VARIoT latest news about IoT security

2021 marks another record year for security vulnerabilities - TechRepublic Trust: 3.5 Fetched: Dec. 16, 2021, 8:11 p.m., Published: March 16, 2021, midnight	Vulnerabilities: sql injection

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	google chrome
vendor:	trend	model:	security

Threat Signal Report \| FortiGuard Trust: 4.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Nov. 19, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:	NVD	ids:	CVE-2021-21972, CVE-2021-21973
db:	VMWARE	ids:	VMSA-2021-0002

OpenEuler open source community Log4j high-risk security vulnerability repair is completed - Huawei Update Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.25 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 12, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

huawei

model:

huawei

db:

NVD

ids:

CVE-2021-44228

Vulnerability in Windows 10 URI handler leads to remote code execution \| Malwarebytes Labs Trust: 3.0 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 8, 2021, 2:52 p.m.	Vulnerabilities: code execution

Affected products	External IDs

Researchers Finds Security Flaw Affecting 37% of Smartphones Trust: 5.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Nov. 24, 2021, 4:29 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	xiaomi	model:	miui
vendor:	xiaomi	model:	redmi
vendor:	vivo	model:	vivo
vendor:	check point	model:	check point

db:

NVD

ids:

CVE-2021-0662, CVE-2021-0661, CVE-2021-0663, CVE-2021-0673

Patch Now: Sonicwall Fixes Multiple Vulnerabilities in SMA 100 Devices \| Rapid7 Blog Related entries in the VARIoT vulnerabilities database: VAR-202112-0361, VAR-202112-0426, VAR-202112-0425, VAR-202112-0424, VAR-202112-0389, VAR-202112-0732, VAR-202112-0731, VAR-202112-0730 Trust: 5.0 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 8, 2021, 6:57 p.m.	Vulnerabilities: command injection, buffer overflow, path traversal...

Affected products

External IDs

vendor:

sonicwall

model:

sma 100

db:

NVD

ids:

CVE-2021-20038, CVE-2021-20043, CVE-2021-20044, CVE-2021-20045, CVE-2021-20039, CVE-2021-20040, CVE-2021-20041, CVE-2021-20042

A Vulnerability in HP Printer Products Could Allow for Arbitrary Code Execution. Trust: 3.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: -	Vulnerabilities: code execution, buffer overflow

Affected products

External IDs

db:

NVD

ids:

CVE-2021-39238

Multiple Vulnerabilities in Distributed Data Systems WebHMI Could Allow for Arbitrary Code Execution Trust: 5.0 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Jan. 7, 2022, 7:33 p.m.	Vulnerabilities: code execution, authentication vulnerability, file upload vulnerability...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-43936, CVE-2021-43931

Hackers actively exploiting 0-day in Ubiquitous Apache Log4j tool Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.0 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 11, 2021, 4:18 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog \| CISA Related entries in the VARIoT vulnerabilities database: VAR-201907-1641, VAR-202112-1044, VAR-201712-0864, VAR-202112-0566 Trust: 4.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 24, 2021, midnight	Vulnerabilities: authentication bypass, access control vulnerability, privilege management vulnerability...

Affected products

External IDs

vendor:

embedthis

model:

goahead

db:

NVD

ids:

CVE-2019-13272, CVE-2021-44168, CVE-2017-17562, CVE-2020-8816, CVE-2021-35394, CVE-2019-0193, CVE-2019-10758, CVE-2010-1871, CVE-2021-44228, CVE-2019-7238, CVE-2021-44515, CVE-2020-17463, CVE-2017-12149

Protect your smartphone from cyber attacks. With the innovation of Samsung - Siamphone.com Trust: 3.5 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 12, 2021, 5:21 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	samsung	model:	galaxy
vendor:	samsung	model:	knox
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile

What the Pentagon Must do to Defend Itself from Cyber Attacks \| The National Interest Trust: 3.5 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Nov. 18, 2021, 2 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

huawei

model:

huawei

Zyxel security advisory for pre-configured password management vulnerability of home routers and WiFi systems \| Zyxel Trust: 3.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 23, 2021, 8:32 a.m.	Vulnerabilities: password management vulnerability

Affected products

External IDs

db:

NVD

ids:

CVE-2021-35033

Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077) - Help Net Security Trust: 4.5 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 3, 2021, 10:34 a.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

vendor:	palo alto networks	model:	palo alto networks
vendor:	palo alto networks	model:	networks
vendor:	zoho	model:	manageengine servicedesk plus
vendor:	palo	model:	palo alto networks
vendor:	palo	model:	networks

db:

NVD

ids:

CVE-2021-33617, CVE-2021-44077

2021 another record-breaker for vulnerability disclosure Trust: 3.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 8, 2021, midnight	Vulnerabilities: cross-site scripting

Affected products

External IDs

vendor:

trend

model:

security

Critical SonicWall VPN Vulnerability Allows Complete Takeover - Lansweeper Trust: 4.75 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 9, 2021, 1:52 p.m.	Vulnerabilities: code execution, buffer overflow

Affected products

External IDs

vendor:	sonicwall	model:	sma 100
vendor:	sonicwall	model:	secure mobile access

Security flaw in widely-used logging system impacts Minecraft, iCloud, more Trust: 4.0 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 11, 2021, 5:27 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

icloud

The Bug Report - November Edition \| McAfee Blogs Trust: 5.25 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 1, 2021, 5:01 a.m.	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:	dram	model:	dram
vendor:	palo	model:	networks
vendor:	palo	model:	pan-os
vendor:	palo	model:	firewall
vendor:	palo	model:	palo alto networks
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	pan-os
vendor:	palo alto networks	model:	firewall
vendor:	palo alto networks	model:	palo alto networks
vendor:	unbound	model:	unbound
vendor:	dnsmasq	model:	dnsmasq

db:

NVD

ids:

CVE-2021-3064, CVE-2021-42114, CVE-2021-20322

LIVEcommunity - Protect Your IoT Devices from Log4j 2 Vulnerability - LIVEcommunity - 453381 Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562 Trust: 4.5 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 15, 2021, 8:35 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	palo	model:	palo alto networks
vendor:	palo	model:	networks
vendor:	palo	model:	firewall
vendor:	palo alto networks	model:	palo alto networks
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	firewall

db:

NVD

ids:

CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

CVE-2021-44228 - Log4j RCE 0-day mitigation Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.0 Fetched: Dec. 16, 2021, 8:11 p.m., Published: Dec. 10, 2021, 11:39 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

VARIoT news about IoT security