VARIoT news about IoT security

Trust: 3.0

Fetched: June 9, 2024, 9:58 a.m., Published: June 9, 2024, 3:25 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Trust: 4.0

Fetched: June 9, 2024, 9:50 a.m., Published: May 13, 2024, 1:26 p.m.
Vulnerabilities: cross-site scripting, sql injection, authentication bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2024-27082, CVE-2024-31445, CVE-2024-31444, CVE-2024-31458, CVE-2024-25641, CVE-2024-31460, CVE-2024-34340, CVE-2024-31459, CVE-2024-31443, CVE-2024-29894

Trust: 3.25

Fetched: June 9, 2024, 9:47 a.m., Published: June 8, 2024, 9:39 a.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: galaxy
Related entries in the VARIoT vulnerabilities database: VAR-202404-0070

Trust: 5.5

Fetched: June 9, 2024, 9:46 a.m., Published: June 3, 2024, midnight
Vulnerabilities: command injection, remote command injection
Affected productsExternal IDs
vendor: d-link model: dns-327l
vendor: d-link model: dns-325
vendor: d-link model: dns-320l
vendor: d-link model: dns-340l
db: NVD ids: CVE-2024-3273

Trust: 3.25

Fetched: June 9, 2024, 9:42 a.m., Published: April 9, 2019, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud

Trust: 3.75

Fetched: June 9, 2024, 9:41 a.m., Published: May 20, 2024, 4:14 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-4863

Trust: 3.25

Fetched: June 9, 2024, 9:39 a.m., Published: April 9, 2019, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: mobile

Trust: 4.25

Fetched: June 9, 2024, 9:35 a.m., Published: June 4, 2024, midnight
Vulnerabilities: heap corruption, use after free
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: home
db: NVD ids: CVE-2024-5274, CVE-2024-4947, CVE-2024-4761

Trust: 5.5

Fetched: June 9, 2024, 9:33 a.m., Published: May 13, 2024, 7:49 p.m.
Vulnerabilities: sql injection, denial of service, memory corruption...
Affected productsExternal IDs
vendor: cisco model: small business
vendor: google model: chrome
vendor: citrix model: hypervisor
db: NVD ids: CVE-2023-47610, CVE-2024-26026, CVE-2024-4671, CVE-2023-49606, CVE-2024-21793

Trust: 3.0

Fetched: June 9, 2024, 9:32 a.m., Published: June 5, 2024, 4:59 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point
vendor: check point model: check point vpn

Trust: 4.25

Fetched: June 9, 2024, 9:31 a.m., Published: April 8, 2024, 3 p.m.
Vulnerabilities: authentication bypass, command injection, request forgery...
Affected productsExternal IDs
vendor: cisco model: router
vendor: cisco model: soho
vendor: cisco model: routers
vendor: netgear model: router
vendor: palo model: firewall
vendor: palo model: networks
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
db: NVD ids: CVE-2024-21887, CVE-2024-21893, CVE-2023-34362, CVE-2023-46805

Trust: 4.0

Fetched: June 9, 2024, 9:30 a.m., Published: June 9, 2024, midnight
Vulnerabilities: default credentials
Affected productsExternal IDs

Trust: 3.75

Fetched: June 9, 2024, 9:26 a.m., Published: April 9, 2019, midnight
Vulnerabilities: weak password
Affected productsExternal IDs
vendor: apple model: macos

Trust: 3.75

Fetched: June 7, 2024, 9:33 a.m., Published: June 7, 2024, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29972, CVE-2024-29974

Trust: 3.5

Fetched: June 7, 2024, 9:27 a.m., Published: June 5, 2024, 12:16 p.m.
Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android
vendor: oneplus model: one

Trust: 4.0

Fetched: June 7, 2024, 9:26 a.m., Published: May 7, 2024, midnight
Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-26857, CVE-2021-27078, CVE-2021-26858, CVE-2021-26412, CVE-2021-26855, CVE-2021-26854, CVE-2021-27065

Trust: 3.5

Fetched: June 7, 2024, 9:24 a.m., Published: June 4, 2024, midnight
Vulnerabilities: code execution, brute force attack, authentication bypass
Affected productsExternal IDs
vendor: delegate model: delegate

Trust: 5.75

Fetched: June 7, 2024, 9:20 a.m., Published: June 6, 2024, 11:38 a.m.
Vulnerabilities: information disclosure, command injection, code execution
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972

Trust: 4.75

Fetched: June 7, 2024, 9:19 a.m., Published: Feb. 13, 2024, 7 p.m.
Vulnerabilities: code execution, command injection, code injection
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972

Trust: 5.75

Fetched: June 7, 2024, 9:18 a.m., Published: June 5, 2024, 3:06 p.m.
Vulnerabilities: privilege management vulnerability, code execution, command injection...
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972