VARIoT latest news about IoT security

ManageEngine NetFlow Analyzer Read Me Related entries in the VARIoT vulnerabilities database: VAR-201806-1164, VAR-201806-1163, VAR-201911-1328 Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 17, 2022, midnight	Vulnerabilities: sql injection, cross-site scripting, code execution...

Affected products

External IDs

vendor:	essential	model:	phone
vendor:	huawei	model:	huawei
vendor:	huawei	model:	webui
vendor:	trend	model:	security
vendor:	axis	model:	axis
vendor:	pfsense	model:	pfsense
vendor:	zoho	model:	manageengine oputils
vendor:	zoho	model:	manageengine applications manager
vendor:	zoho	model:	manageengine opmanager
vendor:	zoho	model:	manageengine netflow analyzer
vendor:	zoho	model:	opmanager
vendor:	zoho	model:	oputils
vendor:	zoho	model:	manageengine servicedesk plus
vendor:	google	model:	nexus
vendor:	google	model:	android
vendor:	google	model:	google chrome
vendor:	google	model:	chrome
vendor:	aruba	model:	instant
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	router
vendor:	cisco	model:	nexus
vendor:	cisco	model:	quad
vendor:	cisco	model:	access points
vendor:	cisco	model:	aireos
vendor:	cisco	model:	routers
vendor:	cisco	model:	technical support
vendor:	cisco	model:	wireless lan controller
vendor:	cisco	model:	wide area application services
vendor:	cisco	model:	wireless lan controllers
vendor:	cisco	model:	series
vendor:	cisco	model:	wireless controller
vendor:	cisco	model:	cisco routers
vendor:	cisco	model:	spark
vendor:	palo	model:	firewall
vendor:	palo	model:	networks
vendor:	jquery	model:	jquery

db:

NVD

ids:

CVE-2019-8929, CVE-2019-7427, CVE-2018-12998, CVE-2018-12997, CVE-2019-7423, CVE-2018-10803, CVE-2020-11946, CVE-2019-8926, CVE-2019-12196, CVE-2020-12116, CVE-2021-20078, CVE-2021-3287, CVE-2021-41075, CVE-2019-8927, CVE-2019-17421, CVE-2018-19403, CVE-2019-7425, CVE-2019-7424, CVE-2020-10541, CVE-2017-11560, CVE-2019-8928, CVE-2019-7422, CVE-2019-7426, CVE-2008-0128, CVE-2021-44514, CVE-2019-8925

Top 10 IoT Security Issues: Ransom, Botnet Attacks, Spying Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	serve	model:	serve
vendor:	trend	model:	security

NVD - CVE-2021-1592 Trust: 5.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco systems	model:	ucs manager
vendor:	cisco systems	model:	cisco systems
vendor:	cisco systems	model:	cisco ucs manager
vendor:	cisco systems	model:	unified_computing_system
vendor:	cisco	model:	ucs manager
vendor:	cisco	model:	cisco systems
vendor:	cisco	model:	cisco ucs manager
vendor:	cisco	model:	unified_computing_system

db:

NVD

ids:

CVE-2021-1592

Device Vulnerabilities in the Connected Home Related entries in the VARIoT vulnerabilities database: VAR-201505-0274 Trust: 6.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: command execution, command injection, buffer overflow...

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	d-link	model:	eyeon baby monitor
vendor:	d-link	model:	dcs-825l
vendor:	d-link	model:	router
vendor:	buffalo	model:	wsr-300hp
vendor:	buffalo	model:	router
vendor:	trend micro	model:	security
vendor:	trend micro	model:	home network security
vendor:	dahua	model:	ptz camera
vendor:	dahua	model:	camera
vendor:	dahua	model:	ip camera
vendor:	belkin	model:	router
vendor:	trend	model:	security
vendor:	trend	model:	home network security

db:

NVD

ids:

CVE-2014-8361

Siemens TCP/IP Stack Vulnerabilities-AMNESIA:33 in SENTRON PAC / 3VA Devices (Update B) \| CISA Related entries in the VARIoT vulnerabilities database: VAR-202012-0245, VAR-202012-0125 Trust: 3.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	siemens	model:	sentron pac4200
vendor:	siemens	model:	sentron pac3200
vendor:	siemens	model:	modbus tcp

db:	SIEMENS	ids:	SSA-541018
db:	NVD	ids:	CVE-2020-17437, CVE-2020-13987
db:	ICS CERT	ids:	ICSA-21-068-06
db:	US CERT	ids:	ICSA-21-068-06

Device Vulnerabilities in the Connected Home Related entries in the VARIoT vulnerabilities database: VAR-201505-0274 Trust: 6.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: command execution, command injection, buffer overflow...

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	d-link	model:	eyeon baby monitor
vendor:	d-link	model:	dcs-825l
vendor:	d-link	model:	router
vendor:	buffalo	model:	wsr-300hp
vendor:	buffalo	model:	router
vendor:	trend micro	model:	security
vendor:	trend micro	model:	home network security
vendor:	dahua	model:	ptz camera
vendor:	dahua	model:	camera
vendor:	dahua	model:	ip camera
vendor:	belkin	model:	router
vendor:	trend	model:	security
vendor:	trend	model:	home network security

db:

NVD

ids:

CVE-2014-8361

Mobile Application Security Threats and Vulnerabilities 2019: Mobile Device Security - Attacks Research Related entries in the VARIoT vulnerabilities database: VAR-201611-0386 Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: configuration vulnerability, session hijacking, cross-site scripting...

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	wi-fi router
vendor:	alcatel	model:	operating system
vendor:	apple	model:	icloud

db:

NVD

ids:

CVE-2019-5765, CVE-2016-5195

Full disclosure: 0day vulnerability (backdoor) in firmware for Xiaongmai-based DVRs, NVRs and IP cameras / Habr Trust: 4.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

vendor:	qemu	model:	qemu
vendor:	xiongmai	model:	ip cameras

Android Patches Actively Exploited Zero-Day Kernel Bug \| Threatpost Related entries in the VARIoT vulnerabilities database: VAR-202111-0609, VAR-202108-1005, VAR-202111-0579 Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-1048, CVE-2021-1975, CVE-2021-0918, CVE-2021-34484, CVE-2021-0889, CVE-2021-1924, CVE-2021-0930

Multiple vulnerabilities in Moxa devices Related entries in the VARIoT vulnerabilities database: VAR-202109-1171, VAR-202109-1172, VAR-201501-0737 Trust: 5.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 2, 2022, midnight	Vulnerabilities: cross-site scripting, command injection, buffer overflow

Affected products

External IDs

vendor:	moxa	model:	moxa
vendor:	moxa	model:	wac-1001

db:

NVD

ids:

CVE-2021-39278, CVE-2021-39279, CVE-2015-0235

Disclosing CVE-2021-40823 and CVE-2021-40824: E2EE vulnerability in multiple Matrix clients \| Matrix.org Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-40824, CVE-2021-40823

Report: Vulnerability Allows Hackers to Spy Via IoT Devices - My TechDecisions Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: code execution

Affected products	External IDs

NVD - CVE-2021-1583 Related entries in the VARIoT vulnerabilities database: VAR-202108-0317 Trust: 5.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: improper access control

Affected products

External IDs

vendor:	cisco	model:	nexus_92300yc
vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	series
vendor:	cisco	model:	nexus_9000
vendor:	cisco	model:	nexus
vendor:	cisco	model:	nexus_92160yc-x
vendor:	cisco	model:	nexus_92304qc
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	cisco nexus 9000 series
vendor:	cisco	model:	cisco systems
vendor:	cisco	model:	nexus 9000
vendor:	cisco	model:	nexus_9000v
vendor:	cisco systems	model:	nexus_92300yc
vendor:	cisco systems	model:	nexus 9000 series
vendor:	cisco systems	model:	series
vendor:	cisco systems	model:	nexus_9000
vendor:	cisco systems	model:	nexus
vendor:	cisco systems	model:	nexus_92160yc-x
vendor:	cisco systems	model:	nexus_92304qc
vendor:	cisco systems	model:	nx-os
vendor:	cisco systems	model:	cisco nexus 9000 series
vendor:	cisco systems	model:	cisco systems
vendor:	cisco systems	model:	nexus 9000
vendor:	cisco systems	model:	nexus_9000v

db:

NVD

ids:

CVE-2021-1583

Cisco Ios Xe version 16.9.6 : Security vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202103-0768, VAR-202109-0747, VAR-202103-0540, VAR-202103-0550, VAR-202103-0773, VAR-202109-0245, VAR-202103-0778, VAR-202103-0546, VAR-202103-0544, VAR-202103-0534, VAR-202103-0763, VAR-202109-0601, VAR-202103-0549, VAR-202103-0470 Trust: 4.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: command injection, memory corruption, denial of service

Affected products

External IDs

vendor:	cisco	model:	iox application
vendor:	cisco	model:	cisco iox
vendor:	cisco	model:	cisco iox application
vendor:	cisco	model:	series
vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	ios xe software
vendor:	cisco	model:	series switches
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	ios software
vendor:	cisco	model:	catalyst
vendor:	cisco	model:	cisco ios

db:

NVD

ids:

CVE-2021-1446, CVE-2021-34699, CVE-2021-1377, CVE-2021-1391, CVE-2021-1435, CVE-2021-1619, CVE-2021-1442, CVE-2021-1390, CVE-2009-1234, CVE-2021-1384, CVE-2021-1403, CVE-2021-1453, CVE-2021-34705, CVE-2021-1376, CVE-2021-1352

Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop \| Threatpost Related entries in the VARIoT vulnerabilities database: VAR-202108-1005 Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28372, CVE-2021-34484

Top 10 Most Useful Vulnerability Assessment Scanning Tools Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 5, 2022, 4:40 a.m.	Vulnerabilities: sql injection, cross-site scripting

Affected products

External IDs

vendor:	aircrack-ng	model:	aircrack-ng
vendor:	netbsd	model:	netbsd
vendor:	tripwire	model:	ip360
vendor:	wireshark	model:	wireshark

Electric Vehicle Chargers Are Shockingly Vulnerable to Hacking Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

trend

model:

security

There is another serious vulnerability in iOS15.0.1!Hackers demonstrate remote control of iPhone and view sensitive information - iNEWS Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

iphone

Auth Bypass Bug Exploited, Millions of Routers Affected \| Threatpost Related entries in the VARIoT vulnerabilities database: VAR-202101-0529, VAR-202108-1005, VAR-202105-1126, VAR-202104-0768 Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2020-29557, CVE-2021-34484, CVE-2021-31755, CVE-2021-1498, CVE-2021-20090, CVE-2021-22502, CVE-2021-22506, CVE-2021-1497

Cisco Patches Critical Bug With Public Exploit \| Threatpost Related entries in the VARIoT vulnerabilities database: VAR-202107-0426, VAR-202108-1005, VAR-202109-0622 Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-1585, CVE-2021-34484, CVE-2021-34746

VARIoT news about IoT security