Sign-up

VARIoT news about IoT security

Russian Cyber Actors Exploit MFA Protocols, PrintNightmare Vulnerability

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 17, 2022, 2 p.m.
 Vulnerabilities: password guessing, privilege escalation, code execution
Affected productsExternal IDs

Multiple Vulnerabilities in Cisco Products Could Allow for Arbitrary Code Execution

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 30, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

TrustInSoft Showcases New Offer for Zero-Vulnerability Devices at Mobile World Congress 2022

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Feb. 28, 2022, 7 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs

Cynerio Research Finds Critical Medical Device Risks Continue to Threaten Hospital Security and Patient Safety

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Jan. 19, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Linux PwnKit Vulnerability Affects Most XIoT Devices

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Jan. 27, 2022, 4:18 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-4034

BD Discloses Viper, Pyxis Medical Device Vulnerabilities

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 4, 2022, 4:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-22766, CVE-2022-22765

Access:7 vulnerabilities impact medical and IoT devices

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 6, 2022, midnight
 Vulnerabilities: buffer overflow, information disclosure, directory traversal...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25249, CVE-2022-25250, CVE-2022-25247, CVE-2022-25251, CVE-2022-25248, CVE-2022-25246

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

SpringShell RCE vulnerability: Guidance for protecting against and detecting CVE-2022-22965 - Microsoft Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 5, 2022, 1:11 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2010-1622, CVE-2022-22965

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

Microsoft CVE-2022-21992: Windows Mobile Device Management Remote Code Execution Vulnerability

Trust: [3.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 11, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21992

Vulnerability Research Overview - Forescout

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 10, 2022, 7:06 p.m.
 Vulnerabilities: information leak, denial of service, code execution
Affected productsExternal IDs

DSA-2022-035: Dell Wyse Device Agent Security Update for Multiple Vulnerabilities | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-202202-0978, VAR-202202-0977, VAR-202202-0979

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-23156, CVE-2022-23157, CVE-2022-23158

Researchers Discover BIAS Security Vulnerability in Bluetooth Devices

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 19, 2020, 7:59 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

Researchers uncover vulnerabilities in APC Smart-UPS devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0237, VAR-202203-0235, VAR-202203-0236

Trust: [4.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, midnight
 Vulnerabilities: buffer overflow, authentication bypass, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22805, CVE-2022-0715, CVE-2022-22806

New OpenSSL vulnerability: IoT Inspector automatically detects affected software even in IoT / IIoT devices - IoT Inspector

Related entries in the VARIoT vulnerabilities database: VAR-202203-0005

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 17, 2022, 9:09 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-0778

Exploits and exploit kits | Microsoft Docs

Related entries in the VARIoT vulnerabilities database: VAR-201601-0030

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 18, 2022, 6:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2017-0144, CVE-2016-0778, CVE-2013-1489

Exploring a New Class of Kernel Exploit Primitive - Microsoft Security Response Center

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: June 7, 2022, midnight
 Vulnerabilities: privilege escalation, information disclosure, denial of service...
Affected productsExternal IDs

CVE-2022-21992 - Security Update Guide - Microsoft - Windows Mobile Device Management Remote Code Execution Vulnerability

Trust: [4.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21992