Sign-up

VARIoT news about IoT security

CISA mandates agencies close 2 cyber vulnerabilities immediately

Trust: 4.5

Fetched: Feb. 4, 2024, 9:22 a.m., Published: Jan. 19, 2024, 3:15 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: pulsesecure model: connect secure
vendor: pulsesecure model: policy secure
db: NVD ids: CVE-2024-21887, CVE-2023-46805

Agencies using vulnerable Ivanti products have until Saturday to disconnect them | Ars Technica

Trust: 3.75

Fetched: Feb. 4, 2024, 9:16 a.m., Published: Feb. 1, 2024, 11:45 p.m.
 Vulnerabilities: request forgery
Affected productsExternal IDs
db: NVD ids: CVE-2024-21893, CVE-2024-21888

Medical Device Vulnerability Management: Expert Solutions

Trust: 3.0

Fetched: Feb. 4, 2024, 9:10 a.m., Published: Aug. 4, 2023, 2:12 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

Medical Device Vulnerability Management: Best Practices for Ensuring Patient Safety

Trust: 3.75

Fetched: Feb. 4, 2024, 9:09 a.m., Published: Aug. 4, 2023, 12:04 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-2... | Tenable®

Trust: 3.25

Fetched: Feb. 2, 2024, 10:54 a.m., Published: Feb. 2, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: qnap model: qnap qts

Future Internet | Free Full-Text | A Holistic Analysis of Internet of Things (IoT) Security: Principles, Practices, and New Perspectives

Trust: 4.5

Fetched: Feb. 2, 2024, 10:53 a.m., Published: Jan. 24, 2024, midnight
 Vulnerabilities: resource exhaustion, session hijacking
Affected productsExternal IDs
vendor: delegate model: delegate

Distributed Energy Generation Gateway (In)Security - Security News - Trend Micro IN

Trust: 4.75

Fetched: Feb. 2, 2024, 10:52 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: trend model: security
vendor: enphase model: envoy
vendor: trend micro model: security

Apple has a new vulnerability in the system! Which devices are at risk? - Tylaz

Trust: 3.0

Fetched: Feb. 2, 2024, 10:48 a.m., Published: Jan. 20, 2024, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macbook
vendor: apple model: apple ipad
vendor: apple model: macbook air
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: ipad

Microsoft Addresses Critical Azure Pipelines Vulnerability with Urgent Patch - WinBuzzer

Trust: 3.0

Fetched: Feb. 2, 2024, 10:48 a.m., Published: Feb. 1, 2024, 1:19 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-0519

Google Releases a Security Update for Chrome, Addressing a Serious Vulnerability | iDevice.ro

Trust: 5.75

Fetched: Feb. 2, 2024, 10:48 a.m., Published: Jan. 17, 2024, 5:44 p.m.
 Vulnerabilities: memory access issue, code execution
Affected productsExternal IDs
vendor: google model: chrome
db: NVD ids: CVE-2024-0519, CVE-2023-4762, CVE-2024-0517, CVE-2024-0518

Conclusion | SpringerLink

Trust: 3.25

Fetched: Feb. 2, 2024, 10:47 a.m., Published: Feb. 2, 2024, midnight
 Vulnerabilities: -

JYX - A View on Vulnerabilities Within IoT Devices in the Smart Home Environment (kuvailutiedot)

Trust: 3.0

Fetched: Feb. 2, 2024, 10:46 a.m., Published: Jan. 12, 2024, 8:41 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

Distributed Energy Generation Gateway (In)Security - Security News - Trend Micro SG

Trust: 4.75

Fetched: Feb. 2, 2024, 10:44 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: trend model: security
vendor: enphase model: envoy
vendor: trend micro model: security

Palo Alto Networks secures medical devices - Earn Charter - Earn Charter

Trust: 4.5

Fetched: Feb. 2, 2024, 10:41 a.m., Published: Feb. 2, 2042, midnight
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks

Remediate vulnerabilities for CVE-2020-8300 | NetScaler Console service

Related entries in the VARIoT vulnerabilities database: VAR-202108-0266, VAR-202108-0265, VAR-202112-0296, VAR-202106-0491

Trust: 3.0

Fetched: Feb. 2, 2024, 10:39 a.m., Published: Jan. 8, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-22927, CVE-2021-22920, CVE-2021-22956, CVE-2020-8300

Ivanti Patches Critical Endpoint Security Vulnerability

Trust: 6.0

Fetched: Feb. 2, 2024, 10:36 a.m., Published: Feb. 19, 2024, midnight
 Vulnerabilities: sql injection, code execution
Affected productsExternal IDs
vendor: mobileiron model: sentry
db: NVD ids: CVE-2023-39336, CVE-2023-38035

Distributed Energy Generation Gateway (In)Security - Security News

Trust: 5.0

Fetched: Feb. 2, 2024, 10:35 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: enphase model: envoy

X.Org 21.1.11 arrives with 6 vulnerabilities fixed | Ubunlog

Trust: 4.5

Fetched: Feb. 2, 2024, 10:35 a.m., Published: Jan. 25, 2024, 7:51 p.m.
 Vulnerabilities: buffer overflow, privilege escalation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-6816, CVE-2024-21886, CVE-2024-0229, CVE-2024-0409, CVE-2024-0408, CVE-2024-21885

Applied Sciences | Free Full-Text | Research on Digital Forensics Analyzing Heterogeneous Internet of Things Incident Investigations

Trust: 3.25

Fetched: Feb. 2, 2024, 10:32 a.m., Published: Jan. 2, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: smartthings hub
vendor: samsung smartthings model: mobile devices
vendor: samsung smartthings model: mobile
vendor: samsung smartthings model: smartthings hub
vendor: hikvision model: ip cameras
vendor: smartthings model: smartthings hub
vendor: xiaomi model: browser

Apple iOS 17.3: How to Turn on iPhone's New Stolen Device Pr... - vulnerability database | Vulners.com

Trust: 3.0

Fetched: Feb. 2, 2024, 10:31 a.m., Published: Jan. 22, 2024, 6:43 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone