Sign-up

VARIoT news about IoT security

Gadgets: A benchmark test uncovered some critical vulnerabilities in thousands of QNAP devices

Trust: 3.0

Fetched: April 14, 2023, 9:22 a.m., Published: April 5, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-27597, CVE-2022-27598

Android April 2023 Security Updates fix several critical vulnerabilities - gHacks Tech News

Trust: 4.5

Fetched: April 14, 2023, 9:20 a.m., Published: April 4, 2023, 4:42 a.m.
 Vulnerabilities: code execution, denial of service, information disclosure
Affected productsExternal IDs
vendor: google model: android
vendor: google model: wifi

Stay Safe from Silent Cyberattacks on IoT Devices | S & O Computers, LLC

Trust: 3.0

Fetched: April 14, 2023, 9:20 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs

QuaDream Spyware Targeted iPhones with Malicious Calendar Invites • iPhone in Canada Blog

Trust: 3.0

Fetched: April 14, 2023, 9:19 a.m., Published: April 11, 2023, 9:44 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

CISA Issues Warnings on Seven New Exploited Vulnerabilities -- Campus Technology

Trust: 5.5

Fetched: April 14, 2023, 9:19 a.m., Published: April 10, 2023, midnight
 Vulnerabilities: code execution, memory leak, information disclosure...
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2023-28205, CVE-2023-28206, CVE-2021-27877, CVE-2023-26083, CVE-2021-27876, CVE-2021-27878, CVE-2019-1388

CISA Warns: Patch Apple Zero-Day Vulnerabilities Until May

Trust: 5.75

Fetched: April 14, 2023, 9:18 a.m., Published: April 11, 2023, 10:29 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: ipod touch
vendor: apple model: macos
db: NVD ids: CVE-2023-28205, CVE-2023-28206

Protect Your Devices from Zero-Day Vulnerabilities: Apple’s Latest Security Update Explained | TAC Security

Trust: 4.5

Fetched: April 14, 2023, 9:18 a.m., Published: April 12, 2023, 10:05 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: macos
vendor: apple model: safari
db: NVD ids: CVE-2023-28205, CVE-2023-28206

Apple Rolls Out Zero-Day Patches to Older iOS, macOS Devices - SecurityWeek

Trust: 5.75

Fetched: April 14, 2023, 9:17 a.m., Published: April 11, 2023, 11:29 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2023-28205, CVE-2023-28206

Microsoft April Patch Tuesday | Spiceworks - Spiceworks

Trust: 4.25

Fetched: April 14, 2023, 9:17 a.m., Published: -
 Vulnerabilities: code execution, information disclosure, feature bypass...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2023-28252, CVE-2023-28250, CVE-2023-21552, CVE-2023-23376, CVE-2023-21554

Cisco Patches High-Severity Vulnerabilities in IOS Software - SecurityWeek

Trust: 5.75

Fetched: April 14, 2023, 9:17 a.m., Published: March 23, 2023, 3:12 p.m.
 Vulnerabilities: privilege escalation, path traversal
Affected productsExternal IDs
vendor: cisco model: iox application
vendor: cisco model: ios software
vendor: cisco model: ip phones
vendor: cisco model: sd-wan
vendor: cisco model: wireless lan controllers
vendor: cisco model: sd-wan vmanage
vendor: cisco model: ios xe
vendor: cisco model: dna center
vendor: cisco model: sd-wan vmanage software
vendor: cisco model: routers
vendor: cisco model: catalyst
vendor: cisco model: wireless access point
vendor: cisco model: ios xe software
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower
vendor: cisco model: series switches
vendor: cisco model: adaptive security appliance
vendor: cisco model: series
vendor: cisco model: ios xe sd-wan software
db: NVD ids: CVE-2023-20080, CVE-2023-20027, CVE-2023-20067, CVE-2023-20035, CVE-2023-20072, CVE-2023-20065

Android phones vulnerable to remote hacking - update right now | Tom's Guide

Trust: 5.5

Fetched: April 14, 2023, 9:15 a.m., Published: April 6, 2023, 2:52 p.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: samsung model: android phone
vendor: google model: android
vendor: oneplus model: one
vendor: motorola model: motorola
vendor: motorola model: android
vendor: essential model: phone
db: NVD ids: CVE-2023-21096, CVE-2023-21085, CVE-2022-38181

Siemens SCALANCE X-200IRT Devices | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202304-0694

Trust: 3.75

Fetched: April 14, 2023, 9:15 a.m., Published: Jan. 10, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: scalance x202-2irt
vendor: siemens model: scalance xf202-2p irt
vendor: siemens model: scalance xf204irt
vendor: siemens model: scalance x204irt
vendor: siemens model: scalance xf204
vendor: siemens model: scalance x201-3p irt
vendor: siemens model: scalance xf204-2ba irt
vendor: siemens model: scalance x202-2p irt pro
vendor: siemens model: scalance x200
vendor: siemens model: scalance xf201-3p irt
vendor: siemens model: scalance
vendor: siemens model: scalance x-200irt
vendor: siemens model: scalance x201-3p irt pro
vendor: siemens model: scalance x200-4p irt
vendor: siemens model: scalance x202-2p irt
db: NVD ids: CVE-2023-29054

Cisco Secure Network Analytics Remote Code Execution Vulnerability

Trust: 4.0

Fetched: April 14, 2023, 9:15 a.m., Published: April 5, 2023, 3:47 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Siemens SIPROTEC 5 Devices | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202304-0737

Trust: 3.5

Fetched: April 14, 2023, 9:14 a.m., Published: April 5, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: siprotec 5
vendor: siemens model: cp200
vendor: siemens model: siprotec
vendor: siemens model: cp100
vendor: siemens model: cp300
db: NVD ids: CVE-2023-28766

DSA-2023-074: Dell Trusted Device Agent Security Update for an Improper Installation Permissions Vulnerability | Dell Polska

Trust: 3.0

Fetched: April 14, 2023, 9:14 a.m., Published: May 3, 2000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-25542

Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP (DHCPv6) Client Denial of Service Vulnerability

Trust: 4.0

Fetched: April 14, 2023, 9:13 a.m., Published: March 22, 2023, 11:33 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios software
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa software
vendor: cisco model: ios xe
vendor: cisco model: adaptive security appliance software
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower
vendor: cisco model: ios xe software
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower threat defense software
vendor: cisco model: cisco ios
vendor: cisco model: cisco adaptive security appliance software

Application scans vulnerability on Android devices - GameCurse

Trust: 3.25

Fetched: April 12, 2023, 9:32 a.m., Published: April 12, 2023, 7:54 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

OESIS Framework April 04, 2023 Release - OPSWAT

Trust: 3.75

Fetched: April 12, 2023, 9:31 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: jiangmin model: antivirus
vendor: jiangmin model: jiangmin
vendor: jiangmin model: jiangmin antivirus
db: NVD ids: CVE-2023-1645, CVE-2023-1630, CVE-2023-1642, CVE-2019-18425, CVE-2023-20056, CVE-2023-1638, CVE-2023-1639, CVE-2023-1631, CVE-2023-1544, CVE-2023-1641, CVE-2019-18424, CVE-2019-18423, CVE-2022-48426, CVE-2023-1644, CVE-2023-1628, CVE-2019-18421, CVE-2023-1629, CVE-2023-1640, CVE-2023-24094, CVE-2023-1643, CVE-2023-1646

Android April 2023 Security Updates fix several critical vulnerabilities - gHacks Tech News

Trust: 4.5

Fetched: April 12, 2023, 9:31 a.m., Published: April 4, 2023, 4:42 a.m.
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs
vendor: google model: android
vendor: google model: wifi

Actors, Threats and Vulnerabilities 3 April to 9 April 2023 - HiveForce Labs Threat Digest

Trust: 4.0

Fetched: April 12, 2023, 9:26 a.m., Published: April 11, 2023, 11:16 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs