Sign-up

VARIoT news about IoT security

Hikvision Has "Highest Level of Critical Vulnerability," Impacting 100+ Million Devices

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 20, 2021, 12:04 p.m.
 Vulnerabilities: default password, denial of service, code execution...
Affected productsExternal IDs
vendor: dahua model: camera
vendor: dahua model: ip camera
vendor: cisco model: routers
vendor: cisco model: router
vendor: cisco model: series
vendor: huawei model: huawei
vendor: huawei model: mate
vendor: axis model: axis
vendor: axis model: ip cameras
vendor: hikvision model: camera
vendor: hikvision model: hikvision
vendor: hikvision model: ip cameras
vendor: avigilon model: multiple
vendor: phillips model: hue
db: NVD ids: CVE-2021-36260

Microsoft Exchange Remote Code Execution Vulnerability Flaws & Fixes

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: April 16, 2021, 11:44 a.m.
 Vulnerabilities: denial of service, code execution, authentication bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2021-28480, CVE-2021-28481, CVE-2021-42321

ProxyShell vulnerabilities in Microsoft Exchange: What to do - Sophos News

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, 6 p.m.
 Vulnerabilities: privilege elevation, code execution
Affected productsExternal IDs
vendor: sophos model: mobile
vendor: sophos model: endpoint protection
db: NVD ids: CVE-2021-34523, CVE-2021-31207, CVE-2021-34473

Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices

Related entries in the VARIoT vulnerabilities database: VAR-202110-1321

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 20, 2021, 7:20 a.m.
 Vulnerabilities: security bypass
Affected productsExternal IDs
db: NVD ids: CVE-2021-42299

Vulnerabilities Found in QNAP Were Fixed

Trust: 6.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 1, 2021, 12:04 p.m.
 Vulnerabilities: cross-site scripting, command injection
Affected productsExternal IDs
vendor: qnap model: photo station
db: NVD ids: CVE-2021-34356, CVE-2021-34352, CVE-2021-34354, CVE-2021-34355

Update Your Apple Devices Right Now to Patch This Serious iMessage Bug

Related entries in the VARIoT vulnerabilities database: VAR-202112-0004

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, noon
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad
db: NVD ids: CVE-2021-20860

Critical Vulnerability Affects Millions of IoT Devices - Synergetics India

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 1, 2021, 7:54 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28372

Update Now: Apple Patches iOS, Mac Attack That Uses Malicious PDFs to Hack Devices

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-2172

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, 8:49 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: safari
vendor: apple model: watchos
vendor: apple model: tvos
db: NVD ids: CVE-2021-30860, CVE-2021-30858

Realtek AP-Router SDK vulnerabilities could impact millions of routers and IoT devices - CNX Software

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 9:21 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: realtek model: realtek sdk

Microsoft fixes critical PrintNightmare and Office document vulnerabilities in Windows 10 | Windows Central

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 15, 2021, 12:21 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-36958, CVE-2021-40444

Apps of 16 popular smart home devices vulnerable to cyberattack - The Hindu

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 28, 2021, 7:03 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
vendor: google model: google home
vendor: google model: wifi

Microsoft finally fixes PrintNightmare vulnerability with KB5005031 and KB5005033 updates

Related entries in the VARIoT vulnerabilities database: VAR-202107-1010

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 11, 2021, 7:41 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-34481, CVE-2021-34527

Microsoft and Google have had a vulnerable 2021, Atlas VPN declares | Windows Central

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 20, 2021, 6:54 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Apple Patches New Zero-Day iOS Vulnerability Possibly Under Exploitation | PCMag

Related entries in the VARIoT vulnerabilities database: VAR-202108-2057

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 11, 2022, midnight
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: ipad
db: NVD ids: CVE-2021-30883

Mass exploitation of on-prem Exchange servers :( : msp

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: March 3, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom
db: NVD ids: CVE-2021-26855

CVE-2021-30657 macOS vulnerability explained

Related entries in the VARIoT vulnerabilities database: VAR-202109-1307

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 21, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30657

Cisco warns of IOS IE security vulnerability

Trust: 6.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 25, 2021, 7:50 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: sd-wan
vendor: cisco model: ios xe
vendor: cisco model: ios xe sd-wan software
db: NVD ids: CVE-2021-1529

BlackBerry resisted announcing major flaw in software powering cars, hospital equipment - POLITICO

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 17, 2021, 2:42 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: blackberry model: blackberry

Expert Advise On News That IoT Devices More Vulnerable Than Ever Before - Information Security Buzz

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 10, 2021, 6:14 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: mesh model: mesh

Critical macOS Bug Could Allow Threat Actors Install Undetectable Malware In Apple Devices - Hilster

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macbook
vendor: apple model: macbook air
vendor: apple model: ipad
vendor: apple model: macos
db: NVD ids: CVE-2021-30892