Sign-up

VARIoT news about IoT security

Time is Ticking on a New OpenSSL Vulnerability - Armis

Related entries in the VARIoT vulnerabilities database: VAR-201609-0352

Trust: 4.75

Fetched: Jan. 24, 2023, 9:39 a.m., Published: Oct. 29, 2022, 5:40 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: routers
db: NVD ids: CVE-2016-6309

CISA Warns of Critical Vulnerabilities in 3 Industrial Control System Software

Related entries in the VARIoT vulnerabilities database: VAR-202211-0095

Trust: 5.75

Fetched: Jan. 24, 2023, 9:39 a.m., Published: Nov. 4, 2022, 10:01 a.m.
 Vulnerabilities: file upload issue, code execution, path traversal...
Affected productsExternal IDs
vendor: nokia model: impact
db: NVD ids: CVE-2022-41607, CVE-2022-3703, CVE-2022-2483, CVE-2022-2482, CVE-2022-2484, CVE-2022-40981, CVE-2022-2969

How often should I scan for security vulnerabilities? -

Related entries in the VARIoT vulnerabilities database: VAR-202008-0248, VAR-202112-0566, VAR-202108-1914

Trust: 3.0

Fetched: Jan. 24, 2023, 9:38 a.m., Published: Oct. 25, 2022, 3:41 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-1472, CVE-2021-21972, CVE-2021-26855, CVE-2021-44228, CVE-2021-36942

Old vulnerabilities in Cisco products actively exploited in the wildSecurity Affairs

Related entries in the VARIoT vulnerabilities database: VAR-201709-0655, VAR-201803-1387, VAR-201803-1369, VAR-201802-0594

Trust: 4.75

Fetched: Jan. 24, 2023, 9:38 a.m., Published: Dec. 19, 2022, 9:07 p.m.
 Vulnerabilities: buffer overflow, command injection
Affected productsExternal IDs
vendor: cisco model: nx-os
vendor: cisco model: ios xe software
vendor: cisco model: ios software
vendor: cisco model: rv132w
vendor: cisco model: cisco hyperflex
vendor: cisco model: cisco ios
vendor: cisco model: rv134w
vendor: cisco model: routers
vendor: cisco model: ios xe
vendor: cisco model: cisco ios xe
vendor: cisco model: hyperflex
db: NVD ids: CVE-2017-12240, CVE-2021-1497, CVE-2018-0171, CVE-2018-0147, CVE-2018-0125

Cisco identifies vulnerabilities in Identity Services Engine | IT World Canada News

Related entries in the VARIoT vulnerabilities database: VAR-202211-0845, VAR-202211-1027, VAR-202211-0352, VAR-202211-1056, VAR-202211-1102, VAR-202211-1003

Trust: 5.5

Fetched: Jan. 24, 2023, 9:37 a.m., Published: Nov. 28, 2022, 4:46 p.m.
 Vulnerabilities: request forgery, cross-site request forgery, cross-site scripting
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: network access control
vendor: cisco model: cisco identity services engine
vendor: cisco systems model: identity services engine
vendor: cisco systems model: network access control
vendor: cisco systems model: cisco identity services engine
db: NVD ids: CVE-2022-20963, CVE-2022-20965, CVE-2022-20961, CVE-2022-20964, CVE-2022-20967, CVE-2022-20966

A vulnerability in the Device Management Servlet... · CVE-2023-20020 · GitHub Advisory Database · GitHub

Related entries in the VARIoT vulnerabilities database: VAR-202301-0887

Trust: 5.25

Fetched: Jan. 24, 2023, 9:36 a.m., Published: Jan. 20, 2023, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2023-20020

11 Reports and Vulnerability Management - Greenbone Enterprise Appliance 22.04.6 documentation

Trust: 3.5

Fetched: Jan. 24, 2023, 9:34 a.m., Published: Jan. 11, 2023, midnight
 Vulnerabilities: sql injection, code execution, traversal attack
Affected productsExternal IDs
vendor: trend model: security

Critical OpenSSL vulnerability causes security industry to hold its breath | Cybersecurity Dive

Trust: 3.0

Fetched: Jan. 24, 2023, 9:28 a.m., Published: Nov. 1, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point

Threat Advisory: High Severity OpenSSL Vulnerabilities

Trust: 5.5

Fetched: Jan. 24, 2023, 9:28 a.m., Published: Nov. 1, 2022, 7:03 p.m.
 Vulnerabilities: buffer overflow, denial of service, code execution
Affected productsExternal IDs
vendor: clamav model: clamav
vendor: cisco model: clamav
vendor: cisco model: adaptive security appliance
vendor: cisco model: meraki mx
vendor: cisco model: web security appliance
vendor: cisco model: firepower
vendor: cisco model: umbrella
db: NVD ids: CVE-2022-3786, CVE-2022-3602

A vulnerability in dynamic access policies (DAP)... · CVE-2022-20947 · GitHub Advisory Database · GitHub

Related entries in the VARIoT vulnerabilities database: VAR-202211-0561

Trust: 6.0

Fetched: Jan. 24, 2023, 9:27 a.m., Published: Nov. 16, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
db: NVD ids: CVE-2022-20947

Google Accuses Spanish Security Firm of Developing Exploit Tools for Chrome And Microsoft Defender | Spiceworks

Trust: 4.75

Fetched: Jan. 24, 2023, 9:26 a.m., Published: Dec. 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome
db: NVD ids: CVE-2022-26485, CVE-2021-42298

Multiple High Severity Vulnerabilities in Cisco Products | Q-CERT

Related entries in the VARIoT vulnerabilities database: VAR-202211-0352

Trust: 5.75

Fetched: Jan. 24, 2023, 9:25 a.m., Published: -
 Vulnerabilities: cross-site request forgery, improper validation, sql injection...
Affected productsExternal IDs
vendor: cisco model: cisco web security appliance
vendor: cisco model: email security appliance
vendor: cisco model: cisco email security appliance
vendor: cisco model: cisco identity services engine
vendor: cisco model: web security appliance
vendor: cisco model: identity services engine
db: NVD ids: CVE-2022-20867, CVE-2022-20868, CVE-2022-20961

Configure Microsoft Defender for Endpoint on iOS features | Microsoft Learn

Trust: 3.0

Fetched: Jan. 24, 2023, 9:24 a.m., Published: Dec. 12, 2022, 11:40 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad

Delta Electronics Deserialization Vulnerability - SonicWall

Trust: 4.75

Fetched: Jan. 24, 2023, 9:23 a.m., Published: Nov. 23, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-38142

SQL Injection vulnerability in ManageEngine Password Manager Pro, PAM360 and Access Manager Plus

Trust: 4.25

Fetched: Jan. 24, 2023, 9:22 a.m., Published: Jan. 24, 4305, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs

Pair of Galaxy App Store Bugs Offer Cyberattackers Mobile Device Access

Related entries in the VARIoT vulnerabilities database: VAR-202302-0598, VAR-202302-0502

Trust: 3.75

Fetched: Jan. 24, 2023, 9:22 a.m., Published: Jan. 23, 2023, 10 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: mobile
db: NVD ids: CVE-2023-21433, CVE-2023-21434

Suspected Chinese Threat Actors Exploiting FortiOS Vulnerability (CVE-2022-42475) | Mandiant

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 3.5

Fetched: Jan. 24, 2023, 9:20 a.m., Published: Jan. 30, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: ssl-vpn
vendor: sonicwall model: email security
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-42475, CVE-2022-49475

Microsoft Uncovers macOS Flaw That Let Hackers Bypass Gatekeeper Security | Spiceworks

Related entries in the VARIoT vulnerabilities database: VAR-202212-1290

Trust: 3.5

Fetched: Jan. 24, 2023, 9:19 a.m., Published: Dec. 22, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
db: NVD ids: CVE-2022-42821

Major Vulnerability Discovered in KACE

Trust: 5.5

Fetched: Jan. 24, 2023, 9:19 a.m., Published: July 3, 2019, 10:46 p.m.
 Vulnerabilities: script execution, sql injection
Affected productsExternal IDs
vendor: quest model: kace systems management appliance
vendor: quest model: kace systems management
vendor: quest kace model: kace systems management appliance
vendor: quest kace model: kace systems management
db: NVD ids: CVE-2018-0504

Binarly Discloses Multiple Firmware Vulnerabilities in Qualcomm and Lenovo ARM-based Devices | Business Wire

Related entries in the VARIoT vulnerabilities database: VAR-202301-0521

Trust: 4.5

Fetched: Jan. 24, 2023, 9:18 a.m., Published: Jan. 9, 2023, midnight
 Vulnerabilities: memory leak, buffer overflow, code execution...
Affected productsExternal IDs
vendor: lenovo model: thinkpad
vendor: lenovo model: updates
vendor: lenovo model: system
db: NVD ids: CVE-2022-40519, CVE-2022-4433, CVE-2022-4435, CVE-2022-40518, CVE-2022-4432, CVE-2022-4434, CVE-2022-40520, CVE-2022-40516, CVE-2022-40517