VARIoT latest news about IoT security

Critical Vulnerability Affects Millions of IoT Devices Trust: 4.75 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 17, 2021, 8:45 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28372

Peloton Bike+ vulnerability allowed complete takeover of devices Trust: 3.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: June 16, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

db:

POSIVITIVE TECHNOLOGY

ids:

ID:10

Report Highlights Employee Device IoT Vulnerabilities - RTInsights Trust: 3.25 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Sept. 9, 2021, 4:47 a.m.	Vulnerabilities: -

Affected products	External IDs

TALOS-2021-1366 \|\| Cisco Talos Intelligence Group - Comprehensive Threat Intelligence Related entries in the VARIoT vulnerabilities database: VAR-202111-1728, VAR-202111-1732, VAR-202111-1727, VAR-202111-1760, VAR-202111-1723, VAR-202111-1724, VAR-202111-1726, VAR-202111-1759, VAR-202111-1761, VAR-202111-1762, VAR-202111-1729, VAR-202111-1722, VAR-202111-1725, VAR-202111-1730 Trust: 4.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Nov. 22, 2021, midnight	Vulnerabilities: sql injection, cross-site request forgery, request forgery

Affected products

External IDs

vendor:

cisco

model:

routers

db:

NVD

ids:

CVE-2021-21934, CVE-2021-21937, CVE-2021-21933, CVE-2021-21925, CVE-2021-21929, CVE-2021-21930, CVE-2021-21932, CVE-2021-21924, CVE-2021-21927, CVE-2021-21928, CVE-2021-21935, CVE-2021-21926, CVE-2021-21931, CVE-2021-21936

General FAQ \| Qualys Trust: 3.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 1, 2022, midnight	Vulnerabilities: sql injection, cross-site scripting

Affected products	External IDs

Cassia IoT Access Controller OT Cloud Vulnerability found by Team82 Trust: 3.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 8, 2021, 3:42 p.m.	Vulnerabilities: directory traversal, path traversal

Affected products

External IDs

db:

NVD

ids:

CVE-2021-22685

4 vulnerabilities under attack give hackers full control of Android devices \| Ars Technica Related entries in the VARIoT vulnerabilities database: VAR-202105-0365, VAR-202105-0363 Trust: 4.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 4, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664

How to hack android devices using the stagefright vulnerability [updated 2021] - Infosec Resources Trust: 4.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: May 11, 2021, 2:56 p.m.	Vulnerabilities: code execution, memory corruption

Affected products

External IDs

vendor:	samsung	model:	galaxy
vendor:	samsung	model:	android phone
vendor:	samsung	model:	samsung galaxy
vendor:	samsung	model:	galaxy s5
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile
vendor:	google	model:	android
vendor:	google	model:	nexus

New Windows 10 vulnerability allows anyone to get admin privileges Trust: 3.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 10, 2022, midnight	Vulnerabilities: access violation

Affected products

External IDs

db:

NVD

ids:

CVE-2021-36934

Threat and Vulnerability Management now supports all major platforms - Microsoft Security Blog Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 3.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: May 11, 2021, 6 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	google	model:	google chrome

db:

NVD

ids:

cve-2021-44228, CVE-2021-44228

BlueBorne Attack Research & Solutions \| Armis Labs Trust: 4.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Oct. 17, 2021, 7:32 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	mobile devices
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile phones
vendor:	samsung	model:	mobile
vendor:	broadcom	model:	linux
vendor:	broadcom	model:	broadcom
vendor:	google	model:	wifi
vendor:	google	model:	android
vendor:	serve	model:	serve

db:

NVD

ids:

CVE-2017-0783, CVE-2017-8628

Windows Hello Vulnerability Allows Attackers To Bypass Biometric Authentication Using Spoofed Images - CPO Magazine Trust: 3.75 Fetched: Dec. 16, 2021, 3:47 p.m., Published: July 30, 2021, 2:33 p.m.	Vulnerabilities: authentication vulnerability

Affected products	External IDs

Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability - Microsoft Security Blog Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-1782, VAR-202112-0562, VAR-202112-0566 Trust: 4.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 12, 2021, 5:29 a.m.	Vulnerabilities: command execution, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44832, CVE-2021-34473, CVE-2021-26084, CVE-2021-45105, CVE-2021-44428, CVE-2021-45046, CVE-2021-4428, CVE-2021-44228

Log4j zero-day flaw: What you need to know and how to protect yourself \| ZDNet Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 5.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 14, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

Zero-day vulnerability in Hillrom cardiology devices could allow attackers full control \| The Daily Swig Trust: 4.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 13, 2021, 2:03 p.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2021-43935

Mobile vulnerabilities: What they are and how they impact the enterprise Trust: 3.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

The Top 5 Bluetooth Security Vulnerabilities Trust: 4.75 Fetched: Dec. 16, 2021, 3:47 p.m., Published: -	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

raspberry pi

model:

3

Smart Yet Flawed: IoT Device Vulnerabilities Explained - Security News Related entries in the VARIoT vulnerabilities database: VAR-202003-1707 Trust: 4.25 Fetched: Dec. 16, 2021, 3:47 p.m., Published: -	Vulnerabilities: denial of service, default credentials

Affected products

External IDs

vendor:	serve	model:	serve
vendor:	trend micro	model:	home network security
vendor:	trend micro	model:	security
vendor:	sonos	model:	sonos
vendor:	trend	model:	home network security
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2020-9054

DHS CISA: Serious Vulnerabilities Found in 6 Medical Device Systems Trust: 3.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	baxter	model:	prismax
vendor:	baxter	model:	prismaflex
vendor:	baxter	model:	spectrum infusion system
vendor:	baxter	model:	wireless battery module

Moxa NPort Device Vulnerabilities (Update B) \| CISA Related entries in the VARIoT vulnerabilities database: VAR-201702-0860, VAR-201702-0862, VAR-201702-0593, VAR-201702-0594, VAR-201702-0595, VAR-201702-0596, VAR-201702-0597, VAR-201702-0851 Trust: 4.75 Fetched: Dec. 16, 2021, 3:47 p.m., Published: -	Vulnerabilities: request forgery, code execution, cross-site request forgery...

Affected products

External IDs

vendor:	moxa	model:	nport 5600 series
vendor:	moxa	model:	nport 5200a series
vendor:	moxa	model:	nport 5600-dt/dtl
vendor:	moxa	model:	nport 5400 series
vendor:	moxa	model:	nport p5150a
vendor:	moxa	model:	nport
vendor:	moxa	model:	nport 5200a
vendor:	moxa	model:	nport 5100a series
vendor:	moxa	model:	nport 5100a
vendor:	moxa	model:	nport 5200 series
vendor:	moxa	model:	nport p5150a series
vendor:	moxa	model:	nport 5x50ai-m12
vendor:	moxa	model:	moxa
vendor:	moxa	model:	nport 5100 series

db:	ICS CERT	ids:	ICSA-16-336-02
db:	ICS CERT ALERT	ids:	ICS-ALERT-10-301-01, ICS-ALERT-16-099-01B, ICS-ALERT-16-099-01A, ICS-ALERT-16-099-01
db:	US CERT	ids:	ICSA-16-336-02

VARIoT news about IoT security