VARIoT latest news about IoT security

Hackers Leverage Compromised Fortinet Devices to Distribute Ransomware - Infosecurity Magazine Related entries in the VARIoT vulnerabilities database: VAR-202210-0198 Trust: 4.0 Fetched: Jan. 10, 2023, 9:11 a.m., Published: Jan. 5, 2023, 6 p.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2022-40684

Configure advanced features in Microsoft Defender for Endpoint \| Microsoft Learn Trust: 4.5 Fetched: Jan. 10, 2023, 9:10 a.m., Published: Nov. 17, 2022, 11:48 p.m.	Vulnerabilities: policy violation, script execution

Affected products

External IDs

vendor:

essential

model:

phone

January Pixel update, security patch hits 4a devices and newer Trust: 3.0 Fetched: Jan. 8, 2023, 9:17 a.m., Published: Jan. 8, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

pixel

NetGear Warns Users To Patch Recently Fixed Wi-Fi Router Bug - Slashdot Trust: 3.25 Fetched: Jan. 8, 2023, 9:16 a.m., Published: Jan. 30, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

netgear

model:

router

Netgear Advises Users to Patch a Recently Resolved WiFi Router Bug Trust: 3.25 Fetched: Jan. 8, 2023, 9:15 a.m., Published: Dec. 30, 2022, 1:02 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

netgear

model:

router

Why Aren’t We Winning the War Against Cybercrime? - ReadWrite Trust: 3.75 Fetched: Jan. 8, 2023, 9:15 a.m., Published: Jan. 5, 2023, 5:01 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

trend

model:

security

Researcher Reveals Google Home Speakers Could’ve Been Hijacked And Turned Into Wiretaps - Phil Stock World Trust: 3.5 Fetched: Jan. 8, 2023, 9:15 a.m., Published: Dec. 30, 2022, 11:30 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	google home
vendor:	google	model:	android
vendor:	google	model:	home

Samsung rolls out its January 2023 update to Galaxy Z Flip Trust: 3.75 Fetched: Jan. 8, 2023, 9:14 a.m., Published: Jan. 4, 2023, 1:14 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	knox
vendor:	samsung	model:	note
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	note 10
vendor:	samsung	model:	galaxy note
vendor:	google	model:	android

Critical Vulnerabilities on Lenovo ThinkPad X13s BIOS - BRANDEFENSE Trust: 3.0 Fetched: Jan. 8, 2023, 9:13 a.m., Published: Jan. 4, 2023, 12:32 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	lenovo	model:	thinkpad
vendor:	lenovo	model:	bios

Name Wreck Vulnerabilities Impact Millions of Smart Devices \| vMiss.net Trust: 3.5 Fetched: Jan. 8, 2023, 9:13 a.m., Published: April 15, 2021, 4 p.m.	Vulnerabilities: denial of service, code execution

Affected products	External IDs

Xiph Cyber - Vulnerability assessments for businesses Trust: 3.75 Fetched: Jan. 8, 2023, 9:12 a.m., Published: Jan. 5, 2023, midnight	Vulnerabilities: sql injection

Affected products	External IDs

Netgear warns users to patch recently fixed WiFi router bug - Security & Privacy News - Nsane Forums Trust: 3.75 Fetched: Jan. 6, 2023, 9:19 a.m., Published: Dec. 29, 2022, 6:55 p.m.	Vulnerabilities: denial of service, buffer overflow, code execution

Affected products

External IDs

vendor:	netgear	model:	netgear router
vendor:	netgear	model:	orbi
vendor:	netgear	model:	rax40
vendor:	netgear	model:	rax35
vendor:	netgear	model:	router
vendor:	netgear	model:	r7000p
vendor:	netgear	model:	r8000p firmware
vendor:	netgear	model:	r6700v3
vendor:	netgear	model:	rax40 firmware
vendor:	netgear	model:	r7000p firmware
vendor:	netgear	model:	r8000p
vendor:	netgear	model:	r6400v2
vendor:	netgear	model:	r6900p
vendor:	netgear	model:	r6900p firmware

Samsung pushes December update to Galaxy Z Flip in the US Trust: 3.75 Fetched: Jan. 6, 2023, 9:19 a.m., Published: Dec. 6, 2023, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	note
vendor:	samsung	model:	mobile
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	samsung galaxy
vendor:	comcast	model:	xfinity

Severe vulnerability found in Fortinet SSL VPN - DIGITPOL Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 3.25 Fetched: Jan. 6, 2023, 9:17 a.m., Published: June 16, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2022-42475

Qualcomm, Lenovo flag multiple high impact firmware vulnerabilities \| SC Media Related entries in the VARIoT vulnerabilities database: VAR-202301-0628, VAR-202301-0582, VAR-202301-0521 Trust: 3.75 Fetched: Jan. 6, 2023, 9:17 a.m., Published: Jan. 5, 2023, 1:36 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	lenovo	model:	bios
vendor:	lenovo	model:	thinkpad
vendor:	lenovo	model:	updates

db:

NVD

ids:

CVE-2022-33218, CVE-2022-33219, CVE-2022-33265, CVE-2022-40516, CVE-2022-40520

A Vulnerability in Brocade Fabric OS Could Allow for Arbitrary Command Injection Trust: 5.0 Fetched: Jan. 6, 2023, 9:16 a.m., Published: Jan. 4, 2023, midnight	Vulnerabilities: command injection

Affected products

External IDs

vendor:	brocade	model:	fabric os
vendor:	brocade	model:	brocade fabric os

8 Network Vulnerability Scanner For Small To Enterprise Business \| techflares Trust: 3.5 Fetched: Jan. 6, 2023, 9:15 a.m., Published: Dec. 25, 2022, midnight	Vulnerabilities: cross-site scripting, sql injection, weak password

Affected products

External IDs

vendor:	sophos	model:	firewall
vendor:	cisco	model:	routers
vendor:	cisco	model:	guard
vendor:	cisco	model:	umbrella

Apple Devices Have a Significant Vulnerability (So Here’s How to Fix It) - Business Technology, Gadgets, and IT Best Practices from Network-911 Blog \| Chatsworth, California \| Network-911, Inc. Trust: 3.0 Fetched: Jan. 6, 2023, 9:15 a.m., Published: Jan. 2, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

First Android update of 2023 patches 60 vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202301-0249 Trust: 4.75 Fetched: Jan. 6, 2023, 9:14 a.m., Published: Jan. 6, 2023, midnight	Vulnerabilities: memory corruption, buffer overflow, code execution

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2022-42720, CVE-2022-42721, CVE-2022-42719, CVE-2022-22088, CVE-2022-41674

Over 75 Vulnerabilities Patched in Android With December 2022 Security Updates \| SecurityWeek.Com Trust: 5.5 Fetched: Jan. 6, 2023, 9:13 a.m., Published: -	Vulnerabilities: privilege escalation, information disclosure, code execution

Affected products

External IDs

vendor:	google	model:	pixel
vendor:	google	model:	android

db:

NVD

ids:

CVE-2022-20411, CVE-2022-20472, CVE-2022-20473, CVE-2022-20498

VARIoT news about IoT security