Sign-up

VARIoT news about IoT security

The Five Stages of Vulnerability Management | Tripwire

Trust: 3.0

Fetched: Sept. 5, 2023, 9:15 a.m., Published: Aug. 14, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: tripwire model: ip360

FBI confirms Barracuda patch is not effective for exploited ESG appliances

Trust: 4.5

Fetched: Sept. 5, 2023, 9:15 a.m., Published: Aug. 29, 2023, 1:22 p.m.
 Vulnerabilities: remote command injection, command injection
Affected productsExternal IDs
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

The Hidden Dangers of Service Principal Names (SPNs)

Trust: 3.75

Fetched: Sept. 5, 2023, 9:14 a.m., Published: Aug. 28, 2023, 7:36 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Cisco Umbrella Virtual Appliance Undocumented Support Tunnel Vulnerability - Cisco

Trust: 3.0

Fetched: Sept. 5, 2023, 9:10 a.m., Published: Aug. 16, 2023, 11:09 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: umbrella virtual appliance
vendor: cisco model: umbrella
vendor: cisco model: cisco umbrella virtual appliance

Blog - Bright Security

Trust: 3.0

Fetched: Sept. 5, 2023, 9:09 a.m., Published: Jan. 22, 2023, 10:09 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs

Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation Vulnerability - Cisco

Trust: 4.25

Fetched: Sept. 5, 2023, 9:09 a.m., Published: Aug. 18, 2023, 6:09 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Apple opens annual applications for free hackable iPhones • The Register

Trust: 4.5

Fetched: Sept. 5, 2023, 9:08 a.m., Published: -
 Vulnerabilities: cross-site scripting, authentication bypass
Affected productsExternal IDs
vendor: apple model: iphone
db: NVD ids: CVE-2023-4296

Qualys Top 20 Most Exploited Vulnerabilities | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-201409-1156, VAR-201906-0815, VAR-202008-0248, VAR-201303-0226, VAR-202112-0566, VAR-201206-0059

Trust: 5.25

Fetched: Sept. 5, 2023, 9:06 a.m., Published: Sept. 4, 2023, 2 p.m.
 Vulnerabilities: path traversal, directory traversal, memory corruption...
Affected productsExternal IDs
vendor: pulse model: secure pulse connect secure
vendor: fortigate model: fortios
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: apple model: mac os
vendor: pulse secure model: connect secure
vendor: pulse secure model: pulse connect secure
db: NVD ids: CVE-2014-6271, CVE-2018-13379, CVE-2017-0145, CVE-2017-0143, CVE-2019-11510, CVE-2017-0144, CVE-2020-1472, CVE-2013-0074, CVE-2021-34523, CVE-2021-34473, CVE-2021-44228, CVE-2012-0507, CVE-2017-0199, CVE-2012-0158, CVE-2018-8174, CVE-2021-26084, CVE-2017-8570, CVE-2017-11882, CVE-2019-19781, CVE-2021-31207, CVE-2019-2725, CVE-2012-1723, CVE-2018-0802, CVE-2021-26855

9 Best Free and Open Source Patch Management Software

Trust: 3.5

Fetched: Sept. 3, 2023, 9:21 a.m., Published: Sept. 3, 2023, midnight
 Vulnerabilities: system crash
Affected productsExternal IDs
vendor: google model: home
vendor: google model: chrome
vendor: google model: google chrome

Multiple Regulators Focused On Cybersecurity Risk For Medical Devices | By Chris Harvey, Senior VP Of Client Services At Sedgwick - Medical Device News Magazine

Trust: 3.0

Fetched: Sept. 3, 2023, 9:20 a.m., Published: Sept. 1, 2023, 1 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

Bitwarden Review 2023 - Open-Source, But Is It Good?

Trust: 3.5

Fetched: Sept. 3, 2023, 9:15 a.m., Published: Sept. 3, 2023, midnight
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome

Security Policies: Protecting Your Computers & Network | Russ Harvey Consulting

Trust: 3.25

Fetched: Sept. 3, 2023, 9:14 a.m., Published: May 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: wifi
vendor: google model: home
vendor: google model: android
vendor: check point model: express
vendor: check point model: check point
vendor: check point model: zonealarm
vendor: essential model: phone
vendor: zoom model: client

Systems Hardening Best Practices to Reduce Risk [Checklist]

Trust: 3.0

Fetched: Sept. 3, 2023, 9:12 a.m., Published: Aug. 31, 2023, 6:42 p.m.
 Vulnerabilities: account lockout
Affected productsExternal IDs

Cisco Expressway Series and Cisco TelePresence Video Communication Server Command Injection Vulnerability - Cisco

Trust: 5.0

Fetched: Sept. 3, 2023, 9:09 a.m., Published: Aug. 16, 2023, 11:10 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: expressway
vendor: cisco model: series
vendor: cisco model: cisco telepresence video communication server
vendor: cisco model: telepresence video communication server
vendor: cisco model: expressway series
vendor: cisco model: cisco expressway
vendor: cisco model: telepresence
vendor: cisco model: cisco telepresence

How Machine Identity Management Helps Solve Connected Medical Devices Security Challenges With Ravishankar Chamarajnagar, CPO at AppViewX - Security Boulevard

Trust: 3.75

Fetched: Sept. 3, 2023, 9:08 a.m., Published: Aug. 30, 2023, 1:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Electronics | Special Issue : Security Issues in the IoT

Trust: 3.5

Fetched: Sept. 3, 2023, 9:07 a.m., Published: May 3, 2023, midnight
 Vulnerabilities: cross-site request forgery, request forgery
Affected productsExternal IDs
vendor: google model: pixel

Endpoint, Identity and Cloud | Top Cyber Attacks of 2023 (So Far) - SentinelOne

Trust: 3.5

Fetched: Sept. 3, 2023, 9:05 a.m., Published: Aug. 31, 2023, 2:01 p.m.
 Vulnerabilities: service disruption
Affected productsExternal IDs
vendor: trend model: antivirus
vendor: trend model: security

Threat actors exploiting unpatched Juniper Networks devices | Computer Weekly

Trust: 3.25

Fetched: Sept. 3, 2023, 9:03 a.m., Published: Sept. 1, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36844, CVE-2023-36847, CVE-2023-36846, CVE-2023-36845

IT/Information Security Exception Request Process - Information Security - Cal Poly, San Luis Obispo

Trust: 3.0

Fetched: Sept. 1, 2023, 9:25 a.m., Published: Aug. 31, 2023, midnight
 Vulnerabilities: policy violation
Affected productsExternal IDs

DreamBus Malware Exploits Unpatched RocketMQ Servers

Trust: 5.75

Fetched: Sept. 1, 2023, 9:23 a.m., Published: Aug. 30, 2023, 9:32 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: huawei technologies model: huawei
vendor: huawei model: huawei
db: NVD ids: CVE-2023-33246