Sign-up

VARIoT news about IoT security

Researchers Discover BIAS Security Vulnerability in Bluetooth Devices

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 19, 2020, 7:59 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

Researchers uncover vulnerabilities in APC Smart-UPS devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237, VAR-202203-0235, VAR-202203-0236

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, midnight
 Vulnerabilities: buffer overflow, authentication bypass, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22805, CVE-2022-0715, CVE-2022-22806

New OpenSSL vulnerability: IoT Inspector automatically detects affected software even in IoT / IIoT devices - IoT Inspector

Related entries in the VARIoT vulnerabilities database: VAR-202203-0005

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 17, 2022, 9:09 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-0778

Exploits and exploit kits | Microsoft Docs

Related entries in the VARIoT vulnerabilities database: VAR-201601-0030

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 18, 2022, 6:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2017-0144, CVE-2016-0778, CVE-2013-1489

Exploring a New Class of Kernel Exploit Primitive - Microsoft Security Response Center

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: June 7, 2022, midnight
 Vulnerabilities: privilege escalation, information disclosure, denial of service...
Affected productsExternal IDs

CVE-2022-21992 - Security Update Guide - Microsoft - Windows Mobile Device Management Remote Code Execution Vulnerability

Trust: [4.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21992

Medical, IoT Devices From Many Manufacturers Affected by 'Access:7' Vulnerabilities | SecurityWeek.Com

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 6, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Medical and IoT Devices From More Than 100 Vendors Vulnerable to Attack

Trust: [5.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 7:32 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25249, CVE-2022-25250, CVE-2022-25246, CVE-2022-25251, CVE-2022-25247

7 New Vulnerabilities Threaten Supply Chain, Medical Device Security

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 1 p.m.
 Vulnerabilities: information disclosure, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-25247, CVE-2022-25246

New Supply Chain Vulnerabilities Impact Medical and IoT Devices - Forescout

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 3:05 p.m.
 Vulnerabilities: buffer overflow, information disclosure, directory traversal...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25249, CVE-2022-25250, CVE-2022-25247, CVE-2022-25251, CVE-2022-25248, CVE-2022-25246

national vulnerability database

Related entries in the VARIoT vulnerabilities database: VAR-201906-0768

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2018-18472, CVE-2022-27226, CVE-2021-26256, CVE-2022-25192, CVE-2021-44141

OESIS Framework March 24, 2022 Release | OPSWAT

Related entries in the VARIoT vulnerabilities database: VAR-202009-1442, VAR-202203-0117

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-8927, CVE-2022-27207, CVE-2022-27196, CVE-2022-27201, CVE-2021-20257, CVE-2022-22600

Finding Veeam Backup & Replication instances

Trust: [4.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 15, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-26501, CVE-2022-26500

Vulnerability in Windows 10! - Tekno Patch

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 4, 2022, 8:24 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2019-0797

11 Authorization Best Practices | Teleport

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 22, 2022, midnight
 Vulnerabilities: path traversal, directory traversal, cross-site request forgery...
Affected productsExternal IDs

Top 50 Cyber Security Interview Questions and Answers in 2022 | Edureka

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Dec. 11, 2021, 1:30 p.m.
 Vulnerabilities: code execution, code injection, brute force attack...
Affected productsExternal IDs

What is Network Scanning and how does it work?

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 15, 2022, 12:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

CVE-2022-0854 | Linux Kernel DMA Subsystem swiotlb.c DMA_FROM_DEVICE memory leak

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 3, 2022, midnight
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2022-0854

Security vulnerability: CVE-2022-25636, a heap out of bounds write in the Linux kernel. | Support | SUSE

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 12, 2022, midnight
 Vulnerabilities: memory access flaw
Affected productsExternal IDs
db: NVD ids: CVE-2022-25636

What Is SpringShell? What We Know About the SpringShell Vulnerability [Updated] - Flashpoint

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 30, 2022, 6:23 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22965, CVE-2022-22963, CVE-2022-27772