VARIoT latest news about IoT security

Critical Vulnerability Found in More Than 150 HP Printer Models \| SecurityWeek.Com Trust: 3.5 Fetched: Jan. 18, 2022, 11:31 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	samsung	model:	printers
vendor:	samsung	model:	samsung
vendor:	samsung	model:	printer

db:

NVD

ids:

CVE-2021-39238, CVE-2021-39237

Cybersecurity Risk Lurks in a Common Industrial Operating System \| IndustryWeek Trust: 3.5 Fetched: Jan. 18, 2022, 11:31 a.m., Published: Jan. 18, 2022, 10:31 a.m.	Vulnerabilities: denial of service, code execution, buffer overflow

Affected products

External IDs

vendor:	siemens	model:	nucleus
vendor:	siemens	model:	nucleus net

83 million devices using the Kalay protocol are at risk for remote takeover. Are yours? - TechRepublic Trust: 3.0 Fetched: Jan. 18, 2022, 11:30 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: device impersonation

Affected products	External IDs

Senior Security Vulnerability Researcher - Stellen-ID: 1654264 \| Amazon.jobs Trust: 3.75 Fetched: Jan. 18, 2022, 11:30 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: memory corruption, privilege escalation

Affected products

External IDs

vendor:

wireshark

model:

wireshark

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Jan. 18, 2022, 11:28 a.m., Published: Jan. 12, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

BrakTooth vulnerabilities put Bluetooth users at risk - and some devices are going unpatched • The Register Trust: 3.75 Fetched: Jan. 18, 2022, 11:28 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: code execution, denial of service

Affected products	External IDs

Apple macOS Flaw Allows Kernel-Level Compromise \| Threatpost Trust: 3.0 Fetched: Jan. 18, 2022, 11:27 a.m., Published: Nov. 30, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

Why IoT devices are vulnerable? - Quora Trust: 3.75 Fetched: Jan. 18, 2022, 11:27 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: use after free, denial of service

Affected products	External IDs

Netgear router vulnerabilities affecting SME products fixed • The Register Trust: 3.5 Fetched: Jan. 18, 2022, 11:27 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: code execution, command injection

Affected products

External IDs

vendor:	netgear	model:	xr450
vendor:	netgear	model:	xr500
vendor:	netgear	model:	netgear router
vendor:	netgear	model:	r7800
vendor:	netgear	model:	wn3000rpv2
vendor:	netgear	model:	r9000
vendor:	netgear	model:	xr700
vendor:	netgear	model:	ex2700
vendor:	netgear	model:	router
vendor:	netgear	model:	r8900
vendor:	netgear	model:	d7800
vendor:	netgear	model:	wn3000rpv3
vendor:	netgear	model:	lbr20

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability \| WBZ NewsRadio 1030 Trust: 3.0 Fetched: Jan. 18, 2022, 11:27 a.m., Published: Jan. 14, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

icloud

Memory Bugs in BlackBerry's QNX Embedded OS Open Devices to Attacks \| Threatpost Trust: 3.0 Fetched: Jan. 18, 2022, 11:26 a.m., Published: Nov. 30, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

blackberry

model:

blackberry

Unauthenticated Command Injection Vulnerability Trust: 4.25 Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 12, 2022, midnight	Vulnerabilities: command injection

Affected products	External IDs

Security Notice: Critical Arbitrary File Delete Vulnerability in SonicWall SMA 100 Series Appliances \| SonicWall Related entries in the VARIoT vulnerabilities database: VAR-202109-1777 Trust: 3.75 Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	sonicwall	model:	sma 100
vendor:	sonicwall	model:	remote access

db:

NVD

ids:

CVE-2021-20034

How to Perform a Nmap Vulnerability Scan using NSE scripts Related entries in the VARIoT vulnerabilities database: VAR-201808-0455, VAR-201303-0197, VAR-201801-0027, VAR-201205-0305, VAR-200909-0342, VAR-201601-0029, VAR-201303-0027 Trust: 4.25 Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: memory corruption, denial of service

Affected products

External IDs

vendor:	proftpd	model:	proftpd
vendor:	thekelleys	model:	dnsmasq
vendor:	dnsmasq	model:	dnsmasq

db:

NVD

ids:

CVE-2018-15473, CVE-2013-0198, CVE-2012-1667, CVE-2016-10708, CVE-2012-1823, CVE-2009-2958, CVE-2002-0651, CVE-2016-0777, CVE-2002-0029, CVE-2012-3411, CVE-2017-15906

NVD - CVE-2021-40127 Trust: 4.0 Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	sf500-48p
vendor:	cisco	model:	sg200-50p_firmware
vendor:	cisco	model:	sf302-08
vendor:	cisco	model:	sg500xg-8f8t
vendor:	cisco	model:	sf500-24mp_firmware
vendor:	cisco	model:	sg500-52
vendor:	cisco	model:	sg500-52_firmware
vendor:	cisco	model:	sf300-24pp
vendor:	cisco	model:	sg300-10p
vendor:	cisco	model:	sg200-50
vendor:	cisco	model:	sg300-10pp
vendor:	cisco	model:	sg200-26fp
vendor:	cisco	model:	sg500-28p
vendor:	cisco	model:	sg300-10mp_firmware
vendor:	cisco	model:	sf302-08pp
vendor:	cisco	model:	sg200-26_firmware
vendor:	cisco	model:	sf500-48mp_firmware
vendor:	cisco	model:	sg500-28
vendor:	cisco	model:	sg500-28p_firmware
vendor:	cisco	model:	sg300-10pp_firmware
vendor:	cisco	model:	sf500-24p_firmware
vendor:	cisco	model:	sg500xg-8f8t_firmware
vendor:	cisco	model:	sg500x-24
vendor:	cisco	model:	sg500x-24_firmware
vendor:	cisco	model:	sg300-10_firmware
vendor:	cisco	model:	sf500-48mp
vendor:	cisco	model:	sg500-52mp
vendor:	cisco	model:	sf300-08
vendor:	cisco	model:	sf300-48pp
vendor:	cisco	model:	sg300-10p_firmware
vendor:	cisco	model:	sg500-28mpp_firmware
vendor:	cisco	model:	sg200-08p_firmware
vendor:	cisco	model:	sg200-08p
vendor:	cisco	model:	sg300-52_firmware
vendor:	cisco	model:	sf302-08p_firmware
vendor:	cisco	model:	sg200-08_firmware
vendor:	cisco	model:	sg500x-48_firmware
vendor:	cisco	model:	sg300-28pp
vendor:	cisco	model:	sg300-10mp
vendor:	cisco	model:	sg500-28_firmware
vendor:	cisco	model:	sg200-26
vendor:	cisco	model:	sg300-52p
vendor:	cisco	model:	sg300-28mp_firmware
vendor:	cisco	model:	sf500-48
vendor:	cisco	model:	sf300-08_firmware
vendor:	cisco	model:	sf300-48_firmware
vendor:	cisco	model:	sg500-28mpp
vendor:	cisco	model:	sf302-08mpp
vendor:	cisco	model:	sf500-24p
vendor:	cisco	model:	sf300-24
vendor:	cisco	model:	sf300-48p
vendor:	cisco	model:	sf302-08_firmware
vendor:	cisco	model:	sf300-48p_firmware
vendor:	cisco	model:	sg300-52
vendor:	cisco	model:	sg200-26p_firmware
vendor:	cisco	model:	sg300-28sfp
vendor:	cisco	model:	sg300-52mp
vendor:	cisco	model:	sg300-28p_firmware
vendor:	cisco	model:	sg500-52p
vendor:	cisco	model:	sf200e-24
vendor:	cisco	model:	sf500-48p_firmware
vendor:	cisco	model:	sg500x-48p
vendor:	cisco	model:	sf200-24fp_firmware
vendor:	cisco	model:	sf200-24fp
vendor:	cisco	model:	sg200-08
vendor:	cisco	model:	sf300-48pp_firmware
vendor:	cisco	model:	sf200-48p
vendor:	cisco	model:	sg200-26p
vendor:	cisco	model:	sg200-10fp
vendor:	cisco	model:	sf300-24pp_firmware
vendor:	cisco	model:	sg300-10
vendor:	cisco	model:	sf200e-48
vendor:	cisco	model:	sf300-48
vendor:	cisco	model:	sg200-26fp_firmware
vendor:	cisco	model:	sg200-50fp_firmware
vendor:	cisco	model:	sf300-24p
vendor:	cisco	model:	sg300-10mpp
vendor:	cisco	model:	sg500x-24p
vendor:	cisco	model:	sf300-24mp_firmware
vendor:	cisco	model:	sg500x-24p_firmware
vendor:	cisco	model:	sf200-48_firmware
vendor:	cisco	model:	sg500x-48p_firmware
vendor:	cisco	model:	sg300-28_firmware
vendor:	cisco	model:	sg300-20
vendor:	cisco	model:	sf302-08p
vendor:	cisco	model:	sg300-28
vendor:	cisco	model:	sf200e-24p_firmware
vendor:	cisco	model:	sf200-24p
vendor:	cisco	model:	sf300-24mp
vendor:	cisco	model:	sg200-50_firmware
vendor:	cisco	model:	sg300-28sfp_firmware
vendor:	cisco	model:	sg300-52p_firmware
vendor:	cisco	model:	sf200e-48_firmware
vendor:	cisco	model:	sf300-24p_firmware
vendor:	cisco	model:	sf302-08pp_firmware
vendor:	cisco	model:	sf200-48
vendor:	cisco	model:	sf302-08mp_firmware
vendor:	cisco	model:	sg200-10fp_firmware
vendor:	cisco	model:	sf200-24_firmware
vendor:	cisco	model:	sg200-18
vendor:	cisco	model:	sg200-50fp
vendor:	cisco	model:	sg300-20_firmware
vendor:	cisco	model:	sf200-24
vendor:	cisco	model:	sf200-48p_firmware
vendor:	cisco	model:	sg300-28p
vendor:	cisco	model:	sg200-18_firmware
vendor:	cisco	model:	sf500-24mp
vendor:	cisco	model:	sf302-08mp
vendor:	cisco	model:	sf302-08mpp_firmware
vendor:	cisco	model:	sg500-52p_firmware
vendor:	cisco	model:	sg500x-48
vendor:	cisco	model:	sf500-48_firmware
vendor:	cisco	model:	sf300-24_firmware
vendor:	cisco	model:	sg300-28mp
vendor:	cisco	model:	sf500-24_firmware
vendor:	cisco	model:	sf200e-24_firmware
vendor:	cisco	model:	sg200-50p
vendor:	cisco	model:	sf200-24p_firmware
vendor:	cisco	model:	sf200e-24p
vendor:	cisco	model:	sf500-24
vendor:	cisco	model:	sg300-52mp_firmware
vendor:	cisco	model:	sg300-28pp_firmware
vendor:	cisco	model:	sg300-10mpp_firmware
vendor:	cisco	model:	sg500-52mp_firmware

db:

NVD

ids:

CVE-2021-40127

Specification vulnerability in devices that speak Bluetooth is addressed Trust: 4.5 Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: information disclosure, brute force attack

Affected products

External IDs

vendor:

broadcom

model:

broadcom

Luxul \| Professional grade Wi-Fi and networking products \| Legrand AV Trust: 3.0 Fetched: Jan. 18, 2022, 11:25 a.m., Published: Dec. 1, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

serve

model:

serve

F-Secure discovers vulnerabilities affecting over 150 HP printer models \| F-Secure Press Room Trust: 4.0 Fetched: Jan. 18, 2022, 11:25 a.m., Published: Jan. 30, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-39238, CVE-2021-39237

SecurityWizardry.com - Vulnerability Details Trust: 4.75 Fetched: Jan. 18, 2022, 11:25 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	codesys	model:	web server
vendor:	codesys	model:	gateway
vendor:	codesys	model:	runtime
vendor:	codesys	model:	codesys
vendor:	codesys	model:	development system
vendor:	schneider electric	model:	modicon m340
vendor:	schneider electric	model:	connexium
vendor:	schneider electric	model:	m340
vendor:	schneider	model:	modicon m340
vendor:	schneider	model:	connexium
vendor:	schneider	model:	m340

Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN \| Threatpost Trust: 4.0 Fetched: Jan. 18, 2022, 11:24 a.m., Published: Jan. 14, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:

cisco

model:

sd-wan

VARIoT news about IoT security