Sign-up

VARIoT news about IoT security

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability | WBZ NewsRadio 1030

Trust: 3.0

Fetched: Jan. 18, 2022, 11:27 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud

Memory Bugs in BlackBerry's QNX Embedded OS Open Devices to Attacks | Threatpost

Trust: 3.0

Fetched: Jan. 18, 2022, 11:26 a.m., Published: Nov. 30, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: blackberry model: blackberry

Unauthenticated Command Injection Vulnerability

Trust: 4.25

Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 12, 2022, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs

Security Notice: Critical Arbitrary File Delete Vulnerability in SonicWall SMA 100 Series Appliances | SonicWall

Related entries in the VARIoT vulnerabilities database: VAR-202109-1777

Trust: 3.75

Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: sma 100
vendor: sonicwall model: remote access
db: NVD ids: CVE-2021-20034

How to Perform a Nmap Vulnerability Scan using NSE scripts

Related entries in the VARIoT vulnerabilities database: VAR-201808-0455, VAR-201303-0197, VAR-201801-0027, VAR-201205-0305, VAR-200909-0342, VAR-201601-0029, VAR-201303-0027

Trust: 4.25

Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: memory corruption, denial of service
Affected productsExternal IDs
vendor: proftpd model: proftpd
vendor: thekelleys model: dnsmasq
vendor: dnsmasq model: dnsmasq
db: NVD ids: CVE-2018-15473, CVE-2013-0198, CVE-2012-1667, CVE-2016-10708, CVE-2012-1823, CVE-2009-2958, CVE-2002-0651, CVE-2016-0777, CVE-2002-0029, CVE-2012-3411, CVE-2017-15906

NVD - CVE-2021-40127

Trust: 4.0

Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: sf500-48p
vendor: cisco model: sg200-50p_firmware
vendor: cisco model: sf302-08
vendor: cisco model: sg500xg-8f8t
vendor: cisco model: sf500-24mp_firmware
vendor: cisco model: sg500-52
vendor: cisco model: sg500-52_firmware
vendor: cisco model: sf300-24pp
vendor: cisco model: sg300-10p
vendor: cisco model: sg200-50
vendor: cisco model: sg300-10pp
vendor: cisco model: sg200-26fp
vendor: cisco model: sg500-28p
vendor: cisco model: sg300-10mp_firmware
vendor: cisco model: sf302-08pp
vendor: cisco model: sg200-26_firmware
vendor: cisco model: sf500-48mp_firmware
vendor: cisco model: sg500-28
vendor: cisco model: sg500-28p_firmware
vendor: cisco model: sg300-10pp_firmware
vendor: cisco model: sf500-24p_firmware
vendor: cisco model: sg500xg-8f8t_firmware
vendor: cisco model: sg500x-24
vendor: cisco model: sg500x-24_firmware
vendor: cisco model: sg300-10_firmware
vendor: cisco model: sf500-48mp
vendor: cisco model: sg500-52mp
vendor: cisco model: sf300-08
vendor: cisco model: sf300-48pp
vendor: cisco model: sg300-10p_firmware
vendor: cisco model: sg500-28mpp_firmware
vendor: cisco model: sg200-08p_firmware
vendor: cisco model: sg200-08p
vendor: cisco model: sg300-52_firmware
vendor: cisco model: sf302-08p_firmware
vendor: cisco model: sg200-08_firmware
vendor: cisco model: sg500x-48_firmware
vendor: cisco model: sg300-28pp
vendor: cisco model: sg300-10mp
vendor: cisco model: sg500-28_firmware
vendor: cisco model: sg200-26
vendor: cisco model: sg300-52p
vendor: cisco model: sg300-28mp_firmware
vendor: cisco model: sf500-48
vendor: cisco model: sf300-08_firmware
vendor: cisco model: sf300-48_firmware
vendor: cisco model: sg500-28mpp
vendor: cisco model: sf302-08mpp
vendor: cisco model: sf500-24p
vendor: cisco model: sf300-24
vendor: cisco model: sf300-48p
vendor: cisco model: sf302-08_firmware
vendor: cisco model: sf300-48p_firmware
vendor: cisco model: sg300-52
vendor: cisco model: sg200-26p_firmware
vendor: cisco model: sg300-28sfp
vendor: cisco model: sg300-52mp
vendor: cisco model: sg300-28p_firmware
vendor: cisco model: sg500-52p
vendor: cisco model: sf200e-24
vendor: cisco model: sf500-48p_firmware
vendor: cisco model: sg500x-48p
vendor: cisco model: sf200-24fp_firmware
vendor: cisco model: sf200-24fp
vendor: cisco model: sg200-08
vendor: cisco model: sf300-48pp_firmware
vendor: cisco model: sf200-48p
vendor: cisco model: sg200-26p
vendor: cisco model: sg200-10fp
vendor: cisco model: sf300-24pp_firmware
vendor: cisco model: sg300-10
vendor: cisco model: sf200e-48
vendor: cisco model: sf300-48
vendor: cisco model: sg200-26fp_firmware
vendor: cisco model: sg200-50fp_firmware
vendor: cisco model: sf300-24p
vendor: cisco model: sg300-10mpp
vendor: cisco model: sg500x-24p
vendor: cisco model: sf300-24mp_firmware
vendor: cisco model: sg500x-24p_firmware
vendor: cisco model: sf200-48_firmware
vendor: cisco model: sg500x-48p_firmware
vendor: cisco model: sg300-28_firmware
vendor: cisco model: sg300-20
vendor: cisco model: sf302-08p
vendor: cisco model: sg300-28
vendor: cisco model: sf200e-24p_firmware
vendor: cisco model: sf200-24p
vendor: cisco model: sf300-24mp
vendor: cisco model: sg200-50_firmware
vendor: cisco model: sg300-28sfp_firmware
vendor: cisco model: sg300-52p_firmware
vendor: cisco model: sf200e-48_firmware
vendor: cisco model: sf300-24p_firmware
vendor: cisco model: sf302-08pp_firmware
vendor: cisco model: sf200-48
vendor: cisco model: sf302-08mp_firmware
vendor: cisco model: sg200-10fp_firmware
vendor: cisco model: sf200-24_firmware
vendor: cisco model: sg200-18
vendor: cisco model: sg200-50fp
vendor: cisco model: sg300-20_firmware
vendor: cisco model: sf200-24
vendor: cisco model: sf200-48p_firmware
vendor: cisco model: sg300-28p
vendor: cisco model: sg200-18_firmware
vendor: cisco model: sf500-24mp
vendor: cisco model: sf302-08mp
vendor: cisco model: sf302-08mpp_firmware
vendor: cisco model: sg500-52p_firmware
vendor: cisco model: sg500x-48
vendor: cisco model: sf500-48_firmware
vendor: cisco model: sf300-24_firmware
vendor: cisco model: sg300-28mp
vendor: cisco model: sf500-24_firmware
vendor: cisco model: sf200e-24_firmware
vendor: cisco model: sg200-50p
vendor: cisco model: sf200-24p_firmware
vendor: cisco model: sf200e-24p
vendor: cisco model: sf500-24
vendor: cisco model: sg300-52mp_firmware
vendor: cisco model: sg300-28pp_firmware
vendor: cisco model: sg300-10mpp_firmware
vendor: cisco model: sg500-52mp_firmware
db: NVD ids: CVE-2021-40127

Specification vulnerability in devices that speak Bluetooth is addressed

Trust: 4.5

Fetched: Jan. 18, 2022, 11:26 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: information disclosure, brute force attack
Affected productsExternal IDs
vendor: broadcom model: broadcom

Luxul | Professional grade Wi-Fi and networking products | Legrand AV

Trust: 3.0

Fetched: Jan. 18, 2022, 11:25 a.m., Published: Dec. 1, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve

F-Secure discovers vulnerabilities affecting over 150 HP printer models | F-Secure Press Room

Trust: 4.0

Fetched: Jan. 18, 2022, 11:25 a.m., Published: Jan. 30, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-39238, CVE-2021-39237

SecurityWizardry.com - Vulnerability Details

Trust: 4.75

Fetched: Jan. 18, 2022, 11:25 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: codesys model: web server
vendor: codesys model: gateway
vendor: codesys model: runtime
vendor: codesys model: codesys
vendor: codesys model: development system
vendor: schneider electric model: modicon m340
vendor: schneider electric model: connexium
vendor: schneider electric model: m340
vendor: schneider model: modicon m340
vendor: schneider model: connexium
vendor: schneider model: m340

Critical Cisco Bugs Allow Code Execution on Wireless, SD-WAN | Threatpost

Trust: 4.0

Fetched: Jan. 18, 2022, 11:24 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: sd-wan

Bluetooth Bugs Open Billions of Devices to DoS, Code Execution | Threatpost

Trust: 3.25

Fetched: Jan. 18, 2022, 11:24 a.m., Published: Nov. 30, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

NVD - CVE-2021-20121

Trust: 3.0

Fetched: Jan. 18, 2022, 11:24 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-20121

Uniscan Vulnerability Scanner: Installation Guide and Examples

Trust: 3.5

Fetched: Jan. 18, 2022, 11:24 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: sql injection, remote file inclusion, file inclusion...
Affected productsExternal IDs

Senior Security Vulnerability Researcher - Stellen-ID: 1828569 | Amazon.jobs

Trust: 3.75

Fetched: Jan. 18, 2022, 11:23 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: memory corruption, privilege escalation
Affected productsExternal IDs
vendor: wireshark model: wireshark

Zero-day exploit lands for Windows privilege-escalation bug • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202111-0697

Trust: 4.0

Fetched: Jan. 18, 2022, 11:22 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-42321, CVE-2021-41379

Vulnerabilities - Zephyr Project Documentation

Related entries in the VARIoT vulnerabilities database: VAR-202006-0031, VAR-202006-0028, VAR-202006-0258, VAR-202105-0020

Trust: 5.5

Fetched: Jan. 18, 2022, 11:21 a.m., Published: Jan. 4, 2022, midnight
 Vulnerabilities: information leak, code execution, information leakage...
Affected productsExternal IDs
vendor: mesh model: mesh
db: NVD ids: CVE-2021-3581, CVE-2020-10068, CVE-2020-13598, CVE-2020-10058, CVE-2020-10024, CVE-2021-3433, CVE-2021-3432, CVE-2021-3454, CVE-2020-10061, CVE-2020-10059, CVE-2020-10064, CVE-2020-10023, CVE-2020-10063, CVE-2020-13600, CVE-2020-10027, CVE-2020-10060, CVE-2021-3431, CVE-2021-3323, CVE-2021-3435, CVE-2020-10066, CVE-2020-10028, CVE-2021-3430, CVE-2020-10022, CVE-2020-13599, CVE-2020-13603, CVE-2020-10069, CVE-2020-10062, CVE-2020-13601, CVE-2021-3434, CVE-2020-10071, CVE-2021-3625, CVE-2021-3436, CVE-2021-3319, CVE-2021-3455, CVE-2021-3510, CVE-2020-10136, CVE-2020-10019, CVE-2020-10065, CVE-2020-10021, CVE-2021-3320, CVE-2020-10070, CVE-2021-3321, CVE-2020-13602, CVE-2020-10072, CVE-2020-10067

Eavesdropping flaws found in MediaTek-powered Android phones • The Register

Trust: 3.75

Fetched: Jan. 18, 2022, 11:21 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point
vendor: xiaomi model: redmi
db: NVD ids: CVE-2021-0661, CVE-2021-0673, CVE-2021-0663, CVE-2021-0662

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability | NewsRadio 630 WLAP

Trust: 3.0

Fetched: Jan. 18, 2022, 11:21 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability | 1290 WJNO

Trust: 3.0

Fetched: Jan. 18, 2022, 11:21 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud