VARIoT latest news about IoT security

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack \| Ars Technica Trust: 3.75 Fetched: Dec. 8, 2023, 9:28 a.m., Published: Dec. 6, 2023, 3:02 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	dell	model:	bios
vendor:	lenovo	model:	system
vendor:	lenovo	model:	bios

Uncovering FileWave Mobile Device Management (MDM) Vulnerabilities \| Claroty Trust: 3.5 Fetched: Dec. 8, 2023, 9:20 a.m., Published: July 25, 2022, midnight	Vulnerabilities: authentication bypass, arbitrary command execution, command execution

Affected products

External IDs

db:

NVD

ids:

CVE-2022-34906, CVE-2022-34907

More Healthcare Devices Means More Cyberattacks-How Weak Medical IoT Security Threatens Patient Care \| Capterra Trust: 4.5 Fetched: Dec. 8, 2023, 9:19 a.m., Published: -	Vulnerabilities: default credentials

Affected products

External IDs

vendor:

rising

model:

antivirus

CVE-2021-43702 from Discovery to Patch \| Kroll Related entries in the VARIoT vulnerabilities database: VAR-202207-0160 Trust: 3.75 Fetched: Dec. 8, 2023, 9:17 a.m., Published: June 21, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	asuswrt	model:	rt-ac52u
vendor:	asuswrt	model:	rt-ac3200
vendor:	asuswrt	model:	rt-n12e b1
vendor:	asuswrt	model:	rt-ac51u
vendor:	asuswrt	model:	rt-n18u
vendor:	asuswrt	model:	rt-ac85p
vendor:	asuswrt	model:	rt-ac1300uhp
vendor:	asuswrt	model:	rt-ac1200
vendor:	asuswrt	model:	routers
vendor:	asuswrt	model:	rt-ac2200
vendor:	asuswrt	model:	rt-ac58u
vendor:	asuswrt	model:	rt-ac87u
vendor:	asuswrt	model:	rt-ac2600
vendor:	asuswrt	model:	rt-ac1750 b1
vendor:	asuswrt	model:	rt-n14uhp
vendor:	asuswrt	model:	rt-ac5300
vendor:	asuswrt	model:	4g-ac68u
vendor:	asuswrt	model:	4g-ac53u
vendor:	asuswrt	model:	rt-ac65p
vendor:	asuswrt	model:	rt-ac55uhp
vendor:	asuswrt	model:	rt-ac1900
vendor:	asuswrt	model:	rt-ac68u
vendor:	asuswrt	model:	rt-ac57u
vendor:	asuswrt	model:	rt-ac52u b1
vendor:	asuswrt	model:	rt-ac85u
vendor:	asuswrt	model:	rt-ac86u
vendor:	asuswrt	model:	asuswrt
vendor:	asuswrt	model:	rt-n12
vendor:	asuswrt	model:	rt-ac1750
vendor:	asuswrt	model:	asus
vendor:	asuswrt	model:	rt-ac2900
vendor:	asuswrt	model:	rt-ac1200g
vendor:	asuswrt	model:	rt-n12d1
vendor:	asuswrt	model:	rt-ac88u
vendor:	asuswrt	model:	rt-ac66u b1
vendor:	asuswrt	model:	rt-ac1900p
vendor:	asuswrt	model:	rt-ac66u
vendor:	asuswrt	model:	rt-n12hp b1
vendor:	asuswrt	model:	rt-n12vp
vendor:	asuswrt	model:	rt-n12hp
vendor:	asuswrt	model:	rt-ac56u
vendor:	asuswrt	model:	rt-ac53
vendor:	asuswrt	model:	rt-ac2400
vendor:	asuswrt	model:	rt-ac55u
vendor:	asuswrt	model:	rt-ac3100
vendor:	asuswrt	model:	rt-acrh13
vendor:	asuswrt	model:	rt-acrh17
vendor:	asuswrt	model:	rt-n66u
vendor:	asuswrt	model:	router
vendor:	asus	model:	rt-ac52u
vendor:	asus	model:	rt-ac3200
vendor:	asus	model:	rt-n12e b1
vendor:	asus	model:	rt-ac51u
vendor:	asus	model:	rt-n18u
vendor:	asus	model:	rt-ac85p
vendor:	asus	model:	rt-ac1300uhp
vendor:	asus	model:	rt-ac1200
vendor:	asus	model:	routers
vendor:	asus	model:	rt-ac2200
vendor:	asus	model:	rt-ac58u
vendor:	asus	model:	rt-ac87u
vendor:	asus	model:	rt-ac2600
vendor:	asus	model:	rt-ac1750 b1
vendor:	asus	model:	rt-n14uhp
vendor:	asus	model:	rt-ac5300
vendor:	asus	model:	4g-ac68u
vendor:	asus	model:	4g-ac53u
vendor:	asus	model:	rt-ac65p
vendor:	asus	model:	rt-ac55uhp
vendor:	asus	model:	rt-ac1900
vendor:	asus	model:	rt-ac68u
vendor:	asus	model:	rt-ac57u
vendor:	asus	model:	rt-ac52u b1
vendor:	asus	model:	rt-ac85u
vendor:	asus	model:	rt-ac86u
vendor:	asus	model:	asuswrt
vendor:	asus	model:	rt-n12
vendor:	asus	model:	rt-ac1750
vendor:	asus	model:	asus
vendor:	asus	model:	rt-ac2900
vendor:	asus	model:	rt-ac1200g
vendor:	asus	model:	rt-n12d1
vendor:	asus	model:	rt-ac88u
vendor:	asus	model:	rt-ac66u b1
vendor:	asus	model:	rt-ac1900p
vendor:	asus	model:	rt-ac66u
vendor:	asus	model:	rt-n12hp b1
vendor:	asus	model:	rt-n12vp
vendor:	asus	model:	rt-n12hp
vendor:	asus	model:	rt-ac56u
vendor:	asus	model:	rt-ac53
vendor:	asus	model:	rt-ac2400
vendor:	asus	model:	rt-ac55u
vendor:	asus	model:	rt-ac3100
vendor:	asus	model:	rt-acrh13
vendor:	asus	model:	rt-acrh17
vendor:	asus	model:	rt-n66u
vendor:	asus	model:	router
vendor:	asustek	model:	rt-ac52u
vendor:	asustek	model:	rt-ac3200
vendor:	asustek	model:	rt-n12e b1
vendor:	asustek	model:	rt-ac51u
vendor:	asustek	model:	rt-n18u
vendor:	asustek	model:	rt-ac85p
vendor:	asustek	model:	rt-ac1300uhp
vendor:	asustek	model:	rt-ac1200
vendor:	asustek	model:	routers
vendor:	asustek	model:	rt-ac2200
vendor:	asustek	model:	rt-ac58u
vendor:	asustek	model:	rt-ac87u
vendor:	asustek	model:	rt-ac2600
vendor:	asustek	model:	rt-ac1750 b1
vendor:	asustek	model:	rt-n14uhp
vendor:	asustek	model:	rt-ac5300
vendor:	asustek	model:	4g-ac68u
vendor:	asustek	model:	4g-ac53u
vendor:	asustek	model:	rt-ac65p
vendor:	asustek	model:	rt-ac55uhp
vendor:	asustek	model:	rt-ac1900
vendor:	asustek	model:	rt-ac68u
vendor:	asustek	model:	rt-ac57u
vendor:	asustek	model:	rt-ac52u b1
vendor:	asustek	model:	rt-ac85u
vendor:	asustek	model:	rt-ac86u
vendor:	asustek	model:	asuswrt
vendor:	asustek	model:	rt-n12
vendor:	asustek	model:	rt-ac1750
vendor:	asustek	model:	asus
vendor:	asustek	model:	rt-ac2900
vendor:	asustek	model:	rt-ac1200g
vendor:	asustek	model:	rt-n12d1
vendor:	asustek	model:	rt-ac88u
vendor:	asustek	model:	rt-ac66u b1
vendor:	asustek	model:	rt-ac1900p
vendor:	asustek	model:	rt-ac66u
vendor:	asustek	model:	rt-n12hp b1
vendor:	asustek	model:	rt-n12vp
vendor:	asustek	model:	rt-n12hp
vendor:	asustek	model:	rt-ac56u
vendor:	asustek	model:	rt-ac53
vendor:	asustek	model:	rt-ac2400
vendor:	asustek	model:	rt-ac55u
vendor:	asustek	model:	rt-ac3100
vendor:	asustek	model:	rt-acrh13
vendor:	asustek	model:	rt-acrh17
vendor:	asustek	model:	rt-n66u
vendor:	asustek	model:	router

db:

NVD

ids:

CVE-2021-43702

VU#922681 - Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP Trust: 4.0 Fetched: Dec. 8, 2023, 9:14 a.m., Published: July 30, 2014, midnight	Vulnerabilities: denial of service, buffer overflow

Affected products	External IDs

5G network slices could be vulnerable to attack, researchers say \| Network World Trust: 3.75 Fetched: Dec. 8, 2023, 9:10 a.m., Published: May 22, 2023, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

sophos

model:

mobile

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability Trust: 6.0 Fetched: Dec. 6, 2023, 9:47 a.m., Published: Nov. 29, 2023, 4:27 a.m.	Vulnerabilities: integer overflow

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	google chrome

db:

NVD

ids:

CVE-2023-4762, CVE-2023-2136, CVE-2023-6345

Intel releases microcode update to fix dangerous vulnerability - SamMobile Trust: 3.25 Fetched: Dec. 6, 2023, 9:44 a.m., Published: Nov. 15, 2023, 2:50 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2023-23583

Without SIP Security, Call Data Is An Open Book to Hackers Trust: 4.75 Fetched: Dec. 6, 2023, 9:43 a.m., Published: Nov. 18, 2023, 2 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

ringcentral

model:

ringcentral

84 Must-Know Data Breach Statistics [2023] Trust: 3.5 Fetched: Dec. 6, 2023, 9:42 a.m., Published: -	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	trend	model:	security
vendor:	symantec	model:	web security

PowerShell Is Affected By 2 Critical Vulnerabilities Published In November HTMD Blog Trust: 3.5 Fetched: Dec. 6, 2023, 9:41 a.m., Published: Sept. 21, 2023, 8:56 a.m.	Vulnerabilities: code execution, denial of service, information disclosure

Affected products

External IDs

db:

NVD

ids:

CVE-2023-36796, CVE-2023-36013, CVE-2023-36799, CVE-2023-36049, CVE-2023-36792, CVE-2023-36793, CVE-2023-36794

Cyber Security: Mobile application security MCQs Trust: 3.5 Fetched: Dec. 6, 2023, 9:41 a.m., Published: Nov. 29, 2023, 9:46 a.m.	Vulnerabilities: cross-site scripting, code injection

Affected products	External IDs

Apple issues emergency security updates for iPhones and Macs - protect yourself now \| Tom's Guide Trust: 5.75 Fetched: Dec. 6, 2023, 9:40 a.m., Published: Nov. 30, 2023, 9:51 p.m.	Vulnerabilities: memory corruption

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	apple	model:	webkit
vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad
vendor:	apple	model:	safari
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2023-42917, CVE-2023-42916

System BIOS komputerów Dell Inspiron 7405 2 w 1 \| Szczegóły sterownika \| Dell Polska Trust: 3.25 Fetched: Dec. 6, 2023, 9:38 a.m., Published: Feb. 6, 7405, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

dell

model:

bios

System BIOS komputerów Dell Inspiron 7405 2 w 1 \| Szczegóły sterownika \| Dell Polska Trust: 3.25 Fetched: Dec. 6, 2023, 9:37 a.m., Published: Feb. 6, 7405, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

dell

model:

bios

Cisco Secure Client Software Denial of Service Vulnerabilities - Cisco Trust: 5.0 Fetched: Dec. 6, 2023, 9:37 a.m., Published: Nov. 28, 2023, 7:06 a.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	anyconnect secure mobility client
vendor:	cisco	model:	cisco anyconnect secure mobility client

System BIOS komputerów Dell Inspiron 7405 2 w 1 \| Szczegóły sterownika \| Dell Polska Trust: 3.25 Fetched: Dec. 6, 2023, 9:37 a.m., Published: Feb. 6, 7405, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

dell

model:

bios

iOS 17.1.2-Update Now Warning Issued To All iPhone Users Trust: 3.5 Fetched: Dec. 6, 2023, 9:36 a.m., Published: Dec. 2, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	iphone
vendor:	apple	model:	safari

db:

NVD

ids:

CVE-2023-42917, CVE-2023-42916

Forescout Vedere Labs discloses 21 new vulnerabilities affecting OT/IoT routers - Forescout Trust: 5.25 Fetched: Dec. 6, 2023, 9:35 a.m., Published: Dec. 5, 2023, 6:01 p.m.	Vulnerabilities: code execution, denial of service, default credentials

Affected products

External IDs

vendor:	sierra	model:	aleos
vendor:	sierra wireless	model:	aleos

db:

NVD

ids:

CVE-2023-40464, CVE-2023-41101, CVE-2023-40461

Security Bulletin Trellix Data Loss Prevention Endpoint for Windows 11.10 fixes one vulnerability (CVE-2023-4814) Trust: 3.75 Fetched: Dec. 6, 2023, 9:33 a.m., Published: Dec. 11, 2023, midnight	Vulnerabilities: privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2023-4814

VARIoT news about IoT security