Sign-up

VARIoT news about IoT security

The devices that pose a threat to critical infrastructure

Trust: 3.25

Fetched: June 13, 2023, 9:03 a.m., Published: June 12, 2023, 1:02 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

Fortinet issues patches for critical RCE in Fortigate SSL-VPN appliances | SC Media

Trust: 4.75

Fetched: June 13, 2023, 9:02 a.m., Published: July 20, 2022, 6 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-27997, CVE-2023-27997

Fortinet fixes critical RCE flaw in Fortigate SSL-VPN devices, patch now

Trust: 5.75

Fetched: June 13, 2023, 9:02 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-27997, CVE-2023-27997

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability | Rapid7 Blog

Trust: 5.75

Fetched: June 13, 2023, 9:02 a.m., Published: June 12, 2023, 6:16 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2023-27997

Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities

Trust: 4.0

Fetched: June 11, 2023, 9:12 a.m., Published: June 7, 2023, 3:56 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco telepresence video communication server
vendor: cisco model: telepresence video communication server
vendor: cisco model: series
vendor: cisco model: cisco telepresence
vendor: cisco model: cisco expressway
vendor: cisco model: expressway series
vendor: cisco model: telepresence
vendor: cisco model: expressway

How to detect CVE-2021-22986 RCE with Pentest-Tools.com | Pentest-Tools.com

Related entries in the VARIoT vulnerabilities database: VAR-202103-0654

Trust: 3.75

Fetched: June 11, 2023, 9:11 a.m., Published: June 9, 2023, midnight
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-22986, CVE-2020-28188

Immediate replacements urged for compromised Barracuda ESG appliances | SC Media

Trust: 3.25

Fetched: June 11, 2023, 9:11 a.m., Published: July 20, 2022, 6 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda model: barracuda

Android's June 2023 Security Update Patches Exploited Arm GPU Vulnerability - SecurityWeek

Trust: 5.75

Fetched: June 11, 2023, 9:11 a.m., Published: June 8, 2023, 5:02 a.m.
 Vulnerabilities: code execution, information disclosure, privilege escalation
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-0266, CVE-2023-21130, CVE-2023-21127, CVE-2023-21108, CVE-2022-22706

Vulnerability Assessment & Mitigation from Skillsoft | NICCS

Trust: 3.0

Fetched: June 11, 2023, 9:09 a.m., Published: -
 Vulnerabilities: request forgery, cross-site scripting, cross-site request forgery...
Affected productsExternal IDs

How to conduct a full network vulnerability assessment | Pentest-Tools.com

Trust: 3.25

Fetched: June 11, 2023, 9:08 a.m., Published: June 3, 2023, midnight
 Vulnerabilities: brute force attack, code execution, denial of service...
Affected productsExternal IDs
vendor: cisco model: cisco routers
vendor: cisco model: routers
vendor: cisco model: intrusion prevention system
vendor: cisco model: router

Barracuda to customers: 'immediately' replace buggy devices • The Register

Trust: 4.5

Fetched: June 11, 2023, 9:07 a.m., Published: -
 Vulnerabilities: command injection, remote command injection
Affected productsExternal IDs
vendor: barracuda networks model: spam firewall
vendor: barracuda networks model: barracuda
vendor: barracuda model: spam firewall
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

Barracuda: Replace vulnerable ESG devices 'immediately' | TechTarget

Trust: 4.25

Fetched: June 11, 2023, 9:06 a.m., Published: June 8, 2023, midnight
 Vulnerabilities: command injection, remote command injection
Affected productsExternal IDs
vendor: barracuda networks model: spam firewall
vendor: barracuda networks model: barracuda
vendor: barracuda model: spam firewall
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

Barracuda Urges Replacing - Not Patching - Its Email Security Gateways - Krebs on Security

Trust: 3.5

Fetched: June 11, 2023, 9:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda networks model: barracuda
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

Barracuda: Customers Must Replace Impacted Email Security Devices ‘Immediately’ | CRN

Trust: 3.0

Fetched: June 9, 2023, 9:09 a.m., Published: June 8, 2023, 12:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda model: barracuda

What's new in Microsoft Defender for IoT - Microsoft Defender for IoT | Microsoft Learn

Trust: 3.5

Fetched: June 9, 2023, 9:07 a.m., Published: May 17, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo model: firewall
vendor: palo model: networks

Top NAS devices are being targeted by this dangerous malware | TechRadar

Trust: 5.75

Fetched: June 9, 2023, 9:06 a.m., Published: June 5, 2023, 11 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: zyxel model: nas542
vendor: zyxel model: nas326
vendor: zyxel model: nas540
db: NVD ids: CVE-2023-27988

CyRC Vulnerability Advisory: CVE-2023-32353, Apple iTunes local privilege escalation on Windows | Synopsys

Trust: 6.0

Fetched: June 7, 2023, 9:03 a.m., Published: June 1, 2023, noon
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: apple model: itunes
db: NVD ids: CVE-2023-32353

Widespread Exploitation of Zyxel Network Devices | Rapid7 Blog

Related entries in the VARIoT vulnerabilities database: VAR-202304-2073, VAR-202305-2121, VAR-202305-2285

Trust: 4.75

Fetched: June 7, 2023, 9:03 a.m., Published: May 31, 2023, 2:11 p.m.
 Vulnerabilities: command injection, buffer overflow
Affected productsExternal IDs
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-28771, CVE-2023-33009, CVE-2023-33010

Critical Vulnerabilities Detected In D-Link Network Device Management Platform

Trust: 4.5

Fetched: June 7, 2023, 9:02 a.m., Published: June 1, 2023, 6:23 a.m.
 Vulnerabilities: file creation vulnerability, code execution, authentication bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2023-32168, CVE-2023-32169, CVE-2023-32167, CVE-2023-32164, CVE-2023-32165, CVE-2023-32166

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution

Trust: 5.25

Fetched: June 7, 2023, 9:02 a.m., Published: June 5, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android