Sign-up

VARIoT news about IoT security

Are your home security cameras vulnerable to hacking? - CNET

Trust: 3.25

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 3 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: comcast model: comcast xfinity
vendor: comcast model: xfinity
vendor: amazon model: echo show
vendor: google model: home
vendor: ring model: ring

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities - Cisco

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 11, 2022, 10:54 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: firepower threat defense software
vendor: cisco model: firepower
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco firepower management center
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower management center
vendor: cisco model: adaptive security appliance software
vendor: cisco model: cisco adaptive security appliance software

[no-title]

Trust: 5.25

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: feature bypass, authentication vulnerability, code execution...
Affected productsExternal IDs
vendor: apple model: macos
vendor: nokia model: series
vendor: nokia model: nokia
vendor: nokia model: impact
vendor: cisco model: series switches
vendor: cisco model: cisco policy suite
vendor: cisco model: series
vendor: cisco model: catalyst
vendor: cisco model: policy suite
vendor: samsung model: samsung
vendor: samsung model: note 10
vendor: samsung model: galaxy s10
vendor: samsung model: printer
vendor: samsung model: notes
vendor: samsung model: galaxy s8
vendor: samsung model: note
vendor: samsung model: mobile devices
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy
vendor: samsung model: mobile
vendor: samsung model: galaxy note10
vendor: samsung model: galaxy note
vendor: google model: android
vendor: google model: pixel xl
vendor: google model: chrome
vendor: google model: home
vendor: google model: pixel
vendor: google model: chromecast
vendor: asus model: asus
vendor: asus model: zenfone
vendor: comcast model: xfinity
vendor: oneplus model: one
vendor: oneplus model: oxygenos
vendor: oneplus model: oneplus
vendor: huawei model: nova
vendor: huawei model: emui
vendor: huawei model: mate
vendor: huawei model: mate 30
vendor: huawei model: huawei mate
vendor: huawei model: huawei
vendor: huawei model: honor
db: NVD ids: CVE-2021-38648, CVE-2021-42321, CVE-2021-28164, CVE-2021-42316, CVE-2021-42305, CVE-2021-22204, CVE-2021-42298, CVE-2021-38647, CVE-2021-42292

Major vulnerability in log4j - Immediate action required by all systems & web administrators and others : TechWeb : Blog Archive : Boston University

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 3, 2022, 8:01 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Critical Vulnerability (CVE-2021-44228, CVE-2021-45046) in Apache log4j Library | Information Technology Solutions

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 4.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 21, 2021, 12:30 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

Log4j 2 Vulnerability & TPRM Implications - Blog - OneTrust

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 20, 2021, 5:31 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Widespread Log4j Remote Code Execution Vulnerability Could Affect Millions -- Redmondmag.com

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 4.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228, CVE-2021-45046

Critical Log4j Vulnerability Hits Everything, Including the IBM i Server - IT Jungle

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 15, 2021, 5:05 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point
vendor: check point software technologies model: check point
vendor: node.js model: node.js
db: NVD ids: CVE-2021-44228

Countless Serves Are Vulnerable to Apache Log4j Zero-Day Exploit

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 10, 2021, 3:50 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Vulnerabilities identified in the Abode IOTA security system: Fake image injection into timeline

Trust: 5.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: netgear model: orbi
vendor: netgear model: router
db: NVD ids: CVE-2020-8105

Vulnerability Scans (What They Do & Don't Tell You)

Trust: 3.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 8, 2021, 5:03 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: wireshark model: wireshark
vendor: trend model: security

Log4j “Log4Shell” vulnerability explained: what, why, and how? - 1E

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 6:51 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2021-44228

Log4j may be the worst vulnerability yet, says Department of Homeland Security | AppleInsider

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228

Log4j vulnerability being used to empty victims' bank accounts | Express.co.uk

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 21, 2021, 5:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: icloud

NVD - CVE-2021-45046

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 4.25

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: denial of service, information leak, code execution
Affected productsExternal IDs
vendor: sonicwall model: email_security
vendor: netapp model: oncommand_insight
vendor: netapp model: snapcenter
vendor: siemens model: comos
db: NVD ids: CVE-2021-44228, CVE-2021-45046

Log4j Vulnerability: Everything You Need To Know About the Zero-Day Flaw | Toolbox It Security

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 7, 2022, 6:40 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
vendor: check point software technologies model: check point
vendor: cisco model: unity
vendor: cisco model: guard
vendor: apple model: macos
vendor: sonicwall model: web application firewall
vendor: broadcom model: broadcom
vendor: broadcom model: linux
db: NVD ids: CVE-2021-44228

Log4j vulnerability being used to empty victims' bank accounts | Express.co.uk

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 21, 2021, 5:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: icloud

Log4Shell RCE Vulnerability - NHS Digital

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.25

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Log4Shell Could be The Most Dangerous Software Vulnerability Ever

Trust: 3.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 15, 2021, 2:50 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
vendor: cisco model: webex

Log4j Causes Nearly 900K Cyberattacks in 4 Days | PYMNTS.com

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 14, 2021, 11:18 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point