Sign-up

VARIoT news about IoT security

5Ghoul : Unleashing Chaos on 5G Edge Devices

Related entries in the VARIoT vulnerabilities database: VAR-202312-0152, VAR-202312-0020, VAR-202312-0073, VAR-202312-0171, VAR-202311-0169, VAR-202312-0055, VAR-202312-0146

Trust: 5.25

Fetched: Jan. 23, 2024, 9:33 a.m., Published: Jan. 5, 2024, midnight
 Vulnerabilities: memory access error, denial of service
Affected productsExternal IDs
vendor: google model: home
vendor: google model: android
vendor: asus model: asus
vendor: asus model: routers
vendor: asus model: router
vendor: xiaomi model: redmi
vendor: samsung model: mobile
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy
vendor: samsung model: notes
vendor: samsung model: note
vendor: samsung model: mobile devices
vendor: samsung model: mobile phones
vendor: vivo model: modem firmware
vendor: vivo model: modems
vendor: vivo model: modem
vendor: wireshark model: wireshark
vendor: oneplus model: one
db: NVD ids: CVE-2023-33044, CVE-2023-32841, CVE-2023-32843, CVE-2023-33043, CVE-2023-33042, CVE-2023-32844, CVE-2023-32845, CVE-2023-20702, CVE-2023-32846, CVE-2023-32842

Windows Zero-click RCE Flaw - Attackers Exploit Outlook Clients

Trust: 4.75

Fetched: Jan. 23, 2024, 9:31 a.m., Published: Dec. 19, 2023, 12:58 p.m.
 Vulnerabilities: code execution, security feature bypass, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2023-36710, CVE-2023-23397, CVE-2023-35384

[2401.12184] Is Your Kettle Smarter Than a Hacker? A Scalable Tool for Assessing Replay Attack Vulnerabilities on Consumer IoT Devices

Trust: 3.5

Fetched: Jan. 23, 2024, 9:31 a.m., Published: Jan. 22, 2024, midnight
 Vulnerabilities: replay attack
Affected productsExternal IDs

iOS 17.3 released, closes 0-day | Born's Tech and Windows World

Trust: 3.75

Fetched: Jan. 23, 2024, 9:31 a.m., Published: Jan. 23, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: iphone
db: NVD ids: CVE-2024-23222

Bluetooth Flaw Let Hackers Takeover of iOS & Android Devices

Trust: 3.0

Fetched: Jan. 23, 2024, 9:25 a.m., Published: Jan. 21, 2024, 4:06 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: broadcom model: linux

About the security content of iOS 17.3 and iPadOS 17.3 - Apple Support

Trust: 5.25

Fetched: Jan. 23, 2024, 9:19 a.m., Published: Jan. 17, 2024, midnight
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: iphone
db: NVD ids: CVE-2024-23223, CVE-2024-23215, CVE-2024-23212, CVE-2024-23219, CVE-2024-23218, CVE-2024-23211, CVE-2024-23204, CVE-2024-23206, CVE-2024-23214, CVE-2024-23210, CVE-2024-23222, CVE-2024-23213, CVE-2024-23208, CVE-2024-23207, CVE-2024-23203, CVE-2024-23217

Apple fixes urgent zero-day flaw - update your iPhone and Mac right now | Tom's Guide

Trust: 3.75

Fetched: Jan. 23, 2024, 9:18 a.m., Published: Jan. 22, 2024, 9:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: safari
vendor: apple model: tvos
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: apple tv
vendor: apple model: macos
vendor: apple model: ipad air
vendor: apple model: iphone
db: NVD ids: CVE-2024-23222

System BIOS komputera Dell XPS 9305 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Jan. 21, 2024, 10:34 a.m., Published: Jan. 21, 9305, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

15 FREE Website Security Scanner to Find Vulnerabilities and Malware - Geekflare

Trust: 3.5

Fetched: Jan. 21, 2024, 10:34 a.m., Published: Feb. 12, 2015, 6:21 p.m.
 Vulnerabilities: local file inclusion, command injection, cross-site scripting...
Affected productsExternal IDs

Multiple vulnerabilities in Lantronix EDS-MD IoT gateway for medical devices | Pentagrid AG

Related entries in the VARIoT vulnerabilities database: VAR-201602-0393, VAR-201602-0392, VAR-202106-1921, VAR-201602-0391, VAR-201811-0987, VAR-202210-1347, VAR-202210-1373, VAR-201606-0476, VAR-201412-0611, VAR-201707-1309

Trust: 6.0

Fetched: Jan. 21, 2024, 10:32 a.m., Published: Jan. 8, 2024, 9:23 a.m.
 Vulnerabilities: command injection, cross-site scripting, request forgery...
Affected productsExternal IDs
vendor: iperf model: iperf
vendor: dnsmasq model: dnsmasq
db: NVD ids: CVE-2016-0742, CVE-2016-0746, CVE-2021-23017, CVE-2016-0747, CVE-2018-16845, CVE-2022-41741, CVE-2022-41742, CVE-2016-4450, CVE-2014-3616, CVE-2017-7529

CVE - CVE-2023-1017

Trust: 3.25

Fetched: Jan. 21, 2024, 10:32 a.m., Published: Jan. 3, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-1017

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2023-3096) - vulnerability database | Vulners.com

Trust: 5.0

Fetched: Jan. 21, 2024, 10:31 a.m., Published: Jan. 16, 2024, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: huawei model: huawei
db: NVD ids: CVE-2023-3180

CVE - CVE-2015-0014

Trust: 4.25

Fetched: Jan. 21, 2024, 10:26 a.m., Published: Jan. 3, 2024, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2015-0014

Securing Operational Technology in Healthcare - Introducing a New Module - Security Boulevard

Trust: 3.75

Fetched: Jan. 21, 2024, 10:25 a.m., Published: Jan. 16, 2024, 3:51 p.m.
 Vulnerabilities: service disruption
Affected productsExternal IDs
vendor: check point model: check point

System BIOS komputera Dell XPS 9305 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Jan. 21, 2024, 10:24 a.m., Published: Jan. 21, 9305, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Det. Eng. Weekly #54 - I hacked the SEC Twitter 🐦

Trust: 4.75

Fetched: Jan. 21, 2024, 10:15 a.m., Published: Jan. 17, 2024, 8:24 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: canary model: canary
db: NVD ids: CVE-2023-24955, CVE-2023-20357, CVE-2024-21591

Dell XPS 8960 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Jan. 21, 2024, 10:15 a.m., Published: Jan. 21, 8960, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Smart Bulbs Illuminating the Risks of Unsecured Home Automation

Trust: 4.5

Fetched: Jan. 21, 2024, 10:14 a.m., Published: Jan. 8, 2024, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: home

D-Link R15 Code Issue Vulnerability - vulnerability database | Vulners.com

Trust: 3.25

Fetched: Jan. 21, 2024, 10:14 a.m., Published: Jan. 16, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: d-link model: router

Cisco ASA Vulnerability for Sale - CyberMaterial

Trust: 5.0

Fetched: Jan. 21, 2024, 10:14 a.m., Published: Jan. 4, 2024, 2:35 p.m.
 Vulnerabilities: command injection, remote command injection
Affected productsExternal IDs
vendor: cisco model: series