Sign-up

VARIoT news about IoT security

What Is a Backdoor & How to Prevent Backdoor Attacks (2023)

Trust: 3.5

Fetched: July 21, 2023, 9:29 a.m., Published: May 31, 2021, 7:32 a.m.
 Vulnerabilities: weak password
Affected productsExternal IDs
vendor: cisco model: router
vendor: cisco model: small business
vendor: cisco model: routers
vendor: blackberry model: link
vendor: blackberry model: curve
vendor: blackberry model: blackberry

Snap One OvrC Cloud | CISA

Trust: 4.75

Fetched: July 21, 2023, 9:21 a.m., Published: March 8, 2023, midnight
 Vulnerabilities: code execution, improper access control
Affected productsExternal IDs
db: NVD ids: CVE-2023-31241, CVE-2023-31193, CVE-2023-25183, CVE-2023-31245, CVE-2023-28386, CVE-2023-28412, CVE-2023-28649, CVE-2023-31240

Cybersecurity labeling for smart devices aims to help people choose those less vulnerable to hacking - The Washington Post

Trust: 4.0

Fetched: July 21, 2023, 9:16 a.m., Published: July 18, 2023, 9:23 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

Cybersecurity labeling for smart devices aims to help people choose those less vulnerable to hacking | AP News

Trust: 4.0

Fetched: July 21, 2023, 9:13 a.m., Published: July 18, 2023, 9:22 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

Biden-Harris Administration Announces Cybersecurity Labeling Program for Smart Devices to Protect American Consumers | The White House

Trust: 3.75

Fetched: July 19, 2023, 9:11 a.m., Published: July 18, 2023, 9 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: routers
vendor: cisco systems model: series
vendor: cisco systems model: meeting
vendor: cisco model: routers
vendor: cisco model: series
vendor: cisco model: meeting

Preventing Buffer Overflow Attacks on Linux Drivers

Trust: 4.25

Fetched: July 18, 2023, 9:12 a.m., Published: July 3, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs

Remote Code Execution and Denial-of-Service Vulnerabilities in Select Communication Modules

Trust: 3.25

Fetched: July 18, 2023, 9:11 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

Update now! Apple fixes three actively exploited vulnerabilities

Trust: 4.5

Fetched: July 18, 2023, 9:10 a.m., Published: June 23, 2023, 12:46 p.m.
 Vulnerabilities: buffer overflow, code execution, memory corruption...
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: macos
vendor: apple model: ipod touch
vendor: apple model: watch
vendor: apple model: ipad
vendor: apple model: safari
vendor: apple model: watchos
vendor: apple model: webkit
db: NVD ids: CVE-2023-32435, CVE-2023-32439, CVE-2023-32434

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: July 18, 2023, 9:09 a.m., Published: June 18, 2023, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

Fortinet Fortigate Vulnerability (CVE-2023-27997) | Blumira

Trust: 4.75

Fetched: July 18, 2023, 9:09 a.m., Published: June 12, 2023, 1:07 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2023-27997

Microsoft July 2023 Patch Tuesday warns of 6 zero-days, 132 flaws

Trust: 4.25

Fetched: July 18, 2023, 9:07 a.m., Published: -
 Vulnerabilities: cross-site scripting, feature bypass, code execution...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2023-35326, CVE-2023-35309, CVE-2023-33150, CVE-2023-35317, CVE-2023-33165, CVE-2023-36872, CVE-2023-35331, CVE-2023-35340, CVE-2023-32054, CVE-2023-36874, CVE-2023-35325, CVE-2023-33172, CVE-2023-33166, CVE-2023-32050, CVE-2023-35339, CVE-2023-35366, CVE-2023-35357, CVE-2023-35344, CVE-2023-35316, CVE-2023-35304, CVE-2023-36868, CVE-2023-33153, CVE-2023-32033, CVE-2023-33127, CVE-2023-35337, CVE-2023-35308, CVE-2023-35315, CVE-2023-35336, CVE-2023-21756, CVE-2023-35320, CVE-2023-35328, CVE-2023-33151, CVE-2023-33164, CVE-2023-35310, CVE-2023-36884, CVE-2023-36867, CVE-2023-33152, CVE-2023-35373, CVE-2023-35360, CVE-2023-33149, CVE-2023-32083, CVE-2023-35364, CVE-2023-32045, CVE-2023-35333, CVE-2023-35358, CVE-2023-32049, CVE-2023-35353, CVE-2023-35313, CVE-2023-35299, CVE-2023-35345, CVE-2023-33148, CVE-2023-35332, CVE-2023-35367, CVE-2023-32042, CVE-2023-35350, CVE-2023-32046, CVE-2023-35335, CVE-2023-35338, CVE-2023-35302, CVE-2023-35374, CVE-2023-35347, CVE-2023-35312, CVE-2023-35296, CVE-2023-35305, CVE-2023-32057, CVE-2023-32040, CVE-2023-35311, CVE-2023-35343, CVE-2023-33171, CVE-2023-32038, CVE-2023-36871, CVE-2023-33155, CVE-2023-35348, CVE-2023-33174, CVE-2023-33156, CVE-2023-35341, CVE-2023-32056, CVE-2023-35351, CVE-2023-32047, CVE-2023-33161, CVE-2023-32055, CVE-2023-35322, CVE-2023-35361, CVE-2023-33160, CVE-2023-35319, CVE-2023-35356, CVE-2023-32034, CVE-2023-35321, CVE-2023-21526, CVE-2023-33168, CVE-2023-35346, CVE-2023-32084, CVE-2023-32053, CVE-2023-32085, CVE-2023-32035, CVE-2023-35342, CVE-2023-33163, CVE-2023-32039, CVE-2023-32051, CVE-2023-32043, CVE-2023-35297, CVE-2023-35329, CVE-2023-35318, CVE-2023-35330, CVE-2023-33169, CVE-2023-33157, CVE-2023-32041, CVE-2023-35323, CVE-2023-33167, CVE-2023-33158, CVE-2023-32037, CVE-2023-33162, CVE-2023-35352, CVE-2023-32044, CVE-2023-35362, CVE-2023-35365, CVE-2023-33170, CVE-2023-35300, CVE-2023-35298, CVE-2023-29347, CVE-2023-32052, CVE-2023-33173, CVE-2023-33159, CVE-2023-33154, CVE-2023-35363, CVE-2023-35324, CVE-2023-35306, CVE-2023-35303, CVE-2023-33134, CVE-2023-35314

Network Security ( Version 1) - Network Security 1.0 Modules 1-4: Securing Networks Group Exam Answers - InfraExam 2023

Trust: 3.25

Fetched: July 16, 2023, 9:20 a.m., Published: June 29, 2023, 3:03 p.m.
 Vulnerabilities: denial of service, resource exhaustion
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: virtual security gateway
vendor: cisco model: nexus
vendor: cisco model: soho
vendor: cisco model: email security appliance
vendor: cisco model: web security appliance
vendor: cisco model: cisco email security appliance
vendor: cisco model: routers

10 Best Software Security Testing Tools [2023 Reviewed]

Trust: 4.75

Fetched: July 16, 2023, 9:19 a.m., Published: Jan. 16, 2022, 11:03 p.m.
 Vulnerabilities: brute force attack
Affected productsExternal IDs
vendor: proftpd model: proftpd

The CISA Warning to Patch an Actively Exploited Android Driver

Trust: 3.5

Fetched: July 16, 2023, 9:18 a.m., Published: July 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: motorola model: motorola
vendor: motorola model: android
vendor: google model: android
db: NVD ids: CVE-2021-29256

Rockwell Automation exploit spurs fears of critical infrastructure security | SC Media

Related entries in the VARIoT vulnerabilities database: VAR-202307-1042, VAR-202307-1163

Trust: 4.25

Fetched: July 16, 2023, 9:17 a.m., Published: March 15, 2023, 6 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: rockwell model: automation controllogix
vendor: rockwell model: automation allen-bradley controllogix
vendor: rockwell model: controllogix
vendor: rockwell automation model: automation controllogix
vendor: rockwell automation model: automation allen-bradley controllogix
vendor: rockwell automation model: controllogix
db: NVD ids: CVE-2023-3596, CVE-2023-3595

Microsoft Office and Windows HTML Remote Code Execution Vulnerability - NHS Digital

Trust: 3.0

Fetched: July 16, 2023, 9:17 a.m., Published: July 16, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Urgent warning issued to everyone with an Apple iPhone | Tech News | Metro News

Trust: 3.75

Fetched: July 16, 2023, 9:16 a.m., Published: July 11, 2023, 12:57 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macbook
vendor: apple model: macbook pro
vendor: apple model: imac
vendor: apple model: apple tv
vendor: apple model: safari
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: macbook air
vendor: apple model: webkit
vendor: apple model: tvos
vendor: apple model: ipad
db: NVD ids: CVE-2023-37450

Barracuda Networks Releases Update to Address ESG Vulnerability | CISA

Trust: 3.75

Fetched: July 16, 2023, 9:16 a.m., Published: July 13, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda networks model: barracuda
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-2868

The ins and outs of BlueTrust, a Bluetooth vulnerability

Trust: 3.5

Fetched: July 16, 2023, 9:14 a.m., Published: June 23, 2023, 10:49 a.m.
 Vulnerabilities: device impersonation, brute force attack
Affected productsExternal IDs
vendor: broadcom model: linux

A Vulnerability in Cisco SD-WAN vManage Could Allow for Security Mechanism Bypass

Trust: 3.0

Fetched: July 14, 2023, 9:15 a.m., Published: July 12, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: sd-wan
vendor: cisco model: cisco sd-wan
vendor: cisco model: sd-wan vmanage