VARIoT latest news about IoT security

U.S. CISA adds Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities catalog Trust: 3.75 Fetched: Sept. 16, 2024, 7:06 p.m., Published: Sept. 14, 2024, 3:45 p.m.	Vulnerabilities: command injection, os command injection, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-8190

Zyxel security advisory for OS command injection vulnerability in APs and security router devices \| Zyxel Networks Trust: 3.75 Fetched: Sept. 16, 2024, 7:05 p.m., Published: Sept. 7, 2024, midnight	Vulnerabilities: command injection, os command injection

Affected products	External IDs

Zyxel vulnerability - CVE-2024-7261 - Find affected assets Related entries in the VARIoT vulnerabilities database: VAR-202304-2073 Trust: 5.0 Fetched: Sept. 16, 2024, 7:05 p.m., Published: Sept. 3, 2024, 8:58 p.m.	Vulnerabilities: command execution, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-7261, CVE-2023-28771

Explore Internet-Facing System Vulnerabilities \| Darktrace Blog Trust: 4.0 Fetched: Sept. 16, 2024, 7:04 p.m., Published: April 4, 2022, midnight	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:

trend

model:

security

Ivanti CVE - OpenCVE Trust: 4.25 Fetched: Sept. 16, 2024, 7:01 p.m., Published: April 6, 2024, midnight	Vulnerabilities: os command injection, command injection, uncontrolled search path...

Affected products

External IDs

vendor:	pulse secure	model:	pulse connect secure
vendor:	pulse secure	model:	connect secure
vendor:	pulse secure	model:	policy secure
vendor:	pulse secure	model:	pulse policy secure
vendor:	pulse	model:	secure pulse connect secure

The Story of regreSSHion: Critical OpenSSH Vulnerability - Logpoint Trust: 5.0 Fetched: Sept. 16, 2024, 6:59 p.m., Published: July 5, 2024, 9:39 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2008-4109, CVE-2024-6387, CVE-2006-5051

Zyxel security advisory for buffer overflow vulnerability in some 5G NR CPE, DSL/Ethernet CPE, fiber ONT, WiFi extender, and security router devices \| Zyxel Networks Trust: 3.0 Fetched: Sept. 16, 2024, 6:59 p.m., Published: Sept. 7, 2024, midnight	Vulnerabilities: buffer overflow

Affected products	External IDs

Critical Improper Access Control Vuln Affecting SonicWall Devices \| Rapid7 Blog Trust: 4.75 Fetched: Sept. 16, 2024, 6:58 p.m., Published: Sept. 9, 2024, 6:38 p.m.	Vulnerabilities: improper access control, access control vulnerability

Affected products

External IDs

vendor:	sonicwall	model:	soho
vendor:	sonicwall	model:	sonicos

db:

NVD

ids:

CVE-2024-40766

Protecting Against RCE Attacks Abusing WhatsUp Gold Vulnerabilities \| Trend Micro (US) Trust: 4.25 Fetched: Sept. 16, 2024, 6:54 p.m., Published: Sept. 12, 2024, midnight	Vulnerabilities: weak password, code execution

Affected products

External IDs

vendor:	ipswitch	model:	whatsup gold
vendor:	ipswitch	model:	whatsup
vendor:	trend micro	model:	security
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2024-6670, CVE-2024-4885

D-Link Technical Support Related entries in the VARIoT vulnerabilities database: VAR-202409-1026, VAR-202409-1099, VAR-202409-0703 Trust: 6.0 Fetched: Sept. 16, 2024, 6:54 p.m., Published: June 8, 2021, midnight	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:

d-link

model:

router

db:

NVD

ids:

CVE-2024-45698, CVE-2024-45696, CVE-2024-45697, CVE-2024-45694, CVE-2024-45695

Does the Blast-RADIUS vulnerability affect Portnox Cloud users? Trust: 3.0 Fetched: Sept. 16, 2024, 6:54 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-3596

Active Exploitation of Zero-Day Vulnerability in Android Devices Trust: 5.75 Fetched: Sept. 16, 2024, 6:53 p.m., Published: Sept. 16, 2024, midnight	Vulnerabilities: use after free, code execution

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2024-36971

Firmware Vulnerability in Poly Clariti Manager Devices (CVE-2024-41913) \| SecurityVulnerability.io - SecuirtyVulnerability.io Trust: 3.25 Fetched: Sept. 16, 2024, 6:50 p.m., Published: Aug. 6, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-41913

CVE-2024-45038 - Meshtastic Device Firmware MQTT Denial of Service Vulnerability Trust: 6.25 Fetched: Sept. 16, 2024, 6:44 p.m., Published: Aug. 27, 2024, 9:15 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

mesh

model:

mesh

db:

NVD

ids:

CVE-2024-45038

Windows MSHTML Zero-Day Vulnerability Exploited In The Wild Trust: 3.0 Fetched: Sept. 16, 2024, 6:43 p.m., Published: Sept. 16, 2024, 1:50 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-43461, CVE-2024-38112

CVE-2024-33896 - Cosy+ Devices Code Injection Vulnerability Trust: 5.0 Fetched: Sept. 16, 2024, 6:43 p.m., Published: Aug. 2, 2024, 6:16 p.m.	Vulnerabilities: code injection

Affected products

External IDs

db:

NVD

ids:

CVE-2024-33896

CVE-2024-7581 - Tenda A301 Stack-Based Buffer Overflow Vulnerability Related entries in the VARIoT vulnerabilities database: VAR-202408-0167 Trust: 4.75 Fetched: Sept. 16, 2024, 6:42 p.m., Published: Aug. 7, 2024, 3:15 p.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

db:

NVD

ids:

CVE-2024-7581

CVE-2024-45032 - Industrial Edge Management Device Token Impersonation Vulnerability Trust: 3.0 Fetched: Sept. 16, 2024, 6:41 p.m., Published: Sept. 10, 2024, 10:15 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-45032

Cisco IOS XR Software Network Convergence System Denial of Service Vulnerability Trust: 3.75 Fetched: Sept. 16, 2024, 6:40 p.m., Published: Sept. 11, 2024, 3:46 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	ios xr
vendor:	cisco	model:	ios xr software
vendor:	cisco	model:	network convergence system
vendor:	cisco	model:	cisco ios xr
vendor:	cisco	model:	cisco ios

Modules 13 - 17: Threats and Attacks Group Exam (Answers) Trust: 5.25 Fetched: Sept. 16, 2024, 6:39 p.m., Published: Aug. 31, 2024, 3:55 a.m.	Vulnerabilities: buffer overflow, session hijacking, resource exhaustion...

Affected products

External IDs

vendor:	cisco	model:	router
vendor:	cisco	model:	cisco ios

VARIoT news about IoT security