Sign-up

VARIoT news about IoT security

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Authorization Bypass Vulnerability

Trust: 3.0

Fetched: May 24, 2024, 9:14 a.m., Published: May 22, 2024, 3:57 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower management center
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa software
vendor: cisco model: firepower threat defense software
vendor: cisco model: cisco firepower management center

Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability

Trust: 4.0

Fetched: May 24, 2024, 9:14 a.m., Published: May 17, 2024, 3:07 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: prime collaboration deployment
vendor: cisco model: unified communications
vendor: cisco model: emergency responder
vendor: cisco model: prime collaboration
vendor: cisco model: unity connection
vendor: cisco model: unity

Cisco Adaptive Security Appliance and Firepower Threat Defense Software Inactive-to-Active ACL Bypass Vulnerability

Trust: 3.0

Fetched: May 24, 2024, 9:12 a.m., Published: May 22, 2024, 3:57 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower management center
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa software
vendor: cisco model: firepower threat defense software
vendor: cisco model: cisco firepower management center

New SSID Confusion Attack Exploits General WiFi Vulnerability - ISPreview UK

Trust: 4.0

Fetched: May 24, 2024, 9:12 a.m., Published: May 14, 2024, 4:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: mesh model: mesh
db: NVD ids: CVE-2023-52424

Google is turning its TVs into Home hubs and giving devs access to over 600 million smart devices | ZDNET

Trust: 3.5

Fetched: May 22, 2024, 12:12 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
vendor: google model: chromecast
vendor: google model: android
vendor: google model: pixel
vendor: google model: google home

Kong API Gateway Misconfigurations: An API Gateway Security Case Study - Security News

Trust: 3.5

Fetched: May 22, 2024, 12:10 p.m., Published: -
 Vulnerabilities: denial of service, information disclosure, code execution
Affected productsExternal IDs
vendor: trend model: security

सरकार की चेतावनी, Android स्मार्टफोन यूजर्स का डेटा हो सकता है चोरी - CERT-In Government warns against vulnerabilities Android devices

Trust: 3.0

Fetched: May 22, 2024, 12:06 p.m., Published: May 14, 2024, 7:57 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Users of major Android brand warned over 20 'significant' invisible threats lurking on their phones stealing data | The Irish Sun

Trust: 3.75

Fetched: May 22, 2024, 12:01 p.m., Published: May 7, 2024, 8:32 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: xiaomi model: miui
vendor: google model: android

Role of IT in Biomedical Device Management Integration Outlined by Info-Tech Research Group - TechNation

Trust: 3.75

Fetched: May 22, 2024, 12:01 p.m., Published: May 8, 2024, 2:47 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Popular NAS Device Vendor Fixes Vulnerability Recommends Update | Galactic Advisors

Trust: 3.0

Fetched: May 22, 2024, 11:54 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-28799

CVE-2021-47325 iommu/arm-smmu: Fix arm_smmu_device refcount ... - vulnerability database | Vulners.com

Trust: 4.25

Fetched: May 22, 2024, 11:54 a.m., Published: May 21, 2024, 2:35 p.m.
 Vulnerabilities: reference counting issue
Affected productsExternal IDs
db: NVD ids: CVE-2021-47325

Configure Microsoft Defender for Endpoint on iOS features - Microsoft Defender for Endpoint | Microsoft Learn

Trust: 3.0

Fetched: May 22, 2024, 11:52 a.m., Published: Dec. 18, 2020, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad

CVE-2024-35977 - vulnerability database | Vulners.com

Trust: 3.25

Fetched: May 22, 2024, 11:51 a.m., Published: May 21, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-35977

Vulnerabilities in BIG-IP Next Central Manager

Trust: 4.75

Fetched: May 22, 2024, 11:50 a.m., Published: May 21, 2024, 4:56 p.m.
 Vulnerabilities: request forgery, brute force attack, command execution...
Affected productsExternal IDs
db: NVD ids: CVE-2024-26026, CVE-2024-21793

CVE-2021-47472 net: mdiobus: Fix memory leak in __mdiobus_re... - vulnerability database | Vulners.com

Trust: 4.0

Fetched: May 22, 2024, 11:50 a.m., Published: May 22, 2024, 6:23 a.m.
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2021-47472

CVE-2023-52784 bonding: stop the device in bond_setup_by_sla... - vulnerability database | Vulners.com

Trust: 3.0

Fetched: May 22, 2024, 11:49 a.m., Published: May 21, 2024, 3:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-52784

CyberPower Power Device Network Utility Missing Authenticati... - vulnerability database | Vulners.com

Trust: 3.25

Fetched: May 22, 2024, 11:49 a.m., Published: May 17, 2024, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs

Delta Electronics InfraSuite Device Master - vulnerability database | Vulners.com

Trust: 4.75

Fetched: May 22, 2024, 11:49 a.m., Published: May 9, 2024, noon
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2023-46604

Millions Of IoT Devices Vulnerable To Attacks Leads To Full Takeover

Trust: 4.75

Fetched: May 22, 2024, 11:48 a.m., Published: May 16, 2024, 4:29 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: roku model: roku
db: NVD ids: CVE-2023-6324, CVE-2023-6322, CVE-2023-6323, CVE-2023-6321

Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202108-1856, VAR-202005-0222, VAR-202005-0223, VAR-202005-0473, VAR-202006-0946

Trust: 5.5

Fetched: May 22, 2024, 11:38 a.m., Published: May 1, 2024, midnight
 Vulnerabilities: integer overflow, denial of service, application crash...
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2022-46908, CVE-2021-36690, CVE-2021-45346, CVE-2021-20223, CVE-2020-13630, CVE-2020-13632, CVE-2022-24854, CVE-2019-19923, CVE-2020-13631, CVE-2020-9327, CVE-2021-42169, CVE-2022-21227, CVE-2023-32697, CVE-2019-19926, CVE-2020-13434, CVE-2020-6405, CVE-2020-11656, CVE-2019-19646, CVE-2019-19925, CVE-2023-39939, CVE-2021-23404, CVE-2023-39543, CVE-2022-38627, CVE-2020-13871, CVE-2019-19959, CVE-2019-19924, CVE-2022-35737, CVE-2020-13435, CVE-2020-15358, CVE-2023-7104, CVE-2024-0232, CVE-2020-11655, CVE-2021-28305, CVE-2019-20218, CVE-2019-19317, CVE-2021-20227