VARIoT news about IoT security

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237

Trust: 5.5

Fetched: June 9, 2022, 12:46 p.m., Published: May 3, 2022, 7:50 p.m.
Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: extreme networks model: ers3500
vendor: extreme model: ers3500
db: NVD ids: CVE-2022-22805, CVE-2022-29860, CVE-2022-23676, CVE-2022-23677, CVE-2022-29861

Trust: 3.25

Fetched: June 9, 2022, 12:45 p.m., Published: May 6, 2022, midnight
Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-27588

Trust: 5.0

Fetched: June 9, 2022, 12:44 p.m., Published: -
Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2021-0675, CVE-2021-30351, CVE-2021-0674

Trust: 3.25

Fetched: June 6, 2022, 1:14 p.m., Published: May 14, 2022, 3:05 p.m.
Vulnerabilities: information disclosure
Affected productsExternal IDs

Trust: 3.0

Fetched: June 6, 2022, 1:13 p.m., Published: -
Vulnerabilities: -
Affected productsExternal IDs
vendor: axis model: communications

Trust: 3.75

Fetched: June 6, 2022, 1:13 p.m., Published: May 30, 2022, 6:29 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-42599, CVE-2021-42600, CVE-2021-42601, CVE-2021-42598

Trust: 5.0

Fetched: June 6, 2022, 1:13 p.m., Published: -
Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2021-30351, CVE-2021-0674, CVE-2021-0675

Trust: 3.0

Fetched: June 6, 2022, 1:11 p.m., Published: May 23, 2022, 12:26 p.m.
Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2017-11882

Trust: 4.75

Fetched: June 6, 2022, 1:11 p.m., Published: May 6, 2022, midnight
Vulnerabilities: open redirect vulnerability, command injection, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2021-44053, CVE-2021-44051, CVE-2021-44052, CVE-2021-44054

Trust: 4.25

Fetched: June 6, 2022, 1:10 p.m., Published: May 10, 2022, 5:58 p.m.
Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22012, CVE-2022-29137, CVE-2022-29141, CVE-2022-22013, CVE-2022-29129, CVE-2022-22014, CVE-2022-29130, CVE-2022-29131, CVE-2022-29128, CVE-2022-29139
Related entries in the VARIoT vulnerabilities database: VAR-202205-1788, VAR-202205-1787, VAR-202205-1789, VAR-202205-1790

Trust: 5.75

Fetched: June 6, 2022, 1:10 p.m., Published: May 25, 2022, 2:19 p.m.
Vulnerabilities: authentication bypass, command injection, cross-site scripting...
Affected productsExternal IDs
vendor: zyxel model: usg40
db: NVD ids: CVE-2022-0734, CVE-2022-0910, CVE-2022-26532, CVE-2022-26531

Trust: 3.75

Fetched: June 6, 2022, 1:09 p.m., Published: May 2, 2022, 6:31 p.m.
Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Trust: 3.25

Fetched: June 6, 2022, 1:08 p.m., Published: May 6, 2022, midnight
Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-27588

Trust: 3.75

Fetched: June 6, 2022, 1:06 p.m., Published: May 19, 2022, 9:21 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: kwikset model: kevo
vendor: tesla model: model
vendor: tesla model: model 3
Related entries in the VARIoT vulnerabilities database: VAR-202203-0237

Trust: 5.25

Fetched: June 6, 2022, 1:05 p.m., Published: May 3, 2022, 10 a.m.
Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: palo model: networks
vendor: extremenetworks model: ers3500
vendor: aruba model: web management portal
db: NVD ids: CVE-2022-22805, CVE-2022-29861, CVE-2022-23677, CVE-2022-23676, CVE-2022-29860

Trust: 3.0

Fetched: June 6, 2022, 1:05 p.m., Published: May 18, 2022, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Trust: 4.0

Fetched: June 6, 2022, 1:05 p.m., Published: May 19, 2022, midnight
Vulnerabilities: authentication bypass, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-22973, CVE-2022-22960, CVE-2022-22954, CVE-2022-22972

Trust: 4.75

Fetched: June 6, 2022, 1:04 p.m., Published: May 23, 2022, 7:33 a.m.
Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: avast model: antivirus
db: NVD ids: CVE-2022-26522, CVE-2022-26523

Trust: 3.0

Fetched: June 2, 2022, 9:22 a.m., Published: May 17, 2022, 7:45 a.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
Related entries in the VARIoT vulnerabilities database: VAR-202205-0957

Trust: 5.5

Fetched: June 2, 2022, 9:22 a.m., Published: May 17, 2022, 4:46 p.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: zyxel model: usg20-vpn
vendor: zyxel model: usg20w-vpn
db: NVD ids: CVE-2022-30525