VARIoT latest news about IoT security

Potential Vulnerability: Access to Devices on Network via Teams - Microsoft Community Hub Trust: 3.25 Fetched: Oct. 2, 2024, 10:39 a.m., Published: Aug. 26, 2024, 11:41 p.m.	Vulnerabilities: -

Affected products	External IDs

CVE-2024-38112: Void Banshee Targets Windows Users Through Zombie Internet Explorer in Zero-Day Attacks \| Trend Micro (US) Trust: 4.5 Fetched: Oct. 2, 2024, 10:37 a.m., Published: July 15, 2024, midnight	Vulnerabilities: script execution, privilege escalation, file execution...

Affected products

External IDs

vendor:	trend	model:	deep security
vendor:	trend	model:	security
vendor:	trend micro	model:	deep security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2024-38112

Linux Kernel - Security Vulnerabilities in 2024 Trust: 4.25 Fetched: Oct. 2, 2024, 10:33 a.m., Published: Oct. 2, 2024, midnight	Vulnerabilities: kernel crash, pointer dereference issue, kernel panic...

Affected products

External IDs

vendor:	rockchip	model:	rockchip
vendor:	rockchip	model:	kernel

db:

NVD

ids:

CVE-2024-46775, CVE-2024-46853, CVE-2024-46767, CVE-2024-46772, CVE-2024-46829, CVE-2024-46807, CVE-2024-46844, CVE-2024-46858, CVE-2024-46813, CVE-2024-46849, CVE-2024-46773, CVE-2024-46814, CVE-2024-46840, CVE-2024-46867, CVE-2024-46847, CVE-2024-46815, CVE-2024-46843, CVE-2024-46836, CVE-2024-46736, CVE-2024-46837, CVE-2024-46810, CVE-2024-46769, CVE-2024-46761, CVE-2024-46861, CVE-2024-46868, CVE-2024-46768, CVE-2024-46818, CVE-2024-46806, CVE-2024-46771, CVE-2024-46850, CVE-2024-46833, CVE-2024-46869, CVE-2024-46803, CVE-2024-46762, CVE-2024-46811, CVE-2024-46826, CVE-2024-46779, CVE-2024-46827, CVE-2024-46860, CVE-2024-46758, CVE-2024-46834, CVE-2024-46851, CVE-2024-46856, CVE-2024-46812, CVE-2024-46808, CVE-2024-46857, CVE-2024-46846, CVE-2024-46832, CVE-2024-46804, CVE-2024-46759, CVE-2024-46764, CVE-2024-46835, CVE-2024-46855, CVE-2024-46841, CVE-2024-46735, CVE-2024-46739, CVE-2022-48945, CVE-2024-46822, CVE-2024-46763, CVE-2024-46830, CVE-2024-46852, CVE-2024-46848, CVE-2024-46820, CVE-2024-46862, CVE-2024-46824, CVE-2024-46742, CVE-2024-46854, CVE-2024-46743, CVE-2024-46865, CVE-2024-46817, CVE-2024-46776, CVE-2015-3290, CVE-2024-46838, CVE-2024-46778, CVE-2024-46741, CVE-2024-46831, CVE-2024-46866, CVE-2024-46734, CVE-2024-46738, CVE-2024-46740, CVE-2024-46828, CVE-2024-46774, CVE-2024-46809, CVE-2024-46766, CVE-2024-46770, CVE-2024-46819, CVE-2024-46805, CVE-2024-46863, CVE-2024-46845, CVE-2024-46802, CVE-2024-46760, CVE-2024-46825, CVE-2024-46765, CVE-2024-46823, CVE-2024-46859, CVE-2024-46864, CVE-2024-46737, CVE-2024-46777, CVE-2024-46842, CVE-2024-46821, CVE-2024-46816

Zero-Day Vulnerability In Arcadyan WiFi Devices Allows RCE for Root Access Trust: 4.5 Fetched: Oct. 2, 2024, 10:31 a.m., Published: Aug. 22, 2024, 9:54 a.m.	Vulnerabilities: command injection, command execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-41992

CVE-LLM : Automatic vulnerability evaluation in medical device industry using large language models Trust: 3.5 Fetched: Oct. 2, 2024, 10:29 a.m., Published: Oct. 1, 2024, midnight	Vulnerabilities: cross-site scripting, authentication bypass, sql injection...

Affected products

External IDs

db:

NVD

ids:

CVE-2022-12345

27 Best Free Network IP Scanning Tools for 2024 - PrivacySavvy Trust: 4.25 Fetched: Oct. 2, 2024, 10:27 a.m., Published: Aug. 23, 2024, 2:17 p.m.	Vulnerabilities: sql injection

Affected products

External IDs

vendor:	snort	model:	snort
vendor:	cisco	model:	routers
vendor:	wireshark	model:	wireshark
vendor:	essential	model:	phone

NSA, FBI warn of PRC-linked cyber hackers compromising routers, IoT devices for botnet operations - Industrial Cyber Trust: 3.75 Fetched: Oct. 2, 2024, 10:26 a.m., Published: Sept. 19, 2024, 12:14 p.m.	Vulnerabilities: denial of service

Affected products	External IDs

Modules 13 - 17: Threats and Attacks Group Exam (Answers) Trust: 5.25 Fetched: Oct. 2, 2024, 10:24 a.m., Published: Aug. 31, 2024, 3:55 a.m.	Vulnerabilities: cross-site scripting, resource exhaustion, session hijacking...

Affected products

External IDs

vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	router

CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature Trust: 5.75 Fetched: Oct. 2, 2024, 10:24 a.m., Published: Aug. 9, 2024, 5:41 a.m.	Vulnerabilities: buffer overflow, weak password

Affected products

External IDs

vendor:	cisco	model:	series ip phones
vendor:	cisco	model:	small business
vendor:	cisco	model:	small business spa300 series
vendor:	cisco	model:	series
vendor:	cisco	model:	spa300
vendor:	cisco	model:	ip phones
vendor:	cisco	model:	spa500 series ip phones
vendor:	cisco	model:	spa500

db:

NVD

ids:

CVE-2024-20419, CVE-2024-20450, CVE-2024-20452, CVE-2024-20454

Top 15 Cybersecurity Trends in 2024 to Secure Data Trust: 5.5 Fetched: Oct. 2, 2024, 10:22 a.m., Published: July 4, 2024, 6 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	trend	model:	antivirus
vendor:	trend	model:	security
vendor:	tesla	model:	model

Nearly All Google Pixel Phones Exposed by Unpatched Flaw in Hidden Android App \| WIRED Trust: 3.75 Fetched: Oct. 2, 2024, 10:21 a.m., Published: Aug. 15, 2024, 1 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	google	model:	pixel
vendor:	google	model:	android

CISA and FBI Release Secure by Design Alert on Eliminating OS Command Injection Vulnerabilities \| CISA Trust: 4.0 Fetched: Oct. 2, 2024, 10:21 a.m., Published: Oct. 2, 2023, midnight	Vulnerabilities: os command injection, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2024-20399, CVE-2024-3400, CVE-2024-21887

CERT-EU - RADIUS Vulnerability Impacts Cisco Products Trust: 3.0 Fetched: Oct. 2, 2024, 10:20 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-3596

Configure Microsoft Defender for Endpoint on iOS features - Microsoft Defender for Endpoint \| Microsoft Learn Trust: 3.0 Fetched: Oct. 2, 2024, 10:13 a.m., Published: Aug. 29, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

ipad

Zyxel warns of vulnerabilities in a wide range of its products \| Ars Technica Trust: 4.5 Fetched: Oct. 2, 2024, 10:13 a.m., Published: Sept. 4, 2024, 6:57 p.m.	Vulnerabilities: cross-site scripting, pointer dereference vulnerability, command injection...

Affected products

External IDs

db:

NVD

ids:

CVE-2024-42059, CVE-2024-6343, CVE-2024-42060, CVE-2024-42061, CVE-2024-5412, CVE-2024-7203, CVE-2024-42057, CVE-2024-7261, CVE-2024-42058

Cisco Cyber Vision Data Sheet - Cisco Trust: 3.5 Fetched: Oct. 2, 2024, 10:10 a.m., Published: Aug. 30, 2024, 4:03 p.m.	Vulnerabilities: default password

Affected products

External IDs

vendor:	snort	model:	snort
vendor:	cisco	model:	cisco ucs manager
vendor:	cisco	model:	ic3000
vendor:	cisco	model:	ic3000 industrial compute gateway
vendor:	cisco	model:	catalyst
vendor:	cisco	model:	series routers
vendor:	cisco	model:	identity services engine
vendor:	cisco	model:	ucs manager
vendor:	cisco	model:	cisco ic3000 industrial compute gateway
vendor:	cisco	model:	router
vendor:	cisco	model:	series
vendor:	cisco	model:	firepower
vendor:	cisco	model:	integrated management controller
vendor:	cisco	model:	umbrella
vendor:	cisco	model:	cisco integrated management controller
vendor:	cisco	model:	series switch
vendor:	cisco	model:	routers
vendor:	cisco	model:	cisco identity services engine

Android Security Bulletin-September 2024 \| Android Open Source Project Related entries in the VARIoT vulnerabilities database: VAR-202409-0017 Trust: 4.25 Fetched: Oct. 2, 2024, 10:08 a.m., Published: Sept. 2, 2024, midnight	Vulnerabilities: code execution, information disclosure, denial of service

Affected products

External IDs

vendor:	samsung	model:	mobile
vendor:	samsung	model:	samsung
vendor:	samsung	model:	notes
vendor:	samsung	model:	note
vendor:	motorola	model:	android
vendor:	motorola	model:	motorola
vendor:	google	model:	pixel
vendor:	google	model:	android
vendor:	huawei	model:	huawei

db:

NVD

ids:

CVE-2024-39431, CVE-2024-33051, CVE-2024-40652, CVE-2024-40658, CVE-2024-40656, CVE-2024-32896, CVE-2024-23362, CVE-2024-36972, CVE-2024-23365, CVE-2024-40662, CVE-2024-23359, CVE-2024-31336, CVE-2024-39432, CVE-2024-33016, CVE-2024-23358, CVE-2024-40657, CVE-2024-23716, CVE-2024-40650, CVE-2024-40659, CVE-2024-3655, CVE-2024-23364, CVE-2024-40655, CVE-2024-40654

WiFi IoT Device Security Issues Found on ESP32 and ESP8266 Trust: 3.75 Fetched: Oct. 2, 2024, 10:06 a.m., Published: Dec. 18, 2020, 4:16 a.m.	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2019-12588, CVE-2019-12586, CVE-2019-12587

Cybersecurity Vulnerabilities: Types, Examples, and more Trust: 3.75 Fetched: Oct. 2, 2024, 10:03 a.m., Published: Jan. 10, 2023, 11:13 a.m.	Vulnerabilities: sql injection

Affected products

External IDs

vendor:

manageengine

model:

network configuration manager

Western Digital My Cloud Flaw Let Attackers Execute Arbitrary Code Trust: 4.5 Fetched: Oct. 2, 2024, 10:03 a.m., Published: Oct. 1, 2024, 4:14 a.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2024-22170

VARIoT news about IoT security