Sign-up

VARIoT news about IoT security

Cisco Reports Critical IP Phone Vulnerability | MetroMSP

Related entries in the VARIoT vulnerabilities database: VAR-202212-0864

Trust: 4.5

Fetched: Dec. 27, 2022, 9:21 a.m., Published: -
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: link layer discovery protocol
vendor: cisco model: ip phone
vendor: cisco model: ip phone 7800
vendor: cisco model: series
db: NVD ids: CVE-2022-20968

State-sponsored attackers actively exploiting RCE in Citrix devices, patch ASAP! (CVE-2022-27518) - Help Net Security

Trust: 5.75

Fetched: Dec. 27, 2022, 9:20 a.m., Published: Dec. 13, 2022, 1:27 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: palo model: networks
db: NVD ids: CVE-2022-27518

Cisco IP Phone Vulnerability Let Attacker Execute Remote Code

Related entries in the VARIoT vulnerabilities database: VAR-202212-0864

Trust: 5.5

Fetched: Dec. 27, 2022, 9:19 a.m., Published: Dec. 10, 2022, 2 a.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: ip phone 7800 series
vendor: cisco model: ip phone 7800
vendor: cisco model: ip phone 8800 series
vendor: cisco model: series
vendor: cisco model: voice vlan
vendor: cisco model: ip phone 8800
vendor: cisco model: wireless ip phone 8821
vendor: cisco model: ip phone
vendor: cisco model: ip phone 8821
db: NVD ids: CVE-2022-20968

OT:Icefall Continues With Vulnerabilities in Festo, Codesys Products | SecurityWeek.Com

Trust: 3.75

Fetched: Dec. 27, 2022, 9:19 a.m., Published: Dec. 27, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: codesys model: codesys
vendor: codesys model: runtime
db: NVD ids: CVE-2022-22515, CVE-2022-3270, CVE-2022-4048, CVE-2022-3079, CVE-2022-31806

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit) | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202101-1926

Trust: 4.5

Fetched: Dec. 27, 2022, 9:11 a.m., Published: Jan. 26, 2021, 6:09 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: perl model: perl
vendor: todd model: sudo
db: NVD ids: CVE-2021-3156

Samba Issues Security Updates to Patch Multiple High-Severity Vulnerabilities - PlanetJon Network

Trust: 3.25

Fetched: Dec. 25, 2022, 9:23 a.m., Published: Dec. 17, 2022, 6:54 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-45141, CVE-2022-37967, CVE-2022-37966, CVE-2022-38023

Last Microsoft Edge Update for 2022 | Eagle Networks, Inc.

Trust: 5.0

Fetched: Dec. 25, 2022, 9:22 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-4262

SEC Consult on Twitter: "Critical vulnerabilities are still haunting over 36k #Zyxel users and can be turned into remote root code execution on a lot of devices with a simple @metasploit module like this one: https://t.co/UUugeMkIvD #exploit https://t.co/coNO1ssS0x" / Twitter

Trust: 3.25

Fetched: Dec. 25, 2022, 9:22 a.m., Published: Dec. 25, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Last Microsoft Edge Update for 2022 | Networking Specialists, Inc.

Trust: 5.0

Fetched: Dec. 25, 2022, 9:22 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-4262

Last Microsoft Edge Update for 2022 | CST Group Inc.

Trust: 5.0

Fetched: Dec. 25, 2022, 9:21 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-4262

Last Microsoft Edge Update for 2022 | Micro Support Group Incorporated

Trust: 5.0

Fetched: Dec. 25, 2022, 9:21 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-4262

Mac Gatekeeper bypass vulnerability fixed by Apple

Trust: 3.75

Fetched: Dec. 25, 2022, 9:20 a.m., Published: Dec. 20, 2022, 1:47 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos

Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Web Client Services Client-Side Request Smuggling Vulnerability

Trust: 3.0

Fetched: Dec. 25, 2022, 9:19 a.m., Published: Dec. 16, 2022, 6 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: cisco firepower management center
vendor: cisco model: firepower management center
vendor: cisco model: vpn client
vendor: cisco model: firepower threat defense
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa software
vendor: cisco model: firepower threat defense software
vendor: cisco model: clientless ssl vpn
vendor: cisco model: device manager

Siemens RUGGEDCOM Devices (Update D) | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202203-0739

Trust: 3.5

Fetched: Dec. 25, 2022, 9:19 a.m., Published: Dec. 1, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: ruggedcom ros
vendor: siemens model: rsl910
vendor: siemens model: ruggedcom
db: NVD ids: CVE-2021-37209

Critical Vulnerability in Hikvision Wireless Bridges Allows CCTV Hacking | SecurityWeek.Com

Trust: 4.75

Fetched: Dec. 25, 2022, 9:18 a.m., Published: Dec. 25, 2022, midnight
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-28173

Siemens Multiple Vulnerabilities in SCALANCE Products | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202207-0621, VAR-202212-1133, VAR-202212-1134, VAR-202212-1136

Trust: 5.25

Fetched: Dec. 25, 2022, 9:17 a.m., Published: Dec. 1, 2022, midnight
 Vulnerabilities: code injection, improper validation
Affected productsExternal IDs
vendor: siemens model: scalance sc642-2c
vendor: siemens model: scalance xc206-2sfp g
vendor: siemens model: scalance xr524
vendor: siemens model: scalance xr326-2c poe wg
vendor: siemens model: scalance xc216-4c g eec
vendor: siemens model: scalance xb208
vendor: siemens model: scalance xr526
vendor: siemens model: scalance sc636-2c
vendor: siemens model: scalance sc632-2c
vendor: siemens model: scalance xc206-2sfp g eec
vendor: siemens model: scalance xr528
vendor: siemens model: scalance sc622-2c
vendor: siemens model: scalance xb213-3ld
vendor: siemens model: scalance xf204 dna
vendor: siemens model: scalance xc208
vendor: siemens model: scalance xc206-2g poe eec
vendor: siemens model: scalance xb213-3
vendor: siemens model: scalance xc208g eec
vendor: siemens model: scalance xp216
vendor: siemens model: scalance xc224-4c g
vendor: siemens model: scalance xr324wg
vendor: siemens model: scalance xr552
vendor: siemens model: scalance xc216-4c g
vendor: siemens model: scalance xp208poe eec
vendor: siemens model: scalance xc206-2sfp eec
vendor: siemens model: scalance xc216-4c
vendor: siemens model: scalance xp216eec
vendor: siemens model: scalance sc646-2c
vendor: siemens model: ruggedcom rm1224
vendor: siemens model: scalance xr526-8c
vendor: siemens model: scalance xc208g poe
vendor: siemens model: scalance xr524-8c
vendor: siemens model: scalance xc206-2
vendor: siemens model: scalance s615
vendor: siemens model: scalance xc224
vendor: siemens model: scalance xb205-3ld
vendor: siemens model: scalance xc206-2sfp
vendor: siemens model: scalance xc208g
vendor: siemens model: scalance xc216eec
vendor: siemens model: scalance xc208eec
vendor: siemens model: scalance xf204-2ba dna
vendor: siemens model: scalance xc206-2g poe
vendor: siemens model: scalance xp208eec
vendor: siemens model: scalance xp208
vendor: siemens model: scalance xc216
vendor: siemens model: scalance xf204
vendor: siemens model: scalance xb205-3
vendor: siemens model: scalance
vendor: siemens model: scalance xb216
vendor: siemens model: ruggedcom
vendor: siemens model: scalance xr328-4c wg
vendor: siemens model: scalance xr528-6m
vendor: siemens model: scalance xc224-4c g eec
vendor: siemens model: scalance xp216poe eec
db: NVD ids: CVE-2022-46144, CVE-2022-34821, CVE-2022-46140, CVE-2022-46142, CVE-2022-46143

Apple issues fix for ‘actively exploited’ WebKit zero-day vulnerability | IT PRO

Related entries in the VARIoT vulnerabilities database: VAR-202209-0759, VAR-202212-1751

Trust: 3.75

Fetched: Dec. 25, 2022, 9:16 a.m., Published: May 25, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: icloud
vendor: apple model: tvos
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2022-32917, CVE-2022-42856

Industrial device vulnerabilities increase by 50% in some cases as vendors ignore warnings - CIO World Asia

Trust: 3.75

Fetched: Dec. 25, 2022, 9:15 a.m., Published: Dec. 12, 2022, 5:14 a.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs

OT:ICEFALL Continues: Vedere Labs Discloses Three New Vulnerabilities Affecting OT Products | Forescout

Related entries in the VARIoT vulnerabilities database: VAR-201501-0401

Trust: 4.5

Fetched: Dec. 25, 2022, 9:14 a.m., Published: Nov. 30, 2022, 12:30 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: wibu-systems model: codemeter
vendor: codesys model: codesys
vendor: codesys model: control
vendor: codesys model: runtime
vendor: wibu model: codemeter
db: NVD ids: CVE-2022-3079, CVE-2022-3270, CVE-2014-9195, CVE-2022-22515, CVE-2022-31806, CVE-2022-4048

Cisco Reports Critical IP Phone Vulnerability | QPC Security

Related entries in the VARIoT vulnerabilities database: VAR-202212-0864

Trust: 4.5

Fetched: Dec. 25, 2022, 9:14 a.m., Published: -
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: ip phone
vendor: cisco model: link layer discovery protocol
vendor: cisco model: series
vendor: cisco model: ip phone 7800
db: NVD ids: CVE-2022-20968