Sign-up

VARIoT news about IoT security

Update: Barracuda Gateways hit by another vulnerability - Techzine Europe

Trust: 3.5

Fetched: Dec. 31, 2023, 9:34 a.m., Published: Dec. 28, 2023, 4:25 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda networks model: barracuda
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-7102, CVE-2023-7101

CVE-2023-35629 - Security Update Guide - Microsoft - Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Trust: 3.25

Fetched: Dec. 31, 2023, 9:34 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-35629

2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202303-2580

Trust: 5.25

Fetched: Dec. 31, 2023, 9:32 a.m., Published: Dec. 19, 2023, 3 p.m.
 Vulnerabilities: code execution, security feature bypass, command injection...
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: trend model: security
db: NVD ids: CVE-2023-27350, CVE-2023-22952, CVE-2023-24880, CVE-2023-20887, CVE-2023-23397, CVE-2023-29059, CVE-2023-0699, CVE-2023-2868, CVE-2023-34362, CVE-2023-28252, CVE-2023-0669, CVE-2023-290593, CVE-2023-35036

Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Packet Validation Vulnerability

Trust: 3.0

Fetched: Dec. 31, 2023, 9:23 a.m., Published: Dec. 5, 2023, 3:50 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower threat defense software
vendor: cisco model: asa software
vendor: cisco model: cisco firepower management center
vendor: cisco model: firepower
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: firepower management center

New JavaScript malware targets 50K bank users worldwide

Trust: 5.5

Fetched: Dec. 31, 2023, 9:22 a.m., Published: Dec. 3, 2023, midnight
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: google model: chrome
vendor: apple model: watch
vendor: apple model: safari
vendor: apple model: macos
db: NVD ids: CVE-2023-35384, CVE-2023-23397, CVE-2023-36710, CVE-2023-7024

BLEEDINGBIT | Armis

Related entries in the VARIoT vulnerabilities database: VAR-201811-0299, VAR-201812-0630

Trust: 4.5

Fetched: Dec. 31, 2023, 9:22 a.m., Published: Aug. 22, 2023, 1:46 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: aruba model: ap-3xx
vendor: aruba model: iap-3xx
vendor: aruba model: ap-203r
vendor: aruba model: arubaos
vendor: aruba model: 203rp
vendor: aruba model: 203r
vendor: aruba model: ap-203rp
vendor: cisco model: access points
vendor: cisco model: aironet series
vendor: cisco model: meraki mr30h
vendor: cisco model: series
vendor: cisco model: technical support
vendor: cisco model: meraki mr33
vendor: cisco model: meraki mr74
vendor: cisco model: aironet
vendor: cisco model: aironet access points
db: NVD ids: CVE-2018-16986, CVE-2018-7080

UPnP-enabled Home Devices and Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-201301-0243, VAR-201505-0274, VAR-201803-1048

Trust: 5.5

Fetched: Dec. 31, 2023, 9:11 a.m., Published: March 6, 2019, midnight
 Vulnerabilities: denial of service, command execution, memory corruption...
Affected productsExternal IDs
vendor: realtek model: realtek sdk
vendor: trend micro model: home network security
vendor: trend micro model: housecall
vendor: trend micro model: micro home network security
vendor: trend micro model: trend micro housecall
vendor: trend micro model: micro housecall
vendor: trend micro model: security
vendor: google model: google home
vendor: google model: chromecast
vendor: google model: home
vendor: google model: android
vendor: huawei model: huawei
vendor: huawei model: huawei home gateway
vendor: trend model: home network security
vendor: trend model: housecall
vendor: trend model: micro home network security
vendor: trend model: trend micro housecall
vendor: trend model: micro housecall
vendor: trend model: security
db: NVD ids: CVE-2017-1000494, CVE-2013-0230, CVE-2007-1204, CVE-2014-8361, CVE-2012-5958, CVE-2013-0229, CVE-2017-17215

'Devil's Ivy' Vulnerability Could Afflict Millions of Internet-Connected Cameras and Card Readers | WIRED

Trust: 3.75

Fetched: Dec. 31, 2023, 9:11 a.m., Published: July 18, 2017, 2 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: huawei model: honor
vendor: sony model: camera
vendor: axis communications model: communications
vendor: axis model: communications

When it Comes to OT, if You’re Standing Still, You’re Falling Behind | Fortinet Blog

Trust: 3.5

Fetched: Dec. 31, 2023, 9:07 a.m., Published: Dec. 18, 2023, 2 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortiguard model: fortiextender
vendor: fortigate model: fortios

Open Source Vulnerability Assessment Tools & Scanners | LinuxSecuri...

Trust: 3.5

Fetched: Dec. 31, 2023, 9:06 a.m., Published: Sept. 18, 2023, midnight
 Vulnerabilities: file inclusion, code execution, injection attack...
Affected productsExternal IDs
vendor: wireshark model: wireshark

Samsung devices get seven critical fixes with December 2023 security update - SamMobile

Trust: 3.75

Fetched: Dec. 29, 2023, 9:27 a.m., Published: Dec. 5, 2023, 7:34 a.m.
 Vulnerabilities: integer overflow
Affected productsExternal IDs
vendor: samsung model: knox
vendor: samsung model: exynos

iOS 17.1.2 and macOS Sonoma 14.1.2 patch 2 actively exploited vulnerabilities - 9to5Mac

Trust: 5.5

Fetched: Dec. 29, 2023, 9:27 a.m., Published: Nov. 30, 2023, 6:58 p.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2023-42917, CVE-2023-42916

Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware Feature

Trust: 5.25

Fetched: Dec. 29, 2023, 9:26 a.m., Published: Dec. 28, 2023, 11:19 a.m.
 Vulnerabilities: integer overflow, code execution, memory corruption
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: iphone
db: NVD ids: CVE-2023-41064, CVE-2023-32434, CVE-2023-41990, CVE-2023-32435, CVE-2023-41061, CVE-2023-38606

Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild - Update ASAP

Trust: 5.5

Fetched: Dec. 29, 2023, 9:19 a.m., Published: Dec. 21, 2023, 3:41 a.m.
 Vulnerabilities: code execution, privilege escalation, feature bypass...
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
vendor: google model: chrome
db: NVD ids: CVE-2023-7024

HP Security Bulletins | HP® Support

Related entries in the VARIoT vulnerabilities database: VAR-202202-0496, VAR-202202-0497, VAR-202112-1782, VAR-202212-1240, VAR-202205-0999, VAR-202202-0514, VAR-202203-0885, VAR-202208-0868, VAR-202203-0005, VAR-202202-0512, VAR-202012-1550, VAR-202003-1784, VAR-202101-1932, VAR-202208-0855, VAR-201903-0926, VAR-202205-0918, VAR-202101-1937, VAR-202112-0562, VAR-202101-1938, VAR-202208-0856, VAR-202205-0949, VAR-202101-1935, VAR-202003-1777, VAR-202202-0507, VAR-202202-0513, VAR-202101-1939, VAR-202101-1931, VAR-202003-1785, VAR-202101-1934, VAR-202202-0502, VAR-202203-0889, VAR-202205-0948, VAR-202202-0051, VAR-201907-0769, VAR-202202-0506, VAR-202208-0853, VAR-202205-1051, VAR-202205-1012, VAR-202004-0345, VAR-202110-1615, VAR-202111-1629, VAR-202101-1936, VAR-202203-0886, VAR-202208-0854, VAR-202005-1054, VAR-202112-0566, VAR-202009-1633, VAR-202101-1933, VAR-202205-1000, VAR-202202-0499, VAR-202202-0525, VAR-202202-0495, VAR-202211-0554, VAR-202202-0508, VAR-202006-1825, VAR-202003-1779, VAR-202008-1215, VAR-202112-2011, VAR-202003-1786, VAR-202006-1826, VAR-202202-0510, VAR-202202-0517, VAR-202205-1013, VAR-202105-0146, VAR-202202-0519, VAR-202302-1219, VAR-202003-1776, VAR-202003-1782, VAR-201907-0806, VAR-202202-0516, VAR-202211-0743, VAR-202202-0503, VAR-202003-1778, VAR-202202-0518, VAR-202211-0556, VAR-201404-0288, VAR-202202-0504, VAR-202101-1946, VAR-202202-1347, VAR-202101-1930, VAR-202003-1787, VAR-202012-1539, VAR-202012-1529, VAR-202211-0557, VAR-202202-0509, VAR-202006-1824, VAR-202006-1827, VAR-202211-0558, VAR-202203-1400, VAR-202202-0500

Trust: 4.25

Fetched: Dec. 29, 2023, 9:17 a.m., Published: -
 Vulnerabilities: information disclosure, sql injection, denial of service...
Affected productsExternal IDs
vendor: polycom model: uc software
vendor: polycom model: trio
vendor: samsung model: printer
vendor: samsung model: printers
vendor: samsung model: mobile
db: NVD ids: CVE-2021-46749, CVE-2022-31635, CVE-2023-1255, CVE-2023-28388, CVE-2021-23188, CVE-2021-0072, CVE-2022-43777, CVE-2021-0174, CVE-2023-2975, CVE-2022-38396, CVE-2021-0159, CVE-2022-40982, CVE-2022-31643, CVE-2021-45105, CVE-2023-5113, CVE-2022-33985, CVE-2021-3661, CVE-2020-12901, CVE-2021-26365, CVE-2023-5365, CVE-2021-46756, CVE-2020-12982, CVE-2021-3942, CVE-2023-26299, CVE-2022-33905, CVE-2021-33074, CVE-2021-0189, CVE-2023-0465, CVE-2022-23956, CVE-2020-10650, CVE-2016-0800, CVE-2022-24291, CVE-2021-26354, CVE-2021-0163, CVE-2019-16942, CVE-2022-31637, CVE-2022-23953, CVE-2023-32279, CVE-2023-5739, CVE-2021-41182, CVE-2021-33126, CVE-2020-7205, CVE-2021-33113, CVE-2018-14721, CVE-2023-27305, CVE-2022-32231, CVE-2021-33122, CVE-2023-20567, CVE-2023-47270, CVE-2021-0171, CVE-2021-0197, CVE-2022-23928, CVE-2022-0778, CVE-2023-29165, CVE-2022-38090, CVE-2021-0155, CVE-2022-23455, CVE-2022-23454, CVE-2021-41184, CVE-2021-26382, CVE-2021-33155, CVE-2022-21233, CVE-2023-0464, CVE-2018-7489, CVE-2020-6920, CVE-2022-3602, CVE-2022-37343, CVE-2019-17531, CVE-2021-46794, CVE-2020-35490, CVE-2023-4807, CVE-2020-9546, CVE-2023-27972, CVE-2020-12946, CVE-2022-23926, CVE-2020-36180, CVE-2020-9547, CVE-2021-26257, CVE-2021-37409, CVE-2018-12023, CVE-2021-33114, CVE-2021-26368, CVE-2021-33069, CVE-2021-0120, CVE-2022-21140, CVE-2023-35176, CVE-2018-5968, CVE-2020-36185, CVE-2022-29919, CVE-2021-45046, CVE-2023-3247, CVE-2021-23168, CVE-2018-12022, CVE-2020-25647, CVE-2022-31243, CVE-2021-46748, CVE-2020-36184, CVE-2023-39230, CVE-2023-3824, CVE-2021-46753, CVE-2022-33907, CVE-2021-33847, CVE-2022-32267, CVE-2021-26346, CVE-2021-33083, CVE-2021-23223, CVE-2018-1285, CVE-2022-28721, CVE-2021-33139, CVE-2020-36187, CVE-2020-10968, CVE-2021-0179, CVE-2019-20330, CVE-2021-0066, CVE-2020-12891, CVE-2022-21240, CVE-2020-12902, CVE-2023-21939, CVE-2020-36181, CVE-2022-27541, CVE-2020-36182, CVE-2020-11113, CVE-2022-3786, CVE-2023-1526, CVE-2022-27539, CVE-2022-26369, CVE-2021-39238, CVE-2023-22329, CVE-2020-36188, CVE-2022-21212, CVE-2020-12964, CVE-2019-10086, CVE-2021-26369, CVE-2022-23453, CVE-2020-6919, CVE-2022-31638, CVE-2022-42003, CVE-2022-29901, CVE-2020-12983, CVE-2022-21181, CVE-2022-26006, CVE-2020-12904, CVE-2021-0162, CVE-2021-26362, CVE-2022-34325, CVE-2019-17267, CVE-2021-46765, CVE-2022-31644, CVE-2022-23955, CVE-2021-0190, CVE-2020-6917, CVE-2021-33075, CVE-2021-33068, CVE-2019-14439, CVE-2022-29871, CVE-2023-5409, CVE-2021-0176, CVE-2023-5671, CVE-2022-33982, CVE-2021-26378, CVE-2021-26376, CVE-2022-28126, CVE-2021-0121, CVE-2018-19362, CVE-2021-33103, CVE-2023-1329, CVE-2020-12963, CVE-2021-26950, CVE-2021-0062, CVE-2020-6922, CVE-2021-26373, CVE-2021-33082, CVE-2022-33909, CVE-2022-0005, CVE-2021-26333, CVE-2022-26367, CVE-2021-39298, CVE-2023-4694, CVE-2022-25976, CVE-2022-26343, CVE-2020-12898, CVE-2022-29470, CVE-2020-12893, CVE-2020-12899, CVE-2019-16335, CVE-2021-26335, CVE-2021-0199, CVE-2023-3446, CVE-2022-23929, CVE-2021-39299, CVE-2022-23924, CVE-2018-19360, CVE-2021-26366, CVE-2023-21954, CVE-2021-33077, CVE-2020-11619, CVE-2021-41183, CVE-2021-0012, CVE-2021-27803, CVE-2022-31645, CVE-2021-0200, CVE-2020-12985, CVE-2020-36186, CVE-2023-26301, CVE-2017-17485, CVE-2021-26337, CVE-2020-12905, CVE-2022-27639, CVE-2022-23954, CVE-2021-0167, CVE-2021-44545, CVE-2020-12900, CVE-2021-23179, CVE-2023-5449, CVE-2020-10683, CVE-2021-33124, CVE-2021-0061, CVE-2021-26393, CVE-2022-33908, CVE-2022-21198, CVE-2023-3823, CVE-2023-25773, CVE-2021-26360, CVE-2021-3809, CVE-2021-46759, CVE-2020-12929, CVE-2022-23925, CVE-2021-26392, CVE-2021-44228, CVE-2023-35177, CVE-2022-45112, CVE-2022-28611, CVE-2020-24750, CVE-2022-33983, CVE-2021-46792, CVE-2018-1000632, CVE-2023-20564, CVE-2023-26300, CVE-2021-26371, CVE-2020-8840, CVE-2020-36179, CVE-2021-26390, CVE-2023-20568, CVE-2018-14718, CVE-2022-31640, CVE-2021-33078, CVE-2023-2650, CVE-2022-29900, CVE-2022-38395, CVE-2021-0165, CVE-2021-39297, CVE-2022-40964, CVE-2023-25952, CVE-2022-23934, CVE-2021-20233, CVE-2022-23932, CVE-2019-14892, CVE-2020-35491, CVE-2022-38083, CVE-2021-33115, CVE-2023-31320, CVE-2022-38076, CVE-2021-0168, CVE-2021-33159, CVE-2018-11307, CVE-2021-0178, CVE-2020-14195, CVE-2021-26312, CVE-2021-26351, CVE-2020-12980, CVE-2022-23930, CVE-2021-26384, CVE-2021-32537, CVE-2022-30338, CVE-2021-0490, CVE-2019-14540, CVE-2022-29508, CVE-2022-43505, CVE-2023-4304, CVE-2020-10672, CVE-2019-16943, CVE-2020-24616, CVE-2022-46329, CVE-2022-31646, CVE-2022-26045, CVE-2021-20225, CVE-2021-0154, CVE-2020-12960, CVE-2023-20555, CVE-2020-12987, CVE-2021-39301, CVE-2023-3817, CVE-2021-44832, CVE-2020-27779, CVE-2022-31641, CVE-2021-26339, CVE-2021-26375, CVE-2020-11112, CVE-2022-37018, CVE-2018-19361, CVE-2021-3808, CVE-2022-36392, CVE-2021-26317, CVE-2022-33986, CVE-2021-46795, CVE-2020-14060, CVE-2021-26356, CVE-2020-12951, CVE-2019-14893, CVE-2021-33123, CVE-2022-21151, CVE-2022-44611, CVE-2021-46754, CVE-2022-38102, CVE-2022-26837, CVE-2021-0076, CVE-2021-0198, CVE-2021-26372, CVE-2021-0170, CVE-2018-14719, CVE-2020-12903, CVE-2020-12897, CVE-2021-20190, CVE-2022-30774, CVE-2022-26079, CVE-2021-26352, CVE-2022-36351, CVE-2022-38464, CVE-2022-32266, CVE-2022-23825, CVE-2023-32673, CVE-2021-33080, CVE-2020-26558, CVE-2021-1636, CVE-2020-12920, CVE-2021-0166, CVE-2023-20560, CVE-2020-12892, CVE-2023-20597, CVE-2021-26363, CVE-2021-42834, CVE-2022-31639, CVE-2020-12930, CVE-2023-32674, CVE-2022-30339, CVE-2022-23958, CVE-2022-33906, CVE-2023-27973, CVE-2021-26406, CVE-2023-25756, CVE-2020-26555, CVE-2021-26316, CVE-2023-1707, CVE-2020-12962, CVE-2020-10969, CVE-2021-46773, CVE-2022-23957, CVE-2023-35175, CVE-2022-21139, CVE-2021-3675, CVE-2021-39300, CVE-2022-23927, CVE-2020-9548, CVE-2019-14379, CVE-2022-4894, CVE-2022-31642, CVE-2021-0188, CVE-2021-0175, CVE-2022-30773, CVE-2022-26047, CVE-2022-21197, CVE-2022-30704, CVE-2021-0173, CVE-2022-27537, CVE-2021-0153, CVE-2020-12894, CVE-2021-0169, CVE-2020-12895, CVE-2023-0466, CVE-2022-27874, CVE-2020-10673, CVE-2021-26388, CVE-2020-6921, CVE-2021-26361, CVE-2020-12986, CVE-2022-26513, CVE-2022-43778, CVE-2022-27635, CVE-2022-1038, CVE-2022-34671, CVE-2020-6918, CVE-2022-43779, CVE-2022-27538, CVE-2021-26386, CVE-2019-12086, CVE-2021-0161, CVE-2020-25632, CVE-2022-23456, CVE-2022-28693, CVE-2022-29893, CVE-2022-21160, CVE-2014-0114, CVE-2023-35178, CVE-2020-11620, CVE-2021-0183, CVE-2020-36189, CVE-2021-46755, CVE-2022-21131, CVE-2018-14720, CVE-2023-28880, CVE-2020-12981, CVE-2021-3662, CVE-2020-12944, CVE-2021-33110, CVE-2022-3990, CVE-2020-36183, CVE-2020-11111, CVE-2022-23931, CVE-2020-35728, CVE-2023-27971, CVE-2020-25649, CVE-2021-0164, CVE-2022-33984, CVE-2022-27497, CVE-2022-43780, CVE-2022-24293, CVE-2022-27879, CVE-2021-26254, CVE-2022-31636, CVE-2023-20594, CVE-2021-0177, CVE-2020-14061, CVE-2020-14062, CVE-2022-29143, CVE-2022-24292, CVE-2022-23933, CVE-2022-26845, CVE-2020-12931, CVE-2022-21136, CVE-2023-21930, CVE-2021-26336, CVE-2020-27749, CVE-2022-21172, CVE-2020-36518, CVE-2021-0172, CVE-2023-4499, CVE-2021-26391

Kaspersky Exposes Secret iPhone Feature Hackers Used To Spy On Apple Devices | HotHardware

Trust: 4.75

Fetched: Dec. 29, 2023, 9:15 a.m., Published: Dec. 28, 2023, 11:13 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: iphone
db: NVD ids: CVE-2023-38606, CVE-2023-32434, CVE-2023-41990, CVE-2023-32435

A zero trust architecture for health information systems | Health and Technology

Trust: 3.5

Fetched: Dec. 27, 2023, 9:45 a.m., Published: Dec. 26, 2023, midnight
 Vulnerabilities: -

Barracuda Vulnerabilities: Proactive Response Saves The Day

Trust: 5.5

Fetched: Dec. 27, 2023, 9:38 a.m., Published: Dec. 27, 2023, 6:26 a.m.
 Vulnerabilities: code execution, code injection
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: barracuda networks model: barracuda
db: NVD ids: CVE-2023-7102, CVE-2023-2868, CVE-2023-7101

Category: Android - Antimalware Zone

Trust: 3.25

Fetched: Dec. 27, 2023, 9:37 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Nmap Cheat Sheet 2024: All the Commands & Flags

Trust: 3.5

Fetched: Dec. 27, 2023, 9:36 a.m., Published: Dec. 13, 2022, 4:14 p.m.
 Vulnerabilities: remote file inclusion, default credentials, file inclusion
Affected productsExternal IDs
vendor: google model: wifi