Sign-up

VARIoT news about IoT security

How to resolve the 'Rom-0 vulnerability found' alert | Avast

Related entries in the VARIoT vulnerabilities database: VAR-202002-0775

Trust: 3.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: google model: home
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2014-4019

NVD - CVE-2021-40124

Related entries in the VARIoT vulnerabilities database: VAR-202111-0412

Trust: 3.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: cisco systems
vendor: cisco systems model: anyconnect secure mobility client
vendor: cisco systems model: anyconnect_secure_mobility_client
vendor: cisco systems model: cisco anyconnect secure mobility client
vendor: cisco model: cisco systems
vendor: cisco model: anyconnect secure mobility client
vendor: cisco model: anyconnect_secure_mobility_client
vendor: cisco model: cisco anyconnect secure mobility client
db: NVD ids: CVE-2021-40124

NVD - CVE-2021-34741

Trust: 5.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco systems model: email security appliance
vendor: cisco systems model: cisco systems
vendor: cisco systems model: asyncos
vendor: cisco systems model: asyncos software
vendor: cisco systems model: cisco email security appliance
vendor: cisco systems model: cisco asyncos
vendor: cisco model: email security appliance
vendor: cisco model: cisco systems
vendor: cisco model: asyncos
vendor: cisco model: asyncos software
vendor: cisco model: cisco email security appliance
vendor: cisco model: cisco asyncos
db: NVD ids: CVE-2021-34741

PSIRT Advisories | FortiGuard

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 5, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs

Home - Lighttpd - fly light

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lighttpd model: lighttpd

Common Types Of Network Security Vulnerabilities In 2021 | Purplesec

Trust: 3.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: check point model: check point
vendor: serve model: serve

Moxa NPort Device Vulnerabilities (Update A) | CISA

Related entries in the VARIoT vulnerabilities database: VAR-201702-0862, VAR-201702-0594, VAR-201702-0860, VAR-201702-0595, VAR-201702-0597, VAR-201702-0851, VAR-201702-0593, VAR-201702-0596

Trust: 4.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: cross-site request forgery, buffer overflow, cross-site scripting...
Affected productsExternal IDs
vendor: moxa model: moxa
vendor: moxa model: nport 5600 series
vendor: moxa model: nport 5200 series
vendor: moxa model: nport 5600-8-dtl series
vendor: moxa model: nport 5150ai-m12
vendor: moxa model: nport 5600-8-dt
vendor: moxa model: nport 5450ai-m12
vendor: moxa model: nport ia5450a
vendor: moxa model: nport 5600-8-dtl
vendor: moxa model: nport 5100a series
vendor: moxa model: nport 5400 series
vendor: moxa model: nport 5200a
vendor: moxa model: nport 5100a
vendor: moxa model: nport 5110
vendor: moxa model: nport 5200a series
vendor: moxa model: nport
vendor: moxa model: nport p5150a
vendor: moxa model: nport 5130
vendor: moxa model: nport 5250ai-m12
db: NVD ids: CVE-2016-9363, CVE-2016-9366, CVE-2016-9361, CVE-2016-9367, CVE-2016-9371, CVE-2016-9348, CVE-2016-9365, CVE-2016-9369
db: ICS CERT ids: ICSA-16-336-02, ICSA-16-336-02A
db: US CERT ids: ICSA-16-336-02, ICSA-16-336-02A

Canon Device Vulnerabilities

Trust: 3.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-38154

Threat, vulnerability, risk: What is the difference?

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: buffer overflow
Affected productsExternal IDs

Fortress Home Security Open to Remote Disarmament | Threatpost

Trust: 3.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-39277, CVE-2021-39276

Siemens APOGEE and TALON | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202109-0404

Trust: 5.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 1, 2022, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: siemens model: apogee pxc modular
vendor: siemens model: apogee pxc
vendor: siemens model: talon tc
vendor: siemens model: talon tc compact
vendor: siemens model: apogee mbc
vendor: siemens model: apogee mec
vendor: siemens model: apogee pxc compact
vendor: siemens model: talon tc modular
db: NVD ids: CVE-2021-27391

Future Internet | Free Full-Text | A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices | HTML

Related entries in the VARIoT vulnerabilities database: VAR-201909-1007, VAR-201909-1008

Trust: 3.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: weak password, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2019-14896, CVE-2019-13473, CVE-2019-13474, CVE-2019-14897, CVE-2019-14901

Apple Issues Emergency Fix for NSO Zero-Click Zero Day | Threatpost

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-1005

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-30860, CVE-2021-34484

Zero-Day Vulnerability Exposes 100 Million IoT Devices

Trust: 5.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs

(PDF) Assessing medical device vulnerabilities on the Internet of Things

Trust: 5.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: dropbear model: ssh server
vendor: proftpd model: proftpd
db: MICROSOFT ids: MS17-010

ESB-2021.3458

Related entries in the VARIoT vulnerabilities database: VAR-202109-1854, VAR-202109-1855, VAR-202109-1856

Trust: 5.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 17, 2021, midnight
 Vulnerabilities: path traversal, denial of service, cross-site request forgery...
Affected productsExternal IDs
vendor: siemens model: scalance w1750d
vendor: siemens model: scalance
vendor: siemens model: w1750d
vendor: aruba model: arubaos
vendor: aruba networks model: arubaos
db: NVD ids: CVE-2021-37721, CVE-2021-37728, CVE-2021-37717, CVE-2021-37720, CVE-2021-37733, CVE-2021-37722, CVE-2021-37725, CVE-2021-37731, CVE-2021-37724, CVE-2020-37719, CVE-2019-5318, CVE-2021-37729, CVE-2021-37718, CVE-2021-37723, CVE-2021-37716

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution | New York State Office of Information Technology Services

Trust: 4.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 2, 2021, 3:42 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android

Google squashes Android zero‑day bug exploited in targeted attacks | WeLiveSecurity

Related entries in the VARIoT vulnerabilities database: VAR-202111-0579, VAR-202111-0609

Trust: 4.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 4, 2021, 4:22 p.m.
 Vulnerabilities: information disclosure, code execution
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-1924, CVE-2021-1048, CVE-2021-0930, CVE-2021-0889, CVE-2021-0918, CVE-2021-1975

Critical vulnerabilities expose Cisco equipment to hijacking attacks - NewsBreak

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: series switches
vendor: cisco model: catalyst
vendor: cisco model: series
db: NVD ids: CVE-2021-40113, CVE-2021-34795

5 Ways Your Home Is Vulnerable to Hackers | DoItYourself.com

Trust: 4.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 12, 2021, midnight
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: google model: wifi
vendor: google model: home