Sign-up

VARIoT news about IoT security

How to Check If Your F5 BIG-IP Device Is Vulnerable

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394

Trust: 5.75

Fetched: June 1, 2022, 8:58 a.m., Published: May 9, 2022, 11:35 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: serve model: serve
db: NVD ids: CVE-2022-1388

Infusion Pump Vulnerabilities: Common Security Gaps

Related entries in the VARIoT vulnerabilities database: VAR-202006-0330, VAR-201702-0856, VAR-202006-0328, VAR-201908-0712, VAR-201702-0080, VAR-201908-0705, VAR-202006-0329, VAR-202006-0331, VAR-202006-0332

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 2, 2022, 6 a.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks
db: NVD ids: CVE-2020-12043, CVE-2016-9355, CVE-2020-12040, CVE-2019-12255, CVE-2016-8375, CVE-2019-12264, CVE-2020-25165, CVE-2020-12041, CVE-2020-12045, CVE-2020-12047

Cisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability - Cisco

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 31, 2022, 11:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco adaptive security appliance software
vendor: cisco model: adaptive security appliance
vendor: cisco model: clientless ssl vpn
vendor: cisco model: asa software
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: adaptive security appliance software

Exposure score in Defender Vulnerability Management | Microsoft Docs

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 12, 2022, 2:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Armis Finds Three Critical Zero-Day Vulnerabilities in APC Smart-UPS Devices, Dubbed "TLStorm," Exposing More than 20 Million Enterprise Devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235, VAR-202108-1890

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: March 8, 2022, 11 a.m.
 Vulnerabilities: buffer overflow, memory corruption, code execution...
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715, CVE-2021-37160

Sophos fixes SQL injection vulnerability in UTM appliance | The Daily Swig

Trust: 5.25

Fetched: June 1, 2022, 8:58 a.m., Published: March 23, 2022, 2:50 p.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: sophos model: sophos utm
db: NVD ids: CVE-2022-0386, CVE-2022-0652

CVE-2021-28372: How a Vulnerability in Third-Party Technology Is Leaving Many IP Cameras and Surveillance Systems Vulnerable

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: March 17, 2022, 5:54 a.m.
 Vulnerabilities: information leakage, code execution
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks
db: NVD ids: CVE-2021-28372

Medical device disclosures on the rise, but providers struggle to patch known flaws

Related entries in the VARIoT vulnerabilities database: VAR-201908-0705, VAR-201908-0712

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 3, 2022, 7:44 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks
db: NVD ids: CVE-2019-12264, CVE-2019-12255

Alerts & Security Vulnerability Announcements

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: June 3, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Cisco Talos Intelligence Group - Comprehensive Threat Intelligence: Deep dive: Vulnerabilities in ZTE router could lead to complete attacker control of the device

Related entries in the VARIoT vulnerabilities database: VAR-202110-0396, VAR-202110-0397

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 1, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: router
db: NVD ids: CVE-2021-21748, CVE-2021-21745

Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn - Microsoft Security Blog

Trust: 5.25

Fetched: June 1, 2022, 8:58 a.m., Published: April 26, 2022, 4 p.m.
 Vulnerabilities: traversal attack, information leak, code execution...
Affected productsExternal IDs
vendor: avahi model: avahi
vendor: freedesktop.org model: systemd
vendor: freedesktop model: systemd
vendor: blueman model: blueman
db: NVD ids: CVE-2022-29799, CVE-2022-0987, CVE-2022-29800

Android Security Bulletin-March 2022 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202203-0027

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: March 1, 2022, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
vendor: nokia model: nokia
vendor: samsung model: mobile
vendor: samsung model: notes
vendor: samsung model: samsung
vendor: huawei model: huawei
vendor: motorola model: motorola
vendor: motorola model: android
vendor: broadcom model: broadcom
db: NVD ids: CVE-2022-20048, CVE-2021-39694, CVE-2022-20047, CVE-2021-1950, CVE-2021-35110, CVE-2021-30332, CVE-2021-30328, CVE-2021-1942, CVE-2021-30333, CVE-2021-39689, CVE-2021-39667, CVE-2021-30329, CVE-2022-20053

75% of infusion pumps have cyber flaws, putting them at risk from hackers: study | MedTech Dive

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo alto networks model: networks

Critical bug could have let hackers commandeer millions of Android devices | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-202112-0901

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: April 21, 2022, 7:22 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: check point model: check point
db: NVD ids: CVE-2021-30351, CVE-2021-0674, CVE-2021-0675

ALAC bug left millions of Android devices vulnerable to takeover - Android Authority

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: April 21, 2022, 10:21 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: itunes
vendor: check point model: check point

Android apps with millions of downloads exposed to high-severity vulnerabilities - Microsoft Security Blog

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 27, 2022, 3:50 p.m.
 Vulnerabilities: command injection, code injection
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-42600, CVE-2021-42598, CVE-2021-42599, CVE-2021-42601

Android Security Bulletin-April 2022 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202204-0113, VAR-202204-0119

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: April 1, 2022, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel
vendor: nokia model: nokia
vendor: samsung model: mobile
vendor: samsung model: notes
vendor: samsung model: samsung
vendor: huawei model: huawei
vendor: motorola model: motorola
vendor: motorola model: android
vendor: broadcom model: broadcom
db: NVD ids: CVE-2022-20081, CVE-2021-39804, CVE-2021-30281, CVE-2021-30338, CVE-2021-30347, CVE-2021-39799, CVE-2021-35104, CVE-2021-39808, CVE-2021-30344, CVE-2021-30340, CVE-2021-39805, CVE-2021-25477, CVE-2021-30350, CVE-2021-30345, CVE-2021-35100, CVE-2021-30349, CVE-2021-39795, CVE-2021-39803, CVE-2021-30342, CVE-2021-39807, CVE-2021-39798, CVE-2021-30346, CVE-2021-0694, CVE-2021-39797, CVE-2021-39796, CVE-2021-35070, CVE-2021-30339, CVE-2021-30341, CVE-2021-30343, CVE-2021-39809, CVE-2021-39794

Cisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability - Cisco

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 31, 2022, 11:30 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower threat defense software
vendor: cisco model: cisco firepower management center
vendor: cisco model: firepower
vendor: cisco model: firepower management center
vendor: cisco model: cisco firepower threat defense software
vendor: snort model: snort

Millions of APC Smart UPS Devices Can Be Remotely Hacked, Damaged | SecurityWeek.Com

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: buffer overflow, code execution, authentication bypass
Affected productsExternal IDs
vendor: schneider model: concept
vendor: schneider electric model: concept
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715

Critical RCE Flaws Impact Medical Devices | Decipher

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 8, 2022, midnight
 Vulnerabilities: code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2022-25251, CVE-2022-25247, CVE-2022-25246