Sign-up

VARIoT news about IoT security

CERT-In flags vulnerabilities in Apple devices - The Hindu BusinessLine

Trust: 5.0

Fetched: Jan. 29, 2025, 9:23 a.m., Published: Jan. 29, 2025, 3:24 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: macos

CVE-2024-34733 : Arbitrary Code Execution Vulnerability in Device Memory Server by Android | SecurityVulnerability.io

Trust: 3.25

Fetched: Jan. 29, 2025, 9:23 a.m., Published: Jan. 28, 2025, 7:13 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-34733

CISA flags hardware vulnerabilities in ICS and medical devices; affects B&R, Schneider Electric, Rockwell, BD Systems - Industrial Cyber

Trust: 5.25

Fetched: Jan. 29, 2025, 9:22 a.m., Published: Jan. 29, 2025, 8:15 a.m.
 Vulnerabilities: command injection, path traversal, use after free...
Affected productsExternal IDs
vendor: rockwell automation model: automation factorytalk
vendor: rockwell automation model: automation factorytalk view se
vendor: rockwell automation model: factorytalk view se
vendor: rockwell automation model: factorytalk view
vendor: rockwell automation model: factorytalk
vendor: schneider electric model: monitor
vendor: schneider electric model: modbus
vendor: schneider electric model: scadapack
vendor: rockwell model: automation factorytalk
vendor: rockwell model: automation factorytalk view se
vendor: rockwell model: factorytalk view se
vendor: rockwell model: factorytalk view
vendor: rockwell model: factorytalk
vendor: schneider model: monitor
vendor: schneider model: modbus
vendor: schneider model: scadapack
db: NVD ids: CVE-2024-10497, CVE-2024-8603, CVE-2024-11932, CVE-2025-24480, CVE-2025-0659, CVE-2025-24479, CVE-2025-24482, CVE-2020-11656, CVE-2024-10476, CVE-2025-24481, CVE-2024-12703, CVE-2024-10498

CVE-2024-34748 : Use-After-Free Vulnerability in Device Memory Management of Android by Google | SecurityVulnerability.io

Trust: 4.25

Fetched: Jan. 29, 2025, 9:21 a.m., Published: Jan. 28, 2025, 7:13 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-34748

Apple users: Update your devices now to patch zero-day vulnerability | Malwarebytes

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 4.75

Fetched: Jan. 29, 2025, 9:20 a.m., Published: Jan. 28, 2025, 1:18 p.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: ipad
vendor: apple model: software update
vendor: apple model: apple tv
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: macos
db: NVD ids: CVE-2025-24085

Unauthorized modification of iOS - Apple Support

Trust: 3.0

Fetched: Jan. 29, 2025, 9:14 a.m., Published: Jan. 18, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Apple Devices Under Siege: Urgent Security Update Needed to Patch Actively Exploited Zero-Day Vulnerability

Trust: 4.75

Fetched: Jan. 29, 2025, 9:13 a.m., Published: Jan. 28, 2025, 9:55 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: ipad
vendor: apple model: software update
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: macos
vendor: apple model: watchos
db: NVD ids: CVE-2023-1234

Multiple Vulnerabilities in Ivanti Products Could Allow for Remote Code Execution

Trust: 3.0

Fetched: Jan. 28, 2025, 9:23 a.m., Published: Jan. 9, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

ScanNow UPn checks for vulnerabilities in Networks for Devices - UMA Technology

Trust: 3.75

Fetched: Jan. 28, 2025, 9:21 a.m., Published: Jan. 4, 2025, 2:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Update Canonical Ubuntu Desktop: USN-7225-1: HTMLDOC vulnerabilities

Trust: 5.75

Fetched: Jan. 28, 2025, 9:20 a.m., Published: Jan. 28, 7225, midnight
 Vulnerabilities: denial of service, buffer overflow
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-46478, CVE-2022-34033, CVE-2024-45508, CVE-2022-28085, CVE-2022-0137, CVE-2022-34035, CVE-2022-24191, CVE-2022-27114, CVE-2022-0534

Update Canonical Ubuntu Desktop: USN-7221-1: Linux kernel (OEM) vulnerabilities

Trust: 4.25

Fetched: Jan. 28, 2025, 9:20 a.m., Published: Jan. 28, 7221, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-53238, CVE-2024-56757

Understanding and Mitigating CVE-2025-21207: Windows Cdpsvc Denial of Service Vulnerability

Trust: 4.0

Fetched: Jan. 28, 2025, 9:20 a.m., Published: Jan. 14, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-21207

Update Canonical Ubuntu Desktop: USN-7224-1: Cyrus IMAP Server vulnerabilities

Trust: 4.75

Fetched: Jan. 28, 2025, 9:19 a.m., Published: Jan. 28, 7224, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cyrus model: imap server
vendor: cyrus model: cyrus imap server
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-34055, CVE-2019-18928, CVE-2021-33582

Critical SonicWall Vulnerability Exploited In Attacks Execute Arbitrary OS Commands

Trust: 4.0

Fetched: Jan. 28, 2025, 9:19 a.m., Published: Jan. 23, 2025, 1:42 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: sma1000
vendor: sonicwall model: sma 100
db: NVD ids: CVE-2025-23006

D-Link DIR-619L <= 2.06 Multiple Buffer Overflow Vulnerabilities (Nov 2024) (CVE-2024-33771, CVE-2024-33772, CVE-2024-33773...) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202405-4042, VAR-202405-4078

Trust: 6.0

Fetched: Jan. 28, 2025, 9:18 a.m., Published: Jan. 2, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: d-link model: dir-619l
db: NVD ids: CVE-2024-33772, CVE-2024-33773, CVE-2024-33771

Government Issues Urgent Warning for Chrome Users on Mac, Windows, and Chromebooks

Trust: 3.5

Fetched: Jan. 28, 2025, 9:17 a.m., Published: Jan. 27, 2025, 7:29 a.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

D-Link DAP-1520 DoS Vulnerability (SAP10395) (CVE-2024-36831) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202412-0630

Trust: 3.0

Fetched: Jan. 28, 2025, 9:16 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-36831

D-Link DAP-1513 Multiple Vulnerabilities (Nov 2022) (CVE-2024-36832) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202412-0623

Trust: 3.0

Fetched: Jan. 28, 2025, 9:16 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-36832

Update Canonical Ubuntu Desktop: USN-7227-1: PCL vulnerability

Trust: 4.25

Fetched: Jan. 28, 2025, 9:16 a.m., Published: Jan. 28, 7227, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

RouterSploit: Advanced Password Cracking Tool

Trust: 3.5

Fetched: Jan. 28, 2025, 9:15 a.m., Published: Jan. 9, 2025, midnight
 Vulnerabilities: weak password, default credentials
Affected productsExternal IDs