Sign-up

VARIoT news about IoT security

Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability - Cisco

Trust: 3.75

Fetched: Oct. 17, 2023, 9:22 a.m., Published: June 29, 2023, 11:58 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: intrusion prevention system
vendor: cisco model: asdm
vendor: cisco model: firepower management center
vendor: cisco model: firepower
vendor: cisco model: security device manager
vendor: cisco model: adaptive security appliance
vendor: cisco model: adaptive security appliance software
vendor: cisco model: adaptive security device manager
vendor: cisco model: firepower threat defense
vendor: cisco model: device manager
vendor: cisco model: asa software

Exploiting Apps vulnerable to Janus (CVE-2017-13156) | by Kal | Mobis3c | Medium

Trust: 3.75

Fetched: Oct. 17, 2023, 9:21 a.m., Published: March 26, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2017-13156

Finding Bugs in Windows Drivers, Part 1 - WDM

Trust: 4.5

Fetched: Oct. 17, 2023, 9:11 a.m., Published: May 24, 2022, midnight
 Vulnerabilities: memory corruption, privilege escalation, information leakage...
Affected productsExternal IDs
vendor: smarter model: coffee
db: NVD ids: CVE-2021-40328, CVE-2021-40332

Vulnerabilities in Medtronic Product Can Allow Hackers to Control Cardiac Devices - SecurityWeek

Trust: 3.75

Fetched: Oct. 17, 2023, 9:10 a.m., Published: Dec. 15, 2020, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2020-25187, CVE-2020-27252, CVE-2020-25183

Which mobile device vulnerability relies on your device automatically picking up the access point with the strongest signal?

Related entries in the VARIoT vulnerabilities database: VAR-202105-1428, VAR-202105-0257, VAR-202105-1493, VAR-202105-1476, VAR-202105-1432, VAR-202105-1429, VAR-202105-1475, VAR-202105-1430, VAR-202105-1477, VAR-202105-1431

Trust: 3.75

Fetched: Oct. 17, 2023, 9:09 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-26141, CVE-2021-26139, CVE-2020-26145, CVE-2020-26143, CVE-2020-26144, CVE-2020-24586, CVE-2020-24587, CVE-2020-26140, CVE-2020-26147, CVE-2020-26139, CVE-2020-26142, CVE-2020-26146, CVE-2020-24588

Decades-Old Code Is Putting Millions of Critical Devices at Risk | WIRED

Trust: 3.0

Fetched: Oct. 17, 2023, 9:09 a.m., Published: Oct. 1, 2019, 3:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

This Free Tool Finds Vulnerable Devices on Your Network | Tom's Guide

Trust: 5.75

Fetched: Oct. 17, 2023, 9:08 a.m., Published: June 7, 2017, 4:23 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: printer
vendor: samsung model: android phone
vendor: samsung model: printers

Management Interfaces Cisco Networking Devices Vulnerable to RCE Attacks | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-201902-0427

Trust: 5.75

Fetched: Oct. 17, 2023, 9:08 a.m., Published: Feb. 27, 2019, 8:55 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: cisco model: rv110w wireless-n vpn
vendor: cisco model: rv215w
vendor: cisco model: router
vendor: cisco model: rv215w wireless-n vpn router
vendor: cisco model: rv130w
vendor: cisco model: rv215w wireless-n vpn
vendor: cisco model: rv130w wireless-n multifunction vpn router
vendor: cisco model: rv110w
vendor: cisco model: rv110w wireless-n vpn firewall
db: NVD ids: CVE-2019-1663

CyberMDX Research Team Discovers Two Major Medical Device Vulnerabilities | Business Wire

Trust: 3.0

Fetched: Oct. 17, 2023, 9:07 a.m., Published: Aug. 28, 2018, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Vulnerable TCP/IP stacks open millions of IoT and OT devices to attack - Help Net Security

Trust: 4.75

Fetched: Oct. 17, 2023, 9:06 a.m., Published: Dec. 9, 2020, 5:30 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: treck model: tcp/ip stack
vendor: contiki-ng model: contiki-ng
vendor: contiki-ng model: contiki
vendor: contiki os model: contiki
vendor: contiki model: contiki-ng

New Attack exploiting serious Bluetooth weakness can intercept sensitive data | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-201908-1958

Trust: 4.75

Fetched: Oct. 17, 2023, 9:05 a.m., Published: Aug. 17, 2019, 1:56 p.m.
 Vulnerabilities: brute force attack
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2019-9506

Security And Vulnerability Management Market Size & Forecast

Trust: 3.25

Fetched: Oct. 17, 2023, 9:04 a.m., Published: Sept. 20, 2023, 6:15 a.m.
 Vulnerabilities: sql injection, buffer overflow, denial of service
Affected productsExternal IDs
vendor: symantec model: antivirus
vendor: rising model: antivirus

Microsoft Warns of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability

Trust: 4.75

Fetched: Oct. 15, 2023, 9:32 a.m., Published: Oct. 11, 2023, 4:12 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2023-22515

Update now! Atlassian Confluence vulnerability is being actively exploited

Trust: 3.5

Fetched: Oct. 15, 2023, 9:29 a.m., Published: -
 Vulnerabilities: access control vulnerability, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-22515, CVE-2021-26084

Govt issues high-risk warning for Google Chrome users, know all details here - BusinessToday

Trust: 3.5

Fetched: Oct. 15, 2023, 9:27 a.m., Published: Oct. 13, 2023, 6:53 a.m.
 Vulnerabilities: buffer overflow, use after free
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: android

End-to-end security in Azure | Microsoft Learn

Trust: 3.0

Fetched: Oct. 15, 2023, 9:23 a.m., Published: Jan. 29, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Achieve Zero Trust at Scale With Tanium and Microsoft Entra ID | Tanium

Trust: 3.0

Fetched: Oct. 15, 2023, 9:22 a.m., Published: Oct. 2, 2023, 3:37 p.m.
 Vulnerabilities: configuration issue
Affected productsExternal IDs

SSA-843070

Trust: 5.25

Fetched: Oct. 15, 2023, 9:21 a.m., Published: Oct. 1, 2023, midnight
 Vulnerabilities: input validation vulnerability, code execution, denial of service...
Affected productsExternal IDs
vendor: aruba model: instantos
vendor: aruba model: arubaos
db: NVD ids: CVE-2023-22790, CVE-2023-22785, CVE-2023-22789, CVE-2023-22780, CVE-2023-22782, CVE-2023-22786, CVE-2023-22779, CVE-2023-22783, CVE-2023-22791, CVE-2023-22788, CVE-2023-22787, CVE-2023-22781, CVE-2023-22784

Azure threat protection | Microsoft Learn

Trust: 4.25

Fetched: Oct. 15, 2023, 9:18 a.m., Published: Jan. 20, 2023, midnight
 Vulnerabilities: file inclusion, sql injection, command execution...
Affected productsExternal IDs
vendor: imperva model: web application firewall
vendor: barracuda model: running
vendor: barracuda model: web application firewall
vendor: barracuda model: barracuda

Vulnerability Disclosure Program - Qwilr

Trust: 3.75

Fetched: Oct. 15, 2023, 9:18 a.m., Published: Oct. 2, 2023, midnight
 Vulnerabilities: privilege escalation, code execution, denial of service
Affected productsExternal IDs