VARIoT latest news about IoT security

Researchers warn of a critical vulnerability that puts a variety of Windows devices at risk Trust: 3.0 Fetched: Jan. 29, 2023, 9:07 a.m., Published: Jan. 27, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2022-34689

10 Best Vulnerability Scanner Tools - 2023 (Updated) Trust: 3.75 Fetched: Jan. 29, 2023, 9:06 a.m., Published: Jan. 8, 2023, 2:59 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

tripwire

model:

ip360

Attackers Crafted Custom Malware for Fortinet Zero-Day Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 3.5 Fetched: Jan. 29, 2023, 9:06 a.m., Published: Jan. 19, 2023, 9:30 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	sonicwall	model:	ssl-vpn
vendor:	fortigate	model:	fortios

db:

NVD

ids:

CVE-2022-42475

Millions of Attacks to Exploit Realtek SDK Vulnerability Trust: 5.5 Fetched: Jan. 29, 2023, 9:05 a.m., Published: Jan. 27, 2023, 12:07 p.m.	Vulnerabilities: memory corruption, command injection, code execution

Affected products

External IDs

vendor:	palo	model:	networks
vendor:	realtek	model:	realtek sdk
vendor:	asus	model:	asus
vendor:	asus	model:	routers
vendor:	palo alto networks	model:	networks
vendor:	huawei	model:	huawei

db:

NVD

ids:

CVE-2021-35395, CVE-2021-35394

Samsung Galaxy Vulnerabilities May Cause Unwanted Execution Related entries in the VARIoT vulnerabilities database: VAR-202302-0598 Trust: 5.75 Fetched: Jan. 27, 2023, 9:17 a.m., Published: Jan. 24, 2023, 2:45 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	google	model:	android
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	samsung galaxy

db:

NVD

ids:

CVE-2023-21433

Massive IoT Hack: 190 Device Models from 66 Manufacturers Vulnerable to Realtek SDK Exploit! - Trust: 6.0 Fetched: Jan. 27, 2023, 9:16 a.m., Published: Jan. 26, 2023, 10:02 a.m.	Vulnerabilities: code execution, denial of service, command execution...

Affected products

External IDs

vendor:

realtek

model:

realtek sdk

db:

NVD

ids:

CVE-2021-35394

New Boldmove Linux malware used to backdoor Fortinet devices - SPIXNET C2S Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 3.75 Fetched: Jan. 27, 2023, 9:16 a.m., Published: Jan. 24, 2023, 2:55 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2022-42475

Hackers exploited critical Realtek SDK bug in millions of attacks to infect smart devices Trust: 5.25 Fetched: Jan. 27, 2023, 9:16 a.m., Published: Jan. 26, 2023, 10:26 a.m.	Vulnerabilities: code execution, memory corruption, command injection

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	palo alto networks	model:	networks
vendor:	palo	model:	networks

db:

NVD

ids:

CVE-2021-35394, CVE-2021-35395

Apple users with certain old iPhone, iPad devices should install this security update \| Fox News Trust: 3.75 Fetched: Jan. 27, 2023, 9:15 a.m., Published: May 27, 2023, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	ipad air
vendor:	apple	model:	ipad
vendor:	apple	model:	iphone
vendor:	apple	model:	ipod touch

Windows CryptoAPI vulnerability exploit issued \| SC Media Trust: 3.25 Fetched: Jan. 27, 2023, 9:10 a.m., Published: Jan. 26, 2023, 7:32 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

trend

model:

security

Many ICS flaws remain unpatched as attacks against critical infrastructure rise - ARN Trust: 3.5 Fetched: Jan. 27, 2023, 9:10 a.m., Published: Jan. 27, 2023, midnight	Vulnerabilities: code execution, path traversal, buffer overflow...

Affected products

External IDs

vendor:

trend

model:

security

Qualcomm UEFI Flaws Expose Microsoft, Lenovo, Samsung Devices to Attacks - SecurityWeek Trust: 3.5 Fetched: Jan. 27, 2023, 9:09 a.m., Published: Jan. 6, 2023, 11:29 a.m.	Vulnerabilities: code execution, information disclosure

Affected products

External IDs

vendor:	lenovo	model:	system
vendor:	lenovo	model:	updates
vendor:	lenovo	model:	thinkpad

Attacks Targeting Realtek SDK Vulnerability Ramping Up - SecurityWeek Trust: 5.75 Fetched: Jan. 27, 2023, 9:09 a.m., Published: Jan. 24, 2023, 2:47 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	palo	model:	networks
vendor:	huawei	model:	huawei
vendor:	asus	model:	routers
vendor:	asus	model:	asus
vendor:	palo alto networks	model:	networks
vendor:	tp-link	model:	routers

db:

NVD

ids:

CVE-2021-35394

BMC Firmware Vulnerabilities Expose OT, IoT Devices to Remote Attacks - SecurityWeek Trust: 3.5 Fetched: Jan. 27, 2023, 9:08 a.m., Published: Nov. 22, 2022, midnight	Vulnerabilities: code execution, access control issue, command injection

Affected products

External IDs

vendor:	asus	model:	asus
vendor:	asus	model:	bmc firmware
vendor:	lenovo	model:	system

Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability - McHugo.com Related entries in the VARIoT vulnerabilities database: VAR-202212-1751 Trust: 3.75 Fetched: Jan. 26, 2023, 10:23 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	ipad air
vendor:	apple	model:	ipod touch
vendor:	apple	model:	iphone
vendor:	apple	model:	webkit
vendor:	apple	model:	tvos
vendor:	apple	model:	watchos
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	macos

db:

NVD

ids:

CVE-2022-42856

Apple releases updates for older devices to fix an actively exploited vulnerability - Related entries in the VARIoT vulnerabilities database: VAR-202212-1751 Trust: 4.75 Fetched: Jan. 26, 2023, 10:23 a.m., Published: Jan. 24, 2023, 9:21 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	ipod touch
vendor:	apple	model:	watchos
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	tvos

db:

NVD

ids:

CVE-2022-42856

Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability - Domedigita Related entries in the VARIoT vulnerabilities database: VAR-202212-1751 Trust: 5.75 Fetched: Jan. 26, 2023, 10:20 a.m., Published: July 27, 2018, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	ipod touch
vendor:	apple	model:	watchos
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	tvos

db:

NVD

ids:

CVE-2022-42856

Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability - BEKER Related entries in the VARIoT vulnerabilities database: VAR-202212-1751 Trust: 5.75 Fetched: Jan. 26, 2023, 10:20 a.m., Published: Jan. 24, 2023, 9:21 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	ipod touch
vendor:	apple	model:	watchos
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	tvos

db:

NVD

ids:

CVE-2022-42856

Apple Issues Updates for Older Devices to Fix Actively Exploited Vulnerability - Infocerts LLP Related entries in the VARIoT vulnerabilities database: VAR-202212-1751 Trust: 6.25 Fetched: Jan. 26, 2023, 10:19 a.m., Published: Jan. 25, 2023, 3:24 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

webkit

db:

NVD

ids:

CVE-2022-42856

Hackers exploited vulnerability in Fortinet devices - On Universal.com Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 4.0 Fetched: Jan. 26, 2023, 10:19 a.m., Published: Jan. 25, 2023, 3:16 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

fortigate

model:

fortios

db:

NVD

ids:

CVE-2022-42475

VARIoT news about IoT security