VARIoT latest news about IoT security

Check Point Research discover vulnerabilities in smartphones chips embedded in 37% of smartphones around the world - Check Point Software Trust: 4.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: -	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	vivo	model:	vivo
vendor:	check point	model:	check point

db:

NVD

ids:

CVE-2021-0663, CVE-2021-0662, CVE-2021-0673, CVE-2021-0661

14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices Trust: 4.0 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Nov. 10, 2021, 8:08 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42386, CVE-2021-42373, CVE-2021-42376, CVE-2021-42379, CVE-2021-42381, CVE-2021-42378, CVE-2021-42374, CVE-2021-42375, CVE-2021-42383, CVE-2021-42384, CVE-2021-42377, CVE-2021-42380, CVE-2021-42382, CVE-2021-42385

15th November - Threat Intelligence Report - Check Point Research Related entries in the VARIoT vulnerabilities database: VAR-202108-1005, VAR-202002-1447, VAR-201704-0303, VAR-202003-0363, VAR-202109-1909, VAR-201502-0201 Trust: 5.5 Fetched: Nov. 26, 2021, 7:29 a.m., Published: -	Vulnerabilities: security feature bypass, privilege escalation, remote command injection...

Affected products

External IDs

vendor:	netgear	model:	r6400
vendor:	netgear	model:	router
vendor:	netgear	model:	r7000
vendor:	dasan	model:	gpon router
vendor:	draytek	model:	vigor
vendor:	draytek	model:	routers
vendor:	d-link	model:	router
vendor:	check point	model:	check point
vendor:	solarwinds	model:	serv-u
vendor:	xiongmai	model:	uc-httpd

db:

NVD

ids:

CVE-2021-42321, CVE-2021-34484, CVE-2021-42237, CVE-2020-8515, CVE-2016-1555, CVE-2020-10173, CVE-2021-40444, CVE-2021-26411, CVE-2021-42292, CVE-2015-2051

Positive Technologies Discovers Vulnerability in Intel Processors used in Laptops, Cars and Other devices Trust: 4.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Nov. 14, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	tesla	model:	model 3
vendor:	tesla	model:	model

db:

NVD

ids:

CVE-2021-0146

Security Advisory for WiFi WPS and IEEE-1905 Vulnerabilities on Multiple Products, PSV-2021-0298 & PSV-2021-0300 \| Answer \| NETGEAR Support Related entries in the VARIoT vulnerabilities database: VAR-202112-2248, VAR-202112-2244, VAR-202112-2242, VAR-202112-2230, VAR-202112-2246, VAR-202112-2241, VAR-202112-2247, VAR-202112-2243, VAR-202112-2245 Trust: 3.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

netgear

model:

orbi

db:

NVD

ids:

CVE-2021-32467, CVE-2021-37565, CVE-2021-37560, CVE-2021-37562, CVE-2021-37571, CVE-2021-37567, CVE-2021-37584, CVE-2021-32469, CVE-2021-37563, CVE-2021-32468, CVE-2021-37572, CVE-2021-37569, CVE-2021-37570, CVE-2021-37564, CVE-2021-37561, CVE-2021-37568, CVE-2021-37566, CVE-2021-37583, CVE-2021-35055

Vulnerability in Cisco security devices could cause firewalls to fail Related entries in the VARIoT vulnerabilities database: VAR-202110-1796, VAR-202007-1057, VAR-202005-0685, VAR-202005-0696 Trust: 5.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Nov. 23, 2021, 6:15 p.m.	Vulnerabilities: denial of service, buffer overflow

Affected products

External IDs

vendor:	cisco	model:	cisco adaptive security appliance
vendor:	cisco	model:	firepower threat defense
vendor:	cisco	model:	firepower
vendor:	cisco	model:	device manager
vendor:	cisco	model:	adaptive security appliance

db:

NVD

ids:

CVE-2021-34704, CVE-2020-3452, CVE-2020-3187, CVE-2020-3259

MediaTek quickly fixes recent eavesdrop vulnerability Trust: 4.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Nov. 25, 2021, 2:38 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	xiaomi	model:	redmi
vendor:	check point	model:	check point
vendor:	huawei	model:	huawei

Vulnerabilities in MediaTek Chips Found in 37% of Smartphones Worldwide Trust: 4.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Nov. 25, 2021, 2 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	check point	model:	check point
vendor:	vivo	model:	vivo

db:

NVD

ids:

CVE-2021-0663, CVE-2021-0673, CVE-2021-0661, CVE-2021-0662

A Vulnerability in Multiple NETGEAR Products Could Allow for Arbitrary Code Execution Trust: 4.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Jan. 7, 2022, 7:33 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	netgear	model:	d6400
vendor:	netgear	model:	ex3700
vendor:	netgear	model:	d6220
vendor:	netgear	model:	d7000v2
vendor:	netgear	model:	ex6130
vendor:	netgear	model:	ex3800
vendor:	netgear	model:	ex6120

Update your Apple devices now. New Pegasus hack prompts company to issue new software to fix iMessage vulnerability. Trust: 3.75 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Sept. 13, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

iphone

All MediaTek processors found with vulnerabilities - GadgetMatch Trust: 4.0 Fetched: Nov. 26, 2021, 7:29 a.m., Published: Nov. 26, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

axis

model:

axis

Windows Installer vulnerability becomes actively exploited zero-day Related entries in the VARIoT vulnerabilities database: VAR-202111-0697 Trust: 3.5 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 24, 2021, 2:21 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2021-41379

Vulnerabilities in MediaTek chips expose millions of Android devices to eavesdropping - Wilson's Media Trust: 3.0 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 24, 2021, 4:48 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

check point

model:

check point

Vulnerabilities in MediaTek chips expose millions of Android devices to eavesdropping Trust: 3.0 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 24, 2021, 11:56 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

check point

model:

check point

Vulnerabilities in MediaTek chips expose millions of Android devices to eavesdropping - Fealse Trust: 3.0 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 24, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

check point

model:

check point

ITREALMS: Danger! Vulnerability in Cisco security devices - ITREALMS Related entries in the VARIoT vulnerabilities database: VAR-202007-1057, VAR-202005-0685, VAR-202005-0696, VAR-202110-1796 Trust: 3.25 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 22, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2020-3452, CVE-2020-3187, CVE-2020-3259, CVE-2021-34704

best vulnerability scanner Trust: 5.25 Fetched: Nov. 25, 2021, 9:59 a.m., Published: -	Vulnerabilities: sql injection, command injection, cross-site scripting...

Affected products

External IDs

vendor:	cisco	model:	router
vendor:	essential	model:	phone
vendor:	google	model:	home
vendor:	wireshark	model:	wireshark
vendor:	tripwire	model:	ip360
vendor:	netbsd	model:	netbsd
vendor:	netbsd	model:	current
vendor:	comodo	model:	firewall
vendor:	comodo	model:	antivirus

New BrakTooth Bluetooth vulnerabilities affect billions of devices around the world - AVA360 Entertainment Community Trust: 4.75 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Sept. 30, 2021, 5:23 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	dell	model:	optiplex
vendor:	asus	model:	asus

db:

NVD

ids:

CVE-2021-28139

MediaTek chips had faced a vulnerability that allowed apps to eavesdrop on users - Gizmochina Trust: 3.75 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 24, 2021, 8:13 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:

check point

model:

check point

'Dangerous' Cisco Bug Douses Firewalls, Opens Gates - SDxCentral Trust: 3.0 Fetched: Nov. 25, 2021, 9:59 a.m., Published: Dec. 20, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

serve

model:

serve

VARIoT news about IoT security