VARIoT latest news about IoT security

Hundreds of thousands of Realtek-based devices under attack from IoT botnet - The Record by Recorded Future Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, 6:56 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	mesh	model:	mesh

db:

NVD

ids:

CVE-2021-35395

Attackers Started Exploiting a Router Vulnerability Just 2 Days After Its Disclosure \| PCMag Related entries in the VARIoT vulnerabilities database: VAR-202104-0768 Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 11, 2022, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	cisco hyperflex
vendor:	cisco	model:	routers
vendor:	cisco	model:	hyperflex
vendor:	cisco	model:	soho
vendor:	cisco	model:	router
vendor:	d-link	model:	router
vendor:	tenda	model:	ac11
vendor:	tenda	model:	router

db:

NVD

ids:

CVE-2021-20090

BrakTooth Bluetooth vulnerabilities, crash all the devices! \| Malwarebytes Labs Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 2, 2021, 4:24 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28139

NVD - Home Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 11, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42560

Vulnerabilities Grow as Utilities Link Control Systems to the Internet - Defense One Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 29, 2021, 10 a.m.	Vulnerabilities: default credentials

Affected products

External IDs

vendor:

trend

model:

security

New Annke Vulnerability Shows Risks of IoT Security Camera Systems Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 26, 2021, 4 p.m.	Vulnerabilities: cross-site request forgery, request forgery, code execution...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-32941

Android Multiple Vulnerabilities - DIGITPOL Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 3, 2021, midnight	Vulnerabilities: denial of service, code execution, information disclosure

Affected products	External IDs

microsoft: Apple fixes critical MacOS bug after alert from Microsoft Trust: 3.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 1, 2021, 3:24 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

InHand Router Flaws Could Expose Many Industrial Companies to Remote Attacks \| SecurityWeek.Com Trust: 3.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 16, 2022, midnight	Vulnerabilities: default credentials, cross-site request forgery, request forgery...

Affected products

External IDs

vendor:	cisco	model:	routers
vendor:	cisco	model:	router

Exploits and exploit kits - Windows security \| Microsoft Docs Related entries in the VARIoT vulnerabilities database: VAR-201601-0030 Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 28, 2021, 10:59 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2016-0778, CVE-2013-1489, CVE-2017-0144

Realtek SDK vulnerabilities impact dozens of downstream IoT vendors \| The Daily Swig Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 16, 2021, 2:24 p.m.	Vulnerabilities: command execution, arbitrary command execution, default credentials...

Affected products

External IDs

vendor:

realtek

model:

realtek sdk

db:

NVD

ids:

CVE-2021-35395, CVE-2021-35392, CVE-2021-35393, CVE-2021-35394

New Bluetooth vulnerability affects over one billion device - Gizchina.com Trust: 5.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 8, 2021, 12:11 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

dell

model:

optiplex

db:

NVD

ids:

CVE-2021-28139

Threat Encyclopedia \| FortiGuard Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 27, 2021, midnight	Vulnerabilities: request forgery, cross-site scripting

Affected products

External IDs

db:

NVD

ids:

CVE-2020-13484, CVE-2020-13483

Go Update Your iPhone and iPad Right Now Related entries in the VARIoT vulnerabilities database: VAR-202108-2057 Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 11, 2021, 8:13 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	ipad air
vendor:	apple	model:	ipod touch
vendor:	apple	model:	ipad
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2021-30883

How IoT Devices Are Embracing Security [2021] Trustonic Trust: 3.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 19, 2021, 9:07 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile
vendor:	google	model:	home

Microsoft Researchers Help Apple Fix A Critical MacOS Bug Related entries in the VARIoT vulnerabilities database: VAR-202108-2056 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 1, 2021, 1:17 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	macos
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2021-30892

Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection Related entries in the VARIoT vulnerabilities database: VAR-202108-2056 Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 28, 2021, 4 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

db:

NVD

ids:

CVE-2021-30892

Top 10 Network Vulnerabilities to Watch Out Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 15, 2021, 3:01 p.m.	Vulnerabilities: denial of service, injection attack, cross-site scripting...

Affected products

External IDs

vendor:	apple	model:	watch
vendor:	google	model:	wifi
vendor:	google	model:	home
vendor:	essential	model:	phone

Vulnerability Allows Remote Hacking of Annke Video Surveillance Product \| SecurityWeek.Com Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 16, 2022, midnight	Vulnerabilities: cross-site request forgery, request forgery, denial of service...

Affected products

External IDs

vendor:

realtek

model:

realtek sdk

db:

NVD

ids:

CVE-2021-32941

Microsoft October 2021 Patch Tuesday fixes 4 zero-days, 71 flaws Related entries in the VARIoT vulnerabilities database: VAR-202110-0829, VAR-202103-1464, VAR-202110-1687, VAR-202110-0498, VAR-202103-1463, VAR-202012-1527 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 16, 2021, midnight	Vulnerabilities: use after free, feature bypass, denial of service...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-40489, CVE-2021-41355, CVE-2021-40475, CVE-2021-40480, CVE-2021-41346, CVE-2021-40450, CVE-2021-40487, CVE-2021-38672, CVE-2021-40454, CVE-2021-3449, CVE-2021-38663, CVE-2021-40460, CVE-2021-40486, CVE-2021-26441, CVE-2021-36970, CVE-2021-36953, CVE-2021-40461, CVE-2021-37978, CVE-2021-40443, CVE-2021-40463, CVE-2021-40482, CVE-2021-41344, CVE-2021-41332, CVE-2021-40462, CVE-2021-40472, CVE-2021-40476, CVE-2021-41354, CVE-2021-40471, CVE-2021-41352, CVE-2021-40455, CVE-2021-37976, CVE-2021-41338, CVE-2021-41345, CVE-2021-41334, CVE-2021-40474, CVE-2021-37980, CVE-2021-41331, CVE-2021-40449, CVE-2021-41363, CVE-2021-26427, CVE-2021-37975, CVE-2021-41340, CVE-2021-40468, CVE-2021-40456, CVE-2021-41330, CVE-2021-40488, CVE-2021-41353, CVE-2021-40467, CVE-2021-41347, CVE-2021-41342, CVE-2021-34453, CVE-2021-40466, CVE-2021-41336, CVE-2021-40479, CVE-2021-40483, CVE-2021-40481, CVE-2021-40469, CVE-2021-37977, CVE-2021-41337, CVE-2021-41343, CVE-2021-41357, CVE-2021-41348, CVE-2021-3450, CVE-2021-40484, CVE-2021-41335, CVE-2021-40457, CVE-2020-1971, CVE-2021-40478, CVE-2021-40470, CVE-2021-37979, CVE-2021-40485, CVE-2021-41350, CVE-2021-26442, CVE-2021-41339, CVE-2021-40477, CVE-2021-38662, CVE-2021-41361, CVE-2021-40473, CVE-2021-40465, CVE-2021-37974, CVE-2021-40464

VARIoT news about IoT security