VARIoT latest news about IoT security

Preventing Buffer Overflow Attacks on Linux Drivers Trust: 4.25 Fetched: July 18, 2023, 9:12 a.m., Published: July 3, 2023, midnight	Vulnerabilities: buffer overflow

Affected products	External IDs

Remote Code Execution and Denial-of-Service Vulnerabilities in Select Communication Modules Trust: 3.25 Fetched: July 18, 2023, 9:11 a.m., Published: -	Vulnerabilities: code execution

Affected products	External IDs

Update now! Apple fixes three actively exploited vulnerabilities Trust: 4.5 Fetched: July 18, 2023, 9:10 a.m., Published: June 23, 2023, 12:46 p.m.	Vulnerabilities: buffer overflow, code execution, memory corruption...

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	apple	model:	ipad air
vendor:	apple	model:	macos
vendor:	apple	model:	ipod touch
vendor:	apple	model:	watch
vendor:	apple	model:	ipad
vendor:	apple	model:	safari
vendor:	apple	model:	watchos
vendor:	apple	model:	webkit

db:

NVD

ids:

CVE-2023-32435, CVE-2023-32439, CVE-2023-32434

ERROR: The request could not be satisfied Trust: 3.25 Fetched: July 18, 2023, 9:09 a.m., Published: June 18, 2023, midnight	Vulnerabilities: configuration error

Affected products	External IDs

Fortinet Fortigate Vulnerability (CVE-2023-27997) \| Blumira Trust: 4.75 Fetched: July 18, 2023, 9:09 a.m., Published: June 12, 2023, 1:07 p.m.	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:

fortigate

model:

fortios

db:

NVD

ids:

CVE-2023-27997

Microsoft July 2023 Patch Tuesday warns of 6 zero-days, 132 flaws Trust: 4.25 Fetched: July 18, 2023, 9:07 a.m., Published: -	Vulnerabilities: cross-site scripting, feature bypass, code execution...

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2023-35326, CVE-2023-35309, CVE-2023-33150, CVE-2023-35317, CVE-2023-33165, CVE-2023-36872, CVE-2023-35331, CVE-2023-35340, CVE-2023-32054, CVE-2023-36874, CVE-2023-35325, CVE-2023-33172, CVE-2023-33166, CVE-2023-32050, CVE-2023-35339, CVE-2023-35366, CVE-2023-35357, CVE-2023-35344, CVE-2023-35316, CVE-2023-35304, CVE-2023-36868, CVE-2023-33153, CVE-2023-32033, CVE-2023-33127, CVE-2023-35337, CVE-2023-35308, CVE-2023-35315, CVE-2023-35336, CVE-2023-21756, CVE-2023-35320, CVE-2023-35328, CVE-2023-33151, CVE-2023-33164, CVE-2023-35310, CVE-2023-36884, CVE-2023-36867, CVE-2023-33152, CVE-2023-35373, CVE-2023-35360, CVE-2023-33149, CVE-2023-32083, CVE-2023-35364, CVE-2023-32045, CVE-2023-35333, CVE-2023-35358, CVE-2023-32049, CVE-2023-35353, CVE-2023-35313, CVE-2023-35299, CVE-2023-35345, CVE-2023-33148, CVE-2023-35332, CVE-2023-35367, CVE-2023-32042, CVE-2023-35350, CVE-2023-32046, CVE-2023-35335, CVE-2023-35338, CVE-2023-35302, CVE-2023-35374, CVE-2023-35347, CVE-2023-35312, CVE-2023-35296, CVE-2023-35305, CVE-2023-32057, CVE-2023-32040, CVE-2023-35311, CVE-2023-35343, CVE-2023-33171, CVE-2023-32038, CVE-2023-36871, CVE-2023-33155, CVE-2023-35348, CVE-2023-33174, CVE-2023-33156, CVE-2023-35341, CVE-2023-32056, CVE-2023-35351, CVE-2023-32047, CVE-2023-33161, CVE-2023-32055, CVE-2023-35322, CVE-2023-35361, CVE-2023-33160, CVE-2023-35319, CVE-2023-35356, CVE-2023-32034, CVE-2023-35321, CVE-2023-21526, CVE-2023-33168, CVE-2023-35346, CVE-2023-32084, CVE-2023-32053, CVE-2023-32085, CVE-2023-32035, CVE-2023-35342, CVE-2023-33163, CVE-2023-32039, CVE-2023-32051, CVE-2023-32043, CVE-2023-35297, CVE-2023-35329, CVE-2023-35318, CVE-2023-35330, CVE-2023-33169, CVE-2023-33157, CVE-2023-32041, CVE-2023-35323, CVE-2023-33167, CVE-2023-33158, CVE-2023-32037, CVE-2023-33162, CVE-2023-35352, CVE-2023-32044, CVE-2023-35362, CVE-2023-35365, CVE-2023-33170, CVE-2023-35300, CVE-2023-35298, CVE-2023-29347, CVE-2023-32052, CVE-2023-33173, CVE-2023-33159, CVE-2023-33154, CVE-2023-35363, CVE-2023-35324, CVE-2023-35306, CVE-2023-35303, CVE-2023-33134, CVE-2023-35314

Network Security ( Version 1) - Network Security 1.0 Modules 1-4: Securing Networks Group Exam Answers - InfraExam 2023 Trust: 3.25 Fetched: July 16, 2023, 9:20 a.m., Published: June 29, 2023, 3:03 p.m.	Vulnerabilities: denial of service, resource exhaustion

Affected products

External IDs

vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	router
vendor:	cisco	model:	virtual security gateway
vendor:	cisco	model:	nexus
vendor:	cisco	model:	soho
vendor:	cisco	model:	email security appliance
vendor:	cisco	model:	web security appliance
vendor:	cisco	model:	cisco email security appliance
vendor:	cisco	model:	routers

10 Best Software Security Testing Tools [2023 Reviewed] Trust: 4.75 Fetched: July 16, 2023, 9:19 a.m., Published: Jan. 16, 2022, 11:03 p.m.	Vulnerabilities: brute force attack

Affected products

External IDs

vendor:

proftpd

model:

proftpd

The CISA Warning to Patch an Actively Exploited Android Driver Trust: 3.5 Fetched: July 16, 2023, 9:18 a.m., Published: July 3, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	motorola	model:	motorola
vendor:	motorola	model:	android
vendor:	google	model:	android

db:

NVD

ids:

CVE-2021-29256

Rockwell Automation exploit spurs fears of critical infrastructure security \| SC Media Related entries in the VARIoT vulnerabilities database: VAR-202307-1042, VAR-202307-1163 Trust: 4.25 Fetched: July 16, 2023, 9:17 a.m., Published: March 15, 2023, 6 p.m.	Vulnerabilities: denial of service, code execution

Affected products

External IDs

vendor:	rockwell	model:	automation controllogix
vendor:	rockwell	model:	automation allen-bradley controllogix
vendor:	rockwell	model:	controllogix
vendor:	rockwell automation	model:	automation controllogix
vendor:	rockwell automation	model:	automation allen-bradley controllogix
vendor:	rockwell automation	model:	controllogix

db:

NVD

ids:

CVE-2023-3596, CVE-2023-3595

Microsoft Office and Windows HTML Remote Code Execution Vulnerability - NHS Digital Trust: 3.0 Fetched: July 16, 2023, 9:17 a.m., Published: July 16, 2023, midnight	Vulnerabilities: code execution

Affected products	External IDs

Urgent warning issued to everyone with an Apple iPhone \| Tech News \| Metro News Trust: 3.75 Fetched: July 16, 2023, 9:16 a.m., Published: July 11, 2023, 12:57 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	macbook
vendor:	apple	model:	macbook pro
vendor:	apple	model:	imac
vendor:	apple	model:	apple tv
vendor:	apple	model:	safari
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	macos
vendor:	apple	model:	macbook air
vendor:	apple	model:	webkit
vendor:	apple	model:	tvos
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2023-37450

Barracuda Networks Releases Update to Address ESG Vulnerability \| CISA Trust: 3.75 Fetched: July 16, 2023, 9:16 a.m., Published: July 13, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	barracuda networks	model:	barracuda
vendor:	barracuda	model:	barracuda

db:

NVD

ids:

CVE-2023-2868

The ins and outs of BlueTrust, a Bluetooth vulnerability Trust: 3.5 Fetched: July 16, 2023, 9:14 a.m., Published: June 23, 2023, 10:49 a.m.	Vulnerabilities: device impersonation, brute force attack

Affected products

External IDs

vendor:

broadcom

model:

linux

A Vulnerability in Cisco SD-WAN vManage Could Allow for Security Mechanism Bypass Trust: 3.0 Fetched: July 14, 2023, 9:15 a.m., Published: July 12, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	cisco sd-wan
vendor:	cisco	model:	sd-wan vmanage

Siemens SIMATIC MV500 Devices \| CISA Related entries in the VARIoT vulnerabilities database: VAR-202206-1157, VAR-202302-0195, VAR-202302-0482, VAR-202206-1106, VAR-202206-1186 Trust: 5.25 Fetched: July 14, 2023, 9:14 a.m., Published: March 8, 2023, midnight	Vulnerabilities: denial of service, information leak, information disclosure...

Affected products

External IDs

vendor:	siemens	model:	simatic mv500
vendor:	siemens	model:	simatic
vendor:	cisco	model:	series
vendor:	broadcom	model:	linux

db:

NVD

ids:

CVE-2022-42328, CVE-2022-21166, CVE-2022-4450, CVE-2022-4304, CVE-2022-21123, CVE-2022-32296, CVE-2023-0286, CVE-2022-42329, CVE-2023-0215, CVE-2022-1012, CVE-2022-21125, CVE-2022-0812, CVE-2022-3643

Finding Rockwell Automation Allen-Bradley Communication Modules Affected by CVE-2023-3595 and CVE-2023-3596 in OT Environments - Blog \| Tenable® Related entries in the VARIoT vulnerabilities database: VAR-202307-1042, VAR-202307-1163 Trust: 4.25 Fetched: July 14, 2023, 9:14 a.m., Published: July 12, 2023, 11:58 a.m.	Vulnerabilities: code execution, denial of service

Affected products

External IDs

vendor:	rockwell automation	model:	controllogix
vendor:	rockwell automation	model:	automation integrated architecture builder
vendor:	rockwell automation	model:	automation allen-bradley controllogix
vendor:	rockwell automation	model:	rslinx
vendor:	rockwell automation	model:	integrated architecture builder
vendor:	rockwell automation	model:	studio 5000
vendor:	rockwell	model:	controllogix
vendor:	rockwell	model:	automation integrated architecture builder
vendor:	rockwell	model:	automation allen-bradley controllogix
vendor:	rockwell	model:	rslinx
vendor:	rockwell	model:	integrated architecture builder
vendor:	rockwell	model:	studio 5000
vendor:	rapid	model:	scada

db:

NVD

ids:

CVE-2023-3596, CVE-2023-3595

Fortinet warns of critical RCE flaw in FortiOS, FortiProxy devices Trust: 4.75 Fetched: July 14, 2023, 9:12 a.m., Published: -	Vulnerabilities: code execution, buffer overflow

Affected products

External IDs

vendor:

fortigate

model:

fortios

db:

NVD

ids:

CVE-2023-27997, CVE-2023-33308

Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari Trust: 4.75 Fetched: July 12, 2023, 9:09 a.m., Published: July 11, 2023, 4:08 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	safari
vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	webkit

db:

NVD

ids:

CVE-2023-37450

23-030 (July 11, 2023) - Threat Encyclopedia Trust: 4.5 Fetched: July 12, 2023, 9:09 a.m., Published: July 11, 2023, midnight	Vulnerabilities: cross-site scripting, memory corruption, code execution...

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	solarwinds	model:	network performance monitor
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2022-43769, CVE-2022-43939, CVE-2022-32742, CVE-2023-29154, CVE-2023-0241, CVE-2023-27372, CVE-2023-34225, CVE-2023-32532, CVE-2023-24954, CVE-2021-26411, CVE-2023-33157, CVE-2022-47504, CVE-2023-32529

VARIoT news about IoT security