Sign-up

VARIoT news about IoT security

Security Advisory for the FL MGUARD family of devices | Bosch PSIRT

Related entries in the VARIoT vulnerabilities database: VAR-202302-0482

Trust: 4.75

Fetched: July 5, 2023, 9:13 a.m., Published: July 3, 2023, midnight
 Vulnerabilities: input validation vulnerability
Affected productsExternal IDs
vendor: phoenix contact model: mguard smart2 vpn
vendor: phoenix contact model: mguard smart2
vendor: phoenix contact model: mguard
db: NVD ids: CVE-2023-2673, CVE-2022-4304

Samsung smartphones flaws included in the CISA vulnerability catalog

Related entries in the VARIoT vulnerabilities database: VAR-202110-0167, VAR-202110-0169

Trust: 4.5

Fetched: July 5, 2023, 9:07 a.m., Published: July 5, 2023, 6:29 a.m.
 Vulnerabilities: bounds access vulnerability, format string bug
Affected productsExternal IDs
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
db: NVD ids: CVE-2021-25487, CVE-2021-25394, CVE-2021-25372, CVE-2021-25395, CVE-2021-25489, CVE-2023-21492, CVE-2021-25371

"Samsung and D-Link Under Cyber Threat: Eight New Vulnerabilities Detected by CISA" - NextdoorSec

Related entries in the VARIoT vulnerabilities database: VAR-202110-0167, VAR-201912-1012, VAR-202110-0169, VAR-202003-0963

Trust: 4.5

Fetched: July 5, 2023, 9:06 a.m., Published: July 4, 2023, 6:08 p.m.
 Vulnerabilities: command injection, command execution, input validation vulnerability
Affected productsExternal IDs
vendor: d-link model: router
vendor: d-link model: dwl-2600ap
vendor: d-link model: dir-859
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
db: NVD ids: CVE-2021-25487, CVE-2021-25394, CVE-2019-17621, CVE-2021-25372, CVE-2021-25489, CVE-2021-25395, CVE-2019-20500, CVE-2021-25371

Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows Privilege Escalation Vulnerability

Trust: 4.0

Fetched: July 4, 2023, 9:24 a.m., Published: June 22, 2023, 5:26 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco anyconnect secure mobility client
vendor: cisco model: anyconnect secure mobility client
vendor: cisco model: anyconnect secure mobility client software

CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices

Related entries in the VARIoT vulnerabilities database: VAR-202003-0963, VAR-202110-0167, VAR-202110-0169, VAR-201912-1012

Trust: 4.5

Fetched: July 4, 2023, 9:22 a.m., Published: July 3, 2023, 10:48 a.m.
 Vulnerabilities: input validation vulnerability, kernel panic, os command injection...
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: palo model: networks
vendor: palo alto networks model: networks
vendor: d-link model: dir-859
vendor: d-link model: router
vendor: d-link model: dwl-2600ap
db: NVD ids: CVE-2021-25371, CVE-2021-25372, CVE-2019-20500, CVE-2021-25395, CVE-2021-25487, CVE-2021-25489, CVE-2019-17621, CVE-2021-25394

336,000 servers remain unpatched against critical Fortigate vulnerability | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-202302-1271

Trust: 6.0

Fetched: July 4, 2023, 9:22 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-39952, CVE-2023-27997, CVE-2023-40684

​Mitsubishi Electric MELSEC-F Series | CISA

Trust: 5.75

Fetched: July 4, 2023, 9:21 a.m., Published: March 7, 2023, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: mitsubishi model: fx3g
vendor: mitsubishi model: fx3u
vendor: mitsubishi model: fx3s
vendor: mitsubishi model: fx3u-enet
vendor: mitsubishi model: fx3gc
vendor: mitsubishi model: fx3uc
vendor: mitsubishi model: fx3u-enet-adp
vendor: mitsubishi electric model: fx3g
vendor: mitsubishi electric model: fx3u
vendor: mitsubishi electric model: fx3s
vendor: mitsubishi electric model: fx3u-enet
vendor: mitsubishi electric model: fx3gc
vendor: mitsubishi electric model: fx3uc
vendor: mitsubishi electric model: fx3u-enet-adp
db: NVD ids: CVE-2023-2846

CVE-2023-27997 Vulnerability Scanner for FortiGate… | Bishop Fox

Trust: 4.5

Fetched: July 4, 2023, 9:20 a.m., Published: July 4, 2023, midnight
 Vulnerabilities: buffer overflow, memory corruption, code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2023-27997

Schneider Electric EcoStruxure Operator Terminal Expert | CISA

Trust: 5.25

Fetched: July 4, 2023, 9:20 a.m., Published: March 7, 2023, midnight
 Vulnerabilities: code injection, injection attack
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2023-1049

Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability

Trust: 4.0

Fetched: July 4, 2023, 9:19 a.m., Published: June 7, 2023, 3:56 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: small business 300 series managed switches
vendor: cisco model: series
vendor: cisco model: series managed switches
vendor: cisco model: 500 series stackable managed switches
vendor: cisco model: 200 series smart switches
vendor: cisco model: cisco small business
vendor: cisco model: series switches
vendor: cisco model: small business 500 series stackable managed switches
vendor: cisco model: series smart switches
vendor: cisco model: series stackable managed switches
vendor: cisco model: small business
vendor: cisco model: 300 series managed switches

IoT Security - Securing Smart Cities and Critical Infrastructure | UncleSp1d3r Blog

Trust: 3.25

Fetched: July 4, 2023, 9:18 a.m., Published: June 30, 2023, midnight
 Vulnerabilities: default credentials, denial of service, information disclosure...
Affected productsExternal IDs

Mobile Vulnerability Assessment: Tools and Techniques

Trust: 3.0

Fetched: July 2, 2023, 9:14 a.m., Published: July 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: blackberry model: blackberry

23-027 (June 27, 2023) - Threat Encyclopedia

Trust: 4.75

Fetched: July 2, 2023, 9:13 a.m., Published: June 27, 2023, midnight
 Vulnerabilities: denial of service, information disclosure, directory traversal...
Affected productsExternal IDs
vendor: solarwinds model: network performance monitor
db: NVD ids: CVE-2023-27350, CVE-2022-36957, CVE-2023-2825, CVE-2023-32247, CVE-2023-27293, CVE-2021-42847, CVE-2022-38108, CVE-2021-28169, CVE-2023-21758

Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097

Trust: 5.5

Fetched: July 2, 2023, 9:12 a.m., Published: June 22, 2023, 6:56 a.m.
 Vulnerabilities: code execution, memory corruption, integer overflow
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: ipod touch
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: apple model: safari
db: NVD ids: CVE-2023-28204, CVE-2023-32409, CVE-2023-32373, CVE-2023-23529, CVE-2023-28205, CVE-2023-32434, CVE-2023-32435, CVE-2023-28206, CVE-2023-32439

CISA Adds Eight Known Exploited Vulnerabilities to Catalog | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202003-0963, VAR-201912-1012, VAR-202110-0167, VAR-202110-0169

Trust: 4.5

Fetched: July 2, 2023, 9:12 a.m., Published: -
 Vulnerabilities: input validation vulnerability, command execution, command injection
Affected productsExternal IDs
vendor: d-link model: dir-859
vendor: d-link model: dwl-2600ap
vendor: d-link model: router
vendor: samsung model: note
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
db: NVD ids: CVE-2021-25395, CVE-2019-20500, CVE-2021-25372, CVE-2019-17621, CVE-2021-25371, CVE-2021-25487, CVE-2021-25394, CVE-2021-25489

Apple, Google, and MOVEit Just Patched Serious Security Flaws | WIRED

Trust: 5.75

Fetched: July 2, 2023, 9:11 a.m., Published: June 30, 2023, 11 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: safari
vendor: google model: android
db: NVD ids: CVE-2023-32031, CVE-2023-21108, CVE-2023-28310, CVE-2023-32434, CVE-2023-21130, CVE-2022-22706, CVE-2023-29357, CVE-2023-32435, CVE-2023-32439

Information Disclosure Vulnerability in Bosch IP cameras | Bosch PSIRT

Trust: 6.5

Fetched: June 30, 2023, 9:16 a.m., Published: June 3, 2023, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: bosch model: cpp7.3
vendor: bosch model: cpp13
vendor: bosch model: ip cameras
vendor: bosch model: bosch ip cameras
vendor: bosch model: cpp7
vendor: bosch model: cpp4
vendor: bosch model: cpp6
db: NVD ids: CVE-2022-41677

Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability

Trust: 4.25

Fetched: June 30, 2023, 9:15 a.m., Published: June 21, 2023, 4:03 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

2217798 - (CVE-2023-36664) CVE-2023-36664 ghostscript: vulnerable to OS command injection due to mishandles permission validation for pipe devices

Trust: 4.0

Fetched: June 30, 2023, 9:14 a.m., Published: June 27, 2023, 6:45 a.m.
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-36664

Delta Electronics InfraSuite Device Master | CISA

Trust: 5.25

Fetched: June 30, 2023, 9:14 a.m., Published: March 7, 2023, midnight
 Vulnerabilities: improper access control, privilege escalation
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2023-34347, CVE-2023-34316, CVE-2023-30765