Sign-up

VARIoT news about IoT security

BSI - Cyber Resilience Act - Cyber Resilience Act

Trust: 3.75

Fetched: Dec. 3, 2024, 9:45 a.m., Published: Dec. 2, 2024, 12:26 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve

CVE-2024-50381 - Missing Authentication for Critical Function in Snap One OVRC cloud - SecAlerts

Trust: 3.25

Fetched: Dec. 3, 2024, 9:45 a.m., Published: Dec. 8, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-50381

Top 7 Endpoint Protection Solutions for 2025

Trust: 4.5

Fetched: Dec. 3, 2024, 9:44 a.m., Published: Nov. 28, 2024, 11:34 a.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: rising model: antivirus
vendor: trend model: antivirus
vendor: trend model: data loss prevention
vendor: trend model: security
vendor: trend micro model: antivirus
vendor: trend micro model: data loss prevention
vendor: trend micro model: security
vendor: sophos model: firewall
vendor: sophos model: endpoint protection
vendor: sophos model: mobile

Small number of vulnerabilities patched in last Android security update of 2024 | CyberScoop

Trust: 5.75

Fetched: Dec. 3, 2024, 9:41 a.m., Published: Dec. 2, 2024, 9:14 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-43767

Zyxel security advisory for buffer overflow and post-authentication command injection vulnerabilities in some 4G LTE/5G NR CPE, DSL/Ethernet CPE, fiber ONTs, and WiFi extenders | Zyxel Networks

Trust: 3.5

Fetched: Dec. 3, 2024, 9:40 a.m., Published: Dec. 7, 2024, midnight
 Vulnerabilities: buffer overflow, denial of service, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-9197, CVE-2024-8748, CVE-2024-9200

Why OT environments are vulnerable - and what to do about it | SC Media

Trust: 3.75

Fetched: Dec. 3, 2024, 9:40 a.m., Published: Dec. 2, 2024, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: serve model: serve

MediaTek Patches High-Severity Vulnerability in Smartphone Chipsets (CVE-2024-20125)

Trust: 3.75

Fetched: Dec. 3, 2024, 9:39 a.m., Published: Dec. 2, 2024, 4:14 a.m.
 Vulnerabilities: privilege escalation, information disclosure, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-20125

Max-Critical Cisco Bug Enables Command-Injection Attacks

Trust: 5.0

Fetched: Dec. 3, 2024, 9:38 a.m., Published: Dec. 5, 2024, midnight
 Vulnerabilities: improper validation
Affected productsExternal IDs
vendor: cisco model: access points
vendor: cisco model: catalyst
db: NVD ids: CVE-2024-20418

Qt vulnerability CVE-2023-32762

Trust: 3.0

Fetched: Dec. 3, 2024, 9:38 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-32762

BD Discloses Viper, Pyxis Medical Device Vulnerabilities | TechTarget

Trust: 3.0

Fetched: Dec. 3, 2024, 9:37 a.m., Published: March 4, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-22765, CVE-2022-22766

Robotics cyber security: vulnerabilities, attacks, countermeasures, and recommendations - PMC

Trust: 4.25

Fetched: Dec. 3, 2024, 9:32 a.m., Published: March 19, 2021, midnight
 Vulnerabilities: policy violation, password guessing, code execution...
Affected productsExternal IDs
vendor: serve model: serve
vendor: tesla model: model

Researchers Discover 13 Medical Device Security Vulnerabilities | TechTarget

Trust: 4.0

Fetched: Dec. 3, 2024, 9:30 a.m., Published: Nov. 12, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: siemens model: nucleus

Announcing Microsoft Defender Vulnerability Management in public preview | Microsoft Community Hub

Trust: 3.5

Fetched: Dec. 3, 2024, 9:29 a.m., Published: May 15, 2022, 6:17 a.m.
 Vulnerabilities: service disruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Windows Portable Device Enumerator Service Security... · CVE-2022-38032 · GitHub Advisory Database · GitHub

Trust: 4.0

Fetched: Dec. 3, 2024, 9:29 a.m., Published: Oct. 12, 2022, midnight
 Vulnerabilities: feature bypass, security feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2022-38032

Healthcare IoT, Medical Device Vulnerability Disclosures Skyrocket | TechTarget

Trust: 4.0

Fetched: Dec. 3, 2024, 9:27 a.m., Published: March 4, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend model: security

D-Link NAS device vulnerabilities exploited - no patch available | SC Media

Related entries in the VARIoT vulnerabilities database: VAR-202404-0070

Trust: 5.75

Fetched: Dec. 3, 2024, 9:26 a.m., Published: Feb. 13, 2024, 7 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: d-link model: dns-327l
vendor: d-link model: dns-340l
vendor: d-link model: dns-325
vendor: d-link model: dns-320l
db: NVD ids: CVE-2024-3273, CVE-2024-3274

A Survey of the Security Analysis of Embedded Devices

Related entries in the VARIoT vulnerabilities database: VAR-202002-0930

Trust: 5.0

Fetched: Dec. 3, 2024, 9:24 a.m., Published: Jan. 3, 2023, midnight
 Vulnerabilities: buffer overflow, memory corruption, authentication bypass...
Affected productsExternal IDs
vendor: mbed model: mbed
vendor: canon model: inkjet printer
vendor: contiki model: contiki
vendor: qemu model: qemu
vendor: broadcom model: linux
vendor: cisco model: router
vendor: cisco model: routers
db: NVD ids: CVE-2019-11516, CVE-2023-20193

Cybersecurity vulnerabilities in medical devices: a complex environment and multifaceted problem - PMC

Trust: 4.5

Fetched: Dec. 3, 2024, 9:21 a.m., Published: July 20, 2015, midnight
 Vulnerabilities: buffer overflow, sql injection, configuration error...
Affected productsExternal IDs
vendor: parallels model: tools

IoT Vulnerabilities and Attacks: SILEX Malware Case Study

Trust: 3.5

Fetched: Dec. 3, 2024, 9:20 a.m., Published: Oct. 26, 2023, midnight
 Vulnerabilities: denial of service, default credentials
Affected productsExternal IDs

What is Security Vulnerability? Definition & Types

Trust: 5.5

Fetched: Dec. 3, 2024, 9:19 a.m., Published: Sept. 13, 2024, 6:36 a.m.
 Vulnerabilities: request forgery, sql injection, cross-site request forgery...
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2017-0199