Sign-up

VARIoT news about IoT security

NVD - CVE-2021-1588

Trust: 5.25

Fetched: Nov. 18, 2021, 2:22 p.m., Published: -
 Vulnerabilities: process crash, denial of service
Affected productsExternal IDs
vendor: cisco model: nexus_3000
vendor: cisco model: cisco nx-os
vendor: cisco model: nx-os
vendor: cisco model: nexus_3048
vendor: cisco model: nx-os software
vendor: cisco model: cisco systems
vendor: cisco systems model: nexus_3000
vendor: cisco systems model: cisco nx-os
vendor: cisco systems model: nx-os
vendor: cisco systems model: nexus_3048
vendor: cisco systems model: nx-os software
vendor: cisco systems model: cisco systems
db: NVD ids: CVE-2021-1588

Intel CPU flaw could enable hackers to attack PCs, cars, and medical devices | IT PRO

Trust: 3.0

Fetched: Nov. 18, 2021, 2:22 p.m., Published: Jan. 12, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-0146

Watchdog: Cyber arms dealer exploits Apple iPhone software weakness

Trust: 3.25

Fetched: Nov. 18, 2021, 2:22 p.m., Published: Sept. 13, 2021, 8:13 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Google Reveals 'Watering Hole' Attack Targeting Apple Device Owners | PCMag

Related entries in the VARIoT vulnerabilities database: VAR-202108-1374

Trust: 3.5

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 11, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: apple model: webkit
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: safari
db: NVD ids: CVE-2021-30869, CVE-2021-37973, CVE-2021-37976

Critical security vulnerabilities put millions of healthcare devices at risk | TechRadar

Trust: 3.75

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Nov. 10, 2021, 4:15 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: siemens model: nucleus

Vulnerable IoT devices can stake your breath | Cooltechzone

Related entries in the VARIoT vulnerabilities database: VAR-201903-1617, VAR-201903-0181, VAR-202006-0826, VAR-202006-1820, VAR-202006-1819, VAR-202006-0827

Trust: 3.5

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Sept. 30, 2021, 7:36 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: medtronic model: carelink 2090
vendor: medtronic model: mycarelink monitor
db: NVD ids: CVE-2019-6540, CVE-2019-6538, CVE-2019-18248, CVE-2019-18254, CVE-2019-18256, CVE-2019-18252

NUCLEUS:13: 13 Vulnerabilities Found in Siemens Nucleus TCP/IP Stack - Blog | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-202111-1605, VAR-202111-1616, VAR-202111-1604, VAR-202111-1606

Trust: 4.5

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Nov. 10, 2021, 9:15 p.m.
 Vulnerabilities: code execution, buffer overflow, information disclosure
Affected productsExternal IDs
vendor: siemens model: nucleus net
vendor: siemens model: nucleus rtos
vendor: siemens model: nucleus
db: NVD ids: CVE-2021-31886, CVE-2021-31888, CVE-2021-31887, CVE-2021-31885

D-Link DIR-825 R1 Device < 3.0.2 RCE (CVE-2020-29557)

Related entries in the VARIoT vulnerabilities database: VAR-202101-0529

Trust: 5.75

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Nov. 12, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: dlink model: router
vendor: dlink model: dir-825 r1
vendor: dlink model: dir-825
vendor: d-link model: router
vendor: d-link model: dir-825 r1
vendor: d-link model: dir-825
db: NVD ids: CVE-2020-29557

How to Protect Smart Home Devices From Hacks | ExpressVPN Blog

Trust: 3.25

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 13, 2021, 2:59 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: home assistant model: assistant
vendor: nest model: learning thermostat
vendor: google model: home

CVE-2021-22449

Related entries in the VARIoT vulnerabilities database: VAR-202108-0292

Trust: 3.5

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Aug. 23, 2021, 8:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: huawei technologies model: huawei
vendor: huawei model: huawei
db: NVD ids: CVE-2021-22449
db: HUAWEI ids: HWPSIRT-2021-57713

Intel vulnerability/CVE-2021-0157 (8.2 score) - DCU not showing latest Bios - Dell Hardware - Spiceworks

Related entries in the VARIoT vulnerabilities database: VAR-202111-1151

Trust: 4.0

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 8, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
db: NVD ids: CVE-2021-0157

Vulnerabilities in Nucleus NET TCP/IP stack could lead to real-world damage - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202111-1605

Trust: 4.5

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Nov. 10, 2021, 1:03 p.m.
 Vulnerabilities: code execution, information leak
Affected productsExternal IDs
vendor: siemens model: nucleus net
vendor: siemens model: nucleus rtos
vendor: siemens model: nucleus
db: NVD ids: CVE-2021-31886

Exploring Vulnerabilities in Network Security

Trust: 3.25

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Oct. 29, 2021, 2:27 p.m.
 Vulnerabilities: cross-site scripting, input validation vulnerability, code execution...
Affected productsExternal IDs
vendor: cisco model: access points
vendor: cisco model: routers
vendor: cisco model: asa software

IoT Device Vulnerability of Baby Monitors - Advanced Cybersecurity Experts

Trust: 3.0

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs

How Internet-Connected Devices In Your Home May Be Vulnerable To Hacking | World Economic Forum

Trust: 3.25

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Nov. 10, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve

Researchers identify vulnerabilities in connected medical devices

Trust: 3.25

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 16, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Hackers Could Increase Medication Doses Through Infusion Pump Flaws | WIRED

Trust: 3.0

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Aug. 24, 2021, 11 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

These cybersecurity vulnerabilities could leave millions of connected medical devices open to attack | ZDNet

Related entries in the VARIoT vulnerabilities database: VAR-202111-1616, VAR-202111-1604, VAR-202111-1605

Trust: 6.25

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: siemens model: nucleus net
vendor: siemens model: nucleus
db: NVD ids: CVE-2021-31888, CVE-2021-31887, CVE-2021-31886

Multiple Vulnerabilities in iCloud for Windows Could Allow for Arbitrary Code Execution

Related entries in the VARIoT vulnerabilities database: VAR-202110-1685, VAR-202110-1677, VAR-202110-1611, VAR-202110-1684, VAR-202110-1620, VAR-202108-2122

Trust: 5.75

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Jan. 7, 2022, 7:33 p.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: icloud
db: NVD ids: CVE-2021-30835, CVE-2021-30823, CVE-2021-30814, CVE-2021-30847, CVE-2021-30849, CVE-2021-30852

Flaws in the Nucleus embedded TCP/IP stack puts critical systems at risk | CSO Online

Related entries in the VARIoT vulnerabilities database: VAR-202111-1616, VAR-202111-1605, VAR-202111-1604

Trust: 5.5

Fetched: Nov. 16, 2021, 1:27 p.m., Published: Nov. 11, 2021, 7 a.m.
 Vulnerabilities: denial of service, buffer overflow, improper validation...
Affected productsExternal IDs
vendor: siemens model: nucleus rtos
vendor: siemens model: nucleus net
vendor: siemens model: nucleus
db: NVD ids: CVE-2021-31888, CVE-2021-31886, CVE-2021-31887