Sign-up

VARIoT news about IoT security

Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability

Trust: 4.0

Fetched: April 2, 2024, 9:18 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Cisco Catalyst Center Authorization Bypass Vulnerability

Trust: 3.25

Fetched: April 2, 2024, 9:17 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: catalyst

Gaining kernel code execution on an MTE-enabled Pixel 8 - The GitHub Blog

Trust: 4.25

Fetched: April 2, 2024, 9:15 a.m., Published: March 18, 2024, 12:38 p.m.
 Vulnerabilities: side channel attack, code execution, memory corruption...
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-6241

Beware of These Hardware Security Vulnerabilities | Zephyr Consulting Limited

Trust: 4.25

Fetched: April 2, 2024, 9:14 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs

CVE-2024-20278 - vulnerability database | Vulners.com

Trust: 6.0

Fetched: April 2, 2024, 9:14 a.m., Published: March 27, 2024, 5:15 p.m.
 Vulnerabilities: improper validation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2024-20278

150K+ Fortinet Devices Vulnerable to Critical Code Execution Flaw

Trust: 5.0

Fetched: April 2, 2024, 9:14 a.m., Published: March 10, 2024, 3:44 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-21762

(RHSA-2024:1110) Moderate: device-mapper-multipath security ... - vulnerability database | Vulners.com

Trust: 3.25

Fetched: April 2, 2024, 9:13 a.m., Published: March 5, 2024, 10:45 a.m.
 Vulnerabilities: symlink attack
Affected productsExternal IDs
db: NVD ids: CVE-2022-41973

Cisco IOS XE Software Vulnerability Could Lead to Device Reload or Denial of Service (CVE-2024-20309) | SecurityVulnerability.io - SecuirtyVulnerability.io

Trust: 5.0

Fetched: April 2, 2024, 9:12 a.m., Published: April 2, 2024, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2024-20309

What Are Vulnerabilities: Types, Examples, Causes, And More!

Trust: 3.5

Fetched: April 2, 2024, 9:11 a.m., Published: March 27, 2024, 5:46 a.m.
 Vulnerabilities: sql injection, weak password
Affected productsExternal IDs
vendor: essential model: phone

How You Can Effectively Manage IoT Security Challenges and Vulnerabilities? | Encryption Consulting

Trust: 3.5

Fetched: April 2, 2024, 9:11 a.m., Published: Feb. 1, 2022, 1:52 p.m.
 Vulnerabilities: default credentials, weak password
Affected productsExternal IDs

Cisco IOS XE Software DHCP Snooping with Endpoint Analytics Denial of Service Vulnerability

Trust: 4.0

Fetched: April 2, 2024, 9:10 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
vendor: cisco model: ios xe software

Mitigating MITRE CWE threats in IoT devices - Embedded.com

Trust: 3.5

Fetched: April 2, 2024, 9:08 a.m., Published: March 26, 2024, 3:43 p.m.
 Vulnerabilities: os command injection, use after free, code execution...
Affected productsExternal IDs
vendor: samsung model: flow

The real dangers of vulnerable IoT devices | Infosec

Trust: 3.0

Fetched: April 2, 2024, 9:05 a.m., Published: April 24, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-31251

Top 19 Kali Linux tools for vulnerability assessments | Infosec

Trust: 3.5

Fetched: April 2, 2024, 9:05 a.m., Published: April 19, 2024, midnight
 Vulnerabilities: cross-site scripting, sql injection
Affected productsExternal IDs
vendor: perl model: perl

Cisco Access Point Software Denial of Service Vulnerability

Trust: 3.75

Fetched: March 31, 2024, 9:07 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: mesh model: mesh
vendor: cisco model: series
vendor: cisco model: wireless lan controller
vendor: cisco model: catalyst
vendor: cisco model: catalyst 9800
vendor: cisco model: series wireless controller
vendor: cisco model: wireless controller
vendor: cisco model: mobility express

Details on Apple’s Shortcuts Vulnerability: A Deep Dive into CVE-2024-23204

Trust: 4.5

Fetched: March 27, 2024, 9:28 a.m., Published: March 4, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: mac os
vendor: apple model: macos
db: NVD ids: CVE-2024-23204

Hardware & Firmware Assessment to identify devices with AMD processors - Microsoft Community Hub

Trust: 3.0

Fetched: March 27, 2024, 9:27 a.m., Published: March 17, 2024, 8:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-20593

Threat Brief: Multiple Ivanti Vulnerabilities (Updated Feb. 29)

Trust: 5.25

Fetched: March 27, 2024, 9:12 a.m., Published: Jan. 16, 2024, 3:30 p.m.
 Vulnerabilities: injection attack, command execution, code execution...
Affected productsExternal IDs
vendor: palo model: firewall
vendor: palo model: networks
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
db: NVD ids: CVE-2024-21888, CVE-2024-22024, CVE-2024-21893, CVE-2023-46805, CVE-2024-21887

Beware of These Hardware Security Vulnerabilities | Matrix Solutions, Inc.

Trust: 4.25

Fetched: March 26, 2024, 9:40 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs

Andariel Hackers Leveraging Remote Tools To Exploit Organizations

Trust: 4.0

Fetched: March 26, 2024, 9:39 a.m., Published: March 20, 2024, 6:30 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: mesh model: mesh