Sign-up

VARIoT news about IoT security

Service Advisory - Zero-day Vulnerability Advisory Notice - Apache log4j - Active Exploits | University Information Technology (UIT)

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.25

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Dec. 13, 2021, 9 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Sky Broadband took almost 18 months to fix serious router flaw | IT PRO

Trust: 3.0

Fetched: Jan. 18, 2022, 11:55 a.m., Published: May 18, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs

27 flaws in USB-over-network SDK affect millions of cloud users

Related entries in the VARIoT vulnerabilities database: VAR-202112-0322

Trust: 4.0

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Sept. 25, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2021-42996, CVE-2021-42682, CVE-2021-42976, CVE-2021-42979, CVE-2021-42688, CVE-2021-42683, CVE-2021-43003, CVE-2021-43637, CVE-2021-42986, CVE-2021-42980, CVE-2021-43006, CVE-2021-42972, CVE-2021-42987, CVE-2021-42983, CVE-2021-42990, CVE-2021-42686, CVE-2021-42973, CVE-2021-43000, CVE-2021-42977, CVE-2021-42994, CVE-2021-42685, CVE-2021-42687, CVE-2021-42988, CVE-2021-43638, CVE-2021-43002, CVE-2021-42993, CVE-2021-42681

FireEye, CISA Warn of Critical IoT Device Vulnerability

Trust: 3.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch
db: NVD ids: CVE-2021-28372

Israeli spy tech firm exploited vulnerability on ALL IPHONE devices to implant ‘Pegasus’ malware - report. This is classic Israeli backdoor access to computer systems that allowed 9/11 to be pulled off - see The Trigger - David Icke

Trust: 3.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Sept. 11, 2021, midnight
 Vulnerabilities: integer overflow
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: iphone

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Sept. 18, 2021, 10:06 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

NVD - CVE-2021-28816

Trust: 4.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2021-28816

Vulnerabilities in Device Drivers From 20 Vendors Expose PCs to Persistent Malware | SecurityWeek.Com

Trust: 3.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: lenovo model: system
vendor: lenovo model: bios
vendor: huawei model: huawei
vendor: asus model: asus
vendor: asus model: bmc firmware

Product Security | Axis Communications

Trust: 3.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: axis communications model: communications
vendor: axis communications model: axis
vendor: axis model: communications
vendor: axis model: axis
db: NVD ids: CVE-2021-31988, CVE-2021-31987, CVE-2021-31986

Zoom Patches Multiple Vulnerabilities - GovInfoSecurity

Trust: 5.5

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Sept. 17, 2021, midnight
 Vulnerabilities: remote command injection, command injection, code execution...
Affected productsExternal IDs
vendor: zoom model: zoom
vendor: zoom model: client
vendor: zoom model: zoom client
db: NVD ids: CVE-2021-34415, CVE-2021-34421, CVE-2021-34419, CVE-2021-34418, CVE-2021-34422, CVE-2021-34417, CVE-2021-34414, CVE-2021-34420

Vulnerabilities (CVE) - OpenCVE

Trust: 4.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: May 4, 2021, midnight
 Vulnerabilities: os command injection, use after free, denial of service...
Affected productsExternal IDs
vendor: pexip model: infinity
vendor: pexip model: pexip infinity

FireEye, CISA Warn of Critical IoT Device Vulnerability

Trust: 3.75

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Jan. 16, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch
db: NVD ids: CVE-2021-28372

These are the 20 most common phone PINs: Is your device vulnerable?

Trust: 3.5

Fetched: Jan. 18, 2022, 11:55 a.m., Published: Dec. 8, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: iphone
vendor: ring model: ring
vendor: asus model: asus
vendor: google model: home
vendor: google model: android
vendor: samsung model: mobile
vendor: samsung model: samsung

Zoom Patches Multiple Vulnerabilities - BankInfoSecurity

Trust: 5.5

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Sept. 13, 2021, midnight
 Vulnerabilities: remote command injection, command injection, code execution...
Affected productsExternal IDs
vendor: zoom model: zoom
vendor: zoom model: client
vendor: zoom model: zoom client
db: NVD ids: CVE-2021-34415, CVE-2021-34421, CVE-2021-34419, CVE-2021-34418, CVE-2021-34422, CVE-2021-34417, CVE-2021-34414, CVE-2021-34420

'BotenaGo' Malware Targets Routers, IoT Devices with Over 30 Exploits | SecurityWeek.Com

Related entries in the VARIoT vulnerabilities database: VAR-201311-0288, VAR-202001-0633, VAR-202007-0064, VAR-202003-1707, VAR-201702-0952, VAR-201502-0201, VAR-201704-0303, VAR-202002-1447, VAR-202007-1256, VAR-202003-0363, VAR-201805-0262, VAR-201905-0651, VAR-201403-0306, VAR-201703-1017, VAR-201612-0015, VAR-201805-0263

Trust: 3.75

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: comtrend model: vr-3033
vendor: zoom model: zoom
vendor: zoom model: client
vendor: draytek model: routers
db: NVD ids: CVE-2013-5223, CVE-2019-19824, CVE-2020-10987, CVE-2020-9054, CVE-2017-6077, CVE-2015-2051, CVE-2016-1555, CVE-2020-8515, CVE-2018-10088, CVE-2020-9377, CVE-2020-10173, CVE-2018-10561, CVE-2017-18368, CVE-2014-2321, CVE-2017-6334, CVE-2016-6277, CVE-2016-11021, CVE-2020-8958, CVE-2013-3307, CVE-2018-10562

ICS Patch Tuesday: Siemens, Schneider Electric Address Over 40 Vulnerabilities | SecurityWeek.Com

Trust: 4.5

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: path traversal, denial of service, code execution...
Affected productsExternal IDs
vendor: siemens model: siprotec
vendor: siemens model: sinec nms
vendor: siemens model: scalance
vendor: siemens model: desigo cc
vendor: siemens model: teamcenter
vendor: siemens model: ruggedcom
vendor: siemens model: sinema remote connect server
vendor: siemens model: siprotec 5
vendor: siemens model: simatic
vendor: siemens model: sinema remote connect
vendor: siemens model: sinema server
vendor: siemens model: simatic net
vendor: schneider model: scadapack
vendor: schneider model: ecostruxure control expert
vendor: schneider model: modicon m340 plc
vendor: schneider model: m340 plc
vendor: schneider model: modicon m340
vendor: schneider model: m340
vendor: schneider model: control expert
vendor: schneider model: struxureware data center expert
vendor: schneider model: struxureware data center
vendor: schneider electric model: scadapack
vendor: schneider electric model: ecostruxure control expert
vendor: schneider electric model: modicon m340 plc
vendor: schneider electric model: m340 plc
vendor: schneider electric model: modicon m340
vendor: schneider electric model: m340
vendor: schneider electric model: control expert
vendor: schneider electric model: struxureware data center expert
vendor: schneider electric model: struxureware data center

NVD - CVE-2021-40825

Trust: 3.0

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-40825

Vulnerability Assessment | Vulnerability Assessment Tool - ManageEngine Vulnerability Manager Plus

Trust: 3.75

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend model: security

Message: "At Risk: Your Vulnerability Protection definitions are not up-to-date. Your Mac may be at risk."

Trust: 3.25

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Nov. 10, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

Researcher Releases Updated 0-Day Vulnerability for Windows Systems after Patch Tuesday

Related entries in the VARIoT vulnerabilities database: VAR-202111-0697

Trust: 3.0

Fetched: Jan. 18, 2022, 11:54 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-41379