Sign-up

VARIoT news about IoT security

87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113) - Help Net Security

Trust: 5.75

Fetched: Oct. 16, 2024, 9:42 a.m., Published: Oct. 15, 2024, 11:41 a.m.
 Vulnerabilities: command execution, format string vulnerability
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2024-23113

FortiClient EMS Exploited: Inside the Attack Chain and Post-Exploitation Tactics | Darktrace Blog

Related entries in the VARIoT vulnerabilities database: VAR-202403-2416

Trust: 4.25

Fetched: Oct. 16, 2024, 9:40 a.m., Published: Sept. 18, 2024, midnight
 Vulnerabilities: code execution, injection attack, sql injection...
Affected productsExternal IDs
vendor: palo model: firewall
vendor: palo model: networks
db: NVD ids: CVE-2023-48788, CVE-2023-42793

DDoS attacks possible with exploitation of CUPS vulnerabilities | SC Media

Trust: 4.0

Fetched: Oct. 16, 2024, 9:39 a.m., Published: June 11, 2024, 5 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cups model: cups
db: NVD ids: CVE-2024-47076, CVE-2024-47176, CVE-2024-47177, CVE-2024-47175

Firmware Vulnerabilities Run Rampant in Cellular Routers - Forescout

Related entries in the VARIoT vulnerabilities database: VAR-202303-1268

Trust: 3.75

Fetched: Oct. 16, 2024, 9:38 a.m., Published: Aug. 6, 2024, 3 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-1389

Resource Detail

Trust: 3.25

Fetched: Oct. 16, 2024, 9:38 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-100182

Unveiling Mobile App Vulnerabilities: How Popular Apps Leak Sensitive Data | Symantec Enterprise Blogs

Trust: 3.0

Fetched: Oct. 16, 2024, 9:36 a.m., Published: Oct. 1, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Critical vulnerabilities in Microchip ASF, MediaTek expose RCE risks | SC Media

Trust: 5.0

Fetched: Oct. 16, 2024, 9:35 a.m., Published: Feb. 13, 2024, 7 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-7490, CVE-2024-20017

CVE-2024-7120 - Exploits & Severity - Feedly

Trust: 4.75

Fetched: Oct. 16, 2024, 9:27 a.m., Published: July 26, 2024, midnight
 Vulnerabilities: command injection, os command injection, service disruption
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2024-7120

OEMs Are Urged to Address Vulnerabilities in Device Communication

Trust: 4.5

Fetched: Oct. 16, 2024, 9:22 a.m., Published: Oct. 9, 2024, 10:16 p.m.
 Vulnerabilities: memory corruption, information disclosure, denial of service...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2024-38425, CVE-2024-23375, CVE-2024-38399, CVE-2024-33066, CVE-2024-21455, CVE-2024-33064, CVE-2024-43047, CVE-2024-33069

CVE-2024-45274 - F5 Networks TCP/IP Stacks Command Injection Vulnerability

Trust: 5.0

Fetched: Oct. 16, 2024, 9:22 a.m., Published: Oct. 15, 2024, 11:15 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-45274

CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

Trust: 5.5

Fetched: Oct. 16, 2024, 9:18 a.m., Published: Oct. 10, 2024, 5:44 a.m.
 Vulnerabilities: command injection, injection attack, os command injection...
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: palo model: firewall
vendor: palo model: networks
vendor: palo model: pan-os
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
db: NVD ids: CVE-2024-9466, CVE-2024-9463, CVE-2024-9465, CVE-2024-9464, CVE-2024-9467, CVE-2024-23113, CVE-2024-20432

Introduction to Android Vulnerability Research - TeamT5

Related entries in the VARIoT vulnerabilities database: VAR-202203-0043

Trust: 5.5

Fetched: Oct. 16, 2024, 9:17 a.m., Published: Oct. 13, 2024, midnight
 Vulnerabilities: path traversal, code execution, privilege escalation
Affected productsExternal IDs
vendor: samsung model: exynos
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
vendor: samsung model: samsung
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2022-0847, CVE-2021-40724

IoT Device Vulnerability Assessment Essentials - Greyhat Infosec

Trust: 3.5

Fetched: Oct. 16, 2024, 9:15 a.m., Published: Sept. 13, 2024, 7:46 a.m.
 Vulnerabilities: input validation error, sql injection
Affected productsExternal IDs

Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw

Trust: 5.0

Fetched: Oct. 16, 2024, 9:15 a.m., Published: Sept. 4, 2024, 1:36 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2024-29748, CVE-2024-32896

Thousands of Fortinet Devices Remain Exposed to RCE CVE-2024-23113 Vulnerability

Trust: 6.0

Fetched: Oct. 15, 2024, 9:35 a.m., Published: Oct. 14, 2024, 2:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2024-23113

Government releases HIGH RISK warning for Android users, multiple vulnerabilities identified in…

Trust: 3.75

Fetched: Oct. 15, 2024, 9:34 a.m., Published: Oct. 14, 2024, 6:30 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: google model: home

Veeam Vulnerability Actively Exploited By Ransomware Gangs

Trust: 3.75

Fetched: Oct. 15, 2024, 9:32 a.m., Published: Oct. 15, 2024, 4:20 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2024-40711

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Oct. 15, 2024, 9:30 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

Bootloaders explained | Pen Test Partners

Trust: 3.5

Fetched: Oct. 15, 2024, 9:29 a.m., Published: Aug. 1, 2024, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: rockchip model: rockchip
vendor: rockchip model: kernel

Missing Authentication and OS Command Injection Vulnerabilities in Cellular Routers, Secure Routers, and Network Security Appliances

Trust: 4.0

Fetched: Oct. 15, 2024, 9:22 a.m., Published: -
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs