VARIoT latest news about IoT security

Cisco StarOS Software Key-Based SSH Authentication Privilege Escalation Vulnerability Trust: 3.75 Fetched: April 28, 2023, 9:15 a.m., Published: April 19, 2023, 3:47 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	cisco	model:	staros
vendor:	cisco	model:	cisco staros

SSA-472454 Related entries in the VARIoT vulnerabilities database: VAR-202304-0672 Trust: 4.75 Fetched: April 28, 2023, 9:15 a.m., Published: April 1, 2023, midnight	Vulnerabilities: command injection, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2023-28489

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers \| CISA Related entries in the VARIoT vulnerabilities database: VAR-201707-0964 Trust: 3.5 Fetched: April 28, 2023, 9:14 a.m., Published: April 28, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	cisco routers
vendor:	cisco	model:	router
vendor:	cisco	model:	routers

db:

NVD

ids:

CVE-2017-6742

CISA sounds alarm over Nexx smart home vulnerabilities • The Register Trust: 3.75 Fetched: April 28, 2023, 9:14 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2023-1752, CVE-2023-1749, CVE-2023-1750, CVE-2023-1748, CVE-2023-1751

Vulnerabilities impacting multiple QNAP operating systems (CVE-2022-27597, CVE-2022-27598) - Help Net Security Trust: 4.25 Fetched: April 28, 2023, 9:13 a.m., Published: April 4, 2023, 4:35 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2022-27597, CVE-2022-27598

Update 2: 3CX users under DLL-sideloading attack: What you need to know - Sophos News Related entries in the VARIoT vulnerabilities database: VAR-202303-2580 Trust: 3.5 Fetched: April 26, 2023, 9:14 a.m., Published: March 30, 2023, 1:39 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	android
vendor:	sophos	model:	firewall

db:

NVD

ids:

CVE-2023-29059

KB4072698: Windows Server and Azure Stack HCI guidance to protect against silicon-based microarchitectural and speculative execution side-channel vulnerabilities - Microsoft Support Related entries in the VARIoT vulnerabilities database: VAR-201808-0957, VAR-201905-0710, VAR-202206-1106, VAR-202206-1186, VAR-202206-1079, VAR-201805-0963, VAR-201801-1712, VAR-201808-0959, VAR-202206-1157, VAR-201808-0958, VAR-201801-1711, VAR-201905-0709, VAR-201801-0826, VAR-201905-0711 Trust: 3.0 Fetched: April 26, 2023, 9:12 a.m., Published: Dec. 20, 2019, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2018-3646, CVE-2018-12127, CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2018-3639, CVE-2017-5753, CVE-2018-3615, CVE-2018-11091, CVE-2019-11135, CVE-2022-21166, CVE-2018-3620, CVE-2017-5754, CVE-2018-12126, CVE-2017-5715, CVE-2018-12130

Google emits emergency security fix for Chrome zero-day • The Register Related entries in the VARIoT vulnerabilities database: VAR-202304-0672 Trust: 5.25 Fetched: April 26, 2023, 9:10 a.m., Published: -	Vulnerabilities: data injection, integer overflow, memory corruption...

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	siemens	model:	scalance
vendor:	siemens	model:	sicam a8000
vendor:	siemens	model:	sicam
vendor:	siemens	model:	scalance x-200

db:

NVD

ids:

CVE-2020-14521, CVE-2023-28489, CVE-2023-2033

Zero Day Initiative - TP-Link WAN-side Vulnerability CVE-2023-1389 Added to the Mirai Botnet Arsenal Related entries in the VARIoT vulnerabilities database: VAR-202303-1268 Trust: 4.75 Fetched: April 26, 2023, 9:10 a.m., Published: April 24, 2023, 3:03 p.m.	Vulnerabilities: code execution, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2023-1389

Schneider Electric issues patches for three vulnerabilities in APC UPS units \| SC Media Trust: 6.5 Fetched: April 26, 2023, 9:10 a.m., Published: April 24, 2023, 5:46 p.m.	Vulnerabilities: case sensitivity vulnerability, code execution, authentication bypass

Affected products

External IDs

vendor:	schneider electric	model:	monitor
vendor:	schneider	model:	monitor

db:

NVD

ids:

CVE-2023-29411, CVE-2023-29413, CVE-2023-29412

CVE-2023-0006 GlobalProtect App: Local File Deletion Vulnerability Trust: 3.75 Fetched: April 16, 2023, 9:28 a.m., Published: April 12, 2023, 4 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	palo	model:	networks
vendor:	palo	model:	palo alto networks globalprotect
vendor:	palo	model:	networks globalprotect
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	palo alto networks globalprotect
vendor:	palo alto networks	model:	networks globalprotect

db:

NVD

ids:

CVE-2023-0006

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation • Cyber-Wall \| Cyber Security \| Course \| Certification \| Penetration testing. Trust: 5.0 Fetched: April 16, 2023, 9:28 a.m., Published: April 14, 2023, 9:24 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2023-20963, CVE-2023-29492

Android April 2023 Security Updates fix several critical vulnerabilities - gHacks Tech News Trust: 4.5 Fetched: April 16, 2023, 9:25 a.m., Published: April 4, 2023, 4:42 a.m.	Vulnerabilities: code execution, information disclosure, denial of service

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	wifi

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability \| Secur Trust: 3.25 Fetched: April 16, 2023, 9:24 a.m., Published: April 15, 2023, 12:34 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

chrome

Stay Safe from Silent Cyberattacks on IoT Devices \| Premier Technologies Trust: 3.0 Fetched: April 16, 2023, 9:23 a.m., Published: -	Vulnerabilities: -

Affected products	External IDs

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability • Cyber-Wall \| Cyber Security \| Course \| Certification \| Penetration testing. Related entries in the VARIoT vulnerabilities database: VAR-202203-1921 Trust: 4.75 Fetched: April 16, 2023, 9:23 a.m., Published: April 15, 2023, 6:49 a.m.	Vulnerabilities: heap corruption

Affected products

External IDs

vendor:	google	model:	google chrome
vendor:	google	model:	chrome
vendor:	apple	model:	macos

db:

NVD

ids:

CVE-2023-2033, CVE-2022-3723, CVE-2022-1096, CVE-2022-1364, CVE-2022-4262

Watch out! Critical Unauthorized RCE Vulnerability in MSMQ Service - Check Point Software Trust: 4.5 Fetched: April 16, 2023, 9:21 a.m., Published: April 11, 2023, 5 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	trend	model:	security
vendor:	check point	model:	check point

db:

NVD

ids:

CVE-2023-21554

Top 10 Cybersecurity Threats to Watch Out for in 2023 Trust: 4.75 Fetched: April 16, 2023, 9:19 a.m., Published: April 10, 2023, midnight	Vulnerabilities: weak password

Affected products

External IDs

vendor:

cisco

model:

routers

DSA-2023-074: Dell Trusted Device Agent Security Update for an Improper Installation Permissions Vulnerability \| Dell Polska Trust: 3.0 Fetched: April 16, 2023, 9:19 a.m., Published: May 3, 2000, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2023-25542

OnePlus Community Trust: 3.0 Fetched: April 16, 2023, 9:17 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

oneplus

model:

oxygenos

VARIoT news about IoT security