Sign-up

VARIoT news about IoT security

Estimated 12,000 Juniper Devices Vulnerable to RCE Vulnerability - Security Boulevard

Trust: 3.0

Fetched: Sept. 22, 2023, 9:15 a.m., Published: Sept. 20, 2023, 8:52 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36845

CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks - SecurityWeek

Related entries in the VARIoT vulnerabilities database: VAR-201704-1556, VAR-202201-1001, VAR-201505-0274

Trust: 4.0

Fetched: Sept. 22, 2023, 9:15 a.m., Published: Sept. 19, 2023, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2017-6884, CVE-2022-22265, CVE-2014-8361, CVE-2021-3129

Apple fixes three serious bugs in iOS and macOS - update your iPhone and Mac right now | Tom's Guide

Trust: 4.0

Fetched: Sept. 22, 2023, 9:13 a.m., Published: Sept. 21, 2023, 8:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: watch
vendor: apple model: watchos
vendor: apple model: macos
db: NVD ids: CVE-2023-41992, CVE-2023-41991, CVE-2023-41933

Can My iPhone Be Hacked? Learn How to Secure Your Device

Trust: 3.5

Fetched: Sept. 22, 2023, 9:12 a.m., Published: Sept. 7, 2023, 5:40 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: safari
vendor: apple model: icloud
vendor: apple model: iphone
vendor: apple model: watch
vendor: essential model: phone

How to Perform AWS Security Scanning and Configuration Monitoring?

Trust: 3.25

Fetched: Sept. 20, 2023, 10:04 a.m., Published: Oct. 2, 2017, 8:33 a.m.
 Vulnerabilities: sql injection, information leakage, privilege escalation...
Affected productsExternal IDs
vendor: node.js model: node.js
vendor: google model: chrome

Cisco BroadWorks platform hit by serious vulnerability - Techzine Europe

Trust: 5.0

Fetched: Sept. 20, 2023, 10 a.m., Published: Sept. 8, 2023, 10:15 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-20238

Fuzzing Against The Machine: Automate vulnerability research with emulated IoT devices on Qemu - Eduardo Blázquez’s Personal Webpage

Trust: 3.0

Fetched: Sept. 20, 2023, 10 a.m., Published: Aug. 28, 2023, 10:20 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: mobile

The GoAnywhere data breach explained | ITPro

Trust: 3.75

Fetched: Sept. 20, 2023, 10 a.m., Published: April 6, 2023, 11:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-0669

ZDI-23-1296: D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability | allinfosecnews.com

Trust: 3.0

Fetched: Sept. 20, 2023, 9:58 a.m., Published: Sept. 7, 2023, 5 a.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs

Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202205-0394, VAR-202206-0004, VAR-202205-1958, VAR-202112-0566

Trust: 4.5

Fetched: Sept. 20, 2023, 9:57 a.m., Published: Aug. 24, 2023, 7:07 p.m.
 Vulnerabilities: security feature bypass, authentication bypass, authentication vulnerability...
Affected productsExternal IDs
vendor: zoho model: manageengine adselfservice plus
db: NVD ids: CVE-2021-40539, CVE-2018-13379, CVE-2022-22954, CVE-2021-34523, CVE-2022-1388, CVE-2022-26134, CVE-2021-26084, CVE-2021-34473, CVE-2022-22960, CVE-2022-30190, CVE-2021-44228, CVE-2021-31207

What Are The Cybersecurity Risks Of Smart Home Devices?

Trust: 3.5

Fetched: Sept. 20, 2023, 9:56 a.m., Published: Sept. 2, 2023, 12:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

Nearly 12,000 Juniper Firewalls Found Vulnerable to Recently Disclosed RCE Vulnerability

Trust: 5.25

Fetched: Sept. 20, 2023, 9:55 a.m., Published: Sept. 19, 2023, 9:30 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36846, CVE-2023-36845, CVE-2023-36847, CVE-2023-36844

Maria Korolov - Author - Channel Asia

Trust: 3.0

Fetched: Sept. 20, 2023, 9:55 a.m., Published: Sept. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: mesh model: mesh

Apple Security Advisory 2023-09-11-1 - Cyber Legion - IT Security Services

Trust: 4.25

Fetched: Sept. 20, 2023, 9:53 a.m., Published: Sept. 18, 2023, 1:28 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2020-11978

Apache Airflow 1.10.10 Remote Code Execution - Cyber Legion - IT Security Services

Trust: 3.0

Fetched: Sept. 20, 2023, 9:52 a.m., Published: Sept. 19, 2023, 4 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2020-11978

Apple’s iOS 16.6.1 Update & Pegasus Spyware

Trust: 4.5

Fetched: Sept. 20, 2023, 9:51 a.m., Published: Sept. 12, 2023, 6:12 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: ipad
db: NVD ids: CVE-2023-41064

Thousands of Juniper Appliances Vulnerable to New Exploit - SecurityWeek

Trust: 5.25

Fetched: Sept. 20, 2023, 9:49 a.m., Published: Sept. 19, 2023, 11:45 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36845

Maria Korolov - Author - Channel Asia

Trust: 3.0

Fetched: Sept. 20, 2023, 9:47 a.m., Published: Sept. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: mesh model: mesh

What Are the Risks of Using Public Wi-Fi?

Trust: 3.25

Fetched: Sept. 20, 2023, 9:46 a.m., Published: March 24, 2021, 12:56 a.m.
 Vulnerabilities: session fixation, session hijacking
Affected productsExternal IDs
vendor: essential model: phone
vendor: google model: home
vendor: google model: android

Does CVE-2022-38023 have any impact to Data ONTAP 7-Mode - NetApp Knowledge Base

Trust: 3.75

Fetched: Sept. 20, 2023, 9:45 a.m., Published: Feb. 23, 2023, 9:50 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: netapp model: data ontap
vendor: netapp model: data ontap 7-mode
db: NVD ids: CVE-2022-38023