Sign-up

VARIoT news about IoT security

Access Denied

Trust: 3.25

Fetched: Dec. 11, 2024, 10:04 a.m., Published: May 19, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Access Denied

Trust: 3.25

Fetched: Dec. 11, 2024, 10:04 a.m., Published: May 19, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Post exploitation activities on Fortinet devices: a network-based analysis | Darktrace Blog

Trust: 5.25

Fetched: Dec. 11, 2024, 10:03 a.m., Published: Oct. 30, 2024, midnight
 Vulnerabilities: authentication bypass, command execution, privilege escalation
Affected productsExternal IDs
vendor: palo model: firewall
vendor: palo model: networks
vendor: palo model: pan-os
vendor: paloaltonetworks model: firewall
vendor: paloaltonetworks model: networks
vendor: paloaltonetworks model: pan-os
vendor: trend model: security
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
db: NVD ids: CVE-2024-9474, CVE-2024-0012

Access Denied

Trust: 3.25

Fetched: Dec. 11, 2024, 10:03 a.m., Published: May 19, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Vulnerability Notice - SonicWall, Veeam, Zyxel, and Cisco

Trust: 5.5

Fetched: Dec. 11, 2024, 10:02 a.m., Published: Dec. 11, 2033, midnight
 Vulnerabilities: path traversal, injection attack, code execution
Affected productsExternal IDs
vendor: cisco model: nx-os
vendor: cisco model: nx-os software
vendor: cisco model: nexus
vendor: sonicwall model: secure mobile access
vendor: sonicwall model: ssl-vpn
vendor: sonicwall model: sma100
db: NVD ids: CVE-2024-11667, CVE-2024-42453, CVE-2024-45207, CVE-2024-21927, CVE-2024-42456, CVE-2024-42449, CVE-2024-40717, CVE-2024-42452, CVE-2024-42448

Android Security Bulletin-January 2022 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202111-1612, VAR-202111-1614, VAR-202201-0548, VAR-202201-0204, VAR-202111-1615, VAR-202111-1611, VAR-202201-0565, VAR-202201-0319

Trust: 4.25

Fetched: Dec. 11, 2024, 10 a.m., Published: Jan. 11, 2022, midnight
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs
vendor: samsung model: notes
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: huawei model: huawei
vendor: google model: pixel
vendor: google model: android
vendor: motorola model: android
vendor: motorola model: motorola
db: NVD ids: CVE-2020-0338, CVE-2021-31345, CVE-2021-30307, CVE-2021-30308, CVE-2021-39628, CVE-2021-39620, CVE-2021-39627, CVE-2021-39633, CVE-2021-31890, CVE-2021-30311, CVE-2021-39621, CVE-2021-39632, CVE-2021-39618, CVE-2021-30319, CVE-2021-39622, CVE-2021-39629, CVE-2021-0643, CVE-2021-39623, CVE-2021-39625, CVE-2021-40148, CVE-2021-31889, CVE-2021-31346, CVE-2021-30353, CVE-2021-30285, CVE-2021-39659, CVE-2021-39626, CVE-2021-0959, CVE-2021-30300, CVE-2021-39634, CVE-2021-30287, CVE-2021-30301, CVE-2021-39630, CVE-2021-1049

Vulnerability Disclosure Policy | Analog Devices

Trust: 3.0

Fetched: Dec. 11, 2024, 9:54 a.m., Published: May 11, 2024, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs

Update Barco ClickShare CX-30: Fix vulnerability CVE-2024-53919

Trust: 3.75

Fetched: Dec. 11, 2024, 9:53 a.m., Published: Dec. 30, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: barco model: clickshare
db: NVD ids: CVE-2024-53919

PHY-0 · Mobile Threat Catalogue

Trust: 3.25

Fetched: Dec. 11, 2024, 9:40 a.m., Published: Dec. 1, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Critical Command Injection Vulnerability Found in D-Link NAS Devices Reaching End-of-Life: CVE-2024-10914 - Cybercory

Related entries in the VARIoT vulnerabilities database: VAR-202411-0293

Trust: 5.5

Fetched: Dec. 11, 2024, 9:37 a.m., Published: Nov. 12, 2024, 2:29 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: d-link model: dns-320lw
vendor: d-link model: dns-320
vendor: d-link model: dns-340l
vendor: d-link model: dns-325
db: NVD ids: CVE-2024-10914

New QNAP NAS Vulnerabilities Put 6 Million Users At Risk

Trust: 4.5

Fetched: Dec. 11, 2024, 9:33 a.m., Published: Dec. 10, 2024, 10:35 a.m.
 Vulnerabilities: command injection, denial of service, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2024-50402, CVE-2024-48865, CVE-2024-48859, CVE-2024-50393, CVE-2024-48866, CVE-2024-48867

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center-GeoVision EOL devices - OS Command Injection

Trust: 4.75

Fetched: Dec. 10, 2024, 10:18 a.m., Published: Nov. 15, 2024, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-11120

IDS vs IPS - What's the Difference & Which do You Need?

Trust: 3.5

Fetched: Dec. 10, 2024, 10:16 a.m., Published: Nov. 28, 2019, 9:05 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security

Zyxel security advisory: protecting against recent firewall threats | Zyxel Networks

Trust: 4.25

Fetched: Dec. 10, 2024, 10:16 a.m., Published: Dec. 7, 2024, midnight
 Vulnerabilities: directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-11667

NULL Pointer Dereference Vulnerability in Linux Kernel's ssb_device_uevent Function

Trust: 6.0

Fetched: Dec. 10, 2024, 10:15 a.m., Published: Dec. 11, 2024, midnight
 Vulnerabilities: pointer dereference vulnerability
Affected productsExternal IDs
vendor: broadcom model: linux
db: NVD ids: CVE-2024-40982

Understanding and Mitigating CVE-2024-41973: WAGO Devices Vulnerability

Trust: 4.75

Fetched: Dec. 10, 2024, 10:14 a.m., Published: Nov. 18, 2024, midnight
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: wago model: pfc200
vendor: wago model: wago
vendor: wago model: pfc100
vendor: wago model: series
db: NVD ids: CVE-2024-41973

Darktrace’s view on Operation Lunar Peek: Exploitation of Palo Alto firewall devices (CVE 2024-2012 and 2024-9474) | Darktrace Blog

Trust: 5.25

Fetched: Dec. 10, 2024, 10:03 a.m., Published: Dec. 9, 2024, midnight
 Vulnerabilities: privilege escalation, command execution, authentication bypass
Affected productsExternal IDs
vendor: paloaltonetworks model: firewall
vendor: paloaltonetworks model: pan-os
vendor: paloaltonetworks model: networks
vendor: palo alto networks model: firewall
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: palo model: firewall
vendor: palo model: pan-os
vendor: palo model: networks
vendor: trend model: security
db: NVD ids: CVE-2024-9474, CVE-2024-0012

CVE-2021-33544 - UDP Technology, Geutebrück, and Other Vendors Camera Device Command Injection Vulnerability

Trust: 4.75

Fetched: Dec. 10, 2024, 10:01 a.m., Published: Sept. 13, 2021, 6:15 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: geutebrueck model: g-cam_ewpc-2270_firmware
vendor: geutebrueck model: g-cam_ethc-2249_firmware
vendor: geutebrueck model: g-code_eec-2400_firmware
vendor: geutebrueck model: g-cam_efd-2241_firmware
vendor: geutebrueck model: g-cam_ethc-2230_firmware
vendor: geutebrueck model: g-cam_ebc-2111_firmware
vendor: geutebrueck model: g-cam_ethc-2240_firmware
vendor: geutebrueck model: g-cam_ebc-2110_firmware
vendor: geutebrueck model: g-cam_ethc-2239_firmware
vendor: geutebrueck model: g-cam_efd-2250_firmware
db: NVD ids: CVE-2021-33544

CERT-In Alert: Android Flaws Risk Millions Of Devices

Trust: 6.75

Fetched: Dec. 10, 2024, 9:37 a.m., Published: Dec. 9, 2024, 9:58 a.m.
 Vulnerabilities: privilege escalation, code execution, denial of service
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-20484, CVE-2024-20104, CVE-2023-35659, CVE-2024-43093, CVE-2024-38402, CVE-2024-20536, CVE-2024-21455

Update Barco ClickShare C-5: Fix vulnerability CVE-2024-53919

Trust: 3.75

Fetched: Dec. 10, 2024, 9:36 a.m., Published: Dec. 5, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barco model: clickshare
vendor: google model: pixel
db: NVD ids: CVE-2024-53919