Sign-up

VARIoT news about IoT security

12 BEST Vulnerability Scanning Tools (2024)

Trust: 3.25

Fetched: March 22, 2024, 9:21 a.m., Published: March 13, 2024, 5:14 a.m.
 Vulnerabilities: cross-site scripting, sql injection
Affected productsExternal IDs
vendor: snort model: snort
vendor: zoho model: manageengine vulnerability manager plus
vendor: tripwire model: ip360
vendor: google model: wifi

Vulnerabilities in Android OS: Challenges and Mitigation Techniques | SpringerLink

Trust: 3.5

Fetched: March 22, 2024, 9:12 a.m., Published: March 22, 2022, midnight
 Vulnerabilities: privilege escalation, denial of service

CVE-2024-21429 - Security Update Guide - Microsoft - Windows USB Hub Driver Remote Code Execution Vulnerability

Trust: 3.0

Fetched: March 22, 2024, 9:11 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-21429

Over 1,000 Devices Vulnerable to Fortinet RCE bug (CVE-2024-21762) | CIP Blog

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 3.75

Fetched: March 20, 2024, 9:23 a.m., Published: March 20, 2024, 8:30 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-42475, CVE-2024-21762

Government Flags Security Risks For Indian Apple iPhone And iPad Users; How To Keep Your Device Safe - Tech

Trust: 4.75

Fetched: March 20, 2024, 9:18 a.m., Published: March 20, 2024, 7:52 a.m.
 Vulnerabilities: improper validation
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: ipad air
vendor: apple model: webkit

133k+ Fortinet appliances still vulnerable to CVE-2024-21762 • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202210-0198, VAR-202403-2416

Trust: 4.75

Fetched: March 19, 2024, 9:18 a.m., Published: -
 Vulnerabilities: code execution, buffer overflow, authentication bypass...
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2024-21762, CVE-2022-40684, CVE-2023-27997, CVE-2023-48788

5 Vulnerabilities in Medical Devices That Can Create Chaos

Trust: 3.5

Fetched: March 19, 2024, 9:17 a.m., Published: Dec. 27, 2021, 10:13 a.m.
 Vulnerabilities: code execution, buffer overflow, privilege escalation...
Affected productsExternal IDs

Cisco Identity Services Engine - Security Advisories, Responses and Notices - Cisco

Trust: 3.0

Fetched: March 19, 2024, 9:11 a.m., Published: March 25, 2018, 6:02 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: cisco identity services engine

Smart Yet Flawed: IoT Device Vulnerabilities Explained - Security News - Trend Micro PH

Related entries in the VARIoT vulnerabilities database: VAR-202003-1707

Trust: 4.25

Fetched: March 19, 2024, 9:06 a.m., Published: -
 Vulnerabilities: default credentials, denial of service
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: internet security
vendor: trend model: home network security
vendor: trend micro model: security
vendor: trend micro model: internet security
vendor: trend micro model: home network security
vendor: sonos model: sonos
db: NVD ids: CVE-2020-9054

VMware sandbox escape bugs are so critical, patches are released for end-of-life products | Ars Technica

Trust: 3.5

Fetched: March 15, 2024, 9:13 a.m., Published: March 6, 2024, 8:19 p.m.
 Vulnerabilities: information disclosure, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-22253, CVE-2024-22254, CVE-2024-22252, CVE-2024-22255

Cisco IOS XR Software SSH Privilege Escalation Vulnerability

Trust: 4.0

Fetched: March 15, 2024, 9:12 a.m., Published: March 13, 2024, 3:56 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios xr

Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass Vulnerability

Trust: 3.0

Fetched: March 15, 2024, 9:12 a.m., Published: March 13, 2024, 3:56 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xr
vendor: cisco model: ios software
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: nx-os software
vendor: cisco model: nx-os
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios xr

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

Trust: 5.0

Fetched: March 15, 2024, 9:11 a.m., Published: Feb. 21, 2024, 3:57 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance software
vendor: cisco model: firepower management center
vendor: cisco model: cisco adaptive security appliance software
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower threat defense software
vendor: cisco model: cisco firepower management center
vendor: cisco model: device manager
vendor: cisco model: asa software
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: adaptive security appliance

Some QNAP NAS devices affected by a critical vulnerability, updates available right now | TechSpot

Trust: 4.0

Fetched: March 15, 2024, 9:11 a.m., Published: March 15, 4070, midnight
 Vulnerabilities: sql injection, authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2024-21900, CVE-2024-21901, CVE-2024-21899

What is a vulnerability assessment (vulnerability analysis)? Definition from SearchSecurity

Trust: 3.0

Fetched: March 15, 2024, 9:10 a.m., Published: March 15, 2023, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs

100 Web Vulnerabilities, categorized into various types :

Trust: 4.0

Fetched: March 13, 2024, 9:59 a.m., Published: -
 Vulnerabilities: denial of service, information disclosure, request forgery...
Affected productsExternal IDs

WARNING: CRITICAL VULNERABILITY IN QNAP QTS, QUTS, AND QUTSCLOUD, PATCH IMMEDIATELY! | Cert

Trust: 4.25

Fetched: March 13, 2024, 9:57 a.m., Published: March 11, 2024, 2:32 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: qnap model: qnap qts
db: NVD ids: CVE-2024-21899, CVE-2024-21901, CVE-2024-21900

IoT Devices Uncovered: How Your Appliances Get Smart (2024)

Trust: 3.25

Fetched: March 13, 2024, 9:52 a.m., Published: Oct. 8, 2023, 6:06 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: ecobee model: ecobee smart thermostat
vendor: ecobee model: smart thermostat
vendor: chamberlain model: myq garage
vendor: ring model: video doorbells
vendor: nest model: learning thermostat

Use DevViewer to find hardware device IDs for Device Blocking in Endpoint Protection/Endpoint Security

Trust: 3.0

Fetched: March 13, 2024, 9:50 a.m., Published: Sept. 14, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: symantec model: endpoint protection
vendor: symantec model: symantec endpoint protection

CISA Flags 2 New Critical Windows Vulnerabilities

Trust: 4.5

Fetched: March 13, 2024, 9:50 a.m., Published: Feb. 14, 2024, 6:24 a.m.
 Vulnerabilities: security feature bypass, code injection, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2024-21412, CVE-2024-21351