VARIoT latest news about IoT security

Cisco Firepower Threat Defense Software CLI Arbitrary File Write (cisco-sa-ftd-file-write-SHVcmQVc) \| Tenable® Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 3, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	cisco firepower threat defense software
vendor:	cisco	model:	firepower threat defense
vendor:	cisco	model:	firepower
vendor:	cisco	model:	firepower threat defense software

Researchers Develop Toolkit to Test Apple Security, Find Vulnerability \| NC State News Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, 8:34 a.m.	Vulnerabilities: timing attack

Affected products

External IDs

vendor:

apple

model:

iphone

The real dangers of vulnerable IoT devices - Infosec Resources Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, 10:41 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-31251

Hundreds of thousands of Realtek-based devices under attack from IoT botnet - The Record by Recorded Future Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, 6:56 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	mesh	model:	mesh

db:

NVD

ids:

CVE-2021-35395

Attackers Started Exploiting a Router Vulnerability Just 2 Days After Its Disclosure \| PCMag Related entries in the VARIoT vulnerabilities database: VAR-202104-0768 Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 11, 2022, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	cisco hyperflex
vendor:	cisco	model:	routers
vendor:	cisco	model:	hyperflex
vendor:	cisco	model:	soho
vendor:	cisco	model:	router
vendor:	d-link	model:	router
vendor:	tenda	model:	ac11
vendor:	tenda	model:	router

db:

NVD

ids:

CVE-2021-20090

BrakTooth Bluetooth vulnerabilities, crash all the devices! \| Malwarebytes Labs Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 2, 2021, 4:24 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28139

Hikvision Has "Highest Level of Critical Vulnerability," Impacting 100+ Million Devices Trust: 5.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 20, 2021, 12:04 p.m.	Vulnerabilities: default password, denial of service, code execution...

Affected products

External IDs

vendor:	dahua	model:	camera
vendor:	dahua	model:	ip camera
vendor:	cisco	model:	routers
vendor:	cisco	model:	router
vendor:	cisco	model:	series
vendor:	huawei	model:	huawei
vendor:	huawei	model:	mate
vendor:	axis	model:	axis
vendor:	axis	model:	ip cameras
vendor:	hikvision	model:	camera
vendor:	hikvision	model:	hikvision
vendor:	hikvision	model:	ip cameras
vendor:	avigilon	model:	multiple
vendor:	phillips	model:	hue

db:

NVD

ids:

CVE-2021-36260

NVD - Home Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 11, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42560

Microsoft Exchange Remote Code Execution Vulnerability Flaws & Fixes Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: April 16, 2021, 11:44 a.m.	Vulnerabilities: denial of service, code execution, authentication bypass...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28480, CVE-2021-28481, CVE-2021-42321

Android Security Bulletin-October 2021 \| Android Open Source Project Related entries in the VARIoT vulnerabilities database: VAR-202110-1118, VAR-202110-1132, VAR-202110-1125, VAR-202110-1126, VAR-202110-1123, VAR-202012-1547, VAR-202110-1131, VAR-202110-1128, VAR-202110-1032, VAR-202110-1127, VAR-202105-1475, VAR-202110-1207, VAR-202110-1208, VAR-202110-1139, VAR-202110-1130, VAR-202110-1034, VAR-202110-1129, VAR-202110-1124, VAR-202105-1429 Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 16, 2021, midnight	Vulnerabilities: denial of service, code execution, information disclosure

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile
vendor:	samsung	model:	notes
vendor:	nokia	model:	nokia
vendor:	broadcom	model:	broadcom
vendor:	huawei	model:	huawei
vendor:	google	model:	android
vendor:	google	model:	pixel
vendor:	motorola	model:	android
vendor:	motorola	model:	motorola

db:

NVD

ids:

CVE-2021-30310, CVE-2021-0870, CVE-2021-1983, CVE-2021-30291, CVE-2021-0703, CVE-2021-30288, CVE-2021-30302, CVE-2021-30297, CVE-2020-29660, CVE-2021-1984, CVE-2021-1932, CVE-2021-0483, CVE-2021-30257, CVE-2021-27666, CVE-2021-1949, CVE-2021-30258, CVE-2021-1913, CVE-2020-26147, CVE-2021-1917, CVE-2021-1936, CVE-2021-29647, CVE-2021-1959, CVE-2021-1985, CVE-2020-11303, CVE-2021-30256, CVE-2020-10768, CVE-2021-30292, CVE-2020-26140

Vulnerabilities Grow as Utilities Link Control Systems to the Internet - Defense One Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 29, 2021, 10 a.m.	Vulnerabilities: default credentials

Affected products

External IDs

vendor:

trend

model:

security

Apple releases emergency update to fix spyware vulnerability \| Healthcare IT News Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, 6:54 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	watchos
vendor:	apple	model:	macos
vendor:	trend	model:	security

Cybersecurity Vulnerabilities in BlackBerry QNX Could Compromise Certain Medical Devices and Drug Manufacturing Equipment - MedTech Intelligence Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 12:39 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

blackberry

model:

blackberry

New Annke Vulnerability Shows Risks of IoT Security Camera Systems Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 26, 2021, 4 p.m.	Vulnerabilities: cross-site request forgery, request forgery, code execution...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-32941

Aviso de Segurança - Vulnerabilidade de autorização imprópria em alguns produtos da Huawei Related entries in the VARIoT vulnerabilities database: VAR-202109-1642 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 8, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

huawei

model:

huawei

db:

NVD

ids:

CVE-2021-37101

ProxyShell vulnerabilities in Microsoft Exchange: What to do - Sophos News Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, 6 p.m.	Vulnerabilities: privilege elevation, code execution

Affected products

External IDs

vendor:	sophos	model:	mobile
vendor:	sophos	model:	endpoint protection

db:

NVD

ids:

CVE-2021-34523, CVE-2021-31207, CVE-2021-34473

Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices Related entries in the VARIoT vulnerabilities database: VAR-202110-1321 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 20, 2021, 7:20 a.m.	Vulnerabilities: security bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42299

Microsoft issues advisory for Surface Pro 3 TPM bypass vulnerability Related entries in the VARIoT vulnerabilities database: VAR-202110-1321 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight	Vulnerabilities: security feature bypass, feature bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42299

Vulnerabilities Found in QNAP Were Fixed Trust: 6.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 1, 2021, 12:04 p.m.	Vulnerabilities: cross-site scripting, command injection

Affected products

External IDs

vendor:

qnap

model:

photo station

db:

NVD

ids:

CVE-2021-34356, CVE-2021-34352, CVE-2021-34354, CVE-2021-34355

Update Your Apple Devices Right Now to Patch This Serious iMessage Bug Related entries in the VARIoT vulnerabilities database: VAR-202112-0004 Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, noon	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	watch
vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2021-20860

VARIoT news about IoT security