Sign-up

VARIoT news about IoT security

Multiple Vulnerabilities in Microsoft Edge Could Allow for Arbitrary Code Execution

Trust: 5.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 7, 2022, 7:34 p.m.
 Vulnerabilities: information leakage, use after free, code execution
Affected productsExternal IDs
vendor: google model: home
db: NVD ids: CVE-2021-37960, CVE-2021-37956, CVE-2021-37959, CVE-2021-37963, CVE-2021-37966, CVE-2021-37970, CVE-2021-37967, CVE-2021-37972, CVE-2021-37969, CVE-2021-37958, CVE-2021-37965, CVE-2021-37968, CVE-2021-37973, CVE-2021-37961, CVE-2021-37971, CVE-2021-37957, CVE-2021-37964, CVE-2021-37962

CISA Warns That BrakTooth Vulnerabilities Can Now Be Exploited | PCMag

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 11, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: samsung

Apple Spyware Vulnerability Emergency Security Update | HYPEBEAST

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Sept. 14, 2021, 9:43 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: iphone
vendor: apple model: macos

CISA Warns That BrakTooth Vulnerabilities Can Now Be Exploited

Trust: 5.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 4, 2021, 8:25 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: samsung

Update Now: Apple Patches iOS, Mac Attack That Uses Malicious PDFs to Hack Devices | PCMag

Related entries in the VARIoT vulnerabilities database: VAR-202108-2172, VAR-202108-1057

Trust: 4.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 11, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: watch
vendor: apple model: safari
vendor: apple model: tvos
vendor: apple model: macos
vendor: apple model: webkit
vendor: apple model: iphone
db: NVD ids: CVE-2021-30858, CVE-2021-30860

Realtek vulnerabilities compromise hundreds of thousands of routers, IoT devices | TechRadar

Trust: 3.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Aug. 16, 2021, 3:19 p.m.
 Vulnerabilities: memory corruption, command injection
Affected productsExternal IDs
vendor: asus model: asus
vendor: realtek model: sdk
vendor: realtek model: realtek sdk

Cisco Nexus Insights Authenticated Information Disclosure Vulnerability

Trust: 5.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Sept. 1, 2021, 3:54 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: nexus

Analyzing Pegasus Spyware’s Zero-Click iPhone Exploit ForcedEntry

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202010-1285

Trust: 4.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Sept. 15, 2021, midnight
 Vulnerabilities: integer overflow
Affected productsExternal IDs
vendor: apple model: iphone
db: NVD ids: CVE-2021-30860, CVE-2020-9883

Critical vulnerabilities expose Cisco equipment to hijacking attacks | TechRadar

Trust: 4.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 5, 2021, 1:28 p.m.
 Vulnerabilities: injection attack, command injection
Affected productsExternal IDs
vendor: cisco model: cisco policy suite
vendor: cisco model: series switches
vendor: cisco model: policy suite
vendor: cisco model: series
vendor: cisco model: catalyst
db: NVD ids: CVE-2021-34795, CVE-2021-40113, CVE-2021-40112

How secure are your smart home devices? | World Economic Forum

Trust: 4.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 10, 2021, 4:45 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

A Vulnerability in SonicWall SMA 100 Series Could Allow for Arbitrary File Deletion

Trust: 4.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 7, 2022, 7:34 p.m.
 Vulnerabilities: improper access control, access control vulnerability, path traversal
Affected productsExternal IDs
vendor: sonicwall model: sma100
vendor: sonicwall model: sma 100

NVD - CVE-2021-34762

Related entries in the VARIoT vulnerabilities database: VAR-202110-1065

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: firepower_management_center_virtual_appliance
vendor: cisco model: firepower_threat_defense
vendor: cisco model: sourcefire_defense_center
db: NVD ids: CVE-2021-34762

Lessons learned: How a severe vulnerability in the OWASP ModSecurity Core Rule Set sparked much-needed change | The Daily Swig

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 5, 2021, 3:47 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-35368

Cisco patches critical bug trio in Policy Suite and ONT networking devices | The Daily Swig

Related entries in the VARIoT vulnerabilities database: VAR-202111-0664

Trust: 4.5

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 5, 2021, 2:37 p.m.
 Vulnerabilities: improper validation, command injection
Affected productsExternal IDs
vendor: cisco model: cisco technical support
vendor: cisco model: policy suite
vendor: cisco model: policy suite software
vendor: cisco model: catalyst
vendor: cisco model: cisco policy suite
vendor: cisco model: technical support
db: NVD ids: CVE-2021-40112, CVE-2021-40119, CVE-2021-40113, CVE-2021-34795

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 27, 2021, 8:46 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense software
vendor: cisco model: asa software
vendor: cisco model: firepower threat defense
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco firepower management center
vendor: cisco model: cisco adaptive security appliance software
vendor: cisco model: adaptive security appliance software
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower management center

System vulnerabilities | FITech

Trust: 3.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 26, 2021, 10:01 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom

Vulnerability Summary for the Week of October 25, 2021 | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202110-1709, VAR-202110-1376, VAR-202110-1287, VAR-202110-1254, VAR-202110-1355, VAR-202110-1354, VAR-202110-1391, VAR-202110-1542, VAR-202110-1286, VAR-202110-1148, VAR-202110-1363, VAR-202110-1247, VAR-202110-1361, VAR-202110-1143, VAR-202110-1147, VAR-202110-1402, VAR-202110-1226, VAR-202110-1372, VAR-202110-1256, VAR-202110-1255, VAR-202110-1065, VAR-202110-1615, VAR-202110-1305, VAR-202110-1375, VAR-202110-1253, VAR-202110-1618, VAR-202110-1392, VAR-202110-1142, VAR-202110-1362, VAR-202110-1393, VAR-202110-1617, VAR-202110-1371, VAR-202110-1356, VAR-202110-1327, VAR-202110-1366

Trust: 5.25

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 25, 2021, midnight
 Vulnerabilities: access control vulnerability, directory traversal, uncontrolled search path...
Affected productsExternal IDs
vendor: parallels model: parallels desktop
vendor: parallels model: desktop
vendor: parallels model: parallels_desktop
vendor: huawei model: ngfw module
vendor: huawei model: huawei
vendor: huawei model: ngfw
vendor: huawei model: emui
vendor: huawei model: ips_module_firmware
vendor: huawei model: s12700
vendor: huawei model: s5700
vendor: huawei model: s2700
vendor: huawei model: s6700 v200r010c00spc600
vendor: huawei model: nip6600 v500r005c00
vendor: huawei model: s7700
vendor: huawei model: ngfw module v500r005c00
vendor: huawei model: usg9500
vendor: huawei model: s1700
vendor: huawei model: ips module
vendor: huawei model: nip6600
vendor: huawei model: s6700
vendor: huawei model: s9700
vendor: google model: android
vendor: google model: wifi
vendor: automatedlogic model: webctrl
vendor: advantech model: webaccess
vendor: advantech model: webaccess/nms
vendor: freeswitch model: freeswitch
vendor: jquery model: jquery
vendor: d-link model: dap-2020
vendor: d-link model: dap-2020_firmware
vendor: codesys model: control
vendor: codesys model: gateway
vendor: codesys model: runtime
vendor: codesys model: codesys
vendor: codesys model: web server
vendor: skyworth model: penguin aurora box
vendor: cisco model: firepower
vendor: cisco model: firepower_management_center
vendor: cisco model: adaptive_security_appliance
vendor: cisco model: firepower_management_center_virtual_appliance
vendor: cisco model: firepower management center
vendor: cisco model: cisco firepower management center
vendor: cisco model: adaptive security appliance
vendor: cisco model: download manager
vendor: cisco model: routers
vendor: cisco model: firepower threat defense
vendor: cisco model: cisco adaptive security appliance
db: NVD ids: CVE-2020-23041, CVE-2021-38453, CVE-2021-24662, CVE-2021-24884, CVE-2021-22402, CVE-2021-42343, CVE-2021-34793, CVE-2021-38461, CVE-2021-38465, CVE-2021-35231, CVE-2021-24779, CVE-2020-23040, CVE-2021-41179, CVE-2019-3556, CVE-2021-38258, CVE-2021-38467, CVE-2021-37129, CVE-2021-42542, CVE-2021-20526, CVE-2020-23038, CVE-2021-34584, CVE-2021-24487, CVE-2021-0936, CVE-2020-23036, CVE-2020-23046, CVE-2020-36486, CVE-2021-37221, CVE-2020-22864, CVE-2021-37131, CVE-2020-36496, CVE-2020-23045, CVE-2021-41747, CVE-2021-35233, CVE-2021-39225, CVE-2021-41078, CVE-2021-34787, CVE-2020-7867, CVE-2020-23047, CVE-2021-0631, CVE-2021-29835, CVE-2021-38463, CVE-2021-41177, CVE-2021-41873, CVE-2020-36502, CVE-2020-36495, CVE-2021-38485, CVE-2021-34857, CVE-2021-41145, CVE-2021-24543, CVE-2021-41305, CVE-2021-42538, CVE-2021-34754, CVE-2020-23048, CVE-2020-23060, CVE-2021-34862, CVE-2021-41307, CVE-2020-36488, CVE-2021-22401, CVE-2021-29774, CVE-2021-22405, CVE-2021-42540, CVE-2021-41176, CVE-2021-39223, CVE-2021-24885, CVE-2021-38477, CVE-2021-35236, CVE-2021-0706, CVE-2021-38260, CVE-2021-34859, CVE-2021-38473, CVE-2021-26609, CVE-2021-34595, CVE-2021-0651, CVE-2021-35235, CVE-2021-42258, CVE-2021-41728, CVE-2021-37130, CVE-2021-41178, CVE-2021-31682, CVE-2021-42539, CVE-2021-0630, CVE-2021-41182, CVE-2021-0483, CVE-2021-40527, CVE-2021-42534, CVE-2021-41304, CVE-2021-34863, CVE-2021-42836, CVE-2021-34856, CVE-2021-41308, CVE-2020-23061, CVE-2021-22101, CVE-2021-40125, CVE-2020-23054, CVE-2021-34864, CVE-2021-41157, CVE-2020-23050, CVE-2021-39224, CVE-2020-23051, CVE-2021-31835, CVE-2021-38455, CVE-2021-41105, CVE-2021-34583, CVE-2021-34762, CVE-2021-41183, CVE-2017-20007, CVE-2021-34761, CVE-2021-34794, CVE-2021-34586, CVE-2021-38450, CVE-2020-36497, CVE-2021-34585, CVE-2021-34791, CVE-2021-34596, CVE-2021-41184, CVE-2021-22404, CVE-2021-34790, CVE-2021-42556, CVE-2021-34593, CVE-2020-36485, CVE-2021-24774, CVE-2021-38469, CVE-2021-41158, CVE-2021-37372, CVE-2021-32951, CVE-2020-23043, CVE-2020-28969, CVE-2021-34861, CVE-2021-38471, CVE-2021-40526, CVE-2021-41171, CVE-2020-23042, CVE-2021-42536, CVE-2021-38479, CVE-2021-41306, CVE-2021-3900, CVE-2021-41185, CVE-2021-34764, CVE-2020-36494, CVE-2021-24769

Linux Vulnerabilities of the Week: October 18, 2021 - SYXSENSE

Related entries in the VARIoT vulnerabilities database: VAR-202110-1690

Trust: 3.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 18, 2021, 4:33 p.m.
 Vulnerabilities: directory traversal, improper validation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-41103, CVE-2021-41072, CVE-2021-38160, CVE-2021-3653, CVE-2021-42013

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability - Cisco

Trust: 3.75

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 11, 2022, 10:54 p.m.
 Vulnerabilities: denial of service, resource exhaustion
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense software
vendor: cisco model: asa software
vendor: cisco model: firepower threat defense
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco firepower management center
vendor: cisco model: cisco adaptive security appliance software
vendor: cisco model: adaptive security appliance software
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower management center

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability - Cisco

Trust: 4.0

Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 11, 2022, 10:54 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense software
vendor: cisco model: asa software
vendor: cisco model: firepower threat defense
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco firepower management center
vendor: cisco model: cisco adaptive security appliance software
vendor: cisco model: adaptive security appliance software
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower management center