Sign-up

VARIoT news about IoT security

High-Tech Drug Infusion Pumps in Hospitals Vulnerable to Damage, Hackers - Consumer Health News | HealthDay

Trust: 3.25

Fetched: June 1, 2022, 8:58 a.m., Published: March 21, 2022, 12:12 p.m.
 Vulnerabilities: information leakage, default credentials, denial of service
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks

Code Execution Vulnerabilities Found in XINJE PLC Application

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: May 11, 2022, 1 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-34605, CVE-2021-34606

Millions of Lenovo laptops thought to be vulnerable to newly discovered UEFI malware attacks | IT PRO

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 1, 2022, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: lenovo model: system
vendor: lenovo model: updates
vendor: lenovo model: bios
db: NVD ids: CVE-2021-3972, CVE-2021-3971, CVE-2021-3970

HP Warns Printers Vulnerable To Remote Code Execution

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: March 22, 2022, 4:13 p.m.
 Vulnerabilities: buffer overflow, code execution, information disclosure...
Affected productsExternal IDs
vendor: palo model: firewall

Uncovering Hidden Threats in Bluetooth Low Energy Medical Devices-

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: May 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve
db: NVD ids: CVE-2019-19194

Microsoft discovers Nimbuspwn privilege escalation vulnerabilities in Linux

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: April 27, 2022, 9:26 a.m.
 Vulnerabilities: code execution, privilege escalation, directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2022-29799, CVE-2022-29800

Apple Fixed Two Actively Exploited Vulnerabilities in macOS 12.3.1 Monterey, But Hasn't Released Updates for Big Sur or Catalina - MacRumors

Related entries in the VARIoT vulnerabilities database: VAR-202203-1580, VAR-202203-1579

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: Dec. 3, 2001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2022-22675, CVE-2022-22674

Can Webroot scan my IoT devices for malwarre and vulnerabilities? | Webroot Community

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Android Devices Are at Risk After Microsoft Detects Serious Security Bugs

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: May 31, 2022, 7:33 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-42600, CVE-2021-42598, CVE-2021-42599, CVE-2021-42601

Zyxel firewalls vulnerable to remote code execution - Security - iTnews

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: Oct. 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: zyxel model: usg20-vpn

F5 BIG-IP systems vulnerable to remote takeover - Security - iTnews

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: Oct. 1, 2022, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2022-1388

Cyberattack: Honda, Acura cars vulnerable to manipulation by hackers - NCC | Dailytrust

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 16, 2022, 3:44 a.m.
 Vulnerabilities: replay attack
Affected productsExternal IDs

Vivaldi and Microsoft patch 0-day vulnerability in their browsers - gHacks Tech News

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: April 16, 2022, 7:15 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
db: NVD ids: CVE-2022-29144, CVE-2022-1364

Windows Vista - Wikipedia

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2007, midnight
 Vulnerabilities: buffer overflow, memory corruption, code execution...
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: power management
vendor: lenovo model: notebook
vendor: lenovo model: desktop
vendor: lenovo model: system
vendor: national instruments model: national
vendor: symantec model: protection engine
vendor: symantec model: antivirus
vendor: apple model: mac os
vendor: apple model: mac os x
vendor: google model: home
vendor: zoom model: client
vendor: zoom model: zoom
vendor: hewlett-packard model: envy
vendor: hewlett-packard model: integrity
vendor: luna model: cover
vendor: symantec corporation model: protection engine
vendor: symantec corporation model: antivirus
db: NVD ids: CVE-2019-1222, CVE-2019-1181, CVE-2019-0708, CVE-2017-0290, CVE-2019-1162, CVE-2019-1226, CVE-2019-1182

USB - Wikipedia

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 2, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hewlett-packard company model: stream
vendor: hewlett-packard company model: integrity
vendor: hewlett-packard model: stream
vendor: hewlett-packard model: integrity

Spring4Shell: Zero-Day vulnerability CVE-2022-22965 in Spring Framework

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: 6.25

Fetched: June 1, 2022, 8:58 a.m., Published: April 6, 2022, 12:53 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: quick heal model: quick heal
db: NVD ids: CVE-2022-22965, CVE-2022-22963

Why Is Russia Losing So Much Military Equipment In Ukraine?

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 13, 2022, 11:38 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: ring model: ring

Over 100 Lenovo Laptops affected by the three UEFI-Vulnerabilities of an Unio - Game News 24

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lenovo model: notebook
vendor: lenovo model: system
vendor: lenovo model: bios
vendor: lenovo model: updates
db: NVD ids: CVE-2021-3972, CVE-2021-3971, CVE-2021-3970

GovCERT.HK - Security Alert (A22-04-21): Multiple Vulnerabilities in Cisco Products

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: April 22, 2021, midnight
 Vulnerabilities: privilege escalation, restriction bypass, cross-site scripting...
Affected productsExternal IDs
vendor: cisco model: firepower threat defense
vendor: cisco model: cisco umbrella virtual appliance
vendor: cisco model: telepresence
vendor: cisco model: telepresence collaboration endpoint
vendor: cisco model: cisco telepresence
vendor: cisco model: cisco firepower threat defense software
vendor: cisco model: webex meetings
vendor: cisco model: roomos
vendor: cisco model: cisco roomos
vendor: cisco model: unified communications
vendor: cisco model: umbrella
vendor: cisco model: adaptive security appliance software
vendor: cisco model: cisco adaptive security appliance software
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower threat defense software
vendor: cisco model: firepower
vendor: cisco model: umbrella virtual appliance
vendor: cisco model: cisco webex meetings
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco webex
vendor: cisco model: webex

Repeatable Firmware Security Failures:16 High Impact Vulnerabilities Discovered in HP Devices

Related entries in the VARIoT vulnerabilities database: VAR-202202-0147, VAR-202202-0129

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 16, 2022, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: siemens model: simatic
vendor: dell model: bios
db: NVD ids: CVE-2021-45969, CVE-2021-42554, CVE-2021-45971, CVE-2021-45970, CVE-2021-39297, CVE-2021-42059