Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

Cybersecurity’s Weak Link: Tackling Network Appliance Vulnerabilities

Trust: 3.5

Fetched: Oct. 18, 2024, 10:11 a.m., Published: Oct. 1, 2024, 9 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: routers
vendor: citrix model: gateway
db: NVD ids: CVE-2023-20198, CVE-2023-46747, CVE-2023-3519

Claroty's Team82 discovers five vulnerabilities in MMS protocol, posing significant risks to industrial devices - Industrial Cyber

Related entries in the VARIoT vulnerabilities database: VAR-201612-0252

Trust: 5.5

Fetched: Oct. 18, 2024, 10:06 a.m., Published: Oct. 10, 2024, 2:24 p.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: siemens model: iec 61850
db: NVD ids: CVE-2022-38138, CVE-2022-2972, CVE-2022-2971, CVE-2022-2973, CVE-2022-2970, CVE-2015-6574

Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System | Snyk

Trust: 4.5

Fetched: Oct. 18, 2024, 10:05 a.m., Published: Sept. 27, 2024, 5 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cups model: cups
vendor: apple model: cups
db: NVD ids: CVE-2024-47175, CVE-2024-47176, CVE-2024-47076, CVE-2024-47177

Attacking the Samsung Galaxy A* Boot Chain - Quarkslab's blog

Trust: 4.25

Fetched: Oct. 18, 2024, 10:02 a.m., Published: Oct. 15, 2024, midnight
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy
vendor: samsung model: note
db: NVD ids: CVE-2024-20820, CVE-2024-20832, CVE-2024-20021, CVE-2024-20865

Some FiberHome GPON FTTH Devices Are Full of Backdoors and Vulnerabilities, Research Reveals

Trust: 5.0

Fetched: Oct. 18, 2024, 10:01 a.m., Published: Oct. 1, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: fiberhome model: hg6245d devices
vendor: fiberhome model: hg6245d
vendor: fiberhome model: an5506-04-f
vendor: fiberhome model: an5506-04-fa
vendor: fiberhome model: fiberhome hg6245d devices

Google's Shift to Rust Programming Cuts Android Memory Vulnerabilities by 68%

Trust: 3.75

Fetched: Oct. 18, 2024, 10 a.m., Published: Sept. 25, 2024, 5 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-48421, CVE-2023-48409, CVE-2024-0153

Cybersecurity’s Weak Link: Tackling Network Appliance Vulnerabilities

Trust: 3.5

Fetched: Oct. 18, 2024, 9:58 a.m., Published: Oct. 1, 2024, 9 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: routers
vendor: citrix model: gateway
db: NVD ids: CVE-2023-20198, CVE-2023-46747, CVE-2023-3519

Cyber hygiene: definition, benefits and best practices | Blog - Future Processing

Trust: 3.0

Fetched: Oct. 18, 2024, 9:56 a.m., Published: Oct. 17, 2024, 9:09 a.m.
 Vulnerabilities: weak password
Affected productsExternal IDs

Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk

Trust: 4.5

Fetched: Oct. 18, 2024, 9:55 a.m., Published: Oct. 17, 2024, 5:18 a.m.
 Vulnerabilities: privilege escalation, authentication bypass, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2024-9594, CVE-2024-38139, CVE-2024-45216, CVE-2024-38190, CVE-2024-9486, CVE-2024-38204

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

Trust: 4.75

Fetched: Oct. 18, 2024, 9:49 a.m., Published: Oct. 14, 2024, 11:35 a.m.
 Vulnerabilities: command injection, code execution, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-9380, CVE-2024-8190, CVE-2024-29824, CVE-2024-8963

Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilities - Cisco

Trust: 5.5

Fetched: Oct. 18, 2024, 9:46 a.m., Published: Oct. 16, 2024, 11:50 a.m.
 Vulnerabilities: denial of service, privilege escalation, information disclosure...
Affected productsExternal IDs
vendor: cisco model: series
db: NVD ids: CVE-2024-20460, CVE-2024-20461, CVE-2024-20458, CVE-2024-20462, CVE-2024-20463, CVE-2024-20420, CVE-2024-20459, CVE-2024-20421

Cisco UCS Central Software Configuration Backup Information Disclosure Vulnerability

Trust: 5.25

Fetched: Oct. 18, 2024, 9:46 a.m., Published: Oct. 16, 2024, 3:57 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: ucs central software

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

Trust: 3.75

Fetched: Oct. 18, 2024, 9:46 a.m., Published: Oct. 18, 2024, 5:42 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
db: NVD ids: CVE-2024-44133

Critical Vulnerabilities Affecting GitHub Enterprise Server, Kubernetes Image Builder, and GiveWP Plugin - SOCRadar® Cyber Intelligence Inc.

Trust: 4.5

Fetched: Oct. 18, 2024, 9:44 a.m., Published: Oct. 16, 2024, 11:02 a.m.
 Vulnerabilities: privilege escalation, authentication bypass, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2024-9487, CVE-2024-9634, CVE-2024-9594, CVE-2024-9539, CVE-2024-4985, CVE-2024-9486

Tor Browser and Firefox users should update to fix actively exploited vulnerability | Malwarebytes

Trust: 4.0

Fetched: Oct. 18, 2024, 9:39 a.m., Published: Oct. 16, 2024, 11:37 a.m.
 Vulnerabilities: code execution, use after free
Affected productsExternal IDs
db: NVD ids: CVE-2024-9680

Embedded web server input sanitization vulnerability (CVE-2021-44734) | Lexmark M5155

Related entries in the VARIoT vulnerabilities database: VAR-202201-0782

Trust: 4.0

Fetched: Oct. 18, 2024, 9:37 a.m., Published: May 18, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lexmark model: lexmark
vendor: lexmark model: m5155
db: NVD ids: CVE-2021-44734

New macOS vulnerability, “HM Surf”, could lead to unauthorized data access - Malware News - Malware Analysis, News and Indicators

Trust: 4.5

Fetched: Oct. 18, 2024, 9:34 a.m., Published: Oct. 17, 2024, 4:15 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: home
vendor: apple model: safari
vendor: apple model: macos
db: NVD ids: CVE-2024-44133

User Data Encryption (UDE) | Lexmark M5155

Trust: 3.0

Fetched: Oct. 18, 2024, 9:31 a.m., Published: May 18, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lexmark model: lexmark
vendor: lexmark model: m5155

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Oct. 18, 2024, 9:30 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

What I’ve learned in my first 7-ish years in cybersecurity

Trust: 3.5

Fetched: Oct. 18, 2024, 9:30 a.m., Published: Oct. 17, 2024, 6 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: motorola model: motorola
vendor: motorola model: android
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: cisco model: series
vendor: cisco model: clamav
vendor: clamav model: clamav
vendor: snort model: snort
db: NVD ids: CVE-2024-43047