Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download

Comparison Overview

Metrô de São PauloMetrô de São Paulo
VS
CNCN
Metrô de São Paulo

Metrô de São Paulo

Rua Boa Vista, 175, Centro -SP, São Paulo, São Paulo, 01014-001, BR

Last Update: 14/02/2026

View Profile
Between 750 and 799
http://www.metro.sp.gov.br
766/1000Fair

A Companhia do Metropolitano de São Paulo – Metrô foi constituída no dia 24 de abril de 1968. É controlada pelo Governo do Estado de São Paulo sob gestão da Secretaria de Estado dos Transportes Metropolitanos (STM). É responsável pela operação e expansão de rede metrovi...

NAICS:482
NAICS Definition:Rail Transportation
Employees:3,994
Subsidiaries:30
12-month incidents
0
Known data breaches
0
Attack type number
0
CN

CN

935 de La Gauchetière Street West, Montreal, H3B 2M9, CA

Last Update: 07/06/2026

View Profile
Between 800 and 849
https://www.cn.ca
821/1000Good

CN is a North American transportation and logistics leader focused on supply chain innovation and collaboration. We offer integrated shipping solutions, including rail, intermodal, trucking, freight forwarding, warehousing and distribution. We are an engaged corporate...

NAICS:482
NAICS Definition:Rail Transportation
Employees:12,671
Subsidiaries:1
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Ranges Comparison

Based On Specific Ai Models Category
Metrô de São Paulo

Metrô de São Paulo

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA
CN

CN

-
ISO 27001Not verified
ISO 27001
-
SOC2 Type 1Not verified
SOC2 Type 1
-
SOC2 Type 2Not verified
SOC2 Type 2
-
GDPRNot verified
GDPR
-
PCI DSSNot verified
PCI DSS
-
HIPAANot verified
HIPAA

Benchmark & Cyber Underwriting Signals

Incidents vs Rail Transportation Industry Avg (This Year)

No incidents recorded for Metrô de São Paulo in 2026.

Incidents

Incidents vs Rail Transportation Industry Avg (This Year)

No incidents recorded for CN in 2026.

Incidents

Incident History - Metrô de São Paulo (X = Date, Y = Severity)

Metrô de São Paulo cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Incident History - CN (X = Date, Y = Severity)

CN cyber incidents detection timeline including parent company and subsidiaries.

No timeline data available
R - Ransomware
C - Cyber Attack
D - Data Breach
V - Vulnerability

Notable Incidents

Last Cyber / HR Incidents / Global...
Metrô de São Paulo

Metrô de São Paulo

Incidents
No explicit notable incidents reported.
CN

CN

Incidents
No explicit notable incidents reported.

FAQ

Between Metrô de São Paulo company and CN company, which one has the best AI Cybersecurity Score ?
Between Metrô de São Paulo company and CN company, which one has experienced more cyber incidents in the past ?
Between Metrô de São Paulo company and CN company, which one has experienced more cyber incidents this year ?
Between Metrô de São Paulo company and CN company, which one has experienced at least one ransomware attack ?
Between Metrô de São Paulo company and CN company, which one has experienced at least one data breach ?
Between Metrô de São Paulo company and CN company, which one has experienced at least one targeted cyberattack ?
Between Metrô de São Paulo company and CN company, which one has experienced at least one vulnerability ?
Between Metrô de São Paulo company and CN company, which one holds the most compliance certifications ?
Between Metrô de São Paulo company and CN company, which one holds the fewest compliance certifications ?
Between Metrô de São Paulo company and CN company, which one has the most subsidiaries ?
Between Metrô de São Paulo company and CN company, which one has the largest number of employees ?
Between Metrô de São Paulo and CN, which company holds both SOC 2 Type 1 certifications ?
Between Metrô de São Paulo and CN, which company holds both SOC 2 Type 2 certifications ?
Which company is ISO 27001 certified - Metrô de São Paulo or CN ?
Which company is PCI DSS compliant - Metrô de São Paulo or CN ?
Between Metrô de São Paulo and CN, which company complies with HIPAA regulations for healthcare data ?
Between Metrô de São Paulo and CN, which company complies with GDPR requirements ?

Latest Global CVEs

CVE-2026-50044
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an inadequate encryption strength vulnerability which could allow an attacker to steal admin credentials via weak hash or a pass-the-hash attack.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 6.8)
CVSS3
Base Score: 6.8
Complexity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS4
Base Score: 7.6
Complexity: HIGH
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
5.2
EXPLOITABILITY
1.6
CVE-2026-44955
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 5.3)
CVSS3
Base Score: 5.3
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS4
Base Score: 6.9
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
1.4
EXPLOITABILITY
3.9
CVE-2026-42933
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, which would bypass OT segmentation.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 10)
CVSS3
Base Score: 10.0
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS4
Base Score: 10.0
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
6
EXPLOITABILITY
3.9
CVE-2026-40430
SUMMARY

Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 7.5)
CVSS3
Base Score: 7.5
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS4
Base Score: 8.7
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
3.6
EXPLOITABILITY
3.9
CVE-2026-28698
SUMMARY

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem.

PUBLISHED
Date2026-07-23
UPDATED
Date2026-07-23
RISK INFORMATION (Score: 8.6)
CVSS3
Base Score: 8.6
Complexity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS4
Base Score: 9.2
Complexity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
IMPACT SCORE
4
EXPLOITABILITY
3.9