHO QRUPDO GHVDUUROOR GHO SURFHVR SURGXFWLYR. $ WDO HIHFWR HO &RPLWp, D WUDYpV GH VX 6HFUHWDUtD FRPXQLFDUi DO 'LUHFWRU GHO &HQWUR GH 7UDEDMR, PHQVXDOPHQWH \ FRQ XQD DQWHODFLyQ GH DO PHQRV XQD VHPDQD, HO SURJUDPD GH GLVWULEXFLyQ LQGLYLGXDOL]DGD GH ODV KRUDV.

&XDQGR ORV UHSUHVHQWDQWHV OHJDOHV GH ORV WUDEDMDGRUHV GHEDQ DVLVWLU D ODV UHXQLRQHV GH ORV yUJDQRV FHQWUDOHV GH UHSUHVHQWDFLyQ GH OD (PSUHVD, R D ODV TXH FRQYRTXH OD 'LUHFFLyQ GH OD PLVPD, YLDMDUiQ, VHJ~Q SURFHGD, FRQ OD GLHWD SUHYLVWD HQ HO &DStWXOR 4XLQWR GH HVWH &RQYHQLR.

&/È868/$ 38.

/RV 6LQGLFDWRV GH 7UDEDMDGRUHV TXH UH~QDQ ORV UHTXLVLWRV SUHYLVWRV HQ OD /H\ 2UJiQLFD GH /LEHUWDG 6LQGLFDO 11/85 GH 2 GH $JRVWR, SRGUiQ GHVLJQDU HO Q~PHUR GH 'HOHJDGRV 6LQGLFDOHV TXH SURFHGD, FRQ DUUHJOR D OD HVFDOD HVWDEOHFLGD HQ GLFKD /H\.

&/È868/$ 39.

&$3Ë78/2 81'(&,02

/(< '( ,*8$/'$'

6H SURUURJD DVLPLVPR HO 3ODQ GH ,JXDOGDG GH OD (PSUHVD, TXH TXHGD OLJDGR D OD YLJHQFLD GH HVWH ,9 &RQYHQLR.

&$3Ë78/2 '82'(&,02 &2175$72 '( 5(/(92

CVE-2014-11542

&/È868/$ 40

6H PDQWLHQH H[SUHVDPHQWH HVWD PRGDOLGDG FRQWUDFWXDO -WUDGLFLRQDO HQ WRGRV ORV &RQYHQLRV GH OD (PSUHVD- GH DFXHUGR FRQ OR SUHYLVWR HQ OD VLJXLHQWH QRUPDWLYD YLJHQWH; TXH VH FLWD FRQ FDUiFWHU PHUDPHQWH HQXQFLDWLYR, ELHQ HQWHQGLGR TXH GHEH VHU WHQLGD XX XXXXXX XXXX XX XXXXXXXXXxX XXXXXXX XX XX XXXXXXX XX VX UHDOL]DFLyQ.

5HDO 'HFUHWR /H\ 15/1998, GH 27 GH QRYLHPEUH (%.2.(. GH 28 GH QRYLHPEUH)

/H\ 12/2001, GH 9 GH MXOLR (%.2.(. GH 10 GH MXOLR)

5.'. 1132/2002, GH 31 GH RFWXEUH (%.2.(. GH 27 GH QRYLHPEUH), GH GHVDUUROOR GH GHWHUPLQDGRV SUHFHSWRV GH OD /H\ 35/2002, GH 12 GH MXOLR GH PHGLGDV SDUD HO HVWDEOHFLPLHQWR GH XQ VLVWHPD GH MXELODFLyQ JUDGXDO

\ IOH[LEOH.

/H\ 43/2006, GH 29 GH GLFLHPEUH (%.2.(. GH 30 GH GLFLHPEUH)

&XDQWD OHJLVODFLyQ VHD GH DSOLFDFLyQ HQ OD PDWHULD HQ HO PRPHQWR GH VX UHDOL]DFLyQ.

&/È868/$6 $',&,21$/(6

&/È868/$ ,.

(Q OR XX XXXXXXXX XX XX XXXXXXXX &XXXXXXX, XX HVWDUi D OR GLVSXHVWR HQ HO 2UGHQDPLHQWR -XUtGLFR YLJHQWH.

&/È868/$ ,,.

3DUD PDQWHQHU ORV QLYHOHV GH SURGXFWLYLGDG TXH DVHJXUHQ OD QHFHVDULD HVWDELOLGDG GH OD (PSUHVD TXH SHUPLWD JDUDQWL]DU OD SOHQD RFXSDFLyQ \ HO HPSOHR, DVt FRPR OD QHFHVDULD FRPSHWLWLYLGDG HQ ODV DFWXDOHV FLUFXQVWDQFLDV GH PHUFDGR, OD 5HSUHVHQWDFLyQ GH ORV 7UDEDMDGRUHV FRRSHUDUi SRVLWLYDPHQWH SDUD OD UHGXFFLyQ GHO DEVHQWLVPR \ SDUD TXH OD SUHVHQFLD, DFWLYLGDG \ QRUPDOLGDG ODERUDO KDJDQ SRVLEOHV ORV H[SUHVDGRV ILQHV.

&/È868/$ ,,,.

(O SUHVHQWH &RQYHQLR &ROHFWLYR PRGLILFD \ VXVWLWX\H GH PDQHUD GHILQLWLYD H tQWHJUD DO &RQYHQLR &ROHFWLYR TXH, FRQ DQWHULRULGDG HUD GH DSOLFDFLyQ D ORV VXMHWRV D TXH VH UHILHUH HO iPELWR GH DSOLFDFLyQ SHUVRQDO GH pVWH, DVt FRPR D ORV SDFWRV R QRUPDV, FROHFWLYDV R QR, \ GH UpJLPHQ LQWHUQR TXH VH RSRQJDQ D OR GLVSXHVWR HQ HVWH &RQYHQLR.

'XUDQWH VX YLJHQFLD QR VHUi GH DSOLFDFLyQ QLQJ~Q RWUR &RQYHQLR GH iPELWR QDFLRQDO, LQWHUSURYLQFLDO R SURYLQFLDO TXH SXGLHUD DIHFWDU R UHIHULUVH D DFWLYLGDGHV R WUDEDMRV GHVDUUROODGRV SRU OD &RPSDxtD. (Q FDVR GH YHUVH DIHFWDGR SRU DOJXQR GH HVWRV WRWDO R SDUFLDOPHQWH, VH DFRUGDUi, DOWHUQDWLYDPHQWH, OD UHQHJRFLDFLyQ GHO &RQYHQLR &ROHFWLYR GH OD &RPSDxtD, R OD YLQFXODFLyQ D OD WRWDOLGDG GHO &RQYHQLR &ROHFWLYR GH iPELWR VXSHULRU.

&/$868/$ ,9.

/D 'LUHFFLyQ GH OD (PSUHVD FRQVLGHUD OD IRUPDFLyQ GH ORV 7UDEDMDGRUHV FRPR XQ HOHPHQWR EiVLFR TXH SHUPLWH FRPSDWLELOL]DU OD PD\RU FRPSHWLWLYLGDG GH OD (PSUHVD FRQ OD IRUPDFLyQ LQGLYLGXDO \ SURIHVLRQDO XXX XXXXXXXXXX.

'XXXXX XXX XXXXX XXX ,0 xXXXXXX 0XXXXXXX SDUD OD )RUPDFLyQ &RQWLQXD OD (PSUHVD LPSXOVDUi SURJUDPDV GH IRUPDFLyQ TXH IDFLOLWHQ HO GHVDUUROOR SURIHVLRQDO HQ IXQFLyQ GH VXV REMHWLYRV LQGXVWULDOHV. &RQ FDUiFWHU SUHYLR D OD HODERUDFLyQ GH ORV SODQHV DQXDOHV GH IRUPDFLyQ, ORV 5HSUHVHQWDQWHV OHJDOHV GH ORV 7UDEDMDGRUHV UHFLELUiQ LQIRUPDFLyQ VREUH VX FRQWHQLGR, DO REMHWR GH DSRUWDU ODV SURSXHVWDV TXH HVWLPHQ RSRUWXQDV.

&/È868/$6 75$16,725,$6

CVE-2014-11542

&/È868/$ ,.

(O SUHVHQWH &RQYHQLR HV DSOLFDEOH D WRGR HO SHUVRQDO TXH IRUPH SDUWH GH OD SODQWLOOD GH 'UDND &RPWHT

,EpULFD, 6./. HO GtD 16 GH -XQLR GH 2014 \ ORV SDFWRV XXXXXXXXXX XX XX XXXXX, XXXXX XXXxXXXX XXX FRQWHQJDQ LQGLFDFLyQ H[SUHVD DO XXXXXXXX XXXxX XXXXXXXXX X XXXXXX XXX 0 XX (XXXX XX 2013.

&/È868/$ ,,.

/RV LQFUHPHQWRV VDODULDOHV SDFWDGRV HQ HO SUHVHQWH &RQYHQLR &ROHFWLYR SDUD 2.013, 2014 \ 2015, VHUiQ:

- SDUD ORV DxRV 2013 \ 2014 VH PDQWHQGUiQ ODV XXXXXX XXXXXXXXXX XXX 0000.

- 0XXX HO DxR 2015 VH DFXHUGDQ ORV LQFUHPHQWRV VDODULDOHV VLJXLHQWHV:

D) 8Q LQFUHPHQWR GHO 1% XX XXXXXX XXXXXXXXXX XXX XXXXXXXXXXX X XXXXXX XXX 0 XX (XXXX XX 2015. (VWH LQFUHPHQWR GHO 1% VHUi GH XXXXXXXXxX XXXXXxXXXX, XXXXXXXXXXXXXXXXXX XXX ,0& UHDO GHO DxR 2015 UHVXOWDQWH. (VWRV LQFUHPHQWRV VDODULDOHV VRQ GH DSOLFDFLyQ D ODV FOiXVXODV Qž 14, 15, 22, 26 \ 28.

E) 6ROR SDUD HO VXSXHVWR GH TXH HO ,3& UHDO GHO DxR 2015 IXHUD VXSHULRU DO 1%, VH LQFUHPHQWDUi DGLFLRQDOPHQWH OD SDJD GH EHQHILFLRV XXXXXXXX XX XX XXXXXXXXXX XXX X[XXXX XX ,0& UHDO 2015 GHVGH HO 1% KDVWD HO 1,5%, FDOFXODGR HVWH LQFUHPHQWR GH OD VLJXLHQWH PDQHUD:

6H FDOFXODUi HVWH LQFUHPHQWR GH IRUPD LQGLYLGXDO SDUD FDGD WUDEDMDGRU HQ EDVH D ODV WDEODV VDODULDOHV GHO

2014. 8QD YH] REWHQLGDV ODV FLIUDV GHO LQFUHPHQWR LQGLYLGXDO GH FDGD WUDEDMDGRU GH OD 3ODQWD GH

6DQWDQGHU, VH KDUi OD VXPD HFRQyPLFD WRWDO GH HVWRV LQFUHPHQWRV. (VWD VXPD JOREDO UHVXOWDQWH VH GLYLGLUi GHVSXpV HQWUH HO Q~PHUR WRWDO GH OD SODQWLOOD, \ OD FLIUD ILQDO UHVXOWDQWH VH DERQDUi SRU LJXDO D WRGRV ORV WUDEDMDGRUHV, \ VH DSOLFDUi GH IRUPD OLQHDO HQ OD SDJD GH EHQHILFLRV VRFLDOHV, FRQ XQ WRSH HFRQyPLFR Pi[LPR, HQ WRGR FDVR, GH 150¼ GH LQFUHPHQWR SDUD FDGD WUDEDMDGRU.

(VWD XXXXXXXXXX, XX XXXXXXx XX XX XXX XX )XXXXXX XX 0000.

&/$868/$ ),1$/

6H DFXHUGD DSRGHUDU \ GHOHJDU H[SUHVDPHQWH HQ OD 'LUHFFLyQ GH OD (PSUHVD, SDUD HIHFWXDU OD UHPLVLyQ D OD

CVE-2014-11542

$XWRULGDG /DERUDO SDUD VX 5HJLVWUR \ 3XEOLFDFLyQ HQ HO %ROHWtQ 2ILFLDO GH OD &RPXQLGDG GH &DQWDEULD. (Q SUXHED GH FRQIRUPLGDG FRQ WRGR OR DQWHULRU, VH ILUPD HO SUHVHQWH ,9 &RQYHQLR &ROHFWLYR 3URYLQFLDO SDUD HO 3HUVRQDO GH OD (PSUHVD 'UDND &RPWHT ,EpULFD, 6./., GH 0DOLDxR ( &DQWDEULD) SRU WRGRV ORV PLHPEURV GH OD &RPLVLyQ 1HJRFLDGRUD.

5(35(6(17$&,Ï1 '( /26 75$%$-$'25(6	5(35(6(17$&,Ï1 '( /$ (035(6$
'. -26e 5$0Ï1 5($/ $1'5e6	'f$. %($75,= 0$57Ë1 '20Ë1*8(=
'. -26( 0$18(/ )(51È1'(= &$6752	'. //8,6 7251( 5(9(57(5
'f$. 6$5$ 6$1 (0(7(5,2 0$5$f21	'. )5$1&(6& 12//$ 0$*5,fÈ
'. -(686 :/$',0,5 3$/$=8(/26 &25'(52	'. $1*(/ 3, /$675$

												ANEXO I
DRAKA COMTEQ IBERICA
C A L E N D A X X X X X X X X X X - X X O 2.014
													TURNO ALTERNATIVO
		ENERO									FEBRERO									MARZO
	SEM.	L	M	X	J	V	S	D		SEM	L	M	X	J	V	S	D		SEM	L	M	X	J	V	S	D
	1			1	2	3	4	5		5						1	2		9						1	2
	2	6	7	8	9	10	11	12		6	3	4	5	6	7	8	9		10	3	4	5	6	7	8	9
	3	13	14	15	16	17	18	19		7	10	11	12	13	14	15	16		11	10	11	12	13	14	15	16
	4	20	21	22	23	24	25	26		8	17	18	19	20	21	22	23		12	17	18	19	20	21	22	23
	5	27	28	29	30	31				9	24	25	26	27	28				13	24	25	26	27	28	29	30
																			14	31
		ABRIL									MAYO									JUNIO
	SEM.	L	M	X	X	X	X	X		XXX	X	M	X	J	V	S	D		SEM	L	M	X	J	V	S	D
	14		1	2	3	4	5	6		18				1	2	3	4		22							1
	15	7	8	9	10	11	12	13		19	5	6	7	8	9	10	11		23	2	3	4	5	6	7	8
	16	14	15	16	17	18	19	20		20	12	13	14	15	16	17	18		24	9	10	11	12	13	14	15
	17	21	22	23	24	25	26	27		21	19	20	21	22	23	24	25		25	16	17	18	19	20	21	22
	18	28	29	30						22	26	27	28	29	30	31			26	23	24	25	26	27	28	29
																			27	30
		JULIO									AGOSTO									SEPTIEMBRE
	SEX.	X	X	X	X	X	S	D		SEM	L	M	X	J	V	S	D		SEM	L	M	X	J	V	S	D
	27		1	2	3	4	5	6		31					1	2	3		36	1	2	3	4	5	6	7
	28	7	8	9	10	11	12	13		32	4	5	6	7	8	9	10		37	8	9	10	11	12	13	14
	29	14	15	16	17	18	19	20		33	11	12	13	14	15	16	17		38	15	16	17	18	19	20	21
	30	21	22	23	24	25	26	27		34	18	19	20	21	22	23	24		39	22	23	24	25	26	27	28
	31	28	29	30	31					35	25	26	27	28	29	30	31		40	29	30
		OCTUBRE									NOVIEMBRE									DICIEMBRE
	SEM.	L	M	X	J	V	S	D		SEM	L	M	X	J	V	S	D		SEM	L	M	X	J	V	S	D
	40			1	2	3	4	5		44						1	2		49	1	2	3	4	5	6	7
	41	6	7	8	9	10	11	12		45	3	4	5	6	7	8	9		50	8	9	10	11	12	13	14
	42	13	14	15	16	17	18	19		46	10	11	12	13	14	15	16		51	15	16	17	18	19	20	21
	43	20	21	22	23	24	25	26		47	17	18	19	20	21	22	23		52	22	23	24	25	26	27	28
	44	27	28	29	30	31				48	24	25	26	27	28	29	30		1	29	30	31
	FN		DIAS EN LOS QUE NO SE REALIZARA EL TURNO ALTERNATIVO
	TA		LAS JORNADAS DE TURNO ALTERNATIVO MARCADAS EN VERDE EL PLUS SE COBRARA EN LOS TURNOS DE 6 A 14, DE 14 A 22 Y DE 22 A 6
	TA		LAS JORNADAS DE TURNO ALTERNATIVO MARCADAS EN AMARILLO EL PLUS SE COBRARA EN EL TURNO DE 6 A 14.
			EL RESTO DE LOS DIAS NO COLOREADOS EN VERDE O EN AMARILLO, LOS TURNOS NO TENDRAN PLUS ALTERNATIVO.

$1(;2 ,,

CVE-2014-11542

3$55,//$ '( 75$%$-2 78512 $/7(51$7,92

L

M

X

J

V

S

D

L

M

X

J

V

S

D

L

M

X

J

V

S

D

L

M

X

J

V

S

D

TURNO A

N

N

N

N

N

N

D

D

D

T

T

T

T

D

T

T

D

D

M

M

M

M

M

M

M

D

D

D

TURNO B

M

M

M

M

D

X

X

X

X

X

X

X

X

X

X

X

T

T

T

T

D

T

T

D

D

M

M

M

TURNO C

T

T

D

D

M

M

M

M

M

M

M

D

X

X

X

X

X

X

X

X

X

X

X

T

T

T

T

D

TURNO D

D

D

T

T

T

T

D

T

T

D

D

M

M

M

M

M

M

M

D

D

D

N

N

N

N

N

N

D

2014/11542