Sign-up

VARIoT news about IoT security

CLFS Vulnerability Let Hackers Trigger BSOD Error On All Versions Of Windows 10 & 11 - Cyber Security News

Trust: 3.0

Fetched: Aug. 13, 2024, 9:27 a.m., Published: Aug. 13, 2024, 6:25 a.m.
 Vulnerabilities: system crash, denial of service, improper validation
Affected productsExternal IDs
db: NVD ids: CVE-2024-6768

Govt issues high risk warning for Qualcomm and MediaTek chipset-based Android smartphones - India Today

Trust: 4.0

Fetched: Aug. 13, 2024, 9:24 a.m., Published: Aug. 8, 2024, 6:48 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android

D-Link DAP-1650 EOL Device Directory Traversal Vulnerability... - vulnerability database | Vulners.com

Trust: 5.75

Fetched: Aug. 13, 2024, 9:24 a.m., Published: July 19, 2024, midnight
 Vulnerabilities: directory traversal
Affected productsExternal IDs
vendor: d-link model: dap-1650 firmware
vendor: d-link model: dap-1650_firmware
vendor: d-link model: dap-1650
vendor: dlink model: dap-1650 firmware
vendor: dlink model: dap-1650_firmware
vendor: dlink model: dap-1650
db: NVD ids: CVE-2024-40505

DIVD-2024-00011 - Six vulnerabilities in Enphase IQ Gateway devices | DIVD CSIRT

Trust: 4.75

Fetched: Aug. 13, 2024, 9:24 a.m., Published: Aug. 2, 2024, midnight
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: enphase model: envoy
db: NVD ids: CVE-2024-21878, CVE-2020-25754

Google fixes Android kernel RCE bug under active exploit • The Register

Trust: 5.75

Fetched: Aug. 13, 2024, 9:18 a.m., Published: -
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-36971, CVE-2024-23350

Bunch of IoT CVEs

Related entries in the VARIoT vulnerabilities database: VAR-202407-2600, VAR-202104-0017, VAR-202107-0029, VAR-202104-0019, VAR-202102-0064, VAR-202104-0039, VAR-202407-2661, VAR-202104-0040, VAR-202104-0018, VAR-202407-2682, VAR-202102-0140, VAR-202407-2571, VAR-202102-0065, VAR-202407-2554, VAR-202407-2538, VAR-202407-2625, VAR-202104-0016, VAR-202407-2626, VAR-202104-0042, VAR-202102-0139, VAR-202104-0041, VAR-202407-2555, VAR-202407-2514, VAR-202102-0138, VAR-202407-2539, VAR-202407-2513, VAR-202102-0137, VAR-202407-2660, VAR-202407-2627

Trust: 5.25

Fetched: Aug. 13, 2024, 9:16 a.m., Published: July 30, 2024, 7:17 a.m.
 Vulnerabilities: request forgery, information disclosure, command injection...
Affected productsExternal IDs
vendor: epson model: connect
vendor: zoom model: client
db: NVD ids: CVE-2019-20460, CVE-2020-11923, CVE-2019-20467, CVE-2020-11925, CVE-2020-11915, CVE-2019-20463, CVE-2020-11916, CVE-2019-20464, CVE-2020-11924, CVE-2019-20472, CVE-2019-20473, CVE-2019-20462, CVE-2020-11920, CVE-2019-20458, CVE-2019-20461, CVE-2019-20469, CVE-2020-11922, CVE-2019-20459, CVE-2019-20466, CVE-2019-20471, CVE-2019-20465, CVE-2020-11918, CVE-2020-11917, CVE-2019-20470, CVE-2020-11921, CVE-2019-20457, CVE-2019-20468, CVE-2020-11926, CVE-2020-11919

Cisco Identity Services Engine Stored XSS Vulnerabilities (cis... | Tenable®

Trust: 3.0

Fetched: Aug. 13, 2024, 9:16 a.m., Published: Aug. 9, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine

QuickShell Security Flaw Exposes Google Quick Share Users to Remote Attacks

Trust: 5.75

Fetched: Aug. 13, 2024, 9:15 a.m., Published: Aug. 12, 2024, 8:48 a.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: google model: android
vendor: google model: chrome os
vendor: google model: chrome
db: NVD ids: CVE-2024-38271, CVE-2024-38272

Microsoft Security SC-200 Exam Dumps, SC-200 Practice Test Questions - PrepAway

Trust: 4.75

Fetched: Aug. 13, 2024, 9:14 a.m., Published: -
 Vulnerabilities: script execution
Affected productsExternal IDs
vendor: ring model: ring

Qualcomm's Adreno GPU Vulnerabilities Affect Billions of Android Devices

Related entries in the VARIoT vulnerabilities database: VAR-202408-2138

Trust: 5.5

Fetched: Aug. 13, 2024, 9:13 a.m., Published: Aug. 12, 2024, 9:51 a.m.
 Vulnerabilities: code execution, improper memory management, denial of service...
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: one
vendor: google model: android
vendor: samsung model: mobile
vendor: samsung model: samsung
db: NVD ids: CVE-2024-21481, CVE-2024-21479, CVE-2024-23350, CVE-2024-23352, CVE-2024-23353

Microsoft Entra ID Vulnerability Let Attackers Gain Global Admin Access

Trust: 3.0

Fetched: Aug. 13, 2024, 9:13 a.m., Published: Aug. 8, 2024, 8:18 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Critical vulnerabilities found in Ewon Cosy+ industrial VPN gateways - Industrial Cyber

Trust: 3.25

Fetched: Aug. 13, 2024, 9:12 a.m., Published: Aug. 12, 2024, 12:40 p.m.
 Vulnerabilities: password decryption, command injection, cross-site scripting...
Affected productsExternal IDs
vendor: ewon model: ewon
vendor: dropbear model: dropbear ssh

Vulnerability Report | Relyum

Related entries in the VARIoT vulnerabilities database: VAR-202201-0295

Trust: 4.5

Fetched: Aug. 13, 2024, 9:11 a.m., Published: Nov. 17, 2023, 11:26 a.m.
 Vulnerabilities: cross-site scripting, request forgery, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2023-47577, CVE-2023-47573, CVE-2023-47576, CVE-2023-47579, CVE-2021-44142, CVE-2023-47574, CVE-2017-7494, CVE-2023-47578, CVE-2015-3200, CVE-2023-47575

DSA-2024-181: Security Update for Dell Secure Connect Gateway-Application and Appliance Multiple Vulnerabilities. | Dell US

Related entries in the VARIoT vulnerabilities database: VAR-202406-1682, VAR-202406-2467

Trust: 3.0

Fetched: Aug. 13, 2024, 9:09 a.m., Published: May 24, 2000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-29168, CVE-2024-29169

DSA-2023-377: Security Update for a Dell Client BIOS Vulnerability | Dell US

Trust: 3.0

Fetched: Aug. 13, 2024, 9:09 a.m., Published: May 13, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

CVE-2024-24919 Scanner for the Check Point VPN Vulnerability

Trust: 4.75

Fetched: Aug. 13, 2024, 9:09 a.m., Published: Aug. 1, 2024, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: checkpoint model: check point
vendor: checkpoint model: check point vpn
vendor: checkpoint model: security gateway
vendor: check point model: check point
vendor: check point model: check point vpn
vendor: check point model: security gateway
db: NVD ids: CVE-2024-24919

CVE-2024-6387: Finding & Preventing the OpenSSH Vulnerability

Trust: 4.75

Fetched: Aug. 13, 2024, 9:08 a.m., Published: Aug. 1, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2006-5051, CVE-2024-3400, CVE-2024-6387, CVE-2008-4109

Notes on ThroughTek Kalay Vulnerabilities and Their Impact on the IoT Ecosystem

Trust: 4.5

Fetched: Aug. 13, 2024, 9:07 a.m., Published: Aug. 3, 2024, midnight
 Vulnerabilities: buffer overflow, command execution, code execution
Affected productsExternal IDs
vendor: roku model: roku
db: NVD ids: CVE-2023-6323, CVE-2023-6324, CVE-2023-6321, CVE-2023-6322

Notes on ThroughTek Kalay Vulnerabilities and Their Impact on the IoT Ecosystem

Trust: 4.5

Fetched: Aug. 13, 2024, 9:07 a.m., Published: Aug. 3, 2024, midnight
 Vulnerabilities: buffer overflow, command execution, code execution
Affected productsExternal IDs
vendor: roku model: roku
db: NVD ids: CVE-2023-6323, CVE-2023-6324, CVE-2023-6321, CVE-2023-6322

Critical Zero-Day Kernel Vulnerability Actively Exploited in Android Devices - Brandefense

Trust: 5.75

Fetched: Aug. 11, 2024, 9:38 a.m., Published: Aug. 7, 2024, 11:46 a.m.
 Vulnerabilities: information disclosure, memory corruption, privilege escalation
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-36971, CVE-2024-23350