Sign-up

VARIoT news about IoT security

Weekly Vulnerability Recap - Sept 4, 2023 - Network Devices Hit

Related entries in the VARIoT vulnerabilities database: VAR-202303-1848, VAR-202303-1844

Trust: 5.25

Fetched: Sept. 6, 2023, 9:10 a.m., Published: Sept. 5, 2023, 11:59 p.m.
 Vulnerabilities: path traversal, authentication bypass, code execution
Affected productsExternal IDs
vendor: minio model: minio
vendor: cisco model: routers
vendor: cisco model: netscaler gateway
vendor: citrix model: gateway
vendor: citrix model: netscaler
vendor: citrix model: netscaler gateway
vendor: citrix model: netscaler adc
db: NVD ids: CVE-2023-3519, CVE-2023-36847, CVE-2023-34039, CVE-2023-36846, CVE-2023-36845, CVE-2023-28434, CVE-2023-36844, CVE-2023-33246, CVE-2023-20890, CVE-2023-32315, CVE-2023-28432

Android Security Bulletin-September 2023 | Android Open Source Project

Trust: 4.25

Fetched: Sept. 6, 2023, 9:09 a.m., Published: Sept. 6, 2023, midnight
 Vulnerabilities: information disclosure, denial of service, code execution
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: motorola model: android
vendor: motorola model: motorola
vendor: google model: android
vendor: google model: pixel
vendor: samsung model: note
vendor: samsung model: notes
vendor: samsung model: mobile
db: NVD ids: CVE-2023-33015, CVE-2023-35665, CVE-2023-28573, CVE-2023-35667, CVE-2023-35673, CVE-2023-35658, CVE-2023-35687, CVE-2023-35679, CVE-2023-35680, CVE-2023-35666, CVE-2023-35674, CVE-2023-35682, CVE-2023-35683, CVE-2023-35671, CVE-2023-35677, CVE-2023-35670, CVE-2023-35684, CVE-2023-35669, CVE-2023-33016, CVE-2023-21653, CVE-2023-21646, CVE-2023-35676, CVE-2023-28581, CVE-2022-40534, CVE-2023-35664, CVE-2023-28549, CVE-2023-35675, CVE-2023-35681, CVE-2023-28538

iDownloadBlog - Apple Blog: iPhone • Watch • iOS • Mac

Trust: 3.75

Fetched: Sept. 5, 2023, 9:19 a.m., Published: Sept. 15, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: iphone
vendor: apple model: ipad
vendor: samsung model: mobile
vendor: samsung model: mobile devices

Exploitation of Juniper Networks SRX Series and EX Series Devices | Rapid7 Blog

Trust: 3.0

Fetched: Sept. 5, 2023, 9:18 a.m., Published: Aug. 31, 2023, 8:23 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36846, CVE-2023-36845, CVE-2023-36844, CVE-2023-36847

Resolved issues in Windows Server 2012 | Microsoft Learn

Trust: 4.75

Fetched: Sept. 5, 2023, 9:16 a.m., Published: Aug. 14, 2023, 1:55 a.m.
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2022-37967

The Five Stages of Vulnerability Management | Tripwire

Trust: 3.0

Fetched: Sept. 5, 2023, 9:15 a.m., Published: Aug. 14, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: tripwire model: ip360

FBI confirms Barracuda patch is not effective for exploited ESG appliances

Trust: 4.5

Fetched: Sept. 5, 2023, 9:15 a.m., Published: Aug. 29, 2023, 1:22 p.m.
 Vulnerabilities: remote command injection, command injection
Affected productsExternal IDs
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

The Hidden Dangers of Service Principal Names (SPNs)

Trust: 3.75

Fetched: Sept. 5, 2023, 9:14 a.m., Published: Aug. 28, 2023, 7:36 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability - Cisco

Trust: 3.0

Fetched: Sept. 5, 2023, 9:10 a.m., Published: Aug. 16, 2023, 11:09 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: umbrella virtual appliance
vendor: cisco model: umbrella
vendor: cisco model: cisco umbrella virtual appliance

Blog - Bright Security

Trust: 3.0

Fetched: Sept. 5, 2023, 9:09 a.m., Published: Jan. 22, 2023, 10:09 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs

Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability - Cisco

Trust: 4.25

Fetched: Sept. 5, 2023, 9:09 a.m., Published: Aug. 18, 2023, 6:09 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Apple opens annual applications for free hackable iPhones • The Register

Trust: 4.5

Fetched: Sept. 5, 2023, 9:08 a.m., Published: -
 Vulnerabilities: cross-site scripting, authentication bypass
Affected productsExternal IDs
vendor: apple model: iphone
db: NVD ids: CVE-2023-4296

Qualys Top 20 Most Exploited Vulnerabilities | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-201409-1156, VAR-201906-0815, VAR-202008-0248, VAR-201303-0226, VAR-202112-0566, VAR-201206-0059

Trust: 5.25

Fetched: Sept. 5, 2023, 9:06 a.m., Published: Sept. 4, 2023, 2 p.m.
 Vulnerabilities: path traversal, directory traversal, memory corruption...
Affected productsExternal IDs
vendor: pulse model: secure pulse connect secure
vendor: fortigate model: fortios
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: apple model: mac os
vendor: pulse secure model: connect secure
vendor: pulse secure model: pulse connect secure
db: NVD ids: CVE-2014-6271, CVE-2018-13379, CVE-2017-0145, CVE-2017-0143, CVE-2019-11510, CVE-2017-0144, CVE-2020-1472, CVE-2013-0074, CVE-2021-34523, CVE-2021-34473, CVE-2021-44228, CVE-2012-0507, CVE-2017-0199, CVE-2012-0158, CVE-2018-8174, CVE-2021-26084, CVE-2017-8570, CVE-2017-11882, CVE-2019-19781, CVE-2021-31207, CVE-2019-2725, CVE-2012-1723, CVE-2018-0802, CVE-2021-26855

9 Best Free and Open Source Patch Management Software

Trust: 3.5

Fetched: Sept. 3, 2023, 9:21 a.m., Published: Sept. 3, 2023, midnight
 Vulnerabilities: system crash
Affected productsExternal IDs
vendor: google model: home
vendor: google model: chrome
vendor: google model: google chrome

Multiple Regulators Focused On Cybersecurity Risk For Medical Devices | By Chris Harvey, Senior VP Of Client Services At Sedgwick - Medical Device News Magazine

Trust: 3.0

Fetched: Sept. 3, 2023, 9:20 a.m., Published: Sept. 1, 2023, 1 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

Bitwarden Review 2023 - Open-Source, But Is It Good?

Trust: 3.5

Fetched: Sept. 3, 2023, 9:15 a.m., Published: Sept. 3, 2023, midnight
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome

Security Policies: Protecting Your Computers & Network | Russ Harvey Consulting

Trust: 3.25

Fetched: Sept. 3, 2023, 9:14 a.m., Published: May 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: wifi
vendor: google model: home
vendor: google model: android
vendor: check point model: express
vendor: check point model: check point
vendor: check point model: zonealarm
vendor: essential model: phone
vendor: zoom model: client

Systems Hardening Best Practices to Reduce Risk [Checklist]

Trust: 3.0

Fetched: Sept. 3, 2023, 9:12 a.m., Published: Aug. 31, 2023, 6:42 p.m.
 Vulnerabilities: account lockout
Affected productsExternal IDs

Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability - Cisco

Trust: 5.0

Fetched: Sept. 3, 2023, 9:09 a.m., Published: Aug. 16, 2023, 11:10 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: expressway
vendor: cisco model: series
vendor: cisco model: cisco telepresence video communication server
vendor: cisco model: telepresence video communication server
vendor: cisco model: expressway series
vendor: cisco model: cisco expressway
vendor: cisco model: telepresence
vendor: cisco model: cisco telepresence

How Machine Identity Management Helps Solve Connected Medical Devices Security Challenges With Ravishankar Chamarajnagar, CPO at AppViewX - Security Boulevard

Trust: 3.75

Fetched: Sept. 3, 2023, 9:08 a.m., Published: Aug. 30, 2023, 1:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security