Sign-up

VARIoT news about IoT security

VDE-2024-047 | CERT@VDE

Trust: 3.0

Fetched: Nov. 27, 2024, 10:13 a.m., Published: Nov. 18, 2024, noon
 Vulnerabilities: -
Affected productsExternal IDs
vendor: wago model: pfc100
vendor: wago model: wago
vendor: wago model: pfc200
vendor: wago model: wago pfc200

Apple Patches Two Zero-Day Attack Vectors

Trust: 4.25

Fetched: Nov. 27, 2024, 10:11 a.m., Published: Nov. 21, 2024, 7:55 p.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: safari
db: NVD ids: CVE-2024-23296, CVE-2024-27834, CVE-2024-23222, CVE-2024-44309, CVE-2024-23225, CVE-2024-44308

Windows 11 security book - Operating System security | Microsoft Learn

Trust: 3.25

Fetched: Nov. 27, 2024, 10:10 a.m., Published: Nov. 18, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

What is Malware? | UpGuard

Trust: 3.5

Fetched: Nov. 27, 2024, 10:08 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: android
vendor: google model: home

Deezer Bug Bounty Program bug bounty program - YesWeHack

Trust: 3.0

Fetched: Nov. 27, 2024, 10:07 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Thousands of PAN-OS devices compromised by critical exploits • The Register

Trust: 4.25

Fetched: Nov. 27, 2024, 10:06 a.m., Published: -
 Vulnerabilities: code execution, privilege escalation, authentication bypass
Affected productsExternal IDs
vendor: palo model: pan-os
vendor: palo model: networks
vendor: palo model: firewall
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
db: NVD ids: CVE-2024-9474, CVE-2024-0012

What to do if your wifi is hacked? Identify and Protect Your Network - AstrillVPN Blog

Trust: 4.25

Fetched: Nov. 27, 2024, 10:05 a.m., Published: Nov. 21, 2024, 7:38 p.m.
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: essential model: phone
vendor: trend model: security
vendor: trend model: antivirus

OpenSSL Vulnerability: What Do You Need to Know?

Related entries in the VARIoT vulnerabilities database: VAR-202203-0005, VAR-202201-1080

Trust: 3.75

Fetched: Nov. 27, 2024, 10:03 a.m., Published: March 17, 2022, 3:13 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-0778, CVE-2021-4160

ServiceNow Now Platform Vulnerabilities Enable RCE and SQL Injection Risks (CVE-2024-8923, CVE-2024-8924) - Patch Now - SOCRadar® Cyber Intelligence Inc.

Trust: 4.75

Fetched: Nov. 27, 2024, 10:02 a.m., Published: Nov. 1, 2024, 10 a.m.
 Vulnerabilities: code execution, sql injection, input validation error
Affected productsExternal IDs
db: NVD ids: CVE-2024-8923, CVE-2024-8924, CVE-2024-5178, CVE-2024-5217, CVE-2024-4879

Heimdal®’s Semiannual Rundown of the Most Exploited Vulnerabilities of 2023

Related entries in the VARIoT vulnerabilities database: VAR-202304-2073, VAR-202305-2285, VAR-202303-1844, VAR-202305-2121, VAR-202303-1268, VAR-202308-2021, VAR-202302-1097

Trust: 5.5

Fetched: Nov. 27, 2024, 10 a.m., Published: Sept. 6, 2023, 11:40 a.m.
 Vulnerabilities: integer overflow, input validation vulnerability, cross-site scripting...
Affected productsExternal IDs
vendor: ruckus model: zonedirector
vendor: apple model: tvos
vendor: apple model: watchos
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: macos
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: android
vendor: minio model: minio
vendor: zyxel model: zywall
vendor: ruckus wireless model: zonedirector
db: NVD ids: CVE-2023-28205, CVE-2023-28771, CVE-2023-27997, CVE-2023-36884, CVE-2023-38606, CVE-2023-2868, CVE-2023-35311, CVE-2023-32439, CVE-2023-33010, CVE-2023-28204, CVE-2023-32315, CVE-2023-24880, CVE-2023-28432, CVE-2023-23376, CVE-2023-28252, CVE-2023-33009, CVE-2023-2033, CVE-2023-26359, CVE-2023-25717, CVE-2023-22952, CVE-2023-1389, CVE-2023-2136, CVE-2023-21492, CVE-2023-29492, CVE-2023-28206, CVE-2023-21715, CVE-2023-37580, CVE-2023-26360, CVE-2023-29298, CVE-2023-27532, CVE-2023-27350, CVE-2023-32373, CVE-2023-32409, CVE-2023-20963, CVE-2023-24489, CVE-2023-34362, CVE-2023-36874, CVE-2023-32435, CVE-2023-32046, CVE-2023-20867, CVE-2023-37450, CVE-2023-21674, CVE-2023-0266, CVE-2023-32049, CVE-2023-0669, CVE-2023-29336, CVE-2023-26083, CVE-2023-38205, CVE-2023-20887, CVE-2023-38180, CVE-2023-32434, CVE-2023-27992, CVE-2023-23529, CVE-2023-23397, CVE-2023-38831, CVE-2023-3519, CVE-2023-3079, CVE-2023-21823, CVE-2023-21839

DEF CON 32 - From getting JTAG on the iPhone 15 to hacking Apple's USB-C Controller - Stacksmashing - YouTube

Trust: 3.0

Fetched: Nov. 27, 2024, 9:43 a.m., Published: Oct. 16, 2024, 9:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Android 15 users alert: Government flags high-risk security threats - India TV

Trust: 3.75

Fetched: Nov. 27, 2024, 9:42 a.m., Published: Nov. 26, 2024, 7:36 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: android

Using iPhone or MacBook? Govt says update your Apple devices now to protect them from hacking - India Today

Trust: 4.75

Fetched: Nov. 27, 2024, 9:41 a.m., Published: Nov. 26, 2024, 9:30 a.m.
 Vulnerabilities: code execution, cross-site scripting
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: software update
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: macos
vendor: apple model: macbook
db: NVD ids: CVE-2024-44308, CVE-2024-44309

Support Content Notification - Support Portal - Broadcom support portal

Trust: 4.5

Fetched: Nov. 27, 2024, 9:39 a.m., Published: Nov. 1, 2024, midnight
 Vulnerabilities: privilege escalation, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2024-38832, CVE-2024-38833, CVE-2024-38831, CVE-2024-38830, CVE-2024-38834

Critical QNAP Vulnerabilities in Notes Station 3 and QuRouter Demand Immediate Patching (CVE-2024-38645, CVE-2024-38643, CVE-2024-48860) - SOCRadar® Cyber Intelligence Inc.

Trust: 3.5

Fetched: Nov. 27, 2024, 9:39 a.m., Published: Nov. 26, 2024, 10:53 a.m.
 Vulnerabilities: authentication flaw, command injection, os command injection...
Affected productsExternal IDs
db: NVD ids: CVE-2024-48861, CVE-2024-38643, CVE-2024-38646, CVE-2024-38647, CVE-2024-38645, CVE-2024-50396, CVE-2024-48862, CVE-2024-38644, CVE-2024-48860, CVE-2024-50397

Alert! Government Warns Android Users Of Serious Security Flaws: Is Your Device At Risk? | Times Now

Trust: 4.0

Fetched: Nov. 27, 2024, 9:38 a.m., Published: Nov. 18, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android

Zero-day, zero-click vulnerabilities in Mozilla and Windows exploited by Russia-aligned RomCom APT | Security Info Watch

Trust: 4.0

Fetched: Nov. 27, 2024, 9:38 a.m., Published: Nov. 26, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2024-49039, CVE-2023-36884, CVE-2024-9680

Using iPhone or MacBook? Govt says update your Apple devices now to protect them from hacking - India Today

Trust: 4.75

Fetched: Nov. 27, 2024, 9:36 a.m., Published: Nov. 26, 2024, 9:30 a.m.
 Vulnerabilities: code execution, cross-site scripting
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: software update
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: macos
vendor: apple model: macbook
db: NVD ids: CVE-2024-44308, CVE-2024-44309

Matrix Unleashes A New Widespread DDoS Campaign

Related entries in the VARIoT vulnerabilities database: VAR-201803-1048, VAR-201804-1666, VAR-202206-0808, VAR-201805-0263, VAR-202104-0768, VAR-201505-0274, VAR-201712-0829, VAR-202205-0957, VAR-201905-0651, VAR-201805-0262

Trust: 6.0

Fetched: Nov. 27, 2024, 9:33 a.m., Published: Nov. 26, 2024, 3:51 a.m.
 Vulnerabilities: command injection, os command injection, code execution...
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: netgear model: router
vendor: zivif model: pr115-204-p-rs
vendor: hikvision model: ip cameras
vendor: hikvision model: hikvision
vendor: tp-link model: routers
vendor: trend model: antivirus
vendor: trend model: security
vendor: samsung model: note
vendor: samsung model: samsung
db: NVD ids: CVE-2017-17215, CVE-2018-9995, CVE-2024-27348, CVE-2022-30075, CVE-2018-10562, CVE-2021-20090, CVE-2014-8361, CVE-2017-17106, CVE-2022-30525, CVE-2017-18368, CVE-2018-10561

Access Denied

Trust: 3.25

Fetched: Nov. 27, 2024, 9:33 a.m., Published: May 19, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung