Sign-up

VARIoT news about IoT security

RSA Customer Advisory: Apache Vulnerability | Log4j2 (CVE-2021-44228) - SecurID Community - 660501

Related entries in the VARIoT vulnerabilities database: VAR-201912-0889, VAR-202112-0566

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Dec. 11, 2021, 2:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-4104, CVE-2019-17571, CVE-2020-9488, CVE-2021-44228

Airspan Networks Mimosa | CISA

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 1, 2022, midnight
 Vulnerabilities: command injection, os command injection, sql injection...
Affected productsExternal IDs
db: NVD ids: CVE-2022-21215, CVE-2022-21143, CVE-2022-21800, CVE-2022-21196, CVE-2022-21141, CVE-2022-0138, CVE-2022-21176

Researchers discover critical vulnerabilities in APC Smart-UPS devices | TechSpot

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237, VAR-202203-0235, VAR-202203-0236

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 11, 2022, midnight
 Vulnerabilities: buffer overflow, authentication bypass, memory corruption...
Affected productsExternal IDs
db: NVD ids: CVE-2022-22805, CVE-2022-0715, CVE-2022-22806

Vulnerability in Security: A Complete Overview | Simplilearn

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Feb. 9, 2022, 5:54 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0005

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 31, 2022, 3:23 a.m.
 Vulnerabilities: infinite loop vulnerability, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2022-0778

Russian Cyber Actors Exploit MFA Protocols, PrintNightmare Vulnerability

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 17, 2022, 2 p.m.
 Vulnerabilities: password guessing, privilege escalation, code execution
Affected productsExternal IDs

Multiple Vulnerabilities in Cisco Products Could Allow for Arbitrary Code Execution

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 30, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

TrustInSoft Showcases New Offer for Zero-Vulnerability Devices at Mobile World Congress 2022

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Feb. 28, 2022, 7 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs

Cynerio Research Finds Critical Medical Device Risks Continue to Threaten Hospital Security and Patient Safety

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Jan. 19, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Linux PwnKit Vulnerability Affects Most XIoT Devices

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Jan. 27, 2022, 4:18 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-4034

BD Discloses Viper, Pyxis Medical Device Vulnerabilities

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 4, 2022, 4:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-22766, CVE-2022-22765

Access:7 vulnerabilities impact medical and IoT devices

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 6, 2022, midnight
 Vulnerabilities: buffer overflow, information disclosure, directory traversal...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25249, CVE-2022-25250, CVE-2022-25247, CVE-2022-25251, CVE-2022-25248, CVE-2022-25246

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965 - Microsoft Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 5, 2022, 1:11 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2010-1622, CVE-2022-22965

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

Microsoft CVE-2022-21992: Windows Mobile Device Management Remote Code Execution Vulnerability

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 11, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21992

Vulnerability Research Overview - Forescout

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 10, 2022, 7:06 p.m.
 Vulnerabilities: information leak, denial of service, code execution
Affected productsExternal IDs

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158