Sign-up

VARIoT news about IoT security

Mobile vulnerabilities: What they are and how they impact the enterprise

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

FabulaTech USB device vulnerability exposes devices to risk - TechRepublic

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 15, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
db: NVD ids: CVE-2002-9332, CVE-2020-9332

PTES Technical Guidelines - The Penetration Testing Execution Standard

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 1, 2022, midnight
 Vulnerabilities: replay attack, data injection, file inclusion...
Affected productsExternal IDs
vendor: essential model: phone
vendor: novell model: client
vendor: novell model: netware
vendor: sony computer entertainment model: camera
vendor: netgear model: router
vendor: serve model: serve
vendor: barracuda model: running
vendor: barracuda model: web application firewall
vendor: barracuda model: barracuda
vendor: citrix model: gateway
vendor: rapid model: scada
vendor: aircrack-ng model: aircrack-ng
vendor: cisco systems model: guard
vendor: cisco systems model: cisco ios
vendor: cisco systems model: router
vendor: cisco systems model: wireless access point
vendor: cisco systems model: ip phone
vendor: cisco systems model: catalyst
vendor: cisco systems model: meeting
vendor: cisco systems model: network access control
vendor: cisco systems model: access points
vendor: cisco systems model: routers
vendor: cisco systems model: cisco systems
vendor: cisco systems model: hsrp
vendor: cisco systems model: series
vendor: cisco systems model: eigrp
vendor: cisco systems model: support tools
vendor: cisco systems model: leap
vendor: asterisk model: open source
vendor: canary model: canary
vendor: wireshark model: wireshark
vendor: sonicwall model: switch
vendor: sonicwall model: analyzer
vendor: sonicwall model: web application firewall
vendor: google model: wifi
vendor: google model: home
vendor: cisco model: guard
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: wireless access point
vendor: cisco model: ip phone
vendor: cisco model: catalyst
vendor: cisco model: meeting
vendor: cisco model: network access control
vendor: cisco model: access points
vendor: cisco model: routers
vendor: cisco model: cisco systems
vendor: cisco model: hsrp
vendor: cisco model: series
vendor: cisco model: eigrp
vendor: cisco model: support tools
vendor: cisco model: leap
vendor: mesh model: mesh
vendor: hewlett packard model: hp-ux
vendor: hewlett packard model: integrity
vendor: hewlett packard model: stream
vendor: hewlett packard model: switches
vendor: hewlett packard model: hewlett packard
vendor: palo model: firewall
vendor: palo model: networks
vendor: sony model: camera
vendor: modbus model: slave

Internet of things - Wikipedia

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 1, 2022, midnight
 Vulnerabilities: injection attack, default credentials, weak password...
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: huawei model: smart phones
vendor: serve model: serve
vendor: rising model: antivirus
vendor: home assistant model: assistant
vendor: schneider model: concept
vendor: schneider model: software update
vendor: schneider model: modbus
vendor: schneider model: monitor
vendor: samsung smartthings model: printers
vendor: samsung smartthings model: samsung
vendor: samsung smartthings model: smartthings hub
vendor: samsung smartthings model: mobile
vendor: samsung smartthings model: note
vendor: samsung smartthings model: mobile devices
vendor: samsung smartthings model: notes
vendor: smartthings model: smartthings hub
vendor: samsung model: printers
vendor: samsung model: samsung
vendor: samsung model: smartthings hub
vendor: samsung model: mobile
vendor: samsung model: note
vendor: samsung model: mobile devices
vendor: samsung model: notes
vendor: lenovo model: updates
vendor: lenovo model: edge
vendor: lenovo model: system
vendor: mikrotik model: mikrotik
vendor: mikrotik model: routers
vendor: domoticz model: domoticz
vendor: mesh model: mesh
vendor: trend model: security
vendor: trend model: antivirus
vendor: cisco systems model: meeting
vendor: cisco systems model: routers
vendor: cisco systems model: cisco systems
vendor: cisco systems model: h
vendor: cisco systems model: service management
vendor: cisco systems model: series
vendor: cisco systems model: spark
vendor: google model: google home
vendor: google model: android
vendor: google model: home
vendor: cisco model: meeting
vendor: cisco model: routers
vendor: cisco model: cisco systems
vendor: cisco model: h
vendor: cisco model: service management
vendor: cisco model: series
vendor: cisco model: spark
vendor: ring model: ring
vendor: sony model: camera
vendor: sony model: playstation 3
vendor: sony model: playstation
vendor: notion model: bridge
vendor: dahua model: camera
vendor: apple model: iphone
vendor: apple model: watch

A New Citrix Device Vulnerability Has Been Discovered

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: citrix model: sd-wan wanop
db: NVD ids: CVE-2019-19781

ManageEngine NetFlow Analyzer Read Me

Related entries in the VARIoT vulnerabilities database: VAR-201806-1164, VAR-201806-1163, VAR-201911-1328

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: sql injection, cross-site scripting, code execution...
Affected productsExternal IDs
vendor: essential model: phone
vendor: huawei model: huawei
vendor: huawei model: webui
vendor: trend model: security
vendor: axis model: axis
vendor: pfsense model: pfsense
vendor: zoho model: manageengine oputils
vendor: zoho model: manageengine applications manager
vendor: zoho model: manageengine opmanager
vendor: zoho model: manageengine netflow analyzer
vendor: zoho model: opmanager
vendor: zoho model: oputils
vendor: zoho model: manageengine servicedesk plus
vendor: google model: nexus
vendor: google model: android
vendor: google model: google chrome
vendor: google model: chrome
vendor: aruba model: instant
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: nexus
vendor: cisco model: quad
vendor: cisco model: access points
vendor: cisco model: aireos
vendor: cisco model: routers
vendor: cisco model: technical support
vendor: cisco model: wireless lan controller
vendor: cisco model: wide area application services
vendor: cisco model: wireless lan controllers
vendor: cisco model: series
vendor: cisco model: wireless controller
vendor: cisco model: cisco routers
vendor: cisco model: spark
vendor: palo model: firewall
vendor: palo model: networks
vendor: jquery model: jquery
db: NVD ids: CVE-2019-8929, CVE-2019-7427, CVE-2018-12998, CVE-2018-12997, CVE-2019-7423, CVE-2018-10803, CVE-2020-11946, CVE-2019-8926, CVE-2019-12196, CVE-2020-12116, CVE-2021-20078, CVE-2021-3287, CVE-2021-41075, CVE-2019-8927, CVE-2019-17421, CVE-2018-19403, CVE-2019-7425, CVE-2019-7424, CVE-2020-10541, CVE-2017-11560, CVE-2019-8928, CVE-2019-7422, CVE-2019-7426, CVE-2008-0128, CVE-2021-44514, CVE-2019-8925

Top 10 IoT Security Issues: Ransom, Botnet Attacks, Spying

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: serve model: serve
vendor: trend model: security

NVD - CVE-2021-1592

Trust: 5.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco systems model: ucs manager
vendor: cisco systems model: cisco systems
vendor: cisco systems model: cisco ucs manager
vendor: cisco systems model: unified_computing_system
vendor: cisco model: ucs manager
vendor: cisco model: cisco systems
vendor: cisco model: cisco ucs manager
vendor: cisco model: unified_computing_system
db: NVD ids: CVE-2021-1592

Device Vulnerabilities in the Connected Home

Related entries in the VARIoT vulnerabilities database: VAR-201505-0274

Trust: 6.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: command execution, command injection, buffer overflow...
Affected productsExternal IDs
vendor: realtek model: realtek sdk
vendor: d-link model: eyeon baby monitor
vendor: d-link model: dcs-825l
vendor: d-link model: router
vendor: buffalo model: wsr-300hp
vendor: buffalo model: router
vendor: trend micro model: security
vendor: trend micro model: home network security
vendor: dahua model: ptz camera
vendor: dahua model: camera
vendor: dahua model: ip camera
vendor: belkin model: router
vendor: trend model: security
vendor: trend model: home network security
db: NVD ids: CVE-2014-8361

Siemens TCP/IP Stack Vulnerabilities-AMNESIA:33 in SENTRON PAC / 3VA Devices (Update B) | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202012-0245, VAR-202012-0125

Trust: 3.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: sentron pac4200
vendor: siemens model: sentron pac3200
vendor: siemens model: modbus tcp
db: SIEMENS ids: SSA-541018
db: NVD ids: CVE-2020-17437, CVE-2020-13987
db: ICS CERT ids: ICSA-21-068-06
db: US CERT ids: ICSA-21-068-06

Device Vulnerabilities in the Connected Home

Related entries in the VARIoT vulnerabilities database: VAR-201505-0274

Trust: 6.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: command execution, command injection, buffer overflow...
Affected productsExternal IDs
vendor: realtek model: realtek sdk
vendor: d-link model: eyeon baby monitor
vendor: d-link model: dcs-825l
vendor: d-link model: router
vendor: buffalo model: wsr-300hp
vendor: buffalo model: router
vendor: trend micro model: security
vendor: trend micro model: home network security
vendor: dahua model: ptz camera
vendor: dahua model: camera
vendor: dahua model: ip camera
vendor: belkin model: router
vendor: trend model: security
vendor: trend model: home network security
db: NVD ids: CVE-2014-8361

Mobile Application Security Threats and Vulnerabilities 2019: Mobile Device Security - Attacks Research

Related entries in the VARIoT vulnerabilities database: VAR-201611-0386

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: configuration vulnerability, session hijacking, cross-site scripting...
Affected productsExternal IDs
vendor: google model: android
vendor: google model: wi-fi router
vendor: alcatel model: operating system
vendor: apple model: icloud
db: NVD ids: CVE-2019-5765, CVE-2016-5195

Full disclosure: 0day vulnerability (backdoor) in firmware for Xiaongmai-based DVRs, NVRs and IP cameras / Habr

Trust: 4.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: qemu model: qemu
vendor: xiongmai model: ip cameras

Android Patches Actively Exploited Zero-Day Kernel Bug | Threatpost

Related entries in the VARIoT vulnerabilities database: VAR-202111-0609, VAR-202108-1005, VAR-202111-0579

Trust: 3.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-1048, CVE-2021-1975, CVE-2021-0918, CVE-2021-34484, CVE-2021-0889, CVE-2021-1924, CVE-2021-0930

Multiple vulnerabilities in Moxa devices

Related entries in the VARIoT vulnerabilities database: VAR-202109-1171, VAR-202109-1172, VAR-201501-0737

Trust: 5.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 2, 2022, midnight
 Vulnerabilities: cross-site scripting, command injection, buffer overflow
Affected productsExternal IDs
vendor: moxa model: moxa
vendor: moxa model: wac-1001
db: NVD ids: CVE-2021-39278, CVE-2021-39279, CVE-2015-0235

Disclosing CVE-2021-40823 and CVE-2021-40824: E2EE vulnerability in multiple Matrix clients | Matrix.org

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-40824, CVE-2021-40823

Report: Vulnerability Allows Hackers to Spy Via IoT Devices - My TechDecisions

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

NVD - CVE-2021-1583

Related entries in the VARIoT vulnerabilities database: VAR-202108-0317

Trust: 5.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: improper access control
Affected productsExternal IDs
vendor: cisco model: nexus_92300yc
vendor: cisco model: nexus 9000 series
vendor: cisco model: series
vendor: cisco model: nexus_9000
vendor: cisco model: nexus
vendor: cisco model: nexus_92160yc-x
vendor: cisco model: nexus_92304qc
vendor: cisco model: nx-os
vendor: cisco model: cisco nexus 9000 series
vendor: cisco model: cisco systems
vendor: cisco model: nexus 9000
vendor: cisco model: nexus_9000v
vendor: cisco systems model: nexus_92300yc
vendor: cisco systems model: nexus 9000 series
vendor: cisco systems model: series
vendor: cisco systems model: nexus_9000
vendor: cisco systems model: nexus
vendor: cisco systems model: nexus_92160yc-x
vendor: cisco systems model: nexus_92304qc
vendor: cisco systems model: nx-os
vendor: cisco systems model: cisco nexus 9000 series
vendor: cisco systems model: cisco systems
vendor: cisco systems model: nexus 9000
vendor: cisco systems model: nexus_9000v
db: NVD ids: CVE-2021-1583

Cisco Ios Xe version 16.9.6 : Security vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202103-0768, VAR-202109-0747, VAR-202103-0540, VAR-202103-0550, VAR-202103-0773, VAR-202109-0245, VAR-202103-0778, VAR-202103-0546, VAR-202103-0544, VAR-202103-0534, VAR-202103-0763, VAR-202109-0601, VAR-202103-0549, VAR-202103-0470

Trust: 4.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: command injection, memory corruption, denial of service
Affected productsExternal IDs
vendor: cisco model: iox application
vendor: cisco model: cisco iox
vendor: cisco model: cisco iox application
vendor: cisco model: series
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: series switches
vendor: cisco model: ios xe
vendor: cisco model: ios software
vendor: cisco model: catalyst
vendor: cisco model: cisco ios
db: NVD ids: CVE-2021-1446, CVE-2021-34699, CVE-2021-1377, CVE-2021-1391, CVE-2021-1435, CVE-2021-1619, CVE-2021-1442, CVE-2021-1390, CVE-2009-1234, CVE-2021-1384, CVE-2021-1403, CVE-2021-1453, CVE-2021-34705, CVE-2021-1376, CVE-2021-1352

Bug in Millions of Flawed IoT Devices Lets Attackers Eavesdrop | Threatpost

Related entries in the VARIoT vulnerabilities database: VAR-202108-1005

Trust: 3.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-28372, CVE-2021-34484