Sign-up

VARIoT news about IoT security

iOS 16.3.1 fixes major vulnerabilities but may cause a problem for this popular app

Trust: 3.75

Fetched: Feb. 19, 2023, 9:28 a.m., Published: March 16, 2001, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: android
vendor: apple model: iphone
vendor: apple model: icloud

New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices

Trust: 5.75

Fetched: Feb. 19, 2023, 9:28 a.m., Published: Feb. 17, 2023, 9:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: draytek model: routers
vendor: draytek model: vigor
vendor: palo model: networks
db: NVD ids: CVE-2012-4869

KB5008380-Authentication updates (CVE-2021-42287) - Microsoft Support

Trust: 3.0

Fetched: Feb. 19, 2023, 9:27 a.m., Published: Nov. 9, 2021, midnight
 Vulnerabilities: security bypass
Affected productsExternal IDs
db: NVD ids: CVE-2021-42287

Arris Router Vulnerability Leaves EOL Devices Exposed

Trust: 4.75

Fetched: Feb. 19, 2023, 9:26 a.m., Published: Feb. 17, 2023, 11:28 a.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-45701

Critical RCE Vulnerability Discovered in ClamAV Open Source Antivirus Software - Domedigita

Related entries in the VARIoT vulnerabilities database: VAR-202302-1598, VAR-202302-1614, VAR-202302-1452

Trust: 5.5

Fetched: Feb. 19, 2023, 9:26 a.m., Published: Feb. 17, 2023, 9:14 a.m.
 Vulnerabilities: code execution, privilege escalation, information leak...
Affected productsExternal IDs
vendor: clamav model: clamav
vendor: google model: nexus
vendor: cisco model: management appliance
vendor: cisco model: web security appliance
vendor: cisco model: nexus
vendor: cisco model: advanced malware protection
vendor: cisco model: clamav
vendor: cisco model: email security appliance
db: NVD ids: CVE-2023-20009, CVE-2023-20075, CVE-2023-20032, CVE-2023-20014, CVE-2023-20052

4 ways to address cyber vulnerabilities in your business

Trust: 3.0

Fetched: Feb. 19, 2023, 9:25 a.m., Published: Feb. 4, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Mirai botnet variant targets IoT and Linux devices

Trust: 3.5

Fetched: Feb. 19, 2023, 9:25 a.m., Published: Feb. 17, 2023, 12:33 p.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks

Update Your iPad Now to Avoid Security Issue - MacRumors

Trust: 3.75

Fetched: Feb. 19, 2023, 9:24 a.m., Published: Feb. 13, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
vendor: google model: pixel
vendor: google model: android
vendor: apple model: ipad
vendor: apple model: watch
vendor: apple model: webkit
vendor: apple model: icloud
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: tvos
vendor: apple model: watchos

QNAP fixes critical bug letting hackers inject malicious code

Trust: 4.25

Fetched: Feb. 19, 2023, 9:24 a.m., Published: -
 Vulnerabilities: sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-27596

Security Advisory: Update Apple Devices to Address a New Zero-Day Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097

Trust: 3.75

Fetched: Feb. 19, 2023, 9:24 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sophos model: anti-virus
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: tvos
vendor: apple model: ipad
vendor: apple model: watchos
db: NVD ids: CVE-2023-23529

[no-title]

Trust: 3.5

Fetched: Feb. 19, 2023, 9:23 a.m., Published: Aug. 17, 2021, 1:27 p.m.
 Vulnerabilities: device impersonation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28372

A new Mirai variant is attacking Linux devices to build a beastly DDoS botnet | TechRadar

Trust: 4.75

Fetched: Feb. 19, 2023, 9:23 a.m., Published: Feb. 17, 2023, 2:21 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo model: firewall
vendor: palo model: networks

CISA Warns About Four New Vulnerabilities Exploited as Zero-Days

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097

Trust: 4.75

Fetched: Feb. 19, 2023, 9:23 a.m., Published: Feb. 17, 2023, 10:49 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: webkit
db: NVD ids: CVE-2023-23529, CVE-2023-21715, CVE-2023-23376, CVE-2023-21823

New Mirai botnet variant V3G4 targets Linux servers, IoT devices | CSO Online

Related entries in the VARIoT vulnerabilities database: VAR-202206-0004, VAR-202002-1447, VAR-202006-1056

Trust: 5.0

Fetched: Feb. 19, 2023, 9:22 a.m., Published: Feb. 17, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: draytek model: vigor
db: NVD ids: CVE-2012-4869, CVE-2022-26134, CVE-2022-4257, CVE-2019-15107, CVE-2020-8515, CVE-2020-15415

Patch Now: Apple's iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw

Related entries in the VARIoT vulnerabilities database: VAR-202302-1169, VAR-202212-1751, VAR-202302-1097

Trust: 5.75

Fetched: Feb. 19, 2023, 9:22 a.m., Published: Feb. 14, 2023, 4:44 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad air
db: NVD ids: CVE-2023-23514, CVE-2022-42856, CVE-2023-23529

Vulnerability scanner for Windows | Intruder

Trust: 4.25

Fetched: Feb. 19, 2023, 9:21 a.m., Published: May 19, 2023, midnight
 Vulnerabilities: request forgery, code execution
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus
db: NVD ids: CVE-2022-41040, CVE-2021-36934, CVE-2022-41082

Critical RCE Vulnerability Discovered in ClamAV Open Source Antivirus Software

Related entries in the VARIoT vulnerabilities database: VAR-202302-1598, VAR-202302-1614, VAR-202302-1452

Trust: 5.5

Fetched: Feb. 19, 2023, 9:21 a.m., Published: Feb. 3, 2023, midnight
 Vulnerabilities: code execution, privilege escalation, information leak...
Affected productsExternal IDs
vendor: clamav model: clamav
vendor: google model: nexus
vendor: cisco model: management appliance
vendor: cisco model: nexus
vendor: cisco model: advanced malware protection
vendor: cisco model: clamav
vendor: cisco model: email security appliance
db: NVD ids: CVE-2023-20009, CVE-2023-20075, CVE-2023-20032, CVE-2023-20014, CVE-2023-20052

Flaws in industrial wireless IoT solutions can give attackers deep access into OT networks | CSO Online

Related entries in the VARIoT vulnerabilities database: VAR-201905-0851

Trust: 4.5

Fetched: Feb. 19, 2023, 9:20 a.m., Published: Feb. 10, 2023, midnight
 Vulnerabilities: default credentials, command injection, code execution
Affected productsExternal IDs
vendor: moxa model: device manager
db: NVD ids: CVE-2022-46649, CVE-2018-4061

Microsoft delivers 75-count box of patches for Tuesday • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202302-1401, VAR-202302-1442, VAR-202302-1249, VAR-202302-1373, VAR-202302-1474, VAR-202302-1440, VAR-202302-1219, VAR-202302-1616, VAR-202302-1348, VAR-202302-1248, VAR-202302-1349

Trust: 4.5

Fetched: Feb. 19, 2023, 9:19 a.m., Published: -
 Vulnerabilities: code execution, denial of service, input validation bug...
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: trend model: security
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: macos
vendor: trend micro model: security
db: NVD ids: CVE-2022-38056, CVE-2022-41614, CVE-2021-33104, CVE-2022-21163, CVE-2022-41314, CVE-2022-36287, CVE-2022-27677, CVE-2022-30339, CVE-2022-36416, CVE-2022-27672, CVE-2022-27234, CVE-2022-36369, CVE-2022-21216, CVE-2022-36382, CVE-2022-27808, CVE-2022-29523, CVE-2022-38090, CVE-2022-33196, CVE-2022-36397

Patch Tuesday - February 2023 | Rapid7 Blog

Related entries in the VARIoT vulnerabilities database: VAR-202302-1454, VAR-202002-0458, VAR-202302-1035

Trust: 3.75

Fetched: Feb. 19, 2023, 9:19 a.m., Published: Feb. 15, 2023, 12:41 a.m.
 Vulnerabilities: code execution, denial of service, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2023-23379, CVE-2023-21808, CVE-2023-21802, CVE-2023-21717, CVE-2023-21687, CVE-2023-21692, CVE-2023-21720, CVE-2023-21693, CVE-2023-21777, CVE-2023-23377, CVE-2023-21689, CVE-2023-21553, CVE-2023-21797, CVE-2023-21685, CVE-2023-21700, CVE-2023-21697, CVE-2023-21778, CVE-2023-21688, CVE-2023-21707, CVE-2023-21573, CVE-2023-21812, CVE-2023-21799, CVE-2023-21820, CVE-2023-21572, CVE-2023-21813, CVE-2023-21822, CVE-2023-21528, CVE-2023-21800, CVE-2023-21570, CVE-2023-21564, CVE-2023-21571, CVE-2023-21801, CVE-2019-15126, CVE-2023-21811, CVE-2023-21568, CVE-2023-23376, CVE-2023-23374, CVE-2023-21567, CVE-2023-21684, CVE-2023-21714, CVE-2023-23390, CVE-2023-21710, CVE-2023-21722, CVE-2023-23381, CVE-2023-21817, CVE-2023-21721, CVE-2023-21705, CVE-2023-21718, CVE-2023-21706, CVE-2023-21701, CVE-2023-21805, CVE-2023-21819, CVE-2023-21529, CVE-2023-21686, CVE-2023-21804, CVE-2023-21691, CVE-2023-21809, CVE-2023-21806, CVE-2023-21713, CVE-2023-21803, CVE-2023-21815, CVE-2023-21716, CVE-2023-21703, CVE-2023-21704, CVE-2023-21694, CVE-2023-21818, CVE-2023-21566, CVE-2023-21699, CVE-2023-21816, CVE-2023-21798, CVE-2023-21690, CVE-2023-21695, CVE-2023-21823, CVE-2023-21715, CVE-2023-21794, CVE-2023-21807, CVE-2023-23382, CVE-2023-23378, CVE-2023-21702