Sign-up

VARIoT news about IoT security

Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability

Trust: 5.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Sept. 2, 2021, 1:36 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: device manager

Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability

Trust: 5.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 5, 2021, 5:20 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: asdm
vendor: cisco model: adaptive security device manager
vendor: cisco model: security device manager
vendor: cisco model: device manager

Vulnerable TCP/IP stack is used by almost 200 device vendors - Help Net Security

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 4, 2021, 12:53 p.m.
 Vulnerabilities: denial of service, information leak, code execution
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor

Critical Vulnerability Affects Millions of IoT Devices

Trust: 4.75

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 17, 2021, 8:45 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28372

Peloton Bike+ vulnerability allowed complete takeover of devices

Trust: 3.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: June 16, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: POSIVITIVE TECHNOLOGY ids: ID:10

Report Highlights Employee Device IoT Vulnerabilities - RTInsights

Trust: 3.25

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Sept. 9, 2021, 4:47 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

TALOS-2021-1366 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Related entries in the VARIoT vulnerabilities database: VAR-202111-1728, VAR-202111-1732, VAR-202111-1727, VAR-202111-1760, VAR-202111-1723, VAR-202111-1724, VAR-202111-1726, VAR-202111-1759, VAR-202111-1761, VAR-202111-1762, VAR-202111-1729, VAR-202111-1722, VAR-202111-1725, VAR-202111-1730

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Nov. 22, 2021, midnight
 Vulnerabilities: sql injection, cross-site request forgery, request forgery
Affected productsExternal IDs
vendor: cisco model: routers
db: NVD ids: CVE-2021-21934, CVE-2021-21937, CVE-2021-21933, CVE-2021-21925, CVE-2021-21929, CVE-2021-21930, CVE-2021-21932, CVE-2021-21924, CVE-2021-21927, CVE-2021-21928, CVE-2021-21935, CVE-2021-21926, CVE-2021-21931, CVE-2021-21936

General FAQ | Qualys

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 1, 2022, midnight
 Vulnerabilities: sql injection, cross-site scripting
Affected productsExternal IDs

Cassia IoT Access Controller OT Cloud Vulnerability found by Team82

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 8, 2021, 3:42 p.m.
 Vulnerabilities: directory traversal, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2021-22685

4 vulnerabilities under attack give hackers full control of Android devices | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-202105-0365, VAR-202105-0363

Trust: 4.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 4, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-1905, CVE-2021-1906, CVE-2021-28663, CVE-2021-28664

How to hack android devices using the stagefright vulnerability [updated 2021] - Infosec Resources

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: May 11, 2021, 2:56 p.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: android phone
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy s5
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: google model: android
vendor: google model: nexus

New Windows 10 vulnerability allows anyone to get admin privileges

Trust: 3.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 10, 2022, midnight
 Vulnerabilities: access violation
Affected productsExternal IDs
db: NVD ids: CVE-2021-36934

Threat and Vulnerability Management now supports all major platforms - Microsoft Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: May 11, 2021, 6 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: cve-2021-44228, CVE-2021-44228

BlueBorne Attack Research & Solutions | Armis Labs

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Oct. 17, 2021, 7:32 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: samsung
vendor: samsung model: mobile phones
vendor: samsung model: mobile
vendor: broadcom model: linux
vendor: broadcom model: broadcom
vendor: google model: wifi
vendor: google model: android
vendor: serve model: serve
db: NVD ids: CVE-2017-0783, CVE-2017-8628

Windows Hello Vulnerability Allows Attackers To Bypass Biometric Authentication Using Spoofed Images - CPO Magazine

Trust: 3.75

Fetched: Dec. 16, 2021, 3:47 p.m., Published: July 30, 2021, 2:33 p.m.
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs

Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability - Microsoft Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-1782, VAR-202112-0562, VAR-202112-0566

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 12, 2021, 5:29 a.m.
 Vulnerabilities: command execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44832, CVE-2021-34473, CVE-2021-26084, CVE-2021-45105, CVE-2021-44428, CVE-2021-45046, CVE-2021-4428, CVE-2021-44228

Log4j zero-day flaw: What you need to know and how to protect yourself | ZDNet

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 14, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Zero-day vulnerability in Hillrom cardiology devices could allow attackers full control | The Daily Swig

Trust: 4.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 13, 2021, 2:03 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2021-43935

Mobile vulnerabilities: What they are and how they impact the enterprise

Trust: 3.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

The Top 5 Bluetooth Security Vulnerabilities

Trust: 4.75

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: raspberry pi model: 3