Sign-up

VARIoT news about IoT security

[AD-012] Protecting Your IoT Devices

Trust: 4.0

Fetched: June 9, 2024, 9:30 a.m., Published: June 9, 2024, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

What's new

Trust: 3.75

Fetched: June 9, 2024, 9:26 a.m., Published: April 9, 2019, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
vendor: apple model: macos

Zyxel issues emergency RCE patch for end-of-life NAS devices | Vumetric Cyber Portal

Trust: 3.75

Fetched: June 7, 2024, 9:33 a.m., Published: June 7, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29972, CVE-2024-29974

Google's June 2024 update patches 37 vulnerabilities, Samsung adds 22 more

Trust: 3.5

Fetched: June 7, 2024, 9:27 a.m., Published: June 5, 2024, 12:16 p.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android
vendor: oneplus model: one

nvdlib · PyPI

Trust: 4.0

Fetched: June 7, 2024, 9:26 a.m., Published: May 7, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-26857, CVE-2021-27078, CVE-2021-26858, CVE-2021-26412, CVE-2021-26855, CVE-2021-26854, CVE-2021-27065

What is Remote Access Security? | Definition | StrongDM

Trust: 3.5

Fetched: June 7, 2024, 9:24 a.m., Published: June 4, 2024, midnight
 Vulnerabilities: code execution, brute force attack, authentication bypass
Affected productsExternal IDs
vendor: delegate model: delegate

Zyxel patches critical flaws in EOL NAS devices - Help Net Security

Trust: 5.75

Fetched: June 7, 2024, 9:20 a.m., Published: June 6, 2024, 11:38 a.m.
 Vulnerabilities: information disclosure, command injection, code execution
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972

Update remediates critical bugs in EOL Zyxel NAS devices | SC Media

Trust: 4.75

Fetched: June 7, 2024, 9:19 a.m., Published: Feb. 13, 2024, 7 p.m.
 Vulnerabilities: code execution, command injection, code injection
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972

Zyxel Patches EOL NAS Devices Against Three Critical Flaws

Trust: 5.75

Fetched: June 7, 2024, 9:18 a.m., Published: June 5, 2024, 3:06 p.m.
 Vulnerabilities: privilege management vulnerability, code execution, command injection...
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972

Response to vulnerabilities in Toshiba Tec's digital multi-function peripherals

Trust: 3.5

Fetched: June 7, 2024, 9:17 a.m., Published: May 7, 2024, midnight
 Vulnerabilities: path traversal, cross-site scripting, improper access control...
Affected productsExternal IDs
db: NVD ids: CVE-2024-35244, CVE-2024-33610, CVE-2024-34162, CVE-2024-33605, CVE-2024-33616, CVE-2024-36254, CVE-2024-28955, CVE-2024-32151, CVE-2024-28038, CVE-2024-36248, CVE-2024-36251, CVE-2024-29978, CVE-2024-29146, CVE-2024-36249

What is Bluetooth Hacking? How to Prevent it? - PyNet Labs

Trust: 3.5

Fetched: June 7, 2024, 9:16 a.m., Published: Feb. 20, 2023, 7:19 a.m.
 Vulnerabilities: code execution, denial of service, privilege escalation
Affected productsExternal IDs
vendor: essential model: phone

Zyxel NAS devices hit by critical security threat, so patch now | TechRadar

Trust: 4.75

Fetched: June 7, 2024, 9:13 a.m., Published: June 6, 2024, 4:47 p.m.
 Vulnerabilities: code execution, privilege escalation, code injection
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972, CVE-2023-27992

Exploits and exploit kits - Microsoft Defender for Endpoint | Microsoft Learn

Related entries in the VARIoT vulnerabilities database: VAR-201601-0030

Trust: 3.0

Fetched: June 7, 2024, 9:10 a.m., Published: May 30, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2013-1489, CVE-2016-0778

Zyxel NAS Devices’ EoL Models Patched for Critical Code Execution Vulnerabilities: CVE-2024-29972, CVE-2024-29973, CVE-2024-29974 - SOCRadar® Cyber Intelligence Inc.

Trust: 5.25

Fetched: June 7, 2024, 9:10 a.m., Published: June 5, 2024, 10:09 a.m.
 Vulnerabilities: code execution, command injection, command execution
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2024-29973, CVE-2024-29976, CVE-2024-29975, CVE-2024-29974, CVE-2024-29972

Flaw in billions of Wi-Fi devices left communications open to eavesdropping | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-202002-0458

Trust: 4.75

Fetched: June 7, 2024, 9:08 a.m., Published: Feb. 26, 2020, 3 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: huawei model: hg8245h
vendor: huawei model: huawei
vendor: xiaomi model: redmi
vendor: samsung model: galaxy
vendor: samsung model: galaxy s4
vendor: samsung model: galaxy s8
vendor: samsung model: samsung galaxy
vendor: apple model: iphone
vendor: apple model: apple ipad
vendor: apple model: macos
vendor: apple model: macbook
vendor: apple model: ipad
vendor: apple model: macbook air
vendor: google model: nexus
vendor: google model: android
vendor: asus model: routers
vendor: asus model: wireless routers
vendor: asus model: rt-n12
vendor: asus model: asus
vendor: raspberry pi model: raspberry pi 3
db: NVD ids: CVE-2019-15126

Zyxel Rolls Out Urgent Security Patch for End-of-Life NAS Devices - VULNERA

Trust: 5.0

Fetched: June 5, 2024, 9:29 a.m., Published: June 4, 2024, 5:28 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: zyxel model: nas326
vendor: zyxel model: nas542
db: NVD ids: CVE-2024-29974, CVE-2024-29973, CVE-2024-29972

Zyxel NAS Devices Vulnerability Attackers Execute Code Remotely

Trust: 5.5

Fetched: June 5, 2024, 9:04 a.m., Published: June 4, 2024, 9:08 a.m.
 Vulnerabilities: code execution, command injection, privilege management vulnerability
Affected productsExternal IDs
vendor: zyxel model: nas326
vendor: zyxel model: nas542
db: NVD ids: CVE-2024-29973, CVE-2024-29974, CVE-2024-29972, CVE-2024-29975, CVE-2024-29976

Configuring updates of anti-malware databases on Android devices

Trust: 3.0

Fetched: June 4, 2024, 10:02 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Critical Vulnerabilities found in GE HealthCare Ultrasound Systems

Trust: 4.5

Fetched: June 4, 2024, 9:56 a.m., Published: May 20, 2024, midnight
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2020-6977, CVE-2024-1628

CVE-2024-1629 - Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component - SecAlerts

Trust: 5.0

Fetched: June 4, 2024, 9:56 a.m., Published: June 6, 2024, midnight
 Vulnerabilities: path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-1629