VARIoT news about IoT security

Experts warn of a vulnerability affecting Bosch BCC100 Thermostat Trust: 3.0 Fetched: Jan. 16, 2024, 9:25 a.m., Published: Jan. 16, 2024, 6:20 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2023-49722

Google MultiLogin exploit enables persistent unauthorized access Trust: 4.5 Fetched: Jan. 16, 2024, 9:23 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: command execution

Affected products

External IDs

vendor:	barracuda	model:	barracuda
vendor:	google	model:	chrome

db:

NVD

ids:

CVE-2023-7101, CVE-2023-7102

Juniper Fixes Critical Vulnerability in Firewalls and Switches - Lansweeper Trust: 3.0 Fetched: Jan. 16, 2024, 9:22 a.m., Published: Feb. 15, 2023, 7:39 a.m.	Vulnerabilities: code execution, denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2024-21591

Unpatched Samsung Chipset Vulnerabilities Open Android Users to RCE Attacks Trust: 5.5 Fetched: Jan. 16, 2024, 9:21 a.m., Published: Jan. 5, 2024, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	mobile
vendor:	samsung	model:	samsung galaxy
vendor:	samsung	model:	exynos
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	mobile devices
vendor:	samsung	model:	notes
vendor:	google	model:	android
vendor:	google	model:	pixel

db:

NVD

ids:

CVE-2023-24033, CVE-2023-26496, CVE-2023-26497, CVE-2023-26498

Another home thermostat found vulnerable to attack Trust: 3.5 Fetched: Jan. 16, 2024, 9:15 a.m., Published: May 16, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	trane	model:	thermostat
vendor:	trane	model:	comfortlink ii
vendor:	smarter	model:	coffee
vendor:	rising	model:	antivirus
vendor:	google	model:	wifi
vendor:	google	model:	home

CVE - CVE-2011-0638 Trust: 3.25 Fetched: Jan. 14, 2024, 10:37 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2011-0638

Fixes issued for six Chrome vulnerabilities \| SC Media Trust: 3.25 Fetched: Jan. 14, 2024, 10:36 a.m., Published: Jan. 5, 2024, 10:45 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2023-29357

Ivanti Secure VPN Zero-Day Vulnerabilities Allow Chinese Threat Actor to Compromise Systems Trust: 4.25 Fetched: Jan. 14, 2024, 10:33 a.m., Published: Jan. 12, 2024, 10:28 p.m.	Vulnerabilities: authentication bypass, command injection, code execution

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	pulsesecure	model:	policy secure
vendor:	pulsesecure	model:	pulse connect secure
vendor:	pulsesecure	model:	connect secure
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2023-46805, CVE-2024-21887

Can Home Assistant Run on Raspberry Pi Zero 2 W? - ByRetreat Trust: 3.5 Fetched: Jan. 14, 2024, 10:32 a.m., Published: Dec. 21, 2023, 8:51 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

home assistant

model:

home assistant

CVE - CVE-2021-1497 Trust: 3.25 Fetched: Jan. 14, 2024, 10:31 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-1497

CVE - Search Results Related entries in the VARIoT vulnerabilities database: VAR-201304-0252, VAR-201309-0003, VAR-201511-0294, VAR-202105-1451, VAR-202010-0467, VAR-202105-0904, VAR-201408-0279, VAR-201310-0032, VAR-200905-0261, VAR-201406-0102, VAR-200905-0262, VAR-201310-0031, VAR-201310-0030, VAR-201511-0101, VAR-202010-0453, VAR-201309-0002, VAR-201508-0166, VAR-201205-0297, VAR-201504-0451, VAR-200905-0265, VAR-200905-0263, VAR-201505-0417, VAR-201902-0242, VAR-201310-0029, VAR-201401-0139, VAR-201308-0129 Trust: 6.25 Fetched: Jan. 14, 2024, 10:28 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: kernel panic, code execution, improper validation...

Affected products

External IDs

vendor:	cisco	model:	unity
vendor:	cisco	model:	unified computing system
vendor:	cisco	model:	cisco unified computing system
vendor:	cisco	model:	cisco integrated management controller
vendor:	cisco	model:	guard
vendor:	cisco	model:	integrated management controller
vendor:	parallels	model:	tools
vendor:	emerson	model:	avocent mergepoint unity
vendor:	emerson	model:	network power avocent mergepoint unity 2016
vendor:	emerson network power	model:	avocent mergepoint unity
vendor:	emerson network power	model:	network power avocent mergepoint unity 2016
vendor:	canonical	model:	ubuntu
vendor:	aten	model:	cn8000
vendor:	aten	model:	kh1516i ip kvm switch
vendor:	aten	model:	kn9116 ip kvm switch

db:

NVD

ids:

CVE-2021-37576, CVE-2020-27777, CVE-2018-10853, CVE-2013-1943, CVE-2013-5634, CVE-2011-1773, CVE-2020-10756, CVE-2021-4095, CVE-2013-1186, CVE-2021-42073, CVE-2015-2877, CVE-2012-4073, CVE-2010-0297, CVE-2009-2287, CVE-2015-5307, CVE-2011-0011, CVE-2011-4127, CVE-2021-22543, CVE-2022-4636, CVE-2019-11135, CVE-2014-0142, CVE-2020-24628, CVE-2009-3290, CVE-2014-3645, CVE-2022-1158, CVE-2014-3601, CVE-2010-0430, CVE-2013-1798, CVE-2010-0309, CVE-2017-2584, CVE-2016-3713, CVE-2013-7130, CVE-2013-1935, CVE-2009-3722, CVE-2011-1750, CVE-2020-12768, CVE-2016-4440, CVE-2021-3501, CVE-2012-2137, CVE-2020-8834, CVE-2011-4622, CVE-2019-19332, CVE-2017-12188, CVE-2021-4032, CVE-2016-9777, CVE-2014-8480, CVE-2015-8345, CVE-2013-1766, CVE-2017-8106, CVE-2010-2784, CVE-2014-8369, CVE-2007-1320, CVE-2021-3653, CVE-2014-3080, CVE-2012-4117, CVE-2019-3016, CVE-2010-0306, CVE-2009-1242, CVE-2012-4461, CVE-2009-1472, CVE-2010-3881, CVE-2013-4129, CVE-2023-25530, CVE-2011-2212, CVE-2014-7842, CVE-2023-25527, CVE-2014-3611, CVE-2020-36313, CVE-2023-4155, CVE-2014-1997, CVE-2009-3616, CVE-2017-2596, CVE-2009-3640, CVE-2009-1473, CVE-2013-2007, CVE-2017-15306, CVE-2022-45869, CVE-2016-3044, CVE-2011-2512, CVE-2021-21731, CVE-2017-17741, CVE-2012-4116, CVE-2010-0741, CVE-2023-31029, CVE-2012-2652, CVE-2016-0749, CVE-2021-3656, CVE-2019-3887, CVE-2015-7513, CVE-2015-5156, CVE-2012-0045, CVE-2022-0171, CVE-2018-16882, CVE-2021-30178, CVE-2019-12491, CVE-2017-12168, CVE-2013-6368, CVE-2012-4115, CVE-2015-8104, CVE-2015-1950, CVE-2009-3638, CVE-2023-31024, CVE-2020-24627, CVE-2013-6376, CVE-2018-12904, CVE-2014-8481, CVE-2012-4072, CVE-2010-0435, CVE-2017-1000407, CVE-2015-3214, CVE-2016-8630, CVE-2020-2732, CVE-2010-5313, CVE-2019-7222, CVE-2019-14821, CVE-2022-2196, CVE-2017-7518, CVE-2013-4587, CVE-2020-36311, CVE-2021-29657, CVE-2014-8134, CVE-2010-0431, CVE-2022-1789, CVE-2017-2583, CVE-2015-3247, CVE-2014-0143, CVE-2010-3698, CVE-2010-0428, CVE-2022-3344, CVE-2010-0419, CVE-2021-42075, CVE-2020-36310, CVE-2013-6367, CVE-2014-0155, CVE-2012-1179, CVE-2020-36312, CVE-2021-4093, CVE-2017-12154, CVE-2012-2121, CVE-2023-1513, CVE-2021-43056, CVE-2015-3324, CVE-2008-2004, CVE-2008-4539, CVE-2023-30456, CVE-2018-19406, CVE-2012-2119, CVE-2015-0239, CVE-2022-2153, CVE-2022-1263, CVE-2021-42074, CVE-2021-44776, CVE-2010-0429, CVE-2016-9756, CVE-2021-42076, CVE-2014-0049, CVE-2013-0311, CVE-2015-3252, CVE-2014-3690, CVE-2011-2527, CVE-2004-2627, CVE-2009-1477, CVE-2010-4525, CVE-2016-9588, CVE-2010-2653, CVE-2012-0029, CVE-2012-1601, CVE-2015-4036, CVE-2013-1922, CVE-2021-42072, CVE-2008-2382, CVE-2013-1797, CVE-2023-5090, CVE-2009-4004, CVE-2016-10150, CVE-2015-4692, CVE-2023-25529, CVE-2022-39189, CVE-2023-2680, CVE-2011-1751, CVE-2022-1852, CVE-2014-8086, CVE-2019-7221, CVE-2015-5260, CVE-2021-38198, CVE-2009-1474, CVE-2014-3646, CVE-2023-31030, CVE-2022-0516, CVE-2010-0298, CVE-2009-4031, CVE-2014-3610, CVE-2021-20295, CVE-2015-3456, CVE-2021-3750, CVE-2018-12473, CVE-2019-6974, CVE-2017-1000252, CVE-2018-19407, CVE-2014-3615, CVE-2014-3647, CVE-2012-4114, CVE-2020-3993, CVE-2018-18021, CVE-2013-1796, CVE-2013-6030, CVE-2013-2069, CVE-2018-1087, CVE-2020-27152, CVE-2013-0526, CVE-2011-4347, CVE-2013-4592, CVE-2016-5412, CVE-2018-10901

CISA Issues ICS Advisories for Vulnerabilities Affecting Siemens, Schneider Electric, Rapid Software, Horner Automation Related entries in the VARIoT vulnerabilities database: VAR-202402-0004, VAR-202401-0197, VAR-202401-0682, VAR-202402-0006, VAR-202401-0196 Trust: 4.5 Fetched: Jan. 14, 2024, 10:27 a.m., Published: Jan. 12, 2024, 1:19 p.m.	Vulnerabilities: default credentials, code execution

Affected products

External IDs

vendor:	horner automation	model:	cscape
vendor:	horner automation	model:	automation cscape
vendor:	schneider electric	model:	monitor
vendor:	schneider	model:	monitor
vendor:	siemens	model:	simatic
vendor:	siemens	model:	simatic ipc847e
vendor:	siemens	model:	simatic ipc647e
vendor:	horner	model:	cscape
vendor:	horner	model:	automation cscape
vendor:	rapid	model:	scada
vendor:	rapid	model:	rapid scada
vendor:	rapid scada	model:	scada
vendor:	rapid scada	model:	rapid scada

db:

NVD

ids:

CVE-2024-21764, CVE-2023-49621, CVE-2023-7206, CVE-2023-51438, CVE-2023-7032, CVE-2024-21852, CVE-2023-49251

SSH shaken, not stirred by Terrapin downgrade vulnerability • The Register Trust: 4.5 Fetched: Jan. 14, 2024, 10:21 a.m., Published: -	Vulnerabilities: buffer overflow, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2023-46445, CVE-2023-48795, CVE-2023-46446

Two zero-days in Ivanti products actively exploited by threat actor \| SC Media Trust: 4.5 Fetched: Jan. 14, 2024, 10:12 a.m., Published: Jan. 4, 2024, 6 p.m.	Vulnerabilities: authentication bypass, command injection, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2023-46805, CVE-2024-21887

Private IP address disclosure Trust: 4.0 Fetched: Jan. 14, 2024, 10:07 a.m., Published: Dec. 26, 2023, 3:17 p.m.	Vulnerabilities: address disclosure

Affected products	External IDs

CVE - CVE-2022-45143 Trust: 3.25 Fetched: Jan. 14, 2024, 10:07 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2022-45143

CVE - Search Results Related entries in the VARIoT vulnerabilities database: VAR-201512-0402, VAR-202304-0151, VAR-201710-0659, VAR-201504-0294, VAR-201501-0247, VAR-201810-0344, VAR-202010-0386, VAR-201810-0582, VAR-201908-0046, VAR-201808-0119, VAR-200512-0678, VAR-202205-1787, VAR-201508-0392, VAR-201404-0168, VAR-200909-0385, VAR-200609-0071, VAR-200505-0128, VAR-202312-0198, VAR-201310-0484, VAR-201709-0004, VAR-200511-0061, VAR-200206-0066, VAR-201507-0089, VAR-202211-1910, VAR-202002-0611, VAR-200305-0024, VAR-201406-0313, VAR-200603-0272, VAR-201411-0131, VAR-200511-0015, VAR-201101-0306, VAR-201804-0203, VAR-201310-0534, VAR-200511-0112, VAR-201311-0291, VAR-201905-1319, VAR-201101-0330, VAR-200106-0093, VAR-200407-0043, VAR-200210-0273, VAR-202106-0146, VAR-201205-0331, VAR-200511-0016, VAR-202003-1187, VAR-202204-1420, VAR-200506-0141, VAR-201011-0069, VAR-201006-0026, VAR-201804-1019, VAR-201309-0394, VAR-201002-0164, VAR-201311-0232, VAR-201707-0436, VAR-200905-0155, VAR-202006-1087, VAR-201605-0554, VAR-201309-0039, VAR-202107-0092, VAR-201702-0117, VAR-201208-0125, VAR-200210-0245, VAR-200711-0141, VAR-200905-0196, VAR-200211-0071, VAR-201209-0394, VAR-200401-0045, VAR-202002-0581, VAR-201505-0238, VAR-201611-0173, VAR-200505-0908, VAR-201105-0256, VAR-201704-1346, VAR-201808-0121, VAR-201804-0218, VAR-201609-0597, VAR-202205-0133, VAR-201702-1059, VAR-201808-0120, VAR-201404-0031, VAR-200511-0110, VAR-201705-3726, VAR-201804-0510, VAR-201305-0115, VAR-202007-0194, VAR-200704-0585, VAR-200511-0111, VAR-201608-0272, VAR-202204-1973, VAR-201209-0366, VAR-201003-0231, VAR-201508-0132, VAR-202204-0921, VAR-201610-0225, VAR-201208-0707, VAR-201208-0126, VAR-202209-0516, VAR-201912-0092, VAR-202002-0612, VAR-200801-0305, VAR-202010-1490, VAR-201808-0956, VAR-202201-1944, VAR-200809-0316, VAR-202007-0193, VAR-201506-0163, VAR-202002-0610, VAR-201904-0204, VAR-201506-0188, VAR-202109-0790 Trust: 5.25 Fetched: Jan. 14, 2024, 9:52 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: kernel panic, code execution, improper validation...

Affected products

External IDs

vendor:	cisco	model:	rv130w
vendor:	cisco	model:	anyconnect secure mobility client
vendor:	cisco	model:	5500 series adaptive security appliance
vendor:	cisco	model:	pix firewall
vendor:	cisco	model:	cisco asa 5500 series
vendor:	cisco	model:	nexus
vendor:	cisco	model:	vpn 3000 series
vendor:	cisco	model:	routers
vendor:	cisco	model:	cisco unified callmanager
vendor:	cisco	model:	series switches
vendor:	cisco	model:	rv130
vendor:	cisco	model:	series
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	clamav
vendor:	cisco	model:	series switch
vendor:	cisco	model:	adaptive security virtual appliance
vendor:	cisco	model:	staros
vendor:	cisco	model:	cisco pix 500 series security appliance
vendor:	cisco	model:	ios xr
vendor:	cisco	model:	asa 5500 series
vendor:	cisco	model:	rv215w
vendor:	cisco	model:	1000v
vendor:	cisco	model:	catalyst 6500
vendor:	cisco	model:	asa 1000v cloud firewall
vendor:	cisco	model:	series routers
vendor:	cisco	model:	rv110w
vendor:	cisco	model:	asr 5000
vendor:	cisco	model:	vpn client
vendor:	cisco	model:	cisco small business
vendor:	cisco	model:	7600 series
vendor:	cisco	model:	unified presence
vendor:	cisco	model:	series integrated services routers
vendor:	cisco	model:	cisco nx-os
vendor:	cisco	model:	cisco staros
vendor:	cisco	model:	vpn 3002 hardware client
vendor:	cisco	model:	cisco 7600 series
vendor:	cisco	model:	isr g2 routers
vendor:	cisco	model:	ios xr software
vendor:	cisco	model:	ios xe software
vendor:	cisco	model:	unified presence server
vendor:	cisco	model:	packet data network gateway
vendor:	cisco	model:	4321
vendor:	cisco	model:	firepower
vendor:	cisco	model:	cisco anyconnect secure mobility client
vendor:	cisco	model:	vpn 3000 concentrator
vendor:	cisco	model:	soho
vendor:	cisco	model:	cisco unified presence server
vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	cisco virtualized packet core
vendor:	cisco	model:	netscaler gateway
vendor:	cisco	model:	catalyst 6500 series
vendor:	cisco	model:	catalyst
vendor:	cisco	model:	catalyst 9800
vendor:	cisco	model:	pix 500
vendor:	cisco	model:	pix 500 series security appliance
vendor:	cisco	model:	cisco catalyst 6500 series
vendor:	cisco	model:	firepower 2100
vendor:	cisco	model:	integrated services routers
vendor:	cisco	model:	cisco unified presence
vendor:	cisco	model:	virtualized packet core
vendor:	cisco	model:	ios xe 3.15
vendor:	cisco	model:	technical support
vendor:	cisco	model:	firepower 9300
vendor:	cisco	model:	asa software
vendor:	cisco	model:	ios 12.2
vendor:	cisco	model:	industrial security appliance
vendor:	cisco	model:	firepower threat defense
vendor:	cisco	model:	router
vendor:	cisco	model:	cisco asa 1000v cloud firewall
vendor:	cisco	model:	ios software
vendor:	cisco	model:	cisco vpn 3000 series
vendor:	cisco	model:	adaptive security appliance
vendor:	cisco	model:	small business
vendor:	cisco	model:	isr g2
vendor:	cisco	model:	cisco pix firewall
vendor:	cisco	model:	cisco adaptive security appliance
vendor:	cisco	model:	aggregation services router
vendor:	cisco	model:	unified callmanager
vendor:	cisco	model:	cisco ios xr
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	asa 5500
vendor:	cisco	model:	mds 9000
vendor:	rockwell	model:	factorytalk
vendor:	rockwell	model:	factorytalk view se
vendor:	rockwell	model:	factorytalk view
vendor:	nortel	model:	contivity
vendor:	cups	model:	cups
vendor:	clavister	model:	security gateway
vendor:	clavister	model:	firewall
vendor:	ingate	model:	siparator
vendor:	ingate	model:	ingate firewall
vendor:	ingate	model:	firewall
vendor:	zyxel	model:	zywall
vendor:	clamav	model:	clamav
vendor:	apple	model:	apple mac os x
vendor:	apple	model:	cups
vendor:	apple	model:	mac os x
vendor:	apple	model:	mac os
vendor:	seil	model:	b1 firmware
vendor:	seil	model:	seil/b1
vendor:	seil	model:	seil/x2
vendor:	seil	model:	seil/neu 2fe plus
vendor:	seil	model:	neu 2fe plus
vendor:	seil	model:	seil/turbo
vendor:	seil	model:	seil/x86
vendor:	seil	model:	turbo
vendor:	seil	model:	seil/x1
vendor:	innominate	model:	mguard
vendor:	cisco systems	model:	rv130w
vendor:	cisco systems	model:	anyconnect secure mobility client
vendor:	cisco systems	model:	5500 series adaptive security appliance
vendor:	cisco systems	model:	pix firewall
vendor:	cisco systems	model:	cisco asa 5500 series
vendor:	cisco systems	model:	nexus
vendor:	cisco systems	model:	vpn 3000 series
vendor:	cisco systems	model:	routers
vendor:	cisco systems	model:	cisco unified callmanager
vendor:	cisco systems	model:	series switches
vendor:	cisco systems	model:	rv130
vendor:	cisco systems	model:	series
vendor:	cisco systems	model:	ios xe
vendor:	cisco systems	model:	clamav
vendor:	cisco systems	model:	series switch
vendor:	cisco systems	model:	adaptive security virtual appliance
vendor:	cisco systems	model:	staros
vendor:	cisco systems	model:	cisco pix 500 series security appliance
vendor:	cisco systems	model:	ios xr
vendor:	cisco systems	model:	asa 5500 series
vendor:	cisco systems	model:	rv215w
vendor:	cisco systems	model:	1000v
vendor:	cisco systems	model:	catalyst 6500
vendor:	cisco systems	model:	asa 1000v cloud firewall
vendor:	cisco systems	model:	series routers
vendor:	cisco systems	model:	rv110w
vendor:	cisco systems	model:	asr 5000
vendor:	cisco systems	model:	vpn client
vendor:	cisco systems	model:	cisco small business
vendor:	cisco systems	model:	7600 series
vendor:	cisco systems	model:	unified presence
vendor:	cisco systems	model:	series integrated services routers
vendor:	cisco systems	model:	cisco nx-os
vendor:	cisco systems	model:	cisco staros
vendor:	cisco systems	model:	vpn 3002 hardware client
vendor:	cisco systems	model:	cisco 7600 series
vendor:	cisco systems	model:	isr g2 routers
vendor:	cisco systems	model:	ios xr software
vendor:	cisco systems	model:	ios xe software
vendor:	cisco systems	model:	unified presence server
vendor:	cisco systems	model:	packet data network gateway
vendor:	cisco systems	model:	4321
vendor:	cisco systems	model:	firepower
vendor:	cisco systems	model:	cisco anyconnect secure mobility client
vendor:	cisco systems	model:	vpn 3000 concentrator
vendor:	cisco systems	model:	soho
vendor:	cisco systems	model:	cisco unified presence server
vendor:	cisco systems	model:	cisco ios xe
vendor:	cisco systems	model:	cisco ios
vendor:	cisco systems	model:	cisco virtualized packet core
vendor:	cisco systems	model:	netscaler gateway
vendor:	cisco systems	model:	catalyst 6500 series
vendor:	cisco systems	model:	catalyst
vendor:	cisco systems	model:	catalyst 9800
vendor:	cisco systems	model:	pix 500
vendor:	cisco systems	model:	pix 500 series security appliance
vendor:	cisco systems	model:	cisco catalyst 6500 series
vendor:	cisco systems	model:	firepower 2100
vendor:	cisco systems	model:	integrated services routers
vendor:	cisco systems	model:	cisco unified presence
vendor:	cisco systems	model:	virtualized packet core
vendor:	cisco systems	model:	ios xe 3.15
vendor:	cisco systems	model:	technical support
vendor:	cisco systems	model:	firepower 9300
vendor:	cisco systems	model:	asa software
vendor:	cisco systems	model:	ios 12.2
vendor:	cisco systems	model:	industrial security appliance
vendor:	cisco systems	model:	firepower threat defense
vendor:	cisco systems	model:	router
vendor:	cisco systems	model:	cisco asa 1000v cloud firewall
vendor:	cisco systems	model:	ios software
vendor:	cisco systems	model:	cisco vpn 3000 series
vendor:	cisco systems	model:	adaptive security appliance
vendor:	cisco systems	model:	small business
vendor:	cisco systems	model:	isr g2
vendor:	cisco systems	model:	cisco pix firewall
vendor:	cisco systems	model:	cisco adaptive security appliance
vendor:	cisco systems	model:	aggregation services router
vendor:	cisco systems	model:	unified callmanager
vendor:	cisco systems	model:	cisco ios xr
vendor:	cisco systems	model:	nx-os
vendor:	cisco systems	model:	asa 5500
vendor:	cisco systems	model:	mds 9000
vendor:	novell	model:	client
vendor:	novell	model:	bordermanager
vendor:	mikrotik	model:	routers
vendor:	mikrotik	model:	routeros
vendor:	mikrotik	model:	router
vendor:	forcepoint	model:	ngfw security management center
vendor:	forcepoint	model:	next generation firewall
vendor:	huawei	model:	secospace usg6600
vendor:	huawei	model:	usg2205bsr
vendor:	huawei	model:	huawei
vendor:	huawei	model:	usg2220bsr
vendor:	huawei	model:	ngfw
vendor:	huawei	model:	usg9500
vendor:	huawei	model:	nip6800
vendor:	huawei	model:	nova
vendor:	huawei	model:	usg5120bsr
vendor:	huawei	model:	usg5150bsr
vendor:	fortigate	model:	fortios
vendor:	sonicwall	model:	switch
vendor:	sonicwall	model:	soho
vendor:	sonicwall	model:	ssl vpn
vendor:	sonicwall	model:	remote access
vendor:	wireshark	model:	wireshark
vendor:	phoenix contact	model:	mguard
vendor:	citrix	model:	netscaler gateway
vendor:	citrix	model:	application delivery controller
vendor:	citrix	model:	gateway
vendor:	citrix	model:	netscaler
vendor:	citrix	model:	netscaler application delivery controller
vendor:	brocade	model:	brocade netiron os
vendor:	brocade	model:	netiron os
vendor:	netbsd	model:	current
vendor:	netbsd	model:	netbsd
vendor:	rockwell automation	model:	factorytalk
vendor:	rockwell automation	model:	factorytalk view se
vendor:	rockwell automation	model:	factorytalk view
vendor:	check point	model:	next generation
vendor:	check point	model:	check point
vendor:	check point	model:	security gateway
vendor:	sophos	model:	mobile
vendor:	sophos	model:	firewall
vendor:	sophos	model:	sophos utm

db:

NVD

ids:

CVE-2015-6429, CVE-2004-0819, CVE-2012-5379, CVE-2012-5382, CVE-2011-2147, CVE-2023-20051, CVE-2017-12289, CVE-2023-28842, CVE-2023-20193, CVE-2015-0675, CVE-2014-6385, CVE-2007-2524, CVE-2018-0472, CVE-2020-1657, CVE-2006-4436, CVE-2018-15397, CVE-2019-6143, CVE-2023-38710, CVE-2017-17305, CVE-2006-4018, CVE-2005-4570, CVE-2015-3204, CVE-2006-5201, CVE-2022-0910, CVE-2015-3966, CVE-2014-0612, CVE-2009-2868, CVE-2006-4613, CVE-2005-1802, CVE-2006-5286, CVE-2023-49692, CVE-2013-5172, CVE-2023-41085, CVE-2011-1784, CVE-2019-0060, CVE-2006-1268, CVE-2011-4667, CVE-2005-3732, CVE-2002-0603, CVE-2004-2230, CVE-2022-22201, CVE-2015-5080, CVE-2022-23746, CVE-2020-1829, CVE-2010-0392, CVE-2005-4321, CVE-2003-0258, CVE-2008-2246, CVE-2018-8753, CVE-2014-3299, CVE-2006-0383, CVE-2022-0286, CVE-2014-8952, CVE-2012-5383, CVE-2012-5378, CVE-2005-3669, CVE-2010-4692, CVE-2016-10455, CVE-2013-5507, CVE-2023-28841, CVE-2005-3668, CVE-2000-0962, CVE-2012-5381, CVE-2013-5548, CVE-2013-0406, CVE-2019-1706, CVE-2010-4676, CVE-2001-0376, CVE-2004-0710, CVE-2005-3753, CVE-2018-6916, CVE-2002-1102, CVE-2020-11176, CVE-2020-1749, CVE-2011-4231, CVE-2006-0905, CVE-2005-3670, CVE-2020-3190, CVE-2023-4398, CVE-2023-1707, CVE-2022-20679, CVE-2005-2025, CVE-2010-4354, CVE-2009-4922, CVE-2018-0273, CVE-2004-0219, CVE-2001-0284, CVE-2022-3625, CVE-2013-4709, CVE-2003-0242, CVE-1999-0727, CVE-2004-2678, CVE-2010-0567, CVE-2008-4190, CVE-2013-6694, CVE-2009-0346, CVE-2012-5380, CVE-2008-1205, CVE-2019-5613, CVE-2018-17977, CVE-2017-3865, CVE-2009-2918, CVE-2007-3157, CVE-2002-0414, CVE-2009-1632, CVE-2020-3220, CVE-2016-1379, CVE-2009-3675, CVE-2005-0398, CVE-2020-12142, CVE-2022-27666, CVE-2020-10769, CVE-2013-1028, CVE-2020-20262, CVE-2022-3635, CVE-2016-8492, CVE-2012-2499, CVE-2019-18934, CVE-2002-1092, CVE-2007-6094, CVE-2023-28840, CVE-2009-1574, CVE-2002-0666, CVE-2012-3915, CVE-2003-1004, CVE-2018-25062, CVE-2008-1198, CVE-2020-1816, CVE-2015-4047, CVE-2017-17023, CVE-2013-3876, CVE-2016-6466, CVE-2006-4331, CVE-2005-0039, CVE-2023-47091, CVE-2011-1547, CVE-2022-3630, CVE-2017-6609, CVE-2017-17312, CVE-2016-10448, CVE-2008-1335, CVE-2013-2237, CVE-2016-2183, CVE-2022-29473, CVE-2017-6297, CVE-2017-17311, CVE-2021-34579, CVE-2012-5032, CVE-2007-3248, CVE-2004-0164, CVE-2005-3666, CVE-2017-8338, CVE-2016-10396, CVE-2006-0718, CVE-2009-0790, CVE-2018-9511, CVE-2017-6156, CVE-2013-1241, CVE-2020-12028, CVE-2007-1826, CVE-2005-3667, CVE-2016-5736, CVE-2015-6111, CVE-2012-5377, CVE-2022-20742, CVE-2005-4090, CVE-2022-3545, CVE-2021-28508, CVE-2012-3727, CVE-2010-0578, CVE-2021-1422, CVE-2008-3652, CVE-2015-6510, CVE-2007-6282, CVE-2022-27270, CVE-2013-4350, CVE-2018-0753, CVE-2016-8203, CVE-2012-1370, CVE-2009-0304, CVE-2020-25645, CVE-2013-2234, CVE-2008-3651, CVE-2023-22413, CVE-2012-2500, CVE-2022-20923, CVE-2018-6918, CVE-2019-6147, CVE-2020-1830, CVE-2008-0324, CVE-2020-5938, CVE-2018-9129, CVE-2022-23024, CVE-2008-2733, CVE-2020-12027, CVE-2023-22417, CVE-2015-0771, CVE-2020-1828, CVE-2007-1841, CVE-2019-8456, CVE-2022-3624, CVE-2005-2359, CVE-2015-4550, CVE-2021-23039

CVE - Search Results Related entries in the VARIoT vulnerabilities database: VAR-201907-1075, VAR-201709-0363, VAR-201504-0446, VAR-202205-1540, VAR-202106-1214, VAR-200507-0043, VAR-201907-1136, VAR-201710-0074, VAR-201709-0364, VAR-201912-1218, VAR-201909-1007, VAR-201703-0741, VAR-201801-1050, VAR-202002-0357, VAR-201807-0264 Trust: 5.5 Fetched: Jan. 14, 2024, 9:51 a.m., Published: Jan. 3, 2024, midnight	Vulnerabilities: information leak, denial of service, directory traversal...

Affected products

External IDs

vendor:	cisco	model:	d9800 network transport receiver
vendor:	cisco	model:	d9800
vendor:	cisco	model:	1100
vendor:	dbpower	model:	u818a wifi
vendor:	dbpower	model:	u818a
vendor:	vivotek	model:	vivotek fd8136
vendor:	vivotek	model:	fd8136
vendor:	d-link	model:	dcs-1130
vendor:	d-link	model:	dsr-250n
vendor:	d-link	model:	dcs-1100
vendor:	jantek	model:	jtc-200
vendor:	moxa	model:	awk-3131a
vendor:	moxa	model:	moxa awk-3131a
vendor:	moxa	model:	awk-3131a firmware
vendor:	raritan	model:	dominion
vendor:	telestar	model:	imperial i500-bt
vendor:	telestar	model:	imperial i150
vendor:	telestar	model:	bobs rock radio
vendor:	telestar	model:	dabman d10
vendor:	telestar	model:	imperial i600
vendor:	telestar	model:	imperial i110
vendor:	telestar	model:	imperial i450
vendor:	telestar	model:	dabman i30 stereo
vendor:	telestar	model:	imperial i200-cd
vendor:	telestar	model:	imperial i200
vendor:	telestar	model:	imperial i400
vendor:	honeywell	model:	intermec pm23
vendor:	hospira	model:	lifecare pca infusion system
vendor:	arris	model:	nvg599
vendor:	arris	model:	nvg589

db:

NVD

ids:

CVE-2023-42363, CVE-2017-8415, CVE-2017-15874, CVE-2017-14115, CVE-2015-3459, CVE-2021-42376, CVE-2018-20679, CVE-2012-6614, CVE-2022-30065, CVE-2022-28391, CVE-2021-42378, CVE-2021-33530, CVE-2005-2136, CVE-2018-14494, CVE-2017-15873, CVE-2021-42382, CVE-2015-9261, CVE-2016-2148, CVE-2021-42385, CVE-2016-5791, CVE-2017-16544, CVE-2021-42373, CVE-2018-1000517, CVE-2013-1813, CVE-2006-5050, CVE-2017-14116, CVE-2019-16734, CVE-2021-42384, CVE-2019-13473, CVE-2021-37555, CVE-2017-5671, CVE-2016-2147, CVE-2011-2716, CVE-2021-42377, CVE-2021-42379, CVE-2018-0099, CVE-2023-42364, CVE-2021-42374, CVE-2021-42375, CVE-2021-28831, CVE-2023-42366, CVE-2022-48174, CVE-2021-42386, CVE-2021-42383, CVE-2019-5747, CVE-2021-42381, CVE-2019-5138, CVE-2017-3209, CVE-2011-5325, CVE-2023-39810, CVE-2018-1000500, CVE-2014-9645, CVE-2023-42365, CVE-2021-42380, CVE-2016-6301, CVE-2006-1058

Linux devices are under attack by a never-before-seen worm \| Ars Technica Trust: 3.5 Fetched: Jan. 14, 2024, 9:50 a.m., Published: Jan. 10, 2024, 4:12 p.m.	Vulnerabilities: password guessing

Affected products

External IDs

vendor:	palo alto networks	model:	networks
vendor:	palo	model:	networks

SQL injection Cheat Sheet for 2024 Trust: 3.5 Fetched: Jan. 14, 2024, 9:44 a.m., Published: Oct. 19, 2023, 11:36 a.m.	Vulnerabilities: sql injection, injection attack

Affected products	External IDs