Sign-up

VARIoT news about IoT security

Electronics | Special Issue : Security Issues in the IoT

Trust: 3.5

Fetched: Sept. 3, 2023, 9:07 a.m., Published: May 3, 2023, midnight
 Vulnerabilities: cross-site request forgery, request forgery
Affected productsExternal IDs
vendor: google model: pixel

Endpoint, Identity and Cloud | Top Cyber Attacks of 2023 (So Far) - SentinelOne

Trust: 3.5

Fetched: Sept. 3, 2023, 9:05 a.m., Published: Aug. 31, 2023, 2:01 p.m.
 Vulnerabilities: service disruption
Affected productsExternal IDs
vendor: trend model: antivirus
vendor: trend model: security

Threat actors exploiting unpatched Juniper Networks devices | Computer Weekly

Trust: 3.25

Fetched: Sept. 3, 2023, 9:03 a.m., Published: Sept. 1, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36844, CVE-2023-36847, CVE-2023-36846, CVE-2023-36845

IT/Information Security Exception Request Process - Information Security - Cal Poly, San Luis Obispo

Trust: 3.0

Fetched: Sept. 1, 2023, 9:25 a.m., Published: Aug. 31, 2023, midnight
 Vulnerabilities: policy violation
Affected productsExternal IDs

DreamBus Malware Exploits Unpatched RocketMQ Servers

Trust: 5.75

Fetched: Sept. 1, 2023, 9:23 a.m., Published: Aug. 30, 2023, 9:32 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: huawei technologies model: huawei
vendor: huawei model: huawei
db: NVD ids: CVE-2023-33246

Cybersecurity Roundup Phupu 2023 - SSL.com

Trust: 3.0

Fetched: Sept. 1, 2023, 9:21 a.m., Published: Aug. 25, 2023, 8:51 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-38408

Electronics | Free Full-Text | Unauthorized Access Detection for Network Device Firmware WEB Pages

Trust: 4.25

Fetched: Sept. 1, 2023, 9:19 a.m., Published: Jan. 1, 2023, midnight
 Vulnerabilities: command execution, information leakage
Affected productsExternal IDs
vendor: asus model: rt-ac1200
vendor: asus model: asus
vendor: asus model: rt-ac53
vendor: netgear model: r6400v2
vendor: netgear model: ac1200
vendor: d-link model: dir-815 firmware
vendor: d-link model: dir-815

PAN-OS 10.1.3 Known Issues

Trust: 3.5

Fetched: Sept. 1, 2023, 9:17 a.m., Published: Oct. 1, 2003, midnight
 Vulnerabilities: memory leak
Affected productsExternal IDs
vendor: cisco model: series
vendor: cisco model: sd-wan
vendor: cisco model: router
vendor: palo model: networks
vendor: palo model: firewall
vendor: palo model: firewall interface
vendor: palo model: pan-os
vendor: broadcom model: linux
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: palo alto networks model: firewall interface
vendor: palo alto networks model: pan-os
vendor: google model: android

Blog - 2024 Apple Security Research Device Program now accepting applications - Apple Security Research

Trust: 3.0

Fetched: Sept. 1, 2023, 9:17 a.m., Published: Sept. 1, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Cisco Unified Communications Products Privilege Escalation Vulnerability - Cisco

Trust: 5.25

Fetched: Sept. 1, 2023, 9:17 a.m., Published: Aug. 30, 2023, 11:24 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: unified communications

Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities - Cisco

Trust: 5.0

Fetched: Sept. 1, 2023, 9:17 a.m., Published: Aug. 16, 2023, 11:09 a.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: cisco prime infrastructure
vendor: cisco model: prime infrastructure
vendor: cisco model: evolved programmable network manager

CVE-2023-2868: Barracuda and FBI Recommend Replacing Email Security Gateway (ESG) Devices Immediately - Blog | Tenable®

Trust: 5.5

Fetched: Sept. 1, 2023, 9:16 a.m., Published: Aug. 30, 2023, 7:13 p.m.
 Vulnerabilities: command injection, code execution, remote command injection
Affected productsExternal IDs
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

Approximately 2000 Citrix NetScalers backdoored in mass-exploitation campaign - Fox-IT International blog

Trust: 5.5

Fetched: Sept. 1, 2023, 9:16 a.m., Published: Aug. 15, 2023, 1:29 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: citrix model: hypervisor
vendor: citrix model: gateway
vendor: citrix model: netscaler
db: NVD ids: CVE-2023-3519

Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability - Cisco

Trust: 5.0

Fetched: Sept. 1, 2023, 9:12 a.m., Published: Aug. 16, 2023, 11:10 a.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: cisco prime infrastructure
vendor: cisco model: prime infrastructure
vendor: cisco model: evolved programmable network manager

Security Vulnerabilities Newsletter: Top News Rundown (August 2023)

Related entries in the VARIoT vulnerabilities database: VAR-201905-0651, VAR-202203-0005, VAR-202307-0252

Trust: 5.25

Fetched: Sept. 1, 2023, 9:09 a.m., Published: Aug. 1, 2023, midnight
 Vulnerabilities: command injection, buffer overflow, code execution
Affected productsExternal IDs
vendor: cisco model: router
vendor: cisco model: industrial router
db: NVD ids: CVE-2017-18368, CVE-2022-0778, CVE-2023-23902

Cisco Unified Communications Products Privilege Escalation Vulnerability

Trust: 5.25

Fetched: Sept. 1, 2023, 9:07 a.m., Published: Aug. 30, 2023, 3:55 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: unified communications

Security Policies: Protecting Your Computers & Network | Russ Harvey Consulting

Trust: 3.25

Fetched: Aug. 30, 2023, 10:36 a.m., Published: May 30, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone
vendor: zoom model: client
vendor: check point model: zonealarm
vendor: check point model: express
vendor: check point model: check point
vendor: google model: home
vendor: google model: wifi
vendor: google model: google home
vendor: google model: android

CCNA 1 v7 - ITN v7.02 Modules 16-17 Exam Answers 2023 100%

Trust: 4.0

Fetched: Aug. 30, 2023, 10:34 a.m., Published: Aug. 10, 2023, 6:15 p.m.
 Vulnerabilities: default password, sql injection
Affected productsExternal IDs
vendor: cisco model: intrusion prevention system
vendor: cisco model: routers
vendor: cisco model: cisco routers
vendor: cisco model: cisco ios
vendor: cisco model: small business
vendor: cisco model: router
vendor: cisco model: series

35 Cyber Security Vulnerability Statistics, Facts In 2023 - Astra Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506, VAR-202205-1958, VAR-202112-0566

Trust: 3.75

Fetched: Aug. 30, 2023, 10:32 a.m., Published: Feb. 10, 2023, 5:33 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22965, CVE-1999-0517, CVE-2022-30190, CVE-2022-24086, CVE-2021-44228, CVE-2022-3656

SSA-472630

Trust: 4.75

Fetched: Aug. 30, 2023, 10:29 a.m., Published: Aug. 5, 2023, midnight
 Vulnerabilities: privilege management vulnerability, denial of service, sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-37971, CVE-2023-37373, CVE-2023-27411, CVE-2023-37372, CVE-2021-31239