Sign-up

VARIoT news about IoT security

Cisco IOS XE Security Alert: Zero-Days Vulnerability Patched

Trust: 3.75

Fetched: Oct. 31, 2023, 9:15 a.m., Published: Oct. 27, 2023, 5:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2023-20198, CVE-2023-20273

Exploring the latest injection attack trends in web applications | by Land2Cyber | Oct, 2023 | Medium

Trust: 3.75

Fetched: Oct. 31, 2023, 9:14 a.m., Published: Oct. 31, 2023, midnight
 Vulnerabilities: denial of service, injection attack, command injection...
Affected productsExternal IDs

Exploit released for critical Cisco IOS XE flaw, many hosts still hacked - RedPacket Security

Trust: 3.75

Fetched: Oct. 31, 2023, 9:13 a.m., Published: Oct. 31, 2023, 5:02 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: openresty model: openresty
vendor: cisco model: cisco ios xe
vendor: cisco model: catalyst
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2023-20198

Versa Security Bulletin: Cisco IOS XE Web UI Privilege Escalation Vulnerability affecting upwards of 50k devices (patched) - The Versa Networks Blog

Trust: 5.75

Fetched: Oct. 31, 2023, 9:12 a.m., Published: Oct. 26, 2023, 7:16 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: sd-wan
vendor: cisco model: ios xe
vendor: cisco model: routers
db: NVD ids: CVE-2023-20198, CVE-2023-20273

WiFi IoT Device Security Issues Found on ESP32 and ESP8266

Trust: 3.75

Fetched: Oct. 31, 2023, 9:11 a.m., Published: Dec. 18, 2020, 4:16 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2019-12587, CVE-2019-12586, CVE-2019-12588

Cisco IOS XE Privilege Escalation Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 5.0

Fetched: Oct. 31, 2023, 9:06 a.m., Published: Oct. 3, 2023, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2023-20198, CVE-2021-1435

“This vulnerability is now under mass exploitation.” Citrix Bleed bug bites hard | Ars Technica

Trust: 4.5

Fetched: Oct. 31, 2023, 9:04 a.m., Published: Oct. 30, 2023, 9:39 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: citrix model: netscaler application delivery controller
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: citrix model: netscaler
vendor: citrix model: netscaler gateway
db: NVD ids: CVE-2023-4966

Attacks on 5G Infrastructure From User Devices: ASN.1 Vulnerabilities in 5G Cores

Trust: 3.5

Fetched: Oct. 29, 2023, 9:26 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2022-43677

Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation

Trust: 3.75

Fetched: Oct. 29, 2023, 9:26 a.m., Published: Oct. 3, 2023, 4:58 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: android
db: NVD ids: CVE-2023-26083, CVE-2023-4863, CVE-2023-33200, CVE-2023-34970, CVE-2023-4211

Cisco IOS XE Web UI Vulnerability Audit - Lansweeper

Trust: 3.0

Fetched: Oct. 29, 2023, 9:25 a.m., Published: Oct. 17, 2023, 1:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe

Attacks on 5G Infrastructure From User Devices: ASN.1 Vulnerabilities in 5G Cores

Trust: 3.5

Fetched: Oct. 29, 2023, 9:25 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2022-43677

Attacks on 5G Infrastructure From User Devices: ASN.1 Vulnerabilities in 5G Cores

Trust: 3.5

Fetched: Oct. 29, 2023, 9:25 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2022-43677

iOS 17.0 - 17.1 Jailbreak News: New WebKit / Safari Vulnerability Released! - iDevice Central

Trust: 4.75

Fetched: Oct. 29, 2023, 9:24 a.m., Published: Oct. 20, 2023, 11:29 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: safari
db: NVD ids: CVE-2023-41993

Activity Feed | AttackerKB

Trust: 4.5

Fetched: Oct. 29, 2023, 9:23 a.m., Published: Oct. 1, 2023, midnight
 Vulnerabilities: command injection, command execution
Affected productsExternal IDs
vendor: asterisk model: open source
db: NVD ids: CVE-2023-30258

Critical Cisco zero-day vulnerability has been under attack for a month | TechFinitive

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 4.5

Fetched: Oct. 29, 2023, 9:21 a.m., Published: Oct. 17, 2023, 2:35 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
db: NVD ids: CVE-2023-20198, CVE-2021-1435

IoT empowered smart cybersecurity framework for intrusion detection in internet of drones | Scientific Reports

Trust: 4.75

Fetched: Oct. 29, 2023, 9:20 a.m., Published: Oct. 27, 2023, midnight
 Vulnerabilities: replay attack
Affected productsExternal IDs
vendor: google model: wifi

Apple releases fix for iOS privacy vulnerability-Telangana Today

Trust: 4.0

Fetched: Oct. 29, 2023, 9:20 a.m., Published: Oct. 28, 2023, 5:51 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
db: NVD ids: CVE-2023-42846

Update now! Apple patches a raft of vulnerabilities

Trust: 4.25

Fetched: Oct. 29, 2023, 9:20 a.m., Published: Oct. 27, 2023, 2:26 p.m.
 Vulnerabilities: buffer overflow, code execution, memory leak...
Affected productsExternal IDs
vendor: apple model: ipod touch
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: safari
vendor: apple model: ipad air
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: apple tv
vendor: apple model: watchos
vendor: apple model: tvos
db: NVD ids: CVE-2023-41988, CVE-2023-41997, CVE-2023-32434, CVE-2023-40416, CVE-2023-42847, CVE-2023-40404, CVE-2023-41989, CVE-2023-40413, CVE-2023-38403, CVE-2023-41982, CVE-2023-42852, CVE-2023-41977, CVE-2023-40447, CVE-2023-40423, CVE-2023-42856, CVE-2023-42841

Cisco's Swift Response to Patching IOS XE Zero-Days - Safeguarding 50,000+ Devices

Trust: 3.5

Fetched: Oct. 29, 2023, 9:17 a.m., Published: Oct. 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe
db: NVD ids: CVE-2023-20198, CVE-2023-20273

Multiple vulnerabilities on ctrlX HMI Web Panel - WR21 | Bosch PSIRT

Trust: 3.5

Fetched: Oct. 29, 2023, 9:17 a.m., Published: Oct. 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: android
db: NVD ids: CVE-2023-41255, CVE-2023-41372, CVE-2023-41960, CVE-2023-46102, CVE-2023-45220, CVE-2023-43488, CVE-2023-45321, CVE-2023-45851, CVE-2023-45844