VARIoT latest news about IoT security

Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerabilities - Cisco Trust: 5.0 Fetched: Sept. 1, 2023, 9:17 a.m., Published: Aug. 16, 2023, 11:09 a.m.	Vulnerabilities: cross-site scripting

Affected products

External IDs

vendor:	cisco	model:	cisco prime infrastructure
vendor:	cisco	model:	prime infrastructure
vendor:	cisco	model:	evolved programmable network manager

CVE-2023-2868: Barracuda and FBI Recommend Replacing Email Security Gateway (ESG) Devices Immediately - Blog \| Tenable® Trust: 5.5 Fetched: Sept. 1, 2023, 9:16 a.m., Published: Aug. 30, 2023, 7:13 p.m.	Vulnerabilities: command injection, code execution, remote command injection

Affected products

External IDs

vendor:

barracuda

model:

barracuda

db:

NVD

ids:

CVE-2023-2868

Approximately 2000 Citrix NetScalers backdoored in mass-exploitation campaign - Fox-IT International blog Trust: 5.5 Fetched: Sept. 1, 2023, 9:16 a.m., Published: Aug. 15, 2023, 1:29 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	citrix	model:	hypervisor
vendor:	citrix	model:	gateway
vendor:	citrix	model:	netscaler

db:

NVD

ids:

CVE-2023-3519

Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability - Cisco Trust: 5.0 Fetched: Sept. 1, 2023, 9:12 a.m., Published: Aug. 16, 2023, 11:10 a.m.	Vulnerabilities: cross-site scripting

Affected products

External IDs

vendor:	cisco	model:	cisco prime infrastructure
vendor:	cisco	model:	prime infrastructure
vendor:	cisco	model:	evolved programmable network manager

Security Vulnerabilities Newsletter: Top News Rundown (August 2023) Related entries in the VARIoT vulnerabilities database: VAR-201905-0651, VAR-202203-0005, VAR-202307-0252 Trust: 5.25 Fetched: Sept. 1, 2023, 9:09 a.m., Published: Aug. 1, 2023, midnight	Vulnerabilities: command injection, buffer overflow, code execution

Affected products

External IDs

vendor:	cisco	model:	router
vendor:	cisco	model:	industrial router

db:

NVD

ids:

CVE-2017-18368, CVE-2022-0778, CVE-2023-23902

Cisco Unified Communications Products Privilege Escalation Vulnerability Trust: 5.25 Fetched: Sept. 1, 2023, 9:07 a.m., Published: Aug. 30, 2023, 3:55 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:

cisco

model:

unified communications

Security Policies: Protecting Your Computers & Network \| Russ Harvey Consulting Trust: 3.25 Fetched: Aug. 30, 2023, 10:36 a.m., Published: May 30, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	essential	model:	phone
vendor:	zoom	model:	client
vendor:	check point	model:	zonealarm
vendor:	check point	model:	express
vendor:	check point	model:	check point
vendor:	google	model:	home
vendor:	google	model:	wifi
vendor:	google	model:	google home
vendor:	google	model:	android

CCNA 1 v7 - ITN v7.02 Modules 16-17 Exam Answers 2023 100% Trust: 4.0 Fetched: Aug. 30, 2023, 10:34 a.m., Published: Aug. 10, 2023, 6:15 p.m.	Vulnerabilities: default password, sql injection

Affected products

External IDs

vendor:	cisco	model:	intrusion prevention system
vendor:	cisco	model:	routers
vendor:	cisco	model:	cisco routers
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	small business
vendor:	cisco	model:	router
vendor:	cisco	model:	series

35 Cyber Security Vulnerability Statistics, Facts In 2023 - Astra Security Blog Related entries in the VARIoT vulnerabilities database: VAR-202203-1506, VAR-202205-1958, VAR-202112-0566 Trust: 3.75 Fetched: Aug. 30, 2023, 10:32 a.m., Published: Feb. 10, 2023, 5:33 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2022-22965, CVE-1999-0517, CVE-2022-30190, CVE-2022-24086, CVE-2021-44228, CVE-2022-3656

SSA-472630 Trust: 4.75 Fetched: Aug. 30, 2023, 10:29 a.m., Published: Aug. 5, 2023, midnight	Vulnerabilities: privilege management vulnerability, denial of service, sql injection

Affected products

External IDs

db:

NVD

ids:

CVE-2022-37971, CVE-2023-37373, CVE-2023-27411, CVE-2023-37372, CVE-2021-31239

Red Hat - Security Vulnerabilities in 2023 Related entries in the VARIoT vulnerabilities database: VAR-202308-2021 Trust: 4.5 Fetched: Aug. 30, 2023, 10:26 a.m., Published: Aug. 30, 2023, midnight	Vulnerabilities: sql injection, code execution, side channel attack...

Affected products

External IDs

db:

NVD

ids:

CVE-2023-4046, CVE-2023-38497, CVE-2020-16305, CVE-2023-38180, CVE-2023-4273, CVE-2023-4147, CVE-2023-3899, CVE-2023-35390, CVE-2023-1076, CVE-2023-4048, CVE-2023-4194, CVE-2023-4056, CVE-2023-39417, CVE-2023-4042, CVE-2023-4456, CVE-2023-4045, CVE-2023-4050, CVE-2023-4057, CVE-2023-4128, CVE-2023-4047, CVE-2023-4055, CVE-2023-39418, CVE-2023-4133, CVE-2023-4132, CVE-2023-4387, CVE-2023-0264, CVE-2023-4459, CVE-2023-38559, CVE-2023-4049, CVE-2022-40982

Positive Technologies Trust: 5.25 Fetched: Aug. 30, 2023, 10:23 a.m., Published: -	Vulnerabilities: command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2023-22815

CVE-2023-4346 - vulnerability database \| Vulners.com Trust: 5.0 Fetched: Aug. 30, 2023, 10:22 a.m., Published: Aug. 29, 2023, 8:15 p.m.	Vulnerabilities: account lockout

Affected products

External IDs

db:

NVD

ids:

CVE-2023-4346

Required Updates for Active Directory Federation Services (AD FS) \| Microsoft Learn Trust: 4.75 Fetched: Aug. 30, 2023, 10:22 a.m., Published: Aug. 15, 2023, midnight	Vulnerabilities: memory leak

Affected products

External IDs

vendor:	google	model:	home
vendor:	google	model:	google chrome
vendor:	google	model:	chrome

db:

NVD

ids:

CVE-2018-16794, CVE-2019-1126

The Bug Report - July 2023 Edition Trust: 5.25 Fetched: Aug. 30, 2023, 10:21 a.m., Published: Aug. 2, 2023, 1 p.m.	Vulnerabilities: authorization issue, code execution

Affected products

External IDs

vendor:	citrix	model:	netscaler
vendor:	citrix	model:	netscaler gateway
vendor:	citrix	model:	netscaler adc
vendor:	citrix	model:	gateway

db:

NVD

ids:

CVE-2023-3519, CVE-2023-38203, CVE-2023-29298, CVE-2023-36884, CVE-2023-29300

What is Network Penetration Testing? Trust: 3.75 Fetched: Aug. 30, 2023, 10:20 a.m., Published: Nov. 10, 2020, 1:22 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

wifi

IoT: Fun to use but a threat to Security and Privacy. Trust: 4.5 Fetched: Aug. 30, 2023, 10:18 a.m., Published: Aug. 3, 2023, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

google

model:

home

PAN-OS 10.1.5 Known Issues Trust: 3.5 Fetched: Aug. 30, 2023, 10:16 a.m., Published: Oct. 1, 2005, midnight	Vulnerabilities: memory leak

Affected products

External IDs

vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	series
vendor:	cisco	model:	router
vendor:	palo	model:	firewall
vendor:	palo	model:	pan-os
vendor:	palo	model:	firewall interface
vendor:	palo	model:	networks
vendor:	palo alto networks	model:	firewall
vendor:	palo alto networks	model:	pan-os
vendor:	palo alto networks	model:	firewall interface
vendor:	palo alto networks	model:	networks
vendor:	broadcom	model:	linux
vendor:	google	model:	android

The Cyber Kill Chain: The Seven Steps of a Cyberattack \| EC-Council Trust: 3.0 Fetched: Aug. 30, 2023, 10:15 a.m., Published: Jan. 1, 2022, 1:56 a.m.	Vulnerabilities: denial of service

Affected products	External IDs

Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations Trust: 4.0 Fetched: Aug. 30, 2023, 10:15 a.m., Published: Aug. 16, 2023, 10:38 a.m.	Vulnerabilities: authentication bypass, code execution, system crash...

Affected products

External IDs

db:

NVD

ids:

CVE-2023-32560, CVE-2023-32561, CVE-2023-32566

VARIoT news about IoT security