Sign-up

VARIoT news about IoT security

Update Your Android Device Immediately! Google Addresses Two Actively Exploited Vulnerabilities.

Related entries in the VARIoT vulnerabilities database: VAR-202312-0888

Trust: 3.75

Fetched: Oct. 6, 2023, 9:33 a.m., Published: Oct. 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: note
vendor: essential model: phone
vendor: huawei model: huawei
vendor: google model: android
db: NVD ids: CVE-2023-4863, CVE-2023-4211, CVE-2023-33106, CVE-2023-33107, CVE-2023-33063, CVE-2022-22071

Android Security Bulletin-October 2023 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202310-2426, VAR-202310-2020, VAR-202310-2659, VAR-202308-3352

Trust: 4.25

Fetched: Oct. 6, 2023, 9:32 a.m., Published: Oct. 6, 2023, midnight
 Vulnerabilities: information disclosure, code execution, denial of service
Affected productsExternal IDs
vendor: samsung model: note
vendor: samsung model: notes
vendor: samsung model: mobile
vendor: motorola model: motorola
vendor: motorola model: android
vendor: huawei model: huawei
vendor: google model: pixel
vendor: google model: android
vendor: google model: wifi
db: NVD ids: CVE-2023-32819, CVE-2023-40137, CVE-2023-24849, CVE-2023-40121, CVE-2023-33200, CVE-2023-21266, CVE-2023-40131, CVE-2023-40125, CVE-2023-40130, CVE-2023-40123, CVE-2023-21291, CVE-2023-21252, CVE-2021-44828, CVE-2023-40139, CVE-2023-28540, CVE-2023-33028, CVE-2023-24844, CVE-2023-40117, CVE-2023-24850, CVE-2023-4863, CVE-2023-22385, CVE-2023-24853, CVE-2023-40127, CVE-2023-40134, CVE-2023-24843, CVE-2023-24848, CVE-2023-24847, CVE-2023-32820, CVE-2023-40135, CVE-2023-21673, CVE-2023-4211, CVE-2023-24855, CVE-2023-33027, CVE-2023-40136, CVE-2023-40140, CVE-2023-40128, CVE-2023-40120, CVE-2023-33026, CVE-2023-40116, CVE-2023-34970, CVE-2023-20819, CVE-2023-21244, CVE-2023-40638, CVE-2022-28348, CVE-2023-40129, CVE-2023-40138, CVE-2023-40133, CVE-2023-21253

Healthcare IoT security risks and what to do about them | TechTarget

Trust: 3.25

Fetched: Oct. 6, 2023, 9:32 a.m., Published: Oct. 6, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: home

Vulnerability in TikTok Android app could lead to one-click account hijacking | Microsoft Security Blog

Trust: 4.75

Fetched: Oct. 6, 2023, 9:31 a.m., Published: Aug. 31, 2022, 4 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2022-28799

A Vulnerability in Ivanti Endpoint Manager Mobile Could Allow for Arbitrary Code Execution

Trust: 3.25

Fetched: Oct. 6, 2023, 9:31 a.m., Published: July 28, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Cybersecurity For Medical Devices and Hospital Networks Guide

Trust: 3.5

Fetched: Oct. 6, 2023, 9:29 a.m., Published: Sept. 15, 2023, 3:44 p.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs

TLStorm | Armis

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0235, VAR-202108-1890, VAR-202203-0237

Trust: 4.25

Fetched: Oct. 6, 2023, 9:28 a.m., Published: Aug. 22, 2023, 1:49 p.m.
 Vulnerabilities: buffer overflow, authentication bypass, code execution...
Affected productsExternal IDs
vendor: schneider model: monitor
vendor: schneider electric model: monitor
db: NVD ids: CVE-2022-22806, CVE-2022-0715, CVE-2021-37160, CVE-2022-22805

Is cybersecurity keeping pace with evolving IoT threats? | World Economic Forum

Trust: 4.5

Fetched: Oct. 6, 2023, 9:28 a.m., Published: Aug. 10, 2021, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: roku model: roku

3 BYOD security risks and how to prevent them | TechTarget

Trust: 4.5

Fetched: Oct. 6, 2023, 9:27 a.m., Published: Oct. 6, 2023, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
vendor: trend model: security
vendor: google model: home
vendor: google model: android

DSA-2021-088: Dell Client Platform Security Update for an Insufficient Access Control Vulnerability in the Dell dbutil Driver | Dell US

Related entries in the VARIoT vulnerabilities database: VAR-202105-0569

Trust: 4.25

Fetched: Oct. 6, 2023, 9:25 a.m., Published: May 6, 2023, midnight
 Vulnerabilities: information disclosure, denial of service, access control vulnerability
Affected productsExternal IDs
vendor: dell model: inspiron 3581
vendor: dell model: latitude
vendor: dell model: latitude 5488
vendor: dell model: latitude 3180
vendor: dell model: vostro 3660
vendor: dell model: latitude 7480
vendor: dell model: latitude 3490
vendor: dell model: inspiron 3668
vendor: dell model: vostro 3470
vendor: dell model: latitude 3590
vendor: dell model: latitude e5420
vendor: dell model: precision 5820
vendor: dell model: latitude e5470
vendor: dell model: optiplex 7050
vendor: dell model: embedded box pc
vendor: dell model: latitude e7270
vendor: dell model: precision 5530 2-in-1
vendor: dell model: inspiron 7586
vendor: dell model: inspiron 7786
vendor: dell model: latitude 5550
vendor: dell model: precision 7820
vendor: dell model: optiplex xe3
vendor: dell model: precision 5510
vendor: dell model: optiplex 7040
vendor: dell model: inspiron 7359
vendor: dell model: latitude e7450
vendor: dell model: g3 3779
vendor: dell model: latitude 3470
vendor: dell model: latitude e7470
vendor: dell model: optiplex
vendor: dell model: optiplex 3050
vendor: dell model: precision 7720
vendor: dell model: inspiron 7580
vendor: dell model: latitude 5450
vendor: dell model: optiplex 3040
vendor: dell model: inspiron 7368
vendor: dell model: vostro 3268
vendor: dell model: latitude 3450
vendor: dell model: precision 3520
vendor: dell model: latitude 3380
vendor: dell model: chengming
vendor: dell model: inspiron 5570
vendor: dell model: latitude 5285
vendor: dell model: latitude 7275
vendor: dell model: latitude 7290
vendor: dell model: latitude 3550
vendor: dell model: precision t5810
vendor: dell model: vostro 3580
vendor: dell model: vostro 3480
vendor: dell model: latitude 5480
vendor: dell model: latitude 7280
vendor: dell model: latitude 7390
vendor: dell model: optiplex 990
vendor: dell model: precision 7710
vendor: dell model: latitude e6320
vendor: dell model: xps 9550
vendor: dell model: inspiron 7386
vendor: dell model: inspiron 3781
vendor: dell model: latitude e6220
vendor: dell model: vostro 3070
vendor: dell model: vostro 3668
vendor: dell model: inspiron 3584
vendor: dell model: embedded box pc 5000
vendor: dell model: vostro 5581
vendor: dell model: latitude 3190
vendor: dell model: vostro 3581
vendor: dell model: latitude xt3
vendor: dell model: latitude 5250
vendor: dell model: g7 7590
vendor: dell model: latitude 5290 2-in-1
vendor: dell model: optiplex 7060
vendor: dell model: vostro 3667
vendor: dell model: inspiron 3268
vendor: dell model: latitude 5175
vendor: dell model: inspiron 5480
vendor: dell model: latitude 7350
vendor: dell model: optiplex 5050
vendor: dell model: inspiron 3780
vendor: dell model: precision 3430
vendor: dell model: latitude 3570
vendor: dell model: precision 3530
vendor: dell model: g5 5590
vendor: dell model: latitude 3580
vendor: dell model: precision 3620
vendor: dell model: inspiron 5770
vendor: dell model: latitude 7380
vendor: dell model: optiplex 3046
vendor: dell model: inspiron 5482
vendor: dell model: g7 7790
vendor: dell model: latitude 5491
vendor: dell model: latitude 3480
vendor: dell model: latitude 5580
vendor: dell model: g3 3579
vendor: dell model: precision 7510
vendor: dell model: latitude 5288
vendor: dell model: latitude 5590
vendor: dell model: precision 7530
vendor: dell model: latitude 7285
vendor: dell model: inspiron 3583
vendor: dell model: precision 3630
vendor: dell model: g5 5587
vendor: dell model: precision 5520
vendor: dell model: g7 7588
vendor: dell model: optiplex 3050 aio
vendor: dell model: precision 5720 aio
vendor: dell model: latitude 3560
vendor: dell model: latitude e7250
vendor: dell model: wyse 5070
vendor: dell model: precision t7910
vendor: dell model: latitude 7490
vendor: dell model: precision 7520
vendor: dell model: vostro 3669
vendor: dell model: inspiron 3481
vendor: dell model: latitude 3150
vendor: dell model: optiplex 7760 aio
vendor: dell model: inspiron 3480
vendor: dell model: latitude 3160
vendor: dell model: latitude 3189
vendor: dell model: latitude 7389
vendor: dell model: vostro 3583
vendor: dell model: inspiron 5580
vendor: dell model: chengming 3977
vendor: dell model: latitude 5591
vendor: dell model: optiplex 5060
vendor: dell model: vostro 3267
vendor: dell model: bios
vendor: dell model: vostro 3584
vendor: dell model: optiplex 790
vendor: dell model: precision 3930
vendor: dell model: latitude 5280
vendor: dell model: latitude 7390 2-in-1
vendor: dell model: inspiron 7472
vendor: dell model: latitude 3390
vendor: dell model: chengming 3967
vendor: dell model: chengming 3980
vendor: dell model: precision 7920
vendor: dell model: inspiron 3470
vendor: dell model: latitude e5570
vendor: dell model: wyse 7040
vendor: dell model: xps 8900
vendor: dell model: latitude 3460
vendor: dell model: latitude 5420
vendor: dell model: latitude e5270
vendor: dell model: xps 9350
vendor: dell model: latitude 5289
vendor: dell model: latitude 7370
vendor: dell model: precision 3510
vendor: dell model: precision t7810
vendor: dell model: vostro 3670
vendor: dell model: inspiron 3580
vendor: dell model: vostro 5481
vendor: dell model: precision 5530
vendor: dell model: latitude 5179
vendor: dell model: inspiron 5481
vendor: dell model: inspiron 7380
vendor: dell model: optiplex 7440 aio
vendor: dell model: optiplex 390
vendor: dell model: latitude 5490
vendor: dell model: optiplex 5040
vendor: dell model: latitude 5290
vendor: dell model: precision 3420
vendor: dell model: latitude 3350
vendor: dell model: optiplex 3060
db: NVD ids: CVE-2021-21551

Cyber-physical systems security: Limitations, issues and future trends - PMC

Trust: 4.0

Fetched: Oct. 6, 2023, 9:21 a.m., Published: Sept. 6, 2020, midnight
 Vulnerabilities: code injection, privilege escalation, denial of service
Affected productsExternal IDs
vendor: siemens model: navigator
vendor: siemens model: iec 61850
vendor: siemens model: simatic
vendor: google model: android
vendor: wso2 model: complex event processor
vendor: wso2 model: wso2 complex event processor
vendor: trend model: security

11 top cloud security threats | CSO Online

Trust: 3.75

Fetched: Oct. 6, 2023, 9:20 a.m., Published: July 4, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: trend model: security

Keeping the gate locked on your IoT devices: Vulnerabilities found on Amazon's Alexa - Check Point Research

Trust: 4.25

Fetched: Oct. 6, 2023, 9:20 a.m., Published: Aug. 13, 2020, 9:59 a.m.
 Vulnerabilities: code execution, code injection
Affected productsExternal IDs
vendor: check point model: check point

Free Cybersecurity Services and Tools | CISA

Trust: 3.25

Fetched: Oct. 6, 2023, 9:12 a.m., Published: Oct. 3, 2023, midnight
 Vulnerabilities: code execution, default credentials, denial of service...
Affected productsExternal IDs
vendor: paloaltonetworks model: firewall
vendor: paloaltonetworks model: networks
vendor: clamav model: clamav
vendor: palo model: firewall
vendor: palo model: networks
vendor: trend model: security
vendor: trend model: antivirus
vendor: trend model: internet security
vendor: google model: home
vendor: google model: android
vendor: cisco model: clamav
vendor: cisco model: guard
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks

Multiple Cisco Unified Communications Products Unauthenticated API High CPU Utilization Denial of Service Vulnerability - Cisco

Trust: 4.0

Fetched: Oct. 6, 2023, 9:10 a.m., Published: Oct. 4, 2023, 11:09 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: prime collaboration
vendor: cisco model: unity connection
vendor: cisco model: emergency responder
vendor: cisco model: unity
vendor: cisco model: prime collaboration deployment
vendor: cisco model: unified communications

Google Chrome 117 Vulnerability Audit - Lansweeper

Trust: 4.5

Fetched: Oct. 4, 2023, 10:41 a.m., Published: -
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2023-5217

IASC | Design the IoT Botnet Defense Process for Cybersecurity in Smart City

Trust: 3.75

Fetched: Oct. 4, 2023, 10:40 a.m., Published: Sept. 11, 2023, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs

Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication

Trust: 5.75

Fetched: Oct. 4, 2023, 10:39 a.m., Published: Sept. 6, 2023, 4:46 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: snort model: snort
vendor: snort.org model: snort
db: NVD ids: CVE-2023-34317, CVE-2023-34998, CVE-2023-32271, CVE-2023-32615, CVE-2023-31242, CVE-2023-34994, CVE-2023-34353, CVE-2023-35124

IoT Security in Smart Homes: Balancing Convenience and Privacy - Decybr

Trust: 4.0

Fetched: Oct. 4, 2023, 10:39 a.m., Published: Dec. 4, 2023, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Arm Patches Major Vulnerabilities in Android Device GPU Drivers By Investing.com

Trust: 3.75

Fetched: Oct. 4, 2023, 10:37 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: xiaomi model: redmi
vendor: motorola model: android
vendor: motorola model: motorola
vendor: samsung model: galaxy
db: NVD ids: CVE-2023-33200, CVE-2022-22706, CVE-2023-4211, CVE-2023-26083, CVE-2023-34970