VARIoT news about IoT security

Trust: 4.25

Fetched: April 2, 2024, 9:33 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 3.25

Fetched: April 2, 2024, 9:32 a.m., Published: Feb. 25, 2024, midnight
Vulnerabilities: directory permission issue, kernel panic, memory leak
Affected productsExternal IDs
vendor: apple model: icloud
vendor: apple model: safari
vendor: apple model: macos

Trust: 3.25

Fetched: April 2, 2024, 9:31 a.m., Published: March 27, 2024, 11:12 a.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: catalyst

Trust: 4.25

Fetched: April 2, 2024, 9:31 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 4.25

Fetched: April 2, 2024, 9:31 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 4.25

Fetched: April 2, 2024, 9:30 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 4.25

Fetched: April 2, 2024, 9:30 a.m., Published: March 18, 2024, 7:21 p.m.
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 4.25

Fetched: April 2, 2024, 9:29 a.m., Published: March 13, 2024, 11:25 a.m.
Vulnerabilities: access control vulnerability, improper access control, buffer overflow...
Affected productsExternal IDs
vendor: citrix model: netscaler
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: rarlab model: winrar
vendor: xfinity model: gateway
vendor: citrix systems model: netscaler
vendor: citrix systems model: gateway
vendor: citrix systems model: netscaler adc
vendor: trend model: security
db: NVD ids: CVE-2023-34362, CVE-2023-27350, CVE-2023-3519, CVE-2023-36802, CVE-2023-38831, CVE-2023-0669, CVE-2023-28252, CVE-2023-42793, CVE-2022-24086, CVE-2023-24489, CVE-2023-4966, CVE-2023-27351

Trust: 5.75

Fetched: April 2, 2024, 9:29 a.m., Published: March 27, 2024, 5:15 p.m.
Vulnerabilities: denial of service, incomplete cleanup
Affected productsExternal IDs
vendor: cisco model: aironet access point
vendor: cisco model: aironet
db: NVD ids: CVE-2024-20354

Trust: 5.0

Fetched: April 2, 2024, 9:28 a.m., Published: March 27, 2024, 11:12 a.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Trust: 4.0

Fetched: April 2, 2024, 9:28 a.m., Published: -
Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-21888, CVE-2024-21893, CVE-2023-46805, CVE-2024-21887, CVE-2024-22024

Trust: 4.25

Fetched: April 2, 2024, 9:28 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 3.5

Fetched: April 2, 2024, 9:27 a.m., Published: March 11, 2024, 11:55 a.m.
Vulnerabilities: command execution, sql injection, authentication flaw
Affected productsExternal IDs
db: NVD ids: CVE-2024-21901, CVE-2024-21900, CVE-2024-21899

Trust: 4.25

Fetched: April 2, 2024, 9:27 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs

Trust: 3.75

Fetched: April 2, 2024, 9:25 a.m., Published: March 27, 2024, midnight
Vulnerabilities: privilege escalation
Affected productsExternal IDs

Trust: 3.0

Fetched: April 2, 2024, 9:24 a.m., Published: March 18, 2024, 11:04 a.m.
Vulnerabilities: -
Affected productsExternal IDs

Trust: 4.25

Fetched: April 2, 2024, 9:24 a.m., Published: -
Vulnerabilities: default password
Affected productsExternal IDs
Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.5

Fetched: April 2, 2024, 9:23 a.m., Published: March 11, 2024, midnight
Vulnerabilities: authentication bypass, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2024-1708, CVE-2024-1709

Trust: 3.75

Fetched: April 2, 2024, 9:22 a.m., Published: March 27, 2024, 11:12 a.m.
Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Trust: 4.75

Fetched: April 2, 2024, 9:22 a.m., Published: -
Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: apple model: safari
vendor: cisco model: series
db: NVD ids: CVE-2024-23288, CVE-2024-2197, CVE-2024-23296, CVE-2024-21338, CVE-2024-23277, CVE-2024-23225, CVE-2024-23243, CVE-2024-20337