VARIoT news about IoT security

Trust: 3.25

Fetched: June 2, 2023, 9:09 a.m., Published: May 17, 2023, midnight
Vulnerabilities: sql injection, denial of service
Affected productsExternal IDs
vendor: essential model: phone
vendor: google model: wi-fi router
Related entries in the VARIoT vulnerabilities database: VAR-202304-2073

Trust: 5.75

Fetched: June 2, 2023, 9:08 a.m., Published: June 1, 2023, 11:09 a.m.
Vulnerabilities: code execution
Affected productsExternal IDs
vendor: zyxel model: nas540
vendor: zyxel model: nas542
vendor: zyxel model: nas326
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-28771
Related entries in the VARIoT vulnerabilities database: VAR-202304-2073, VAR-202305-2285, VAR-202305-2121

Trust: 5.75

Fetched: June 2, 2023, 9:07 a.m., Published: June 1, 2023, 4:25 p.m.
Vulnerabilities: buffer overflow, command injection, denial of service...
Affected productsExternal IDs
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-28771, CVE-2023-33010, CVE-2023-33009

Trust: 5.75

Fetched: June 2, 2023, 9:07 a.m., Published: May 31, 2023, 11:47 a.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: zyxel model: nas540
vendor: zyxel model: nas542
vendor: zyxel model: nas326
db: NVD ids: CVE-2023-27988

Trust: 3.0

Fetched: May 31, 2023, 9:15 a.m., Published: May 18, 2023, 8:17 a.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
Related entries in the VARIoT vulnerabilities database: VAR-202304-0813

Trust: 4.25

Fetched: May 31, 2023, 9:14 a.m., Published: May 25, 2023, 6 a.m.
Vulnerabilities: arbitrary command execution, command injection, command execution...
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: tenda model: router
db: NVD ids: CVE-2023-26802, CVE-2023-26801, CVE-2023-27076
Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 5.75

Fetched: May 31, 2023, 9:13 a.m., Published: May 30, 2023, midnight
Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30892, CVE-2023-32369

Trust: 5.5

Fetched: May 31, 2023, 9:13 a.m., Published: May 30, 2023, 8:47 a.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: zyxel model: nas326
vendor: zyxel model: nas542
vendor: zyxel model: nas540
db: NVD ids: CVE-2023-27988

Trust: 4.25

Fetched: May 31, 2023, 9:06 a.m., Published: May 30, 2023, 8:27 p.m.
Vulnerabilities: command injection, remote command injection
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: barracuda networks model: barracuda
db: NVD ids: CVE-2023-28681, CVE-2023-2868

Trust: 5.75

Fetched: May 30, 2023, 9:09 a.m., Published: May 17, 2023, 10:17 a.m.
Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: wemo model: mini smart plug
db: NVD ids: CVE-2023-27217
Related entries in the VARIoT vulnerabilities database: VAR-201609-0325, VAR-200412-0177

Trust: 4.75

Fetched: May 30, 2023, 9:08 a.m., Published: May 26, 2023, midnight
Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: mobile devices
vendor: samsung model: note
vendor: samsung model: samsung mobile
vendor: cisco model: ios xr
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
db: NVD ids: CVE-2016-6415, CVE-2023-21492, CVE-2004-1464
Related entries in the VARIoT vulnerabilities database: VAR-202305-2285, VAR-202305-2121, VAR-202205-0957

Trust: 5.75

Fetched: May 30, 2023, 9:07 a.m., Published: -
Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-33010, CVE-2023-33009, CVE-2022-30525

Trust: 3.25

Fetched: May 28, 2023, 9:02 a.m., Published: Feb. 16, 2021, midnight
Vulnerabilities: configuration attack
Affected productsExternal IDs

Trust: 3.0

Fetched: May 26, 2023, 9:09 a.m., Published: May 17, 2023, 3:52 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine

Trust: 5.25

Fetched: May 26, 2023, 9:08 a.m., Published: May 16, 2023, midnight
Vulnerabilities: certificate validation issue, use after free, buffer overflow...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
vendor: apple model: ipad air
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2022-32946, CVE-2022-42800, CVE-2022-32927, CVE-2022-32922, CVE-2022-46712, CVE-2022-42832, CVE-2022-42831, CVE-2022-42823, CVE-2022-42798, CVE-2022-42820, CVE-2022-42825, CVE-2022-42799, CVE-2022-42792, CVE-2022-46715, CVE-2022-32926, CVE-2022-42806, CVE-2022-32945, CVE-2022-32944, CVE-2022-42803, CVE-2022-32940, CVE-2022-42827, CVE-2022-32941, CVE-2022-32924, CVE-2022-42824, CVE-2022-32935, CVE-2022-37434, CVE-2022-32939, CVE-2022-42801, CVE-2022-42813, CVE-2022-42811, CVE-2022-42808, CVE-2022-42830, CVE-2022-42829, CVE-2022-42817, CVE-2022-32923, CVE-2022-42826, CVE-2022-32929, CVE-2022-32947, CVE-2022-32932, CVE-2022-32938, CVE-2022-42810

Trust: 5.0

Fetched: May 26, 2023, 9:08 a.m., Published: May 3, 2023, midnight
Vulnerabilities: default credentials
Affected productsExternal IDs

Trust: 4.5

Fetched: May 26, 2023, 9:07 a.m., Published: -
Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: mobile devices
vendor: google model: chrome
vendor: google model: android
db: NVD ids: CVE-2023-2149, CVE-2023-21492
Related entries in the VARIoT vulnerabilities database: VAR-202304-2073, VAR-202305-2285, VAR-202305-2121

Trust: 5.75

Fetched: May 26, 2023, 9:07 a.m., Published: May 22, 2023, 10:28 a.m.
Vulnerabilities: buffer overflow, command injection, command execution
Affected productsExternal IDs
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-28771, CVE-2023-33010, CVE-2023-33009

Trust: 4.75

Fetched: May 24, 2023, 9:13 a.m., Published: May 23, 2023, 12:15 p.m.
Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: macos
vendor: apple model: apple tv
vendor: apple model: safari
vendor: apple model: ipod touch
vendor: apple model: watch
vendor: apple model: watchos
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: tvos
vendor: apple model: iphone
db: NVD ids: CVE-2023-32409, CVE-2023-28204, CVE-2023-32373

Trust: 3.25

Fetched: May 24, 2023, 9:12 a.m., Published: April 27, 2023, midnight
Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs