Sign-up

VARIoT news about IoT security

Android 14 Security Release Notes | Android Open Source Project

Trust: 4.75

Fetched: Dec. 6, 2023, 9:13 a.m., Published: Dec. 14, 2023, midnight
 Vulnerabilities: code execution, denial of service, information disclosure
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-21385, CVE-2023-21312, CVE-2023-21369, CVE-2023-21346, CVE-2023-21358, CVE-2023-21310, CVE-2023-21330, CVE-2023-21376, CVE-2023-21397, CVE-2022-27404, CVE-2023-21347, CVE-2023-21301, CVE-2023-21303, CVE-2023-21320, CVE-2023-21326, CVE-2023-21352, CVE-2022-20531, CVE-2023-21306, CVE-2023-21364, CVE-2023-21331, CVE-2023-21370, CVE-2023-21328, CVE-2023-21383, CVE-2023-21386, CVE-2023-21296, CVE-2023-21305, CVE-2023-21323, CVE-2023-21335, CVE-2023-21311, CVE-2023-21334, CVE-2023-21338, CVE-2023-21342, CVE-2023-21343, CVE-2023-21294, CVE-2023-21390, CVE-2023-21293, CVE-2023-21319, CVE-2023-21344, CVE-2023-21391, CVE-2023-21374, CVE-2023-21388, CVE-2023-21380, CVE-2023-21375, CVE-2023-21336, CVE-2023-21393, CVE-2023-21396, CVE-2022-20264, CVE-2023-21318, CVE-2023-21314, CVE-2023-21356, CVE-2023-21333, CVE-2023-21357, CVE-2023-21316, CVE-2023-21329, CVE-2023-21321, CVE-2023-21360, CVE-2023-40101, CVE-2023-21309, CVE-2023-21362, CVE-2023-21373, CVE-2023-21337, CVE-2023-21384, CVE-2023-21395, CVE-2023-21351, CVE-2023-21325, CVE-2023-21348, CVE-2022-29824, CVE-2023-21315, CVE-2023-21340, CVE-2023-21355, CVE-2023-21372, CVE-2023-21317, CVE-2023-21300, CVE-2023-21350, CVE-2023-21389, CVE-2023-21377, CVE-2023-21302, CVE-2023-21387, CVE-2023-21367, CVE-2023-21339, CVE-2023-21371, CVE-2023-21392, CVE-2023-21379, CVE-2023-21327, CVE-2023-21349, CVE-2023-21313, CVE-2023-21297, CVE-2023-21398, CVE-2023-21394, CVE-2023-21308, CVE-2023-35678, CVE-2023-21345, CVE-2023-21307, CVE-2023-21324, CVE-2023-21381, CVE-2023-21366, CVE-2023-21299, CVE-2023-21354, CVE-2023-45780, CVE-2023-21365, CVE-2023-21332, CVE-2023-21361, CVE-2023-21304, CVE-2023-21368, CVE-2021-39810, CVE-2023-21378, CVE-2023-21295, CVE-2023-21353, CVE-2023-21359, CVE-2023-21382, CVE-2023-21341, CVE-2023-21298

SSA-292063

Trust: 5.5

Fetched: Dec. 5, 2023, 9:30 a.m., Published: June 22, 2003, midnight
 Vulnerabilities: sql injection, denial of service
Affected productsExternal IDs
vendor: nozomi model: networks guardian
vendor: nozomi model: guardian
db: NVD ids: CVE-2023-29245, CVE-2023-2567, CVE-2023-32649

Exploited Vulnerabilities Can Take Months to Make KEV List

Trust: 4.75

Fetched: Dec. 5, 2023, 9:27 a.m., Published: Dec. 5, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-27532

CVE-2023-48697 - vulnerability database | Vulners.com

Trust: 4.0

Fetched: Dec. 5, 2023, 9:26 a.m., Published: Dec. 5, 2023, 1:15 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-48697

CVE-2023-48695 - vulnerability database | Vulners.com

Trust: 4.0

Fetched: Dec. 5, 2023, 9:26 a.m., Published: Dec. 5, 2023, 1:15 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-48695

New P2PInfect Botnet MIPS Variant Targeting Routers and IoT Devices

Trust: 3.0

Fetched: Dec. 5, 2023, 9:25 a.m., Published: Dec. 4, 2023, 11:03 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-0543

CVE-2023-48698 - vulnerability database | Vulners.com

Trust: 3.0

Fetched: Dec. 5, 2023, 9:20 a.m., Published: Dec. 5, 2023, 1:15 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-48698

Significant Zyxel vulnerabilities addressed | SC Media

Trust: 3.25

Fetched: Dec. 5, 2023, 9:20 a.m., Published: Dec. 1, 2023, 5:18 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-46604

About the security content of iOS 17.1.2 and iPadOS 17.1.2 - Apple Support

Trust: 5.5

Fetched: Dec. 5, 2023, 9:18 a.m., Published: Jan. 17, 2002, midnight
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: webkit
db: NVD ids: CVE-2023-42916, CVE-2023-42917

LogoFAIL: UEFI Vulnerabilities Expose Devices to Stealth Malware Attacks

Trust: 3.75

Fetched: Dec. 5, 2023, 9:17 a.m., Published: Dec. 4, 2023, 6:53 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: lenovo model: bios
vendor: lenovo model: system

Software Fix Availability for Cisco IOS XE Software Web UI Privilege Escalation Vulnerability - CVE-2023-20198 - Cisco

Trust: 4.75

Fetched: Dec. 5, 2023, 9:13 a.m., Published: Nov. 19, 2023, 7:01 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
vendor: cisco model: catalyst
vendor: cisco model: router
vendor: cisco model: ios xe
vendor: cisco model: series switch
vendor: cisco model: catalyst 9800
vendor: cisco model: series
db: NVD ids: CVE-2023-20198

CVE-2023-6345 in Chrome, Edge, ChromeOS, and Android | Lookout Threat Intelligence

Trust: 3.75

Fetched: Dec. 5, 2023, 9:04 a.m., Published: Dec. 4, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: android
vendor: google model: google chrome
db: NVD ids: CVE-2023-6345

Apple's iPhone, iPad, and Mac Devices Get Security Patches for Critical Vulnerabilities | US Newsper

Trust: 3.0

Fetched: Dec. 3, 2023, 10:08 a.m., Published: Dec. 1, 2023, 12:44 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: iphone

CISA Directs Urgent Patching for Exploited Juniper Networking Device Vulnerabilities - Cyber Security News

Trust: 4.0

Fetched: Dec. 3, 2023, 10:08 a.m., Published: Dec. 3, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-47246, CVE-2023-36851, CVE-2023-36845, CVE-2023-36847, CVE-2023-36844

Google Chrome Zero-Day Vulnerability (CVE-2023-6345): Patch Your Browser Now

Trust: 5.75

Fetched: Dec. 3, 2023, 10:07 a.m., Published: Nov. 28, 2023, midnight
 Vulnerabilities: use after free, integer overflow
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2023-6346, CVE-2023-6345, CVE-2023-6351, CVE-2023-6348, CVE-2023-6350, CVE-2023-6347

November 14, 2023-KB5032339 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 - Microsoft Support

Trust: 3.0

Fetched: Dec. 3, 2023, 10:04 a.m., Published: Nov. 14, 2023, midnight
 Vulnerabilities: feature bypass, security feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2023-36049, CVE-2023-36560

Apple Addresses Exploited Zero-Day Vulnerabilities with Emergency Security Update: CVE-2023-42916, CVE-2023-42917

Trust: 5.75

Fetched: Dec. 3, 2023, 10:02 a.m., Published: Dec. 1, 2023, 9:48 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: ipad air
db: NVD ids: CVE-2023-42917, CVE-2023-42916

Remote Credential Guard - Windows Security | Microsoft Learn

Trust: 3.0

Fetched: Dec. 3, 2023, 10:01 a.m., Published: Nov. 17, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: delegate model: delegate

Apple Patch Fixes Two Zero Day Vulnerabilities In Emergency Updates CVE-2023-42916 CVE-2023-42917 HTMD Blog

Trust: 4.25

Fetched: Dec. 3, 2023, 10 a.m., Published: Dec. 1, 2023, 7:29 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: ipad air
vendor: apple model: ipad
db: NVD ids: CVE-2023-42917, CVE-2023-42916

Apple devices vulnerable to new Bluetooth security hole attack | Macworld

Trust: 3.75

Fetched: Dec. 3, 2023, 9:59 a.m., Published: Dec. 1, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: ipad
db: NVD ids: CVE-2023-24023