Sign-up

VARIoT news about IoT security

Log4Shell: The New Zero-Day Vulnerability in Log4j

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 15, 2021, 9:57 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228

Vulnerabilities CVE-2021-3922, CVE-2021-3969 in ImController of Lenovo Notebooks | Born's Tech and Windows World

Related entries in the VARIoT vulnerabilities database: VAR-202112-2487, VAR-202112-2486

Trust: 3.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 20, 2021, 10:25 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lenovo model: system
vendor: lenovo model: yoga
vendor: lenovo model: thinkpad
vendor: lenovo model: notebook
db: NVD ids: CVE-2021-3969, CVE-2021-3922

What is Log4j vulnerability, and who’s affected? | NordPass

Trust: 3.0

Fetched: Jan. 14, 2022, 11:48 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud

Newly Found Malware Threatens IoT Devices

Related entries in the VARIoT vulnerabilities database: VAR-202111-1151

Trust: 5.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 4, 2022, 7:58 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: serve model: serve
db: NVD ids: CVE-2021-0157

Security Notice: NVIDIA Response to Log4j Vulnerabilities - December 2021 | NVIDIA

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782

Trust: 3.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 17, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2021-45105

How To Mitigate Log4j Vulnerabilities For F5 Devices Using ADC+

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.5

Fetched: Jan. 14, 2022, 11:48 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228

More than a hundred HP printer models are vulnerable to hacking | CyberNews

Trust: 5.0

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 6, 2021, 12:52 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-39238, CVE-2021-39237

Microsoft observed many attackers adding exploits of Log4j vulnerabilities - MSPoweruser

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-0566, VAR-202112-0562

Trust: 4.25

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 6, 2022, 12:02 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44832, CVE-2021-44228, CVE-2021-45046

What Is Juice Jacking?

Trust: 3.5

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 11, 2022, 12:14 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: blackberry model: smartphone
vendor: blackberry model: blackberry

Medical Device Security: Hacking Intelligent Medical Devices to Enhance Your Organization's Safety

Trust: 3.5

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 12, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-3084, CVE-2021-3083, CVE-2021-3085

Millions of Wi-Fi routers vulnerable to hacker attack - what you need to do | Tom's Guide

Trust: 4.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 11, 2022, 5:42 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: tp-link model: ac1750
vendor: tp-link model: archer c1200
vendor: tp-link model: archer c7
vendor: tenda model: adsl
vendor: tenda model: router
vendor: d-link model: ac2600
vendor: d-link model: router
vendor: kcodes model: netusb
vendor: netgear model: d7800
vendor: netgear model: r6400v2
vendor: netgear model: router
vendor: netgear model: r6700v3
vendor: netgear model: r6400
vendor: netgear model: r6700

LambdaTest's Response to Log4j Vulnerability [Updated 23.12.2021] | LambdaTest

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 3.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 23, 2021, 7:48 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

Log4j High-Risk Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 6.0

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 17, 2021, 5:22 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228

Ring hacked: How to protect your Ring smart device | NordVPN

Trust: 3.5

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 23, 2021, 9:21 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: ring model: video doorbells
vendor: ring model: ring
vendor: essential model: phone

Log4j Log4Shell Vulnerability Q&A | JFrog

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 21, 2021, 2:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Siemens Update for SIPROTEC 5 Devices - ISSSource

Related entries in the VARIoT vulnerabilities database: VAR-202201-0855

Trust: 5.75

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 13, 2022, 7:03 p.m.
 Vulnerabilities: input validation vulnerability
Affected productsExternal IDs
vendor: siemens model: siprotec
vendor: siemens model: siprotec 5
db: NVD ids: CVE-2021-41769

Apache Log4j Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 3.25

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-4428, CVE-2021-44228, CVE-2021-45046

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 7, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

Is it safe to use an old, outdated or preowned Android phone? - CNET

Trust: 3.5

Fetched: Jan. 14, 2022, 11:48 a.m., Published: Jan. 4, 2022, 6:58 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: sony model: camera
vendor: nokia model: nokia
vendor: nokia model: series
vendor: google model: pixel
vendor: google model: android
vendor: google model: nexus
vendor: google model: home
vendor: samsung model: samsung galaxy
vendor: samsung model: android phone
vendor: samsung model: galaxy
vendor: samsung model: samsung
vendor: samsung model: galaxy s6

Tech Tuesday: Recent log4j Vulnerability Vulnerabilty Being Actively Exploited in the Wild | DailyRidge

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.0

Fetched: Jan. 14, 2022, 11:48 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228