Sign-up

VARIoT news about IoT security

Ordr Security Bulletin: MOVEit Vulnerabilities - Ordr

Trust: 4.5

Fetched: Aug. 8, 2023, 9:34 a.m., Published: June 19, 2023, 2:37 p.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: ipswitch model: moveit transfer
vendor: check point model: check point
db: NVD ids: CVE-2023-34362

Cybersecurity Threat Advisory: Critical PaperCut vulnerability actively exploited

Trust: 6.0

Fetched: Aug. 8, 2023, 9:34 a.m., Published: May 9, 2023, 7:47 p.m.
 Vulnerabilities: code execution, improper access control, authentication bypass
Affected productsExternal IDs
vendor: barracuda model: barracuda
db: NVD ids: CVE-2023-27350

iPrint&Scan App Vulnerability on Android™ Devices | Brother

Trust: 4.0

Fetched: Aug. 8, 2023, 9:33 a.m., Published: Aug. 1, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-28369

Final OT:ICEFALL vulnerability disclosed affecting Schneider tool

Related entries in the VARIoT vulnerabilities database: VAR-202305-2074

Trust: 3.75

Fetched: Aug. 8, 2023, 9:32 a.m., Published: June 21, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2022-46680

DeviceTvmInfoGathering table in the advanced hunting schema | Microsoft Learn

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.0

Fetched: Aug. 8, 2023, 9:31 a.m., Published: June 22, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Zyxel addressed critical flaw CVE-2023-27992 in NAS DevicesSecurity Affairs

Related entries in the VARIoT vulnerabilities database: VAR-202305-2285, VAR-202304-2073, VAR-202305-2121

Trust: 5.75

Fetched: Aug. 8, 2023, 9:30 a.m., Published: June 20, 2023, 2:08 p.m.
 Vulnerabilities: code execution, command injection, buffer overflow
Affected productsExternal IDs
vendor: zyxel model: nas540
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2023-33010, CVE-2023-27992, CVE-2023-28771, CVE-2023-33009

Wear OS Security Bulletin-August 2023 | Android Open Source Project

Trust: 5.75

Fetched: Aug. 8, 2023, 9:24 a.m., Published: Aug. 8, 2023, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-21234, CVE-2023-21229, CVE-2023-21233, CVE-2023-21235, CVE-2023-35689, CVE-2023-21231, CVE-2023-21232, CVE-2023-21230

Cisco Bug: CSCvt55609 - Cisco SD-WAN vEdge Routers Denial of Service Vulnerability

Trust: 5.0

Fetched: Aug. 8, 2023, 9:24 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco sd-wan vedge
vendor: cisco model: sd-wan vedge
vendor: cisco model: sd-wan vedge routers
vendor: cisco model: vedge
vendor: cisco model: routers
vendor: cisco model: sd-wan
vendor: cisco model: cisco sd-wan

CVE-2023-35081 - New Ivanti EPMM Vulnerability

Trust: 3.0

Fetched: Aug. 8, 2023, 9:18 a.m., Published: July 28, 2023, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2023-35078, CVE-2023-35081

CVE-2023-35082 - Vulnerability affecting EPMM and MobileIron Core | Ivanti

Trust: 3.0

Fetched: Aug. 8, 2023, 9:18 a.m., Published: Aug. 7, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-35082

2022's most routinely exploited vulnerabilities-history repeats

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202112-0566, VAR-202205-1958, VAR-202205-0394, VAR-202206-0004

Trust: 3.5

Fetched: Aug. 8, 2023, 9:18 a.m., Published: Aug. 7, 2023, 5:30 p.m.
 Vulnerabilities: code execution, authentication bypass, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2018-13379, CVE-2021-34523, CVE-2021-26084, CVE-2022-22954, CVE-2021-40539, CVE-2022-22960, CVE-2021-34473, CVE-2021-31207, CVE-2021-44228, CVE-2022-30190, CVE-2022-1388, CVE-2022-26134

CISA adds recently disclosed Apple flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs

Trust: 5.5

Fetched: Aug. 6, 2023, 9:13 a.m., Published: June 23, 2023, 11:25 p.m.
 Vulnerabilities: command injection, memory corruption, integer overflow...
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: watchos
vendor: apple model: webkit
vendor: apple model: safari
db: NVD ids: CVE-2023-32434, CVE-2020-35730, CVE-2023-27992, CVE-2023-20887, CVE-2023-32435, CVE-2023-20867, CVE-2020-12641, CVE-2021-44026, CVE-2023-32439

Apple Patches Zero Days Used in Targeted iOS Attacks | Decipher

Trust: 5.5

Fetched: Aug. 6, 2023, 9:13 a.m., Published: June 22, 2023, midnight
 Vulnerabilities: privilege escalation, integer overflow, memory corruption...
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: macos
db: NVD ids: CVE-2023-32435, CVE-2023-32434, CVE-2023-32439

Minecraft fans beware: Players and servers at risk from BleedingPipe vulnerability

Trust: 3.0

Fetched: Aug. 4, 2023, 9:09 a.m., Published: Aug. 2, 2023, 2:35 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerability

Trust: 3.25

Fetched: Aug. 4, 2023, 9:09 a.m., Published: Aug. 3, 2023, 2:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: email security appliance

How IT Device Discovery Can Identify Your Network's Assets and Vulnerabilities | Ivanti

Trust: 3.0

Fetched: Aug. 4, 2023, 9:08 a.m., Published: June 22, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Fortinet Patches Critical RCE Vulnerability in FortiNAC - SecurityWeek

Related entries in the VARIoT vulnerabilities database: VAR-202306-1795

Trust: 6.0

Fetched: Aug. 2, 2023, 9:26 a.m., Published: June 26, 2023, midnight
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2023-33300, CVE-2023-33299

Nova Scotia Health Patient Data Stolen via MOVEit Vulnerability - First Health Advisory

Trust: 5.0

Fetched: Aug. 2, 2023, 9:25 a.m., Published: Aug. 3, 2023, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-34362

Cisco Identity Services Engine Command Injection Vulnerabilities

Trust: 6.0

Fetched: Aug. 2, 2023, 9:25 a.m., Published: May 17, 2023, 3:53 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: cisco identity services engine
db: NVD ids: CVE-2023-20164, CVE-2023-20163

KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932 - Microsoft Support

Trust: 3.75

Fetched: Aug. 2, 2023, 9:24 a.m., Published: May 9, 2023, midnight
 Vulnerabilities: feature bypass, security feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2023-24932