Sign-up

VARIoT news about IoT security

Chrome Releases: Stable Channel Update for Desktop

Trust: 5.0

Fetched: Sept. 19, 2023, 9:14 a.m., Published: Sept. 11, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: google model: chrome
db: NVD ids: CVE-2023-4863

Electronics | Free Full-Text | Machine-Learning-Based Vulnerability Detection and Classification in Internet of Things Device Security

Trust: 5.0

Fetched: Sept. 19, 2023, 9:12 a.m., Published: Jan. 19, 2023, midnight
 Vulnerabilities: code execution, resource exhaustion, memory corruption...
Affected productsExternal IDs
vendor: schneider model: monitor
vendor: google model: home
vendor: google model: android
vendor: schneider electric model: monitor
vendor: tp-link model: gateway
vendor: treck model: tcp/ip stack
db: NVD ids: CVE-2020-11896, CVE-2020-11901, CVE-2020-11897, CVE-2020-11898

CISA Adds Eight Known Exploited Vulnerabilities to Catalog | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202206-0393, VAR-201704-1556, VAR-201505-0274, VAR-202206-0056, VAR-202206-0005, VAR-202201-1001, VAR-202206-0324

Trust: 4.5

Fetched: Sept. 19, 2023, 9:09 a.m., Published: Sept. 15, 2023, midnight
 Vulnerabilities: authentication vulnerability, input validation vulnerability, command injection...
Affected productsExternal IDs
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
vendor: samsung model: note
vendor: zyxel model: emg2926
vendor: realtek model: realtek sdk
db: NVD ids: CVE-2022-31461, CVE-2017-6884, CVE-2014-8361, CVE-2022-31459, CVE-2022-31462, CVE-2022-22265, CVE-2022-31463, CVE-2021-3129

10 SaaS Web Vulnerability Scanner for Continuous Security

Trust: 3.5

Fetched: Sept. 17, 2023, 9:37 a.m., Published: Jan. 28, 2017, 12:45 p.m.
 Vulnerabilities: code execution, file inclusion, os command injection...
Affected productsExternal IDs

Vulnerability management for Azure Kubernetes Service - Azure Kubernetes Service | Microsoft Learn

Trust: 3.5

Fetched: Sept. 17, 2023, 9:35 a.m., Published: March 17, 2023, midnight
 Vulnerabilities: sql injection, cross-site scripting, buffer overflow
Affected productsExternal IDs
vendor: canonical model: ubuntu

Critical Vulnerability in FortiOS and FortiProxy (CVE-2022-40684) | NCERT

Related entries in the VARIoT vulnerabilities database: VAR-202210-0198

Trust: 4.0

Fetched: Sept. 17, 2023, 9:35 a.m., Published: Sept. 2, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-40684

iPhone Vulnerability Exposes Devices to Pegasus Spyware Attacks

Trust: 3.0

Fetched: Sept. 17, 2023, 9:34 a.m., Published: Sept. 11, 2023, 6:38 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

CVE-2023-4039: GCC’s -fstack-protector fails to guard dynamic stack allocations on ARM64 | Meta Red Team X

Trust: 5.75

Fetched: Sept. 17, 2023, 9:32 a.m., Published: Sept. 12, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: canary model: canary
db: NVD ids: CVE-2023-4039, CVE-2018-12886

Activating Your Axonius-hosted (SaaS) Trial - Axonius-as-a-Service Trials

Trust: 3.0

Fetched: Sept. 17, 2023, 9:32 a.m., Published: Sept. 6, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo model: networks

Patch Tuesday September 2023: Office NLTM Hash Vulnerability Gets Fix - N-able

Trust: 4.25

Fetched: Sept. 17, 2023, 9:29 a.m., Published: Sept. 13, 2023, 10:57 a.m.
 Vulnerabilities: code execution, information disclosure
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
vendor: apple model: macos
db: NVD ids: CVE-2023-20269, CVE-2023-36804, CVE-2023-41061, CVE-2023-36796, CVE-2023-36793, CVE-2023-38143, CVE-2023-38148, CVE-2023-4863, CVE-2023-29332, CVE-2023-38142, CVE-2023-36756, CVE-2023-36745, CVE-2023-36744, CVE-2023-26369, CVE-2023-44064, CVE-2023-38144, CVE-2023-36777, CVE-2023-36792, CVE-2023-36802, CVE-2023-38161, CVE-2023-38160, CVE-2023-36761, CVE-2023-38152

Threat mitigation guidance for server-side ASP.NET Core Blazor | Microsoft Learn

Trust: 3.5

Fetched: Sept. 17, 2023, 9:28 a.m., Published: Feb. 21, 2023, midnight
 Vulnerabilities: cross-site scripting, cross-site request forgery, denial of service...
Affected productsExternal IDs

CVE-2022-42475: Thousands of Unpatched Fortinet Vulnerabilities Exposed | CIP Blog

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.0

Fetched: Sept. 17, 2023, 9:27 a.m., Published: Sept. 15, 2023, 6:04 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2022-47966, CVE-2022-42475

HAVE A SAFE RIDE - Cyber Threats in the Automotive Sector

Trust: 4.5

Fetched: Sept. 17, 2023, 9:22 a.m., Published: Sept. 3, 2023, midnight
 Vulnerabilities: code execution, injection attack, buffer overflow
Affected productsExternal IDs
vendor: essential model: phone
db: NVD ids: CVE-2023-29389, CVE-2023-29468

Cisco IOS XR Software Image Verification Vulnerability - Cisco

Trust: 3.0

Fetched: Sept. 17, 2023, 9:20 a.m., Published: Sept. 13, 2023, 11:34 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: ios xr software

CVE.report - ASUS

Trust: 3.0

Fetched: Sept. 17, 2023, 9:19 a.m., Published: Sept. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: asus model: asus

Cisco IOS XR Software Access Control List Bypass Vulnerability - Cisco

Trust: 3.75

Fetched: Sept. 17, 2023, 9:18 a.m., Published: Sept. 13, 2023, 11:34 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: nx-os
vendor: cisco model: ios xr
vendor: cisco model: ios xe
vendor: cisco model: series routers
vendor: cisco model: routers
vendor: cisco model: ios software
vendor: cisco model: ios xr software
vendor: cisco model: series
vendor: cisco model: cisco ios xr
vendor: cisco model: ios xe software
vendor: cisco model: nx-os software
db: NVD ids: CVE-2023-20191

Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability - Cisco

Trust: 3.0

Fetched: Sept. 17, 2023, 9:18 a.m., Published: Sept. 13, 2023, 11:34 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: ios xr software

Configuring updates of anti-malware databases on Android devices

Trust: 3.0

Fetched: Sept. 17, 2023, 9:15 a.m., Published: April 17, 2019, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Cisco IOS XR Software Compression ACL Bypass Vulnerability - Cisco

Trust: 3.0

Fetched: Sept. 17, 2023, 9:15 a.m., Published: Sept. 13, 2023, 11:34 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: ios xr software

Cisco IOS XR Software Connectivity Fault Management Denial of Service Vulnerability - Cisco

Trust: 3.75

Fetched: Sept. 17, 2023, 9:13 a.m., Published: Sept. 13, 2023, 11:34 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xe software
vendor: cisco model: nx-os
vendor: cisco model: ios xr
vendor: cisco model: nx-os software
vendor: cisco model: ios software
vendor: cisco model: ios xr software