VARIoT latest news about IoT security

Log4j Vulnerability Being Actively Exploited \| New Jersey Cybersecurity & Communications Integration Cell Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 5.25 Fetched: Dec. 28, 2021, 9:20 a.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-4104, CVE-2021-44228

NJCCIC Alerts and Advisories Related entries in the VARIoT vulnerabilities database: VAR-202112-2341 Trust: 5.25 Fetched: Dec. 28, 2021, 9:20 a.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

vendor:

kcodes

model:

netusb

db:

NVD

ids:

CVE-2021-45608

Google Online Security Blog: Apache Log4j Vulnerability Related entries in the VARIoT vulnerabilities database: VAR-202112-0562, VAR-202112-0566 Trust: 3.75 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 17, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	google	model:	chrome os

db:

NVD

ids:

CVE-2021-45046, CVE-2021-44228

Lights, Cameras…Vulnerabilities? Rise of Non-Business IoT Devices Putting North American Corporate Networks At Risk Trust: 3.25 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Oct. 20, 2021, 7:01 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	paloaltonetworks	model:	firewall
vendor:	paloaltonetworks	model:	networks
vendor:	paloaltonetworks	model:	palo alto networks
vendor:	palo	model:	firewall
vendor:	palo	model:	networks
vendor:	palo	model:	palo alto networks
vendor:	palo alto networks	model:	firewall
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	palo alto networks

IoT Vulnerabilities: IP Cameras Most Insecure IoT device \| by Tanner Jones \| Nerd For Tech \| Dec, 2021 \| Medium Trust: 3.75 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 16, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	hikvision	model:	hikvision
vendor:	hikvision	model:	ip cameras

SAP Addresses Log4Shell Vulnerability Patching in 20 Applications - Modem Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.75 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 20, 2021, 12:53 p.m.	Vulnerabilities: code injection, directory traversal, denial of service...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

14 New Vulnerabilities Uncovered In Linux Powered Embedded Devices \| IT Security News Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Nov. 12, 2021, 7:33 a.m.	Vulnerabilities: denial of service, code execution

Affected products	External IDs

The Log4j vulnerability is bad. Here's the good news \| VentureBeat Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 10, 2021, 10:56 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

icloud

Fortinet : Security vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202111-0322, VAR-202112-0339, VAR-202111-0284, VAR-202112-0383, VAR-202112-0406, VAR-202109-0502, VAR-202111-0330, VAR-202112-0288, VAR-202111-0314, VAR-202112-0356, VAR-202110-0151, VAR-202112-0286, VAR-202112-0729, VAR-202111-0317, VAR-202112-0330, VAR-202111-0306, VAR-202112-0379, VAR-202112-0401, VAR-202112-0400, VAR-202112-0523, VAR-202111-0313, VAR-202111-0305, VAR-202112-0380, VAR-202111-0343, VAR-202112-0328, VAR-202112-0331, VAR-202112-0421, VAR-202112-0338, VAR-202108-0712, VAR-202112-0367, VAR-202108-0658, VAR-202112-0384, VAR-202112-0399, VAR-202111-0241, VAR-202112-0526, VAR-202112-0287, VAR-202110-0150, VAR-202112-0420, VAR-202112-1045, VAR-202112-0329, VAR-202112-0670, VAR-202110-0149, VAR-202112-0378, VAR-202111-0302, VAR-202112-0524, VAR-202109-0501, VAR-202112-0332, VAR-202111-0307, VAR-202112-0405, VAR-202112-0525 Trust: 5.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: -	Vulnerabilities: authorization vulnerability, os command injection, privilege escalation...

Affected products

External IDs

vendor:

fortigate

model:

fortios

db:

NVD

ids:

CVE-2021-41019, CVE-2021-36180, CVE-2021-36192, CVE-2021-41025, CVE-2021-36195, CVE-2021-36182, CVE-2021-36176, CVE-2021-41029, CVE-2021-36174, CVE-2021-42760, CVE-2021-36178, CVE-2021-43067, CVE-2021-42758, CVE-2021-36181, CVE-2021-41024, CVE-2021-36186, CVE-2021-41027, CVE-2021-36189, CVE-2021-36194, CVE-2021-36188, CVE-2021-36185, CVE-2021-36187, CVE-2021-36191, CVE-2021-36183, CVE-2021-43063, CVE-2021-41015, CVE-2021-41013, CVE-2021-42757, CVE-2021-36168, CVE-2021-43068, CVE-2021-32603, CVE-2021-41021, CVE-2021-43204, CVE-2021-36172, CVE-2021-36167, CVE-2021-42752, CVE-2021-36175, CVE-2021-41030, CVE-2021-41028, CVE-2021-43064, CVE-2021-36169, CVE-2021-36170, CVE-2021-36190, CVE-2021-42754, CVE-2021-43071, CVE-2021-36179, CVE-2021-41014, CVE-2021-36184, CVE-2021-41017, CVE-2021-43065

Critical Vulnerability (CVE-2021-44228, CVE-2021-45046) in Apache log4j Library \| Office of the Chief Information Security Officer Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0562, VAR-202112-0566 Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 12, 2021, 3:30 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45105, CVE-2021-45046, CVE-2021-44228

Apache Log4j Flaw: Best Practices to Respond to the Vulnerability of the Decade \| Toolbox It Security Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 20, 2021, 3:44 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

Researchers detect hundreds of thousands of Log4j cyberattack attempts - SiliconANGLE Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 13, 2021, 6:06 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	cisco systems	model:	cisco systems
vendor:	cisco systems	model:	series
vendor:	check point	model:	check point
vendor:	cisco	model:	cisco systems
vendor:	cisco	model:	series
vendor:	check point software technologies	model:	check point

10 vendors affected by the log4j vulnerability - Security - CRN Australia Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Jan. 10, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	symantec	model:	endpoint protection
vendor:	symantec	model:	symantec endpoint protection
vendor:	broadcom	model:	api gateway
vendor:	broadcom	model:	broadcom
vendor:	cisco	model:	webex meetings
vendor:	cisco	model:	cisco webex meetings
vendor:	cisco	model:	webex
vendor:	cisco	model:	cisco video surveillance operations manager
vendor:	cisco	model:	meetings server
vendor:	cisco	model:	video surveillance operations manager
vendor:	cisco	model:	unified communications
vendor:	cisco	model:	cisco webex
vendor:	cisco	model:	cisco webex meetings server
vendor:	cisco	model:	webex meetings server
vendor:	cisco	model:	nexus

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability \| KFYR Radio Trust: 3.0 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Jan. 17, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

icloud

Warning to Windows users after security hole is found which leaves computers vulnerable to hackers despite TWO updates Related entries in the VARIoT vulnerabilities database: VAR-202111-0697 Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 12, 2021, 6:56 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	google	model:	android

db:

NVD

ids:

CVE-2021-41379

Apache releases new 2.17.0 patch for Log4j to solve denial of service vulnerability \| ZDNet Related entries in the VARIoT vulnerabilities database: VAR-202112-1782 Trust: 4.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: -	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45105

Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 6.0 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 11, 2021, 4:18 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

icloud

db:

NVD

ids:

CVE-2021-44228

Microsoft Urges Customers to Patch Recent Active Directory Vulnerabilities \| SecurityWeek.Com Related entries in the VARIoT vulnerabilities database: VAR-202111-0660 Trust: 3.75 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Jan. 16, 2022, midnight	Vulnerabilities: security bypass, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42278, CVE-2021-42287

Log4j under siege, millions of devices vulnerable \| CIO Dive Trust: 3.0 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 14, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

check point

model:

check point

Security Vulnerabilities Discovered in HP’s 150 Multi-function Printers Trust: 5.25 Fetched: Dec. 27, 2021, 1:07 p.m., Published: Dec. 1, 2021, 10:43 a.m.	Vulnerabilities: buffer overflow, cross-site scripting, information disclosure...

Affected products

External IDs

vendor:	hewlett packard	model:	hp laserjet
vendor:	hewlett packard	model:	hewlett packard
vendor:	hewlett packard	model:	laserjet

db:

NVD

ids:

CVE-2021-39237, CVE-2021-39238

VARIoT news about IoT security