VARIoT latest news about IoT security

Several QNAP vulnerabilities addressed \| SC Media Trust: 4.75 Fetched: Dec. 3, 2024, 10:13 a.m., Published: June 11, 2024, 5 p.m.	Vulnerabilities: request forgery, os command injection, command execution...

Affected products

External IDs

db:

NVD

ids:

CVE-2024-38644, CVE-2024-38643, CVE-2024-38645, CVE-2024-38646, CVE-2024-48861, CVE-2024-48860

Axis Devices Detection (SNMP) - vulnerability database \| Vulners.com Trust: 3.25 Fetched: Dec. 3, 2024, 10:12 a.m., Published: Nov. 27, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

axis

model:

axis

CVE-2021-30731 - "Apple macOS USB Device Capture Vulnerability" Related entries in the VARIoT vulnerabilities database: VAR-202109-1345 Trust: 3.5 Fetched: Dec. 3, 2024, 10:12 a.m., Published: Sept. 8, 2021, 2:15 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	mac_os_x
vendor:	apple	model:	macos
vendor:	apple	model:	mac_os

db:

NVD

ids:

CVE-2021-30731

D-Link says replace vulnerable routers or risk pwnage • The Register Trust: 3.5 Fetched: Dec. 3, 2024, 10:12 a.m., Published: -	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:

d-link

model:

router

CVE-2024-50359 - Exploits & Severity - Feedly Trust: 4.25 Fetched: Dec. 3, 2024, 10:11 a.m., Published: Nov. 26, 2024, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-50359

ZDI-24-1457: Delta Electronics InfraSuite Device Master _gExtraInfo Deserialization Of Untrusted Data Remote Code Execution Vulnerability - CYBERSECURITY THREATS Trust: 4.25 Fetched: Dec. 3, 2024, 10:10 a.m., Published: Nov. 7, 2024, 11:48 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-10456

Hackers Exploiting ProjectSend Authentication Vulnerability In The Wild Trust: 3.0 Fetched: Dec. 3, 2024, 10:09 a.m., Published: Nov. 27, 2024, 12:05 p.m.	Vulnerabilities: authentication vulnerability

Affected products

External IDs

db:

NVD

ids:

CVE-2024-11680

Cybersecurity Threat Research Feed - Latest Intelligence Updates Related entries in the VARIoT vulnerabilities database: VAR-202008-0248 Trust: 4.25 Fetched: Dec. 3, 2024, 10:06 a.m., Published: Oct. 31, 2024, 9:58 p.m.	Vulnerabilities: code insertion, sql injection, privilege escalation...

Affected products

External IDs

vendor:	palo alto networks	model:	pan-os
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	firewall
vendor:	trend micro	model:	security
vendor:	trend micro	model:	antivirus
vendor:	avast	model:	antivirus
vendor:	palo	model:	pan-os
vendor:	palo	model:	networks
vendor:	palo	model:	firewall
vendor:	check point	model:	check point
vendor:	paloaltonetworks	model:	pan-os
vendor:	paloaltonetworks	model:	networks
vendor:	paloaltonetworks	model:	firewall
vendor:	trend	model:	security
vendor:	trend	model:	antivirus
vendor:	cpanel	model:	cpanel
vendor:	blackberry	model:	blackberry
vendor:	blackberry	model:	link
vendor:	tp-link	model:	routers
vendor:	checkpoint	model:	check point
vendor:	google	model:	home
vendor:	google	model:	google chrome
vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	google	model:	wifi
vendor:	essential	model:	phone
vendor:	trendmicro	model:	security
vendor:	trendmicro	model:	antivirus
vendor:	ahnlab	model:	engine
vendor:	cisco	model:	guard
vendor:	cisco	model:	catalyst
vendor:	cisco	model:	umbrella
vendor:	cisco	model:	series
vendor:	cisco	model:	routers
vendor:	cisco	model:	4351

db:

NVD

ids:

CVE-2020-1472, CVE-2024-0012, CVE-2024-9680, CVE-2023-27532, CVE-2024-49039, CVE-2024-11667, CVE-2024-4351, CVE-2024-9474, CVE-2024-43451

TP-Link HomeShield Function Vulnerability Let Attackers Inject Malicious Commands Trust: 4.5 Fetched: Dec. 3, 2024, 10:04 a.m., Published: Dec. 3, 2024, 8:48 a.m.	Vulnerabilities: code execution, command injection

Affected products

External IDs

vendor:	tp-link	model:	routers
vendor:	qemu	model:	qemu

db:

NVD

ids:

CVE-2024-53375

Android Zero-Day Vulnerabilities Actively Exploited In Attacks, Patch Now! Trust: 4.75 Fetched: Dec. 3, 2024, 10:03 a.m., Published: Nov. 5, 2024, 7:58 a.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	motorola	model:	motorola
vendor:	motorola	model:	android
vendor:	oneplus	model:	oneplus
vendor:	google	model:	android
vendor:	samsung	model:	mobile devices
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile

db:

NVD

ids:

CVE-2024-43047, CVE-2024-43093

October security patch fixes serious vulnerability in Samsung phones - SamMobile Trust: 3.75 Fetched: Dec. 3, 2024, 10:03 a.m., Published: Oct. 4, 2019, 12:20 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	samsung	model:	mobile devices
vendor:	samsung	model:	galaxy s8
vendor:	samsung	model:	galaxy s9
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	galaxy s10
vendor:	samsung	model:	galaxy s7
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile
vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	google	model:	pixel

CERT-In updates: Keep your Android and Apple devices safe \| TechGig Trust: 4.5 Fetched: Dec. 3, 2024, 10:03 a.m., Published: Nov. 28, 2024, 12:33 p.m.	Vulnerabilities: code execution, memory corruption, information exposure...

Affected products

External IDs

vendor:	google	model:	android
vendor:	apple	model:	iphone
vendor:	apple	model:	icloud
vendor:	apple	model:	macos

CISA, NSA, and Partners Issue Annual Report on Top Exploited Vulnerabilities > National Security Agency/Central Security Service > Press Release View Trust: 3.25 Fetched: Dec. 3, 2024, 10:02 a.m., Published: Nov. 12, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

trend

model:

security

WordPress L Squared Hub WP plugin <= 1.0 - SQL Injection vulnerability - Patchstack Trust: 3.25 Fetched: Dec. 3, 2024, 10:02 a.m., Published: Dec. 1, 2024, midnight	Vulnerabilities: sql injection

Affected products	External IDs

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution Trust: 5.25 Fetched: Dec. 3, 2024, 10:02 a.m., Published: Dec. 2, 2024, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:

google

model:

android

Samsung monthly updates: November 2024 security patch detailed - SamMobile Trust: 4.0 Fetched: Dec. 3, 2024, 10:02 a.m., Published: Nov. 5, 2024, 1:44 a.m.	Vulnerabilities: memory corruption

Affected products

External IDs

vendor:	samsung	model:	exynos
vendor:	samsung	model:	samsung
vendor:	samsung	model:	galaxy

CVE-2024-8938: Echelon Network Device Vulnerability - DEC Solutions Group Trust: 3.0 Fetched: Dec. 3, 2024, 10:01 a.m., Published: Nov. 13, 2024, 5:31 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-8938

Cisco Unified Industrial Wireless Software for Ultra-Reliable Wireless Backhaul Access Point Command Injection Vulnerability - Cisco Trust: 3.0 Fetched: Dec. 3, 2024, 10:01 a.m., Published: Nov. 6, 2024, 10:18 a.m.	Vulnerabilities: command injection

Affected products	External IDs

CVE-2023-20092 - vulnerability database \| Vulners.com Trust: 4.0 Fetched: Dec. 3, 2024, 9:56 a.m., Published: Nov. 15, 2024, 4:15 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	cisco telepresence
vendor:	cisco	model:	dx70
vendor:	cisco	model:	telepresence mx series
vendor:	cisco	model:	telepresence sx series
vendor:	cisco	model:	telepresence
vendor:	cisco	model:	series
vendor:	cisco	model:	telepresence ce
vendor:	cisco	model:	dx80
vendor:	cisco	model:	roomos

db:

NVD

ids:

CVE-2023-20092

Conducting a Comprehensive Medical Device Inventory for Enhanced Cybersecurity - Blue Goat Cyber Trust: 3.75 Fetched: Dec. 3, 2024, 9:54 a.m., Published: Feb. 2, 2024, 8:16 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

serve

model:

serve

VARIoT news about IoT security