Sign-up

VARIoT news about IoT security

Akamai Blog | Mirai Botnet Abusing Log4j Vulnerability

Trust: [4.0, []]

Fetched: March 10, 2022, 12:54 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

VMware patches critical security vulnerabilities • The Register

Trust: [5.0, []]

Fetched: March 9, 2022, 11:15 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2021-22050, CVE-2020-4004, CVE-2021-22043, CVE-2021-22041, CVE-2021-22042, CVE-2021-22040

NPort IAW5000A-I/O Series Serial Device Servers Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202012-0501, VAR-202012-0523, VAR-202012-0503, VAR-202012-0506, VAR-202012-0507, VAR-202012-0504

Trust: [4.0, []]

Fetched: March 9, 2022, 11:15 a.m., Published: -
 Vulnerabilities: information exposure, session fixation, weak password
Affected productsExternal IDs
db: NVD ids: CVE-2020-25190, CVE-2020-25153, CVE-2020-25192, CVE-2020-25196, CVE-2020-25198, CVE-2020-25194

Vulnerability in Web Services on Devices (WSD) API - Microsoft Security Response Center

Trust: [3.75, []]

Fetched: March 3, 2022, 2:21 p.m., Published: -
 Vulnerabilities: code execution, application crash
Affected productsExternal IDs
db: NVD ids: CVE-2009-2512

OESIS Framework February 15, 2022 Release | OPSWAT

Related entries in the VARIoT vulnerabilities database: VAR-202108-1233, VAR-202108-1238, VAR-202108-1239

Trust: [3.0, []]

Fetched: March 3, 2022, 2:21 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-30897, CVE-2021-37852, CVE-2022-0538, CVE-2021-30923, CVE-2015-5165, CVE-2021-30924

Security Vulnerabilities fixed in Firefox ESR 91.6 - Mozilla

Trust: [3.0, []]

Fetched: Feb. 24, 2022, 1:33 p.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs

Log4J2 Vulnerability to Zero-Day Exploit within CodeSonar and CodeSentry - GrammaTech

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-2011, VAR-202112-0562, VAR-202112-1782

Trust: [3.75, []]

Fetched: Feb. 24, 2022, 1:33 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-44832, CVE-2021-45046, CVE-2021-45105

More than 100,000 Zyxel networking products could be vulnerable to a hardcoded credential vulnerability (CVE-2020-29583) potentially allowing cybercriminal device takeover. | ConspiracyRevelation.Com

Related entries in the VARIoT vulnerabilities database: VAR-202012-0977

Trust: [3.0, []]

Fetched: Feb. 22, 2022, 10:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-29583

Log4j Vulnerability Sparks a Warning From the FTC | Davis Wright Tremaine

Trust: [3.0, []]

Fetched: Feb. 18, 2022, 8:38 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034) | Web Hosting Talk

Trust: [3.75, []]

Fetched: Feb. 16, 2022, 7:13 a.m., Published: -
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-4034

Vulnerability In This Cisco Software Could Allow Hackers Access | Mid-Atlantic Computer Solutions

Trust: 5.5

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: staros
vendor: cisco model: cisco staros
db: NVD ids: CVE-2022-20649

Vulnerability In This Cisco Software Could Allow Hackers Access | The NIC GROUP INC.

Trust: 5.5

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: staros
vendor: cisco model: cisco staros
db: NVD ids: CVE-2022-20649

Remote code execution vulnerability present in SonicWall SMA 100 series appliances | Cyber.gov.au

Related entries in the VARIoT vulnerabilities database: VAR-202112-0361

Trust: 5.75

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: sonicwall model: remote access
vendor: sonicwall model: sma 100
db: NVD ids: CVE-2021-20038

Alert Regarding Vulnerabilities in SonicWall SMA 100 Series

Related entries in the VARIoT vulnerabilities database: VAR-202112-0361

Trust: 4.75

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: sonicwall model: sma100
vendor: sonicwall model: sma 100
db: NVD ids: CVE-2021-20038

Researcher Reveals Alleged Zero-Day Vulnerabilities in NUUO NVRmini2 Recording Device - Annuaire 770

Trust: 5.5

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: code execution, path traversal, command injection
Affected productsExternal IDs
vendor: nuuo model: network video recorder
vendor: nuuo model: nvrmini2
db: NVD ids: CVE-2011-5325

log4shell/README.md at main · NCSC-NL/log4shell · GitHub

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011

Trust: 3.0

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-44832

Basefarm Blog - Security, Cloud and Big Data

Trust: 3.0

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: iphone

Vulnerability In This Cisco Software Could Allow Hackers Access | TRG Networking

Trust: 5.5

Fetched: Feb. 8, 2022, 12:54 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: staros
vendor: cisco model: cisco staros
db: NVD ids: CVE-2022-20649

Log4j: The Vulnerability and Solution | Developer.com

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-0566, VAR-202112-1782, VAR-202112-0562

Trust: 5.75

Fetched: Feb. 3, 2022, 11:02 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44832, CVE-2021-44228, CVE-2021-45105, CVE-2021-45046

How Hidden Vulnerabilities will Lead to Mobile Device Compromises - MalwareDefinition.com

Trust: 5.0

Fetched: Feb. 3, 2022, 11:02 a.m., Published: -
 Vulnerabilities: session hijacking
Affected productsExternal IDs
vendor: google model: wifi