Sign-up

VARIoT news about IoT security

New Mirai Botnet Exploits Zero-Days in Routers and Smart Devices - Infosecurity Magazine

Trust: 4.75

Fetched: Jan. 10, 2025, 10:04 a.m., Published: Jan. 8, 2025, 10:45 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: four-faith model: four-faith
db: NVD ids: CVE-2024-12856

Palo Alto Networks Expedition Tool Vulnerability Exposes Firewall Credentials

Trust: 5.5

Fetched: Jan. 10, 2025, 10:04 a.m., Published: Jan. 9, 2025, 7:24 a.m.
 Vulnerabilities: os command injection, cross-site scripting, sql injection...
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: palo model: networks
vendor: palo model: firewall
db: NVD ids: CVE-2025-0107, CVE-2025-0104, CVE-2025-0106, CVE-2025-0103, CVE-2025-0105

Mirai Botnet Exploiting Routers 0-Day Vulnerabilities to Launch DDoS Attack

Related entries in the VARIoT vulnerabilities database: VAR-201505-0274, VAR-202003-1707, VAR-201803-1048

Trust: 4.5

Fetched: Jan. 10, 2025, 10:03 a.m., Published: Jan. 8, 2025, 10:34 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: asus model: routers
vendor: asus model: asus
vendor: asus model: router
vendor: four-faith model: four-faith
db: NVD ids: CVE-2014-8361, CVE-2024-12856, CVE-2020-9054, CVE-2017-17215

Angular Expressions Vulnerability Let Attackers Gain Full System Access

Trust: 5.0

Fetched: Jan. 10, 2025, 10:03 a.m., Published: Jan. 2, 2025, 4:33 a.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2024-54152

Update Canonical Ubuntu Server: USN-7182-1: Ceph vulnerability

Trust: 3.25

Fetched: Jan. 10, 2025, 10:03 a.m., Published: Jan. 10, 7182, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-7182-1: Ceph vulnerability

Trust: 3.25

Fetched: Jan. 10, 2025, 10:02 a.m., Published: Jan. 10, 7182, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Critical Vulnerabilities Exposed in Ruijie Networks Cloud Platform

Trust: 4.75

Fetched: Jan. 10, 2025, 10:02 a.m., Published: Dec. 26, 2024, 2:21 a.m.
 Vulnerabilities: request forgery, authentication vulnerability, weak password...
Affected productsExternal IDs
db: NVD ids: CVE-2024-48874, CVE-2024-52324, CVE-2024-47146, CVE-2024-47547

Critical MediaTek Processor RCE Vulnerability Impacts Millions of Devices

Related entries in the VARIoT vulnerabilities database: VAR-202501-0476, VAR-202501-0708, VAR-202501-0596

Trust: 6.0

Fetched: Jan. 10, 2025, 10:01 a.m., Published: Jan. 7, 2025, 9:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: home
db: NVD ids: CVE-2024-20149, CVE-2024-20143, CVE-2024-20140, CVE-2024-20150, CVE-2024-20154

Multiple vulnerabilities in SonicWall SonicOS could allow a remote attacker to bypass authentication.

Trust: 3.0

Fetched: Jan. 10, 2025, 10:01 a.m., Published: Jan. 9, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: sonicos

CVE-2025-0282: Ivanti Connect Secure Zero-Day Vulnerability Exploited In The Wild - Blog | Tenable®

Trust: 3.5

Fetched: Jan. 10, 2025, 10:01 a.m., Published: Jan. 8, 2025, 7:16 p.m.
 Vulnerabilities: buffer overflow, authentication bypass, request forgery...
Affected productsExternal IDs
db: NVD ids: CVE-2025-0283, CVE-2021-22894, CVE-2024-21888, CVE-2023-46805, CVE-2019-11539, CVE-2020-8243, CVE-2025-0282, CVE-2019-11510, CVE-2020-8260, CVE-2021-22893, CVE-2024-21887, CVE-2024-21893, CVE-2020-8218, CVE-2021-22899, CVE-2021-22900

Exploiting a Buffer Overflow Vulnerability for Remote Code Execution in Nginx - The Good Penguin

Related entries in the VARIoT vulnerabilities database: VAR-201307-0483

Trust: 5.5

Fetched: Jan. 10, 2025, 9:59 a.m., Published: Jan. 10, 2013, midnight
 Vulnerabilities: integer overflow, denial of service, code execution...
Affected productsExternal IDs
vendor: canary model: canary
db: NVD ids: CVE-2013-2028

New Mirai-Based Botnet Exploits Zero-Day Vulnerabilities in Industrial and Smart Devices | Black Hat Ethical Hacking

Trust: 5.25

Fetched: Jan. 10, 2025, 9:58 a.m., Published: Jan. 8, 2025, 9:24 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: four-faith model: four-faith
db: NVD ids: CVE-2024-12856

Gayfemboy: A Botnet Deliver Through a Four-Faith Industrial Router 0-day Exploit.

Trust: 5.5

Fetched: Jan. 10, 2025, 9:57 a.m., Published: Jan. 7, 2025, 2:54 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: huawei model: warsaw
vendor: asus model: routers
vendor: asus model: asus
vendor: asus model: router
vendor: kguard model: kguard dvr
vendor: four-faith model: four-faith
db: NVD ids: CVE-2024-12856

PAN-SA-2025-0001 Expedition: Multiple Vulnerabilities in Expedition Migration Tool Lead to Exposure of Firewall Credentials

Trust: 5.25

Fetched: Jan. 10, 2025, 9:56 a.m., Published: Jan. 8, 2025, 5 p.m.
 Vulnerabilities: os command injection, cross-site scripting, sql injection...
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: palo model: firewall
vendor: palo model: pan-os
vendor: palo model: networks
db: NVD ids: CVE-2025-0107, CVE-2025-0104, CVE-2025-01037, CVE-2025-01072, CVE-2025-0106, CVE-2025-0103, CVE-2025-01062, CVE-2025-0105, CVE-2025-01052, CVE-2025-01044

New BIOS/UEFI Vulnerabilities Lets Hackers Hijack Your Firmware

Trust: 5.0

Fetched: Jan. 10, 2025, 9:56 a.m., Published: Jan. 8, 2025, 11:26 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-1968

Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities

Trust: 5.25

Fetched: Jan. 10, 2025, 9:56 a.m., Published: Jan. 8, 2025, 3:52 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: common services platform collector

Security Bulletins for HUAWEI Phones/Tablets, January 2025

Trust: 4.5

Fetched: Jan. 10, 2025, 9:55 a.m., Published: Dec. 31, 2024, 2:23 p.m.
 Vulnerabilities: integer overflow, buffer overflow, improper access control...
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: huawei model: emui
db: NVD ids: CVE-2024-56455, CVE-2024-56452, CVE-2024-56434, CVE-2024-56444, CVE-2023-52953, CVE-2024-56449, CVE-2024-54121, CVE-2024-56454, CVE-2024-56438, CVE-2023-52954, CVE-2024-56435, CVE-2024-56442, CVE-2024-56445, CVE-2024-56439, CVE-2024-56446, CVE-2024-56456, CVE-2024-56448, CVE-2024-56443, CVE-2023-52955, CVE-2024-56450, CVE-2024-56451, CVE-2024-56447, CVE-2024-56436, CVE-2024-56437, CVE-2024-56440, CVE-2024-54120, CVE-2024-56453, CVE-2024-56441

Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability

Trust: 3.0

Fetched: Jan. 10, 2025, 9:54 a.m., Published: May 10, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-0283, CVE-2025-0282

Critical Ivanti Connect Secure zero-day flaw under attack | TechTarget

Trust: 4.75

Fetched: Jan. 10, 2025, 9:53 a.m., Published: Jan. 8, 2025, midnight
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-21887, CVE-2023-46805, CVE-2025-0283, CVE-2025-0282

DSA-2025-027: Security Update for Dell VxRail for Multiple Vulnerabilities | Dell US

Trust: 3.25

Fetched: Jan. 10, 2025, 9:53 a.m., Published: Jan. 7, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-47706, CVE-2022-48991, CVE-2024-49945, CVE-2024-49969, CVE-2024-21208, CVE-2024-49960, CVE-2024-49930, CVE-2023-50782, CVE-2024-28168, CVE-2024-49860, CVE-2022-48962, CVE-2024-45013, CVE-2024-39908, CVE-2024-9681, CVE-2022-48956, CVE-2024-10977, CVE-2022-48959, CVE-2024-49974, CVE-2024-45016, CVE-2024-21235, CVE-2024-9287, CVE-2024-50208, CVE-2024-46818, CVE-2024-47684, CVE-2024-43398, CVE-2024-41123, CVE-2024-49995, CVE-2024-43854, CVE-2024-35176, CVE-2024-46815, CVE-2024-21217, CVE-2024-41946, CVE-2024-46816, CVE-2024-46813, CVE-2024-46716, CVE-2024-46814, CVE-2024-47668, CVE-2024-21210, CVE-2024-47747, CVE-2024-47674, CVE-2024-49936, CVE-2024-46817, CVE-2024-47748, CVE-2024-45026, CVE-2024-46849, CVE-2024-49991, CVE-2022-48960, CVE-2024-10976, CVE-2022-49015, CVE-2024-52316, CVE-2024-49925, CVE-2024-50047, CVE-2024-10979, CVE-2024-52533, CVE-2024-10978, CVE-2022-48879