Sign-up

VARIoT news about IoT security

Cisco Identity Services Engine Device Credential Information Disclosure Vulnerability

Trust: 5.0

Fetched: Aug. 18, 2023, 9:12 a.m., Published: Aug. 16, 2023, 3:59 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine

ClamAV AutoIt Module Denial of Service Vulnerability

Trust: 4.75

Fetched: Aug. 18, 2023, 9:12 a.m., Published: Aug. 16, 2023, 3:59 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: clamav
vendor: clamav model: clamav

ClamAV AutoIt Module Denial of Service Vulnerability - Cisco

Trust: 4.75

Fetched: Aug. 18, 2023, 9:11 a.m., Published: Aug. 16, 2023, 11:10 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: clamav
vendor: clamav model: clamav

DSA-2023-270: Dell Wyse Device Agent Security Update for a Zlib Vulnerability | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202203-1690

Trust: 3.25

Fetched: Aug. 16, 2023, 9:12 a.m., Published: June 14, 2007, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2018-25032

A Comprehensive Guide to Medical Device Vulnerability Management

Trust: 3.0

Fetched: Aug. 16, 2023, 9:12 a.m., Published: Aug. 4, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Ford says it’s safe to drive the cars with a WiFi vulnerability

Trust: 3.75

Fetched: Aug. 16, 2023, 9:12 a.m., Published: Aug. 15, 2023, 8:52 a.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2023-29468

Cybersecurity Analysis of Wearable Devices: Smartwatches Passive Attack - PMC

Trust: 4.25

Fetched: Aug. 15, 2023, 9:24 a.m., Published: June 15, 2023, midnight
 Vulnerabilities: default credentials, denial of service
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: mobile
vendor: samsung model: samsung galaxy
vendor: samsung model: note
vendor: essential model: phone
vendor: apple model: watch
vendor: huawei model: huawei

Researchers uncover data center risks from CyberPower, Dataprobe products | SC Media

Trust: 4.25

Fetched: Aug. 15, 2023, 9:23 a.m., Published: Aug. 14, 2023, 7:47 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs

Mass Exploitation of MOVEit Transfer Critical Vulnerability - Forescout

Trust: 4.75

Fetched: Aug. 15, 2023, 9:23 a.m., Published: June 13, 2023, 5 p.m.
 Vulnerabilities: sql injection, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2023-34362

CVE-2023-34034 Spring WebFlux Security Bypass Write-up & PoC

Trust: 3.75

Fetched: Aug. 15, 2023, 9:20 a.m., Published: Aug. 8, 2023, 2:58 p.m.
 Vulnerabilities: authentication bypass, security bypass, access control vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2023-34034

Major vulnerabilities discovered in data center solutions - Help Net Security

Trust: 4.0

Fetched: Aug. 15, 2023, 9:19 a.m., Published: Aug. 14, 2023, 10:02 a.m.
 Vulnerabilities: authentication bypass, code injection, os command injection...
Affected productsExternal IDs
db: NVD ids: CVE-2023-3262, CVE-2023-3260, CVE-2023-3259, CVE-2023-3267, CVE-2023-3264, CVE-2023-3266, CVE-2023-3263, CVE-2023-3261, CVE-2023-3265

Widespread file exposure possible with Western Digital, Synology NAS flaws | SC Media

Trust: 4.0

Fetched: Aug. 15, 2023, 9:19 a.m., Published: Aug. 10, 2023, 4:26 p.m.
 Vulnerabilities: device impersonation, code execution
Affected productsExternal IDs

Microsoft reveals severe vulnerabilities in CODESYS industrial software

Trust: 4.5

Fetched: Aug. 15, 2023, 9:18 a.m., Published: Aug. 14, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: codesys model: codesys
vendor: codesys model: development system

Nest Security Bulletin-June 2023 - Product Documentation Help

Trust: 3.0

Fetched: Aug. 15, 2023, 9:18 a.m., Published: June 15, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: wifi

Multiple Vulnerabilities in Hitachi Device Manager: Software Vulnerability Information: Software: Hitachi

Trust: 3.0

Fetched: Aug. 15, 2023, 9:17 a.m., Published: Aug. 9, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hitachi model: device manager
vendor: hitachi model: hitachi device manager

Microsoft finds vulnerabilities it says could be used to shut down power plants | Ars Technica

Trust: 5.5

Fetched: Aug. 15, 2023, 9:17 a.m., Published: Aug. 11, 2023, 8:42 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: codesys model: codesys
vendor: codesys model: control
vendor: wago model: pfc200
vendor: wago model: wago pfc200
db: NVD ids: CVE-2019-9013

Downfall Vulnerability Affects Millions of Intel CPUs With Strong Data Leak Impact

Trust: 4.5

Fetched: Aug. 13, 2023, 9:27 a.m., Published: Aug. 11, 2023, 4:58 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2022-40982

Zyxel’s guidance for the recent attacks on the ZyWALL devices | Zyxel Networks

Related entries in the VARIoT vulnerabilities database: VAR-202304-2073, VAR-202305-2121, VAR-202305-2285

Trust: 5.5

Fetched: Aug. 13, 2023, 9:26 a.m., Published: Aug. 4, 2023, midnight
 Vulnerabilities: code execution, buffer overflow, denial of service
Affected productsExternal IDs
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-28771, CVE-2023-33009, CVE-2023-33010

Vulnerability Spotlight - Cisco Talos Blog

Trust: 3.25

Fetched: Aug. 13, 2023, 9:25 a.m., Published: Aug. 2, 2023, 8:08 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-1424

Cisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability

Trust: 4.75

Fetched: Aug. 13, 2023, 9:25 a.m., Published: May 17, 2023, 3:53 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: mesh model: mesh
vendor: cisco model: access points