Comparison Overview

Gestamp Renewables

VS

ERH Consult

Gestamp Renewables

Calle Ombú 3, Planta 6, Madrid, Comunidad de Madrid, ES, 28045
Last Update: 2025-08-19 (UTC)
Between 900 and 1000
http://www.gestampren.com/

Excellent

Gestamp Renewables, a division of Corporacion Gestamp, is an industrial group that operates and supplies components within the renewable energy sector. Since 2005, Gestamp Renewables has aspired to position itself as an international leader within the renewable energy sector, using a unique and integrated business model encompassing the entire value chain – from the manufacture and supply of components, to the development, construction, maintenance, operation and development of wind, solar and biomass energy projects. Gestamp Renewables integrates its three lines of activity in renewable energies of Corporación Gestamp: Solar Energy, Wind Energy and Biomass.

NAICS: 33441
NAICS Definition: Semiconductor and Other Electronic Component Manufacturing
Employees: 769
Subsidiaries: 6
12-month incidents
0
Known data breaches
0
Attack type number
0

ERH Consult

Àvila 138. 3a planta Barcelona, 08018, ES
Last Update: 2025-05-01 (UTC)

Excellent

Between 900 and 1000
https://www.socotec.es

ENERGÍA Y RECURSOS HIDRÁULICOS, CONSULTORÍA TÉCNICA S.L. (ERH Consult ERH) (Energy and Water Resources, Technical Consulting, Ltd) is an engineering company specializing in renewable energy, mainly hydroelectric, and water treatment (Water Cycle, desalination and water treatment). This Spanish engineering, with international vocation, operates in Spain and South America, especially in Chile, which has a permanent presence and which is contributing its expertise in the growing hydropower market in this country. ENERGÍA Y RECURSOS HIDRÁULICOS, CONSULTORÍA TÉCNICA S.L. (ERH Consult ERH) born in 2012 on the initiative of a team of engineers with extensive experience of over 20 years in the field of renewable energy, water and water treatment technologies. Shareholders of ERH Consult are engineering firms CICSA and AZM Enginyers and the industrial group Auxiliar d'Explotacions Energètiques. ERH Consult focuses its activities with the aim of becoming an engineering milestone in the development of any project in the field of water and energy. We offer our services to private clients and public Administration. Efficacy, rigor and commitment are principles that underpin our work philosophy. Our expertise and experience allows us to identify business opportunities related to our activity, supporting developers and investors throughout the project development.

NAICS: 33441
NAICS Definition: Semiconductor and Other Electronic Component Manufacturing
Employees: 10,001+
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/gestamp-renewables.jpeg
Gestamp Renewables
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/defaultcompany.jpeg
ERH Consult
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Gestamp Renewables
100%
Compliance Rate
0/4 Standards Verified
ERH Consult
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Renewable Energy Semiconductor Manufacturing Industry Average (This Year)

No incidents recorded for Gestamp Renewables in 2025.

Incidents vs Renewable Energy Semiconductor Manufacturing Industry Average (This Year)

No incidents recorded for ERH Consult in 2025.

Incident History — Gestamp Renewables (X = Date, Y = Severity)

Gestamp Renewables cyber incidents detection timeline including parent company and subsidiaries

Incident History — ERH Consult (X = Date, Y = Severity)

ERH Consult cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/gestamp-renewables.jpeg
Gestamp Renewables
Incidents

No Incident

https://images.rankiteo.com/companyimages/defaultcompany.jpeg
ERH Consult
Incidents

No Incident

FAQ

Both Gestamp Renewables company and ERH Consult company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, ERH Consult company has disclosed a higher number of cyber incidents compared to Gestamp Renewables company.

In the current year, ERH Consult company and Gestamp Renewables company have not reported any cyber incidents.

Neither ERH Consult company nor Gestamp Renewables company has reported experiencing a ransomware attack publicly.

Neither ERH Consult company nor Gestamp Renewables company has reported experiencing a data breach publicly.

Neither ERH Consult company nor Gestamp Renewables company has reported experiencing targeted cyberattacks publicly.

Neither Gestamp Renewables company nor ERH Consult company has reported experiencing or disclosing vulnerabilities publicly.

Gestamp Renewables company has more subsidiaries worldwide compared to ERH Consult company.

Gestamp Renewables company employs more people globally than ERH Consult company, reflecting its scale as a Renewable Energy Semiconductor Manufacturing.

Latest Global CVEs (Not Company-Specific)

Description

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Published
Date
2025-09-28
Updated
Date
2025-09-28
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:N/I:P/A:N
cvss3
Base: 3.5
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used.

Published
Date
2025-09-28
Updated
Date
2025-09-28
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

Published
Date
2025-09-28
Updated
Date
2025-09-28
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

Published
Date
2025-09-28
Updated
Date
2025-09-28
Risk Information
cvss2
Base: 6.5
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:P/A:P
cvss3
Base: 6.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

Published
Date
2025-09-28
Updated
Date
2025-09-28
Risk Information
cvss2
Base: 9.0
Severity: LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
cvss3
Base: 8.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss4
Base: 7.4
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References