Sign-up

VARIoT news about IoT security

CVE-2024-23711 - Microsoft Device Driver Kernel Code Execution Vulnerability

Trust: 6.0

Fetched: Aug. 7, 2024, 9:33 a.m., Published: July 9, 2024, 9:15 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-23711

CISA adds Microsoft COM for Windows bug to its Known Exploited Vulnerabilities catalog

Trust: 3.75

Fetched: Aug. 7, 2024, 9:31 a.m., Published: Aug. 6, 2024, 1:51 p.m.
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2018-0824

Microsoft Outlook Faced Critical Zero-Click RCE Vulnerability - Infosecurity Magazine

Trust: 5.0

Fetched: Aug. 7, 2024, 9:31 a.m., Published: July 10, 2024, 4:30 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-30103, CVE-2024-38021

Automotive IoT: How to Secure Connected Cars

Trust: 3.75

Fetched: Aug. 7, 2024, 9:29 a.m., Published: Aug. 27, 2024, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs

Samsung rolls out August 2024 update with security patch to Galaxy devices

Trust: 3.75

Fetched: Aug. 7, 2024, 9:27 a.m., Published: Aug. 7, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: android phone
vendor: samsung model: galaxy
vendor: samsung model: samsung
vendor: google model: android
vendor: apple model: software update
db: NVD ids: CVE-2024-36971

Western Digital’s Discovery App Vulnerability Allows Code Execution

Trust: 5.25

Fetched: Aug. 7, 2024, 9:27 a.m., Published: Aug. 6, 2024, 2:47 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: node.js model: node.js

'Highly Severe': CERT Sounds Alert For iPhone Users, Flags 'Multiple Vulnerabilities' In Apple Devices - Details Inside

Trust: 4.5

Fetched: Aug. 7, 2024, 9:26 a.m., Published: Aug. 4, 2024, 12:45 p.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: watchos

CERT-EU - Multiple Vulnerabilities in Microsoft Products

Trust: 4.25

Fetched: Aug. 7, 2024, 9:25 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-38023, CVE-2024-38060, CVE-2024-38074, CVE-2024-38076, CVE-2024-35264, CVE-2024-38112, CVE-2024-38077, CVE-2024-37985, CVE-2024-38080, CVE-2024-38021

Google Patches Kernel Zero-Day Vulnerability in Android, Amidst Targeted Exploits - VULNERA

Trust: 5.0

Fetched: Aug. 7, 2024, 9:24 a.m., Published: Aug. 5, 2024, 10:40 p.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2024-32896, CVE-2024-36971, CVE-2024-23350, CVE-2024-29748

CVE-2024-41910 - Poly Clariti Manager Cross-Site Scripting (XSS) Vulnerability

Trust: 5.25

Fetched: Aug. 7, 2024, 9:23 a.m., Published: Aug. 6, 2024, 2:16 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2024-41910

Microsoft Outlook users should update the client ASAP | TechSpot

Trust: 4.0

Fetched: Aug. 7, 2024, 9:22 a.m., Published: Aug. 6, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-30103, CVE-2024-3802

Android vulnerability used in targeted attacks patched by Go... - vulnerability database | Vulners.com

Trust: 5.5

Fetched: Aug. 7, 2024, 9:21 a.m., Published: Aug. 6, 2024, 1:47 p.m.
 Vulnerabilities: use after free, code execution
Affected productsExternal IDs
vendor: samsung model: android phone
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: google model: android
db: NVD ids: CVE-2024-36971

Samsung Takes Swift Action: August 2024 Update Bolsters Galaxy Device Security

Trust: 3.75

Fetched: Aug. 7, 2024, 9:21 a.m., Published: Aug. 7, 2024, 5:55 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: samsung model: android phone
vendor: google model: android
vendor: apple model: software update
db: NVD ids: CVE-2024-36971

Samsung Announces $1 Million Rewards for Arbitrary Code Execution Vulnerabilities

Trust: 4.75

Fetched: Aug. 7, 2024, 9:19 a.m., Published: Aug. 6, 2024, 3:10 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: knox
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: samsung
vendor: samsung model: samsung mobile

CVE-2024-33897 - HMS Networks Cosy+ Certificate Signing Request Abuse Vulnerability

Trust: 3.0

Fetched: Aug. 7, 2024, 9:19 a.m., Published: Aug. 6, 2024, 2:16 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-33897

CVE-2024-5963 - Hitachi Device Manager Unquoted Executable Path Vulnerability

Trust: 4.0

Fetched: Aug. 7, 2024, 9:19 a.m., Published: Aug. 6, 2024, 3:15 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hitachi model: device manager
vendor: hitachi model: hitachi device manager
db: NVD ids: CVE-2024-5963

Notes on ThroughTek Kalay Vulnerabilities and Their Impact on the IoT Ecosystem

Trust: 4.5

Fetched: Aug. 7, 2024, 9:18 a.m., Published: Aug. 3, 2024, midnight
 Vulnerabilities: command execution, code execution, buffer overflow
Affected productsExternal IDs
vendor: roku model: roku
db: NVD ids: CVE-2023-6322, CVE-2023-6321, CVE-2023-6323, CVE-2023-6324

Apple fixes Siri vulnerabilities that could have allowed sensitive data theft from locked device. Update now! | Malwarebytes

Trust: 3.75

Fetched: Aug. 7, 2024, 9:18 a.m., Published: July 31, 2024, 1:04 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: ipod touch
vendor: apple model: apple tv
vendor: apple model: safari
vendor: apple model: ipad air
vendor: apple model: software update
vendor: apple model: watch
vendor: apple model: iphone

SCADA Penetration Testing: What You Need to Know

Trust: 3.5

Fetched: Aug. 7, 2024, 9:16 a.m., Published: June 26, 2024, 7:01 p.m.
 Vulnerabilities: buffer overflow, denial of service
Affected productsExternal IDs
vendor: wireshark model: wireshark

CVE-2024-29972 - Exploits & Severity - Feedly

Trust: 5.5

Fetched: Aug. 7, 2024, 9:16 a.m., Published: June 4, 2024, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
vendor: zyxel model: nas326
vendor: zyxel model: nas542
vendor: trend model: security
db: NVD ids: CVE-2024-29972