Sign-up

VARIoT news about IoT security

Delta Electronics InfraSuite Device Master | CISA

Trust: 5.25

Fetched: June 30, 2023, 9:14 a.m., Published: March 7, 2023, midnight
 Vulnerabilities: improper access control, privilege escalation
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2023-34347, CVE-2023-34316, CVE-2023-30765

Why vulnerability scanners fail at cyber asset management | runZero

Trust: 4.75

Fetched: June 28, 2023, 9:09 a.m., Published: June 28, 2023, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: ubiquiti model: unifi

CVE-2023-33299: Critical Remote Code Execution Vulnerability in FortiNAC - Blog | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-202306-1795, VAR-202302-1271

Trust: 3.75

Fetched: June 28, 2023, 9:08 a.m., Published: June 23, 2023, 10:07 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-33300, CVE-2023-33299, CVE-2022-39952

Vulnerabilities in Cisco IOS Networking Devices

Related entries in the VARIoT vulnerabilities database: VAR-201803-1387

Trust: 3.5

Fetched: June 27, 2023, 9:15 a.m., Published: June 23, 2023, 4:37 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: tftp server
vendor: cisco model: ios xe
vendor: cisco model: routers
vendor: cisco model: router
db: NVD ids: CVE-2018-0171

Several bugs added to CISA vulnerability catalog | SC Media

Trust: 4.25

Fetched: June 27, 2023, 9:15 a.m., Published: March 7, 2023, 7 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2020-12641, CVE-2023-20887, CVE-2021-44026, CVE-2016-0165, CVE-2020-35730, CVE-2016-9079

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

Related entries in the VARIoT vulnerabilities database: VAR-202212-1442

Trust: 5.75

Fetched: June 27, 2023, 9:15 a.m., Published: June 24, 2023, 3:30 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
vendor: apple model: macos
db: NVD ids: CVE-2023-20887, CVE-2022-46690, CVE-2023-20867, CVE-2023-27992, CVE-2023-2911, CVE-2023-2828, CVE-2023-32435, CVE-2023-32434, CVE-2023-2829, CVE-2023-32439

2023 OSSRA deep dive: High-risk vulnerabilities | Synopsys

Related entries in the VARIoT vulnerabilities database: VAR-201409-1156, VAR-201404-0592, VAR-201703-0755

Trust: 3.5

Fetched: June 27, 2023, 9:14 a.m., Published: June 26, 2023, 3:44 p.m.
 Vulnerabilities: sql injection, code execution, buffer overflow...
Affected productsExternal IDs
db: NVD ids: CVE-2014-6271, CVE-2014-0160, CVE-2017-5638, CVE-2018-7600

Cyber Security Agency of Singapore urges Apple users to update devices to fix multiple security vulnerabilities | Malay Mail

Trust: 4.0

Fetched: June 25, 2023, 9:16 a.m., Published: June 24, 2023, 7:48 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: ipad air

Cybersecurity Terms: A to Z Glossary | Coursera

Trust: 3.25

Fetched: June 25, 2023, 9:15 a.m., Published: June 15, 2023, midnight
 Vulnerabilities: sql injection, denial of service
Affected productsExternal IDs
vendor: google model: wi-fi router
vendor: essential model: phone

Multiple Vulnerabilities in Fortinet FortiNAC Could Allow for Arbitrary Code Execution

Trust: 3.25

Fetched: June 25, 2023, 9:15 a.m., Published: June 23, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Apple Fixes Alarming Spyware Vulnerability On iPhone, iPad, Watch And Mac, Update ASAP | HotHardware

Trust: 5.75

Fetched: June 25, 2023, 9:15 a.m., Published: June 23, 2023, 1:12 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: watch
vendor: apple model: watchos
vendor: apple model: macos
db: NVD ids: CVE-2023-32439, CVE-2023-32435, CVE-2023-32434

Have an iPhone, iPad, or Apple Watch? Update it right now | Digital Trends

Trust: 4.75

Fetched: June 23, 2023, 9:13 a.m., Published: June 22, 2023, 7:56 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: watch
vendor: apple model: watchos
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2023-32434

Apple patches exploited zero-days | SC Media

Trust: 5.75

Fetched: June 23, 2023, 9:12 a.m., Published: July 20, 2022, 6 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: ipod touch
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2023-32435, CVE-2023-32434, CVE-2023-32439

Cybersecurity Terms: A to Z Glossary | Coursera

Trust: 3.25

Fetched: June 23, 2023, 9:11 a.m., Published: June 15, 2023, midnight
 Vulnerabilities: denial of service, sql injection
Affected productsExternal IDs
vendor: essential model: phone
vendor: google model: wi-fi router

Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability

Trust: 4.25

Fetched: June 23, 2023, 9:10 a.m., Published: June 21, 2023, 4:03 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances | Rapid7 Blog

Trust: 4.5

Fetched: June 23, 2023, 9:10 a.m., Published: June 8, 2023, 4:52 p.m.
 Vulnerabilities: remote command injection, command injection
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: barracuda model: running
vendor: barracuda model: spam firewall
vendor: barracuda networks model: barracuda
vendor: barracuda networks model: running
vendor: barracuda networks model: spam firewall
db: NVD ids: CVE-2023-2868

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

Trust: 3.5

Fetched: June 23, 2023, 9:09 a.m., Published: June 21, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

SMB Edge Devices Walloped With Asus, Zyxel Patch Warnings

Related entries in the VARIoT vulnerabilities database: VAR-201812-0337, VAR-202207-2002

Trust: 4.5

Fetched: June 23, 2023, 9:08 a.m., Published: June 21, 2023, 6:30 p.m.
 Vulnerabilities: code execution, command injection, memory corruption
Affected productsExternal IDs
vendor: asus model: routers
vendor: asus model: asus
vendor: asus model: router
db: NVD ids: CVE-2018-1160, CVE-2022-26376, CVE-2022-36327, CVE-2023-27992

CTI Weekly: Zero-Day Vulnerability Exploited by Ransomware Groups & CISA Directive on Network Device Security - Orpheus Cyber

Trust: 3.0

Fetched: June 21, 2023, 9:13 a.m., Published: June 19, 2023, 9:24 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-34362

ASUS urges customers to patch critical router vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-201812-0337, VAR-202207-2002

Trust: 4.5

Fetched: June 21, 2023, 9:12 a.m., Published: -
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: asuswrt model: routers
vendor: asuswrt model: router
vendor: asuswrt model: asus
vendor: asuswrt model: rt-ax58u
vendor: asuswrt model: rt-ax3000
vendor: asuswrt model: rt-ax86u
vendor: asuswrt model: asuswrt
vendor: asuswrt model: gt-ax11000
vendor: netatalk model: netatalk
vendor: asus model: routers
vendor: asus model: router
vendor: asus model: asus
vendor: asus model: rt-ax58u
vendor: asus model: rt-ax3000
vendor: asus model: rt-ax86u
vendor: asus model: asuswrt
vendor: asus model: gt-ax11000
db: NVD ids: CVE-2018-1160, CVE-2022-26376