Sign-up

VARIoT news about IoT security

Draconian Fear vulnerability (some NETGEAR smart switches) - gynvael.coldwind//vx.log

Related entries in the VARIoT vulnerabilities database: VAR-202109-1067

Trust: 4.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 14, 2021, midnight
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: netgear model: gs752tpp
vendor: netgear model: gs724tpv2
vendor: netgear model: gs728tpv2
vendor: netgear model: gs752tpv2
vendor: netgear model: gs728tppv2
vendor: netgear model: gs750e
vendor: google model: home
vendor: google model: chrome
db: NVD ids: CVE-2021-40867

Отказ в обслуживании в Siemens RUGGEDCOM ROX Devices

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 15, 2021, 8:17 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: ruggedcom

B.Braun's Infusion Pump Contains Security Vulnerabilities; Hackers Exploit Medication Doses | Tech Times

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Aug. 25, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Demon's Cries vulnerability (some NETGEAR smart switches) - gynvael.coldwind//vx.log

Related entries in the VARIoT vulnerabilities database: VAR-202109-1066

Trust: 5.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 14, 2021, midnight
 Vulnerabilities: authentication bypass, buffer overflow
Affected productsExternal IDs
vendor: netgear model: gs105e
vendor: netgear model: gs108e
vendor: netgear model: gs752tpp
vendor: netgear model: gs724tpv2
vendor: netgear model: gs728tpv2
vendor: netgear model: gs752tpv2
vendor: netgear model: gs728tppv2
vendor: netgear model: gs750e
vendor: canary model: canary
db: NVD ids: CVE-2021-40866

Security Advisories - Juniper Networks

Related entries in the VARIoT vulnerabilities database: VAR-202201-0633, VAR-202201-1488, VAR-202201-0895, VAR-202201-0630, VAR-202112-0566, VAR-202201-0627, VAR-202201-1560, VAR-202201-0631, VAR-202201-0628, VAR-202201-0632, VAR-202110-0410, VAR-202112-0562

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: -
 Vulnerabilities: denial of service, memory leak, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2022-22152, CVE-2022-22160, CVE-2021-4104, CVE-2022-22177, CVE-2022-22164, CVE-2022-22159, CVE-2021-44228, CVE-2022-22163, CVE-2022-22157, CVE-2022-22156, CVE-2022-22155, CVE-2022-22153, CVE-2021-42550, CVE-2022-22162, CVE-2022-22167, CVE-2022-22154, CVE-2022-22161, CVE-2021-31385, CVE-2021-45046

CISA, B.Braun urge patch of critical SpaceCom infusion pump vulnerabilities

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 22, 2021, 1:43 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

What is a Vulnerability Scanner? - Reciprocity

Trust: 3.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 4, 2021, 4:47 p.m.
 Vulnerabilities: command injection, cross-site scripting, sql injection...
Affected productsExternal IDs
vendor: openscap model: openscap

CVE - CVE-2021-1499

Related entries in the VARIoT vulnerabilities database: VAR-202105-0617

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: hyperflex
vendor: cisco systems model: cisco systems
vendor: cisco systems model: cisco hyperflex
vendor: cisco systems model: hyperflex hx data platform
vendor: cisco model: hyperflex
vendor: cisco model: cisco systems
vendor: cisco model: cisco hyperflex
vendor: cisco model: hyperflex hx data platform
db: NVD ids: CVE-2021-1499

Newly Found IoT Vulnerability Could Impact up to 83M Devices - CE Pro

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 5:26 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Android Security Bulletin-November 2021 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202111-0521, VAR-202111-0579, VAR-202111-0609, VAR-202111-0602, VAR-202111-0608, VAR-202111-0611, VAR-202111-0603

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 15, 2021, midnight
 Vulnerabilities: use after free, denial of service, code execution...
Affected productsExternal IDs
vendor: motorola model: motorola
vendor: motorola model: android
vendor: samsung model: note
vendor: samsung model: notes
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: huawei model: huawei
vendor: broadcom model: broadcom
vendor: nokia model: nokia
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2021-30284, CVE-2021-0928, CVE-2021-1924, CVE-2021-0927, CVE-2021-0650, CVE-2021-0672, CVE-2021-1975, CVE-2021-1048, CVE-2021-1982, CVE-2021-1979, CVE-2021-0925, CVE-2021-30255, CVE-2021-1973, CVE-2021-0649, CVE-2021-0932, CVE-2021-0918, CVE-2021-0434, CVE-2021-0920, CVE-2021-0931, CVE-2021-0930, CVE-2021-0919, CVE-2021-1981, CVE-2021-0653, CVE-2021-1921, CVE-2021-0889, CVE-2021-30254

TVD 2021

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 15, 2021, midnight
 Vulnerabilities: command execution, information leakage
Affected productsExternal IDs
vendor: essential model: phone
vendor: rapid model: scada
vendor: google model: wifi
vendor: google model: home
vendor: google model: android

Critical security vulnerabilities in Realtek chips affect more than 65 hardware manufacturers - IoT Inspector

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 16, 2021, 6:51 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve
vendor: asustek model: wireless routers

CVE - CVE-2021-1588

Trust: 5.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: denial of service, process crash
Affected productsExternal IDs
vendor: cisco systems model: cisco systems
vendor: cisco systems model: nx-os
vendor: cisco systems model: nx-os software
vendor: cisco systems model: cisco nx-os
vendor: cisco model: cisco systems
vendor: cisco model: nx-os
vendor: cisco model: nx-os software
vendor: cisco model: cisco nx-os
db: NVD ids: CVE-2021-1588

NVD - CVE-2021-1534

Trust: 3.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: cisco systems
vendor: cisco systems model: cisco email security appliance
vendor: cisco systems model: asyncos software
vendor: cisco systems model: cisco asyncos
vendor: cisco systems model: email security appliance
vendor: cisco systems model: asyncos
vendor: cisco model: cisco systems
vendor: cisco model: cisco email security appliance
vendor: cisco model: asyncos software
vendor: cisco model: cisco asyncos
vendor: cisco model: email security appliance
vendor: cisco model: asyncos
db: NVD ids: CVE-2021-1534

How a Medical Device Vulnerability Can Compromise Privacy

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Dec. 18, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom

Microsoft warns of dangerous vulnerability in Surface Pro 3 devices

Related entries in the VARIoT vulnerabilities database: VAR-202108-1285, VAR-202110-1321, VAR-202002-0458

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 21, 2021, 7:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
vendor: broadcom model: broadcom
vendor: broadcom model: linux
db: NVD ids: CVE-2021-30970, CVE-2021-42299, CVE-2019-15126

NVD - CVE-2021-1623

Trust: 5.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 8, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco systems model: cisco systems
vendor: cisco systems model: cbr-8 converged broadband routers
vendor: cisco systems model: routers
vendor: cisco systems model: cbr-8
vendor: cisco model: cisco systems
vendor: cisco model: cbr-8 converged broadband routers
vendor: cisco model: routers
vendor: cisco model: cbr-8
db: NVD ids: CVE-2021-1623

NVD - CVE-2021-34746

Related entries in the VARIoT vulnerabilities database: VAR-202109-0622

Trust: 4.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: cisco systems model: cisco systems
vendor: cisco model: cisco systems
db: NVD ids: CVE-2021-34746

RCE Vulnerability in Hikvision Cameras (CVE-2021-36260) | CISA

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 29, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hikvision model: hikvision
db: NVD ids: CVE-2021-36260

Apple Patches New Zero-Day iOS Vulnerability Possibly Under Exploitation

Related entries in the VARIoT vulnerabilities database: VAR-202108-2057

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 11, 2021, 7:50 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2021-30883