VARIoT latest news about IoT security

SOTI Discussion Forum Related entries in the VARIoT vulnerabilities database: VAR-202112-0562, VAR-202112-2011, VAR-202112-1782, VAR-202112-0566 Trust: 3.0 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45046, CVE-2021-44832, CVE-2021-45105, CVE-2021-44228

Top 5 Vulnerability Scanners You Need to Patrol Security Grids Trust: 3.5 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: configuration vulnerability, sql injection, cross-site scripting

Affected products	External IDs

7 Network Vulnerability Scanner for Small to Enterprise Business Trust: 3.5 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: weak password, sql injection

Affected products

External IDs

vendor:	cisco	model:	umbrella
vendor:	cisco	model:	guard

Over 50% internet-connected devices in hospitals vulnerable to cybercrime: Report - What an Investor! Trust: 3.0 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: -

Affected products	External IDs

More Than Half of Medical Devices Have Critical Vulnerabilities \| News \| Communications of the ACM Trust: 3.0 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: -

Affected products	External IDs

Update now! Chrome patches critical RCE vulnerability in Safe Browsing \| Malwarebytes Labs Trust: 5.5 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: code execution, use after free

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	google chrome

db:

NVD

ids:

CVE-2022-0096, CVE-2022-0289

More than half of medical devices found to have critical vulnerabilities Trust: 4.75 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: default credentials

Affected products

External IDs

vendor:

google

model:

home

Weekly Threat Report 14th January 2022 - NCSC.GOV.UK Related entries in the VARIoT vulnerabilities database: VAR-202112-0361 Trust: 6.25 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:

sonicwall

model:

sma 100

db:

NVD

ids:

CVE-2021-20038

General security information - LANCOM Systems GmbH Related entries in the VARIoT vulnerabilities database: VAR-202105-1476, VAR-201906-1175, VAR-202002-0458, VAR-202105-1431, VAR-202101-1926, VAR-202009-1432, VAR-201906-1176, VAR-202105-1477, VAR-202109-1802, VAR-202112-0566, VAR-202105-1475, VAR-202012-0485, VAR-201906-1174 Trust: 4.25 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: denial of service, code execution

Affected products

External IDs

vendor:	google	model:	wifi
vendor:	broadcom	model:	linux
vendor:	mesh	model:	mesh
vendor:	kcodes	model:	netusb

db:

NVD

ids:

CVE-2020-26144, CVE-2021-45388, CVE-2019-11477, CVE-2020-15778, CVE-2019-15126, CVE-2020-25112, CVE-2020-24588, CVE-2021-3156, CVE-2020-24338, CVE-2020-25111, CVE-2020-3702, CVE-2019-11478, CVE-2020-26146, CVE-2021-40438, CVE-2021-44228, CVE-2021-31538, CVE-2020-26147, CVE-2020-24336, CVE-2019-11479

Log4j: Zeroing in on Fundamentals to Minimize Log4j Vulnerability \| Mindtree Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 3.75 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

SecurityWizardry.com - Vulnerability Details Trust: 4.75 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

vendor:	schneider	model:	modicon m340
vendor:	schneider	model:	m340
vendor:	schneider	model:	connexium
vendor:	schneider electric	model:	modicon m340
vendor:	schneider electric	model:	m340
vendor:	schneider electric	model:	connexium
vendor:	codesys	model:	codesys
vendor:	codesys	model:	gateway
vendor:	codesys	model:	runtime

Vulnerability in Apple devices that made them unusable finally fixed. Update immediately iOS \| LaptrinhX Trust: 3.75 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: resource depletion, denial of service

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	icloud
vendor:	apple	model:	iphone

Infineon SCSI & RAID Devices Driver Trust: 3.25 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: feature bypass, security feature bypass

Affected products

External IDs

vendor:	dell	model:	bios
vendor:	infineon	model:	trusted platform
vendor:	infineon technologies	model:	trusted platform

Apache releases new 2.17.0 patch for Log4j to solve denial of service vulnerability \| ZDNet Related entries in the VARIoT vulnerabilities database: VAR-202112-1782 Trust: 4.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Feb. 17, 2000, midnight	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45105

Microsoft Researchers Detail macOS Vulnerability That Could Let Attackers Gain User Data \| Technology News Related entries in the VARIoT vulnerabilities database: VAR-202108-1285 Trust: 5.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 13, 2022, 1:43 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	icloud
vendor:	apple	model:	macos

db:

NVD

ids:

CVE-2021-30970

IDEMIA Vulnerability Lets Hackers Unlock Doors And Turnstiles Trust: 4.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 18, 2022, 7:58 a.m.	Vulnerabilities: denial of service, code execution, buffer overflow...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-35520, CVE-2021-35522, CVE-2021-35521

Apple HomeKit vulnerability can lock Apple devices Trust: 3.5 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 19, 2022, midnight	Vulnerabilities: denial of service, buffer overflow

Affected products

External IDs

vendor:

apple

model:

icloud

Millions Devices At Risk Because Of New Software Vulnerability - The True Reporter Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Dec. 15, 2021, 10:54 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

13 Best VAPT Tools Ranked for 2022 (Paid, Free Trials & Open-source) Trust: 3.5 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Oct. 10, 2019, 12:27 p.m.	Vulnerabilities: sql injection, cross-site scripting

Affected products

External IDs

vendor:

netbsd

model:

current

Joker Malware Marks Another Return to the Play Store, Infects 500K Android Devices \| Toolbox It Security Trust: 3.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Dec. 20, 2021, 4:05 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

VARIoT news about IoT security