VARIoT latest news about IoT security

Hacking Android, Linux, macOS, iOS, Windows Devices via Bluetooth using a single vulnerability - Cybernoz Trust: 4.0 Fetched: Feb. 16, 2024, 9:26 a.m., Published: Jan. 23, 2024, 7:25 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

oneplus

model:

7 pro

db:

NVD

ids:

CVE-2023-45866, CVE-2024-21306

Outlook's decades-old vulnerability allowed for catastrophic attacks without any user interaction Trust: 3.0 Fetched: Feb. 16, 2024, 9:25 a.m., Published: Feb. 15, 2024, 11:08 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-21413

Urgent patches available for QNAP vulnerabilities, one 0-day • The Register Trust: 5.25 Fetched: Feb. 16, 2024, 9:19 a.m., Published: -	Vulnerabilities: command execution, arbitrary command execution, command injection...

Affected products

External IDs

vendor:	palo alto networks	model:	networks
vendor:	palo	model:	networks

db:

NVD

ids:

CVE-2023-50358, CVE-2023-47218

Cisco Secure Endpoint DoS (cisco-sa-clamav-dos-FTkhqMWZ) - vulnerability database \| Vulners.com Trust: 4.75 Fetched: Feb. 16, 2024, 9:19 a.m., Published: Feb. 14, 2024, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	clamav
vendor:	clamav	model:	clamav

The Top 10 IoT Security Tools \| Expert Insights Trust: 3.25 Fetched: Feb. 16, 2024, 9:18 a.m., Published: Aug. 14, 2023, 9:33 a.m.	Vulnerabilities: -

Affected products	External IDs

Vulnerable Fortinet Devices: Low-hanging Fruit for Threat Actors - Cyble Related entries in the VARIoT vulnerabilities database: VAR-202210-0198, VAR-202212-1132 Trust: 3.5 Fetched: Feb. 16, 2024, 9:17 a.m., Published: Feb. 16, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	trend	model:	security
vendor:	fortigate	model:	fortios

db:

NVD

ids:

CVE-2023-27997, CVE-2022-40684, CVE-2022-42475, CVE-2024-21762

QNAP fixes OS command injection flaws affecting its NAS devices (CVE-2023-47218, CVE-2023-50358) - Help Net Security Trust: 5.5 Fetched: Feb. 16, 2024, 9:10 a.m., Published: Feb. 14, 2024, 10:38 a.m.	Vulnerabilities: command injection, command execution, os command injection...

Affected products

External IDs

vendor:	palo alto networks	model:	networks
vendor:	palo	model:	networks

db:

NVD

ids:

CVE-2023-47565, CVE-2023-50358, CVE-2023-47218

New Vulnerability in QNAP QTS Firmware: CVE-2023-50358 Trust: 4.25 Fetched: Feb. 16, 2024, 9:09 a.m., Published: Feb. 13, 2024, 3 a.m.	Vulnerabilities: command execution, arbitrary command execution, command injection...

Affected products

External IDs

vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	firewall
vendor:	palo	model:	networks
vendor:	palo	model:	firewall
vendor:	qnap	model:	qnap qts
vendor:	qnap	model:	systems nas devices

db:

NVD

ids:

CVE-2023-50358

List of Advisories Trust: 4.25 Fetched: Feb. 14, 2024, 10:15 a.m., Published: Feb. 1, 2024, midnight	Vulnerabilities: code execution

Affected products	External IDs

How Long Does a Smart Home Installation Take? - ByRetreat Trust: 3.5 Fetched: Feb. 14, 2024, 10:14 a.m., Published: Jan. 27, 2024, 11:43 a.m.	Vulnerabilities: default credentials

Affected products	External IDs

What Is the Job Description of a Home Automation Person? - ByRetreat Trust: 3.5 Fetched: Feb. 14, 2024, 10:13 a.m., Published: Jan. 31, 2024, 8:15 a.m.	Vulnerabilities: default credentials

Affected products	External IDs

Apple’s new Stolen Device Protection has a big vulnerability. Here’s how to fix it - BackBox.org News Trust: 3.25 Fetched: Feb. 14, 2024, 10:12 a.m., Published: Jan. 29, 2024, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

iphone

New Fortinet RCE vulnerability potentially under exploitation \| SC Media Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 5.5 Fetched: Feb. 14, 2024, 10:11 a.m., Published: March 15, 2023, 6 p.m.	Vulnerabilities: os command injection, command injection, code execution

Affected products

External IDs

vendor:	fortigate	model:	fortios
vendor:	citrix	model:	gateway

db:

NVD

ids:

CVE-2022-42475, CVE-2024-23108, CVE-2024-21762, CVE-2024-23113, CVE-2023-34992, CVE-2023-27997, CVE-2024-23109

Software Vulnerability - What You Need to Know: HeartBleed, Log4Shell, ProxyNotShell Related entries in the VARIoT vulnerabilities database: VAR-201404-0592, VAR-202112-0566 Trust: 4.5 Fetched: Feb. 14, 2024, 10:11 a.m., Published: Feb. 8, 2024, midnight	Vulnerabilities: cross-site scripting, code execution, authentication bypass...

Affected products

External IDs

db:

NVD

ids:

CVE-2017-0144, CVE-2014-0160, CVE-2021-44228, CVE-2022-41040, CVE-2022-41082

Multiple malware used in attacks exploiting Ivanti VPN flaws Trust: 4.0 Fetched: Feb. 14, 2024, 10:07 a.m., Published: Feb. 1, 2024, 10:53 a.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2024-21888, CVE-2024-21887, CVE-2023-46805, CVE-2024-21893

CVE-2024-20253: Cisco vulnerability allows arbitrary code execution on call center devices \| Carding Forum for Professional Carders Trust: 6.0 Fetched: Feb. 14, 2024, 10:06 a.m., Published: May 14, 2024, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	cisco	model:	unified communications manager im & presence service
vendor:	cisco	model:	virtualized voice browser
vendor:	cisco	model:	unity
vendor:	cisco	model:	unity connection
vendor:	cisco	model:	unified contact center express
vendor:	cisco	model:	unified communications manager
vendor:	cisco	model:	unified communications manager session management edition
vendor:	cisco	model:	unified communications

db:

NVD

ids:

CVE-2024-20253

Unveiling Atlassian Confluence Vulnerability CVE-2023-22527: Understanding and Mitigating Remote Code Execution Risks Trust: 5.0 Fetched: Feb. 14, 2024, 10:04 a.m., Published: Feb. 7, 2024, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2023-22527

vulnerability management Tender News \| Latest vulnerability management Tender Notice Trust: 3.0 Fetched: Feb. 14, 2024, 10:04 a.m., Published: Jan. 2, 2024, midnight	Vulnerabilities: configuration vulnerability

Affected products	External IDs

Apple neglects to patch multiple critical vulnerabilities in macOS - The Mac Security Blog Related entries in the VARIoT vulnerabilities database: VAR-202208-0404, VAR-202310-0175 Trust: 4.5 Fetched: Feb. 14, 2024, 10:03 a.m., Published: Jan. 22, 2024, 8:01 a.m.	Vulnerabilities: authentication bypass, use after free, authentication vulnerability

Affected products

External IDs

vendor:

apple

model:

macos

db:

NVD

ids:

CVE-2022-37434, CVE-2023-44487, CVE-2021-41581, CVE-2022-48437, CVE-2023-38545, CVE-2023-35784, CVE-2021-46880

24-008 (February 13, 2024) - Threat Encyclopedia Trust: 3.75 Fetched: Feb. 14, 2024, 10:02 a.m., Published: Feb. 13, 2024, midnight	Vulnerabilities: request forgery, security feature bypass, code execution...

Affected products

External IDs

db:

NVD

ids:

CVE-2023-31102, CVE-2023-46262, CVE-2024-21412, CVE-2023-42000, CVE-2023-41998, CVE-2023-48646

VARIoT news about IoT security