VARIoT latest news about IoT security

Critical remote code execution flaws patched in Cisco small business switches \| CSO Online Related entries in the VARIoT vulnerabilities database: VAR-202305-1743, VAR-202305-1746 Trust: 5.75 Fetched: May 24, 2023, 9:11 a.m., Published: May 18, 2023, midnight	Vulnerabilities: buffer overflow, denial of service, code execution...

Affected products

External IDs

vendor:	cisco	model:	200 series smart switches
vendor:	cisco	model:	series smart switches
vendor:	cisco	model:	cisco small business switches
vendor:	cisco	model:	series managed switches
vendor:	cisco	model:	small business switches
vendor:	cisco	model:	series stackable managed switches
vendor:	cisco	model:	small business
vendor:	cisco	model:	series
vendor:	cisco	model:	small business 500 series stackable managed switches
vendor:	cisco	model:	cisco small business
vendor:	cisco	model:	500 series stackable managed switches
vendor:	cisco	model:	300 series managed switches
vendor:	cisco	model:	small business 300 series managed switches

db:

NVD

ids:

CVE-2023-20024, CVE-2023-20159, CVE-2023-20156, CVE-2023-20160, CVE-2023-20157, CVE-2023-20189, CVE-2023-20161, CVE-2023-20158, CVE-2023-20162

Blog - What if we had the SockPuppet vulnerability in iOS 16? - Apple Security Research Trust: 3.75 Fetched: May 24, 2023, 9:09 a.m., Published: May 23, 2023, midnight	Vulnerabilities: memory corruption

Affected products

External IDs

vendor:

apple

model:

iphone

5G network slices could be vulnerable to attack, researchers say \| Network World Trust: 3.5 Fetched: May 24, 2023, 9:08 a.m., Published: May 22, 2023, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	sophos	model:	mobile
vendor:	nokia	model:	impact

Cisco Patches Multiple Buffer Overflow Vulnerabilities in its Small Business Series Switches - Qualys ThreatPROTECT Related entries in the VARIoT vulnerabilities database: VAR-202305-1743, VAR-202305-1746 Trust: 5.75 Fetched: May 23, 2023, 9:17 a.m., Published: -	Vulnerabilities: denial of service, code execution, improper validation...

Affected products

External IDs

vendor:	cisco	model:	small business
vendor:	cisco	model:	500 series stackable managed switches
vendor:	cisco	model:	series stackable managed switches
vendor:	cisco	model:	small business series
vendor:	cisco	model:	300 series managed switches
vendor:	cisco	model:	200 series smart switches
vendor:	cisco	model:	small business 300 series managed switches
vendor:	cisco	model:	series smart switches
vendor:	cisco	model:	cisco small business
vendor:	cisco	model:	series switches
vendor:	cisco	model:	small business series switches
vendor:	cisco	model:	small business 500 series stackable managed switches
vendor:	cisco	model:	small business switches
vendor:	cisco	model:	series
vendor:	cisco	model:	series managed switches

db:

NVD

ids:

CVE-2023-20158, CVE-2023-20162, CVE-2023-20159, CVE-2023-20160, CVE-2023-20024, CVE-2023-20189, CVE-2023-20156, CVE-2023-20157, CVE-2023-20161

CISA Urges Deployment Of Patches For Three Apple Device Vulnerabilities \| CRN Trust: 3.75 Fetched: May 23, 2023, 9:17 a.m., Published: May 22, 2023, 1:24 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	ipad
vendor:	apple	model:	macos
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2023-32373, CVE-2023-32409, CVE-2023-28204

Cisco Identity Services Engine XML External Entity Injection Vulnerabilities Trust: 5.75 Fetched: May 23, 2023, 9:17 a.m., Published: May 17, 2023, 3:53 p.m.	Vulnerabilities: entity injection, request forgery

Affected products

External IDs

vendor:	cisco	model:	identity services engine
vendor:	cisco	model:	cisco identity services engine

db:

NVD

ids:

CVE-2023-20173, CVE-2023-20174

Critical Vulnerability in Zyxel Firewalls Leads to Command Execution - SecurityWeek Related entries in the VARIoT vulnerabilities database: VAR-202304-2162, VAR-202304-2073 Trust: 5.75 Fetched: May 23, 2023, 9:16 a.m., Published: April 28, 2023, 8:39 a.m.	Vulnerabilities: command injection, command execution

Affected products

External IDs

vendor:

zyxel

model:

zywall

db:

NVD

ids:

CVE-2023-27991, CVE-2023-28771

FIX Windows Boot Manager Vulnerability CVE-2023-24932 BlackLotus UEFI Bootkit HTMD Blog Trust: 4.75 Fetched: May 23, 2023, 9:15 a.m., Published: May 16, 2023, 3:46 p.m.	Vulnerabilities: security feature bypass, feature bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2023-24932, CVE-2022-21894

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202305-1743, VAR-202305-1746 Trust: 5.25 Fetched: May 23, 2023, 9:14 a.m., Published: May 17, 2023, 3:53 p.m.	Vulnerabilities: denial of service, improper validation, buffer overflow

Affected products

External IDs

vendor:	cisco	model:	cisco small business
vendor:	cisco	model:	small business
vendor:	cisco	model:	small business series
vendor:	cisco	model:	series
vendor:	cisco	model:	small business series switches
vendor:	cisco	model:	series switches

db:

NVD

ids:

CVE-2023-20158, CVE-2023-20162, CVE-2023-20159, CVE-2023-20160, CVE-2023-20024, CVE-2023-20189, CVE-2023-20156, CVE-2023-20157, CVE-2023-20161

VMware Patches Critical Vulnerability Disclosed at Pwn2Own Hacking Contest - SecurityWeek Trust: 4.0 Fetched: May 23, 2023, 9:14 a.m., Published: April 26, 2023, 9:21 a.m.	Vulnerabilities: buffer overflow, code execution, privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2023-20871, CVE-2023-20872, CVE-2023-20870, CVE-2023-20869

Warning: Samsung Devices Under Attack! New Security Flaw Exposed Related entries in the VARIoT vulnerabilities database: VAR-200412-0177, VAR-201609-0325 Trust: 4.5 Fetched: May 23, 2023, 9:08 a.m., Published: May 20, 2023, 4:15 a.m.	Vulnerabilities: memory corruption, code execution, information disclosure

Affected products

External IDs

vendor:	google	model:	android
vendor:	cisco	model:	cisco ios

db:

NVD

ids:

CVE-2023-21492, CVE-2004-1464, CVE-2010-3904, CVE-2016-6415

Cisco Firepower Release Notes, Version 6.6 - Open and Resolved Bugs [Cisco Secure Firewall Management Center] - Cisco Related entries in the VARIoT vulnerabilities database: VAR-202012-1527 Trust: 5.25 Fetched: May 21, 2023, 9:14 a.m., Published: May 10, 2023, 4:12 p.m.	Vulnerabilities: buffer overflow, cross-site scripting, pointer dereference vulnerability...

Affected products

External IDs

vendor:	cisco	model:	firepower 9000
vendor:	cisco	model:	adaptive security appliance
vendor:	cisco	model:	cisco adaptive security appliance
vendor:	cisco	model:	fxos
vendor:	cisco	model:	firepower threat defense
vendor:	cisco	model:	series
vendor:	cisco	model:	umbrella
vendor:	cisco	model:	adaptive security appliance software
vendor:	cisco	model:	eigrp
vendor:	cisco	model:	firepower threat defense software
vendor:	cisco	model:	router
vendor:	cisco	model:	asdm
vendor:	cisco	model:	cisco firepower management center
vendor:	cisco	model:	cache engine
vendor:	cisco	model:	packet tracer
vendor:	cisco	model:	firepower management center
vendor:	cisco	model:	cisco adaptive security appliance software
vendor:	cisco	model:	firepower
vendor:	snort	model:	snort
vendor:	filezilla	model:	server

db:

NVD

ids:

CVE-2021-1405, CVE-2020-1971

Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities Trust: 3.5 Fetched: May 21, 2023, 9:14 a.m., Published: May 17, 2023, 5:41 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	cisco identity services engine
vendor:	cisco	model:	identity services engine

db:

NVD

ids:

CVE-2023-20106, CVE-2023-20171, CVE-2023-20172

Google Announces New Rating System for Android and Device Vulnerability Reports - BU-CERT Related entries in the VARIoT vulnerabilities database: VAR-201405-0243, VAR-201704-1034 Trust: 5.75 Fetched: May 21, 2023, 9:13 a.m., Published: May 19, 2023, midnight	Vulnerabilities: code execution, information disclosure, privilege escalation

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2010-3904, CVE-2014-0196, CVE-2016-8735, CVE-2016-3427, CVE-2015-5317, CVE-2023-25717, CVE-2021-3560

The OWASP IoT top 10 vulnerabilities and how to mitigate them? - SISA Blogs Trust: 3.75 Fetched: May 21, 2023, 9:13 a.m., Published: May 17, 2023, 2:20 p.m.	Vulnerabilities: code execution

Affected products	External IDs

Cisco Small Business Routers Multiple Vulnerabilities (cisco-s... \| Tenable® Trust: 3.0 Fetched: May 21, 2023, 9:12 a.m., Published: March 27, 2023, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	rv082_firmware
vendor:	cisco	model:	cisco small business
vendor:	cisco	model:	rv320
vendor:	cisco	model:	small business
vendor:	cisco	model:	rv320_firmware
vendor:	cisco	model:	rv082
vendor:	cisco	model:	rv042g_firmware
vendor:	cisco	model:	rv042g
vendor:	cisco	model:	rv042
vendor:	cisco	model:	rv325_firmware
vendor:	cisco	model:	rv042_firmware
vendor:	cisco	model:	small_business_rv_series_router_firmware
vendor:	cisco	model:	rv016
vendor:	cisco	model:	routers
vendor:	cisco	model:	rv016_firmware

Cisco Patches Code and Command Execution Vulnerabilities in Several Products - SecurityWeek Related entries in the VARIoT vulnerabilities database: VAR-202207-0214 Trust: 5.5 Fetched: May 21, 2023, 9:12 a.m., Published: April 6, 2023, 2:57 p.m.	Vulnerabilities: code execution, improper validation, privilege escalation...

Affected products

External IDs

vendor:	cisco	model:	ip phones
vendor:	cisco	model:	rv082
vendor:	cisco	model:	rv042g
vendor:	cisco	model:	expressway series
vendor:	cisco	model:	evolved programmable network manager
vendor:	cisco	model:	unified ccx
vendor:	cisco	model:	webex
vendor:	cisco	model:	expressway
vendor:	cisco	model:	telepresence
vendor:	cisco	model:	rv042
vendor:	cisco	model:	packet data network gateway
vendor:	cisco	model:	unified contact center express
vendor:	cisco	model:	rv325
vendor:	cisco	model:	webex meetings
vendor:	cisco	model:	small business
vendor:	cisco	model:	telepresence video communication server
vendor:	cisco	model:	rv320
vendor:	cisco	model:	prime infrastructure
vendor:	cisco	model:	ios software
vendor:	cisco	model:	series
vendor:	cisco	model:	rv016
vendor:	cisco	model:	cisco webex
vendor:	cisco	model:	small business rv320
vendor:	cisco	model:	cisco webex meetings
vendor:	cisco	model:	routers
vendor:	cisco	model:	identity services engine

db:

NVD

ids:

CVE-2023-20102, CVE-2023-20122, CVE-2022-20812, CVE-2023-20121, CVE-2023-20117, CVE-2023-20128

Android's April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities - SecurityWeek Trust: 5.5 Fetched: May 21, 2023, 9:12 a.m., Published: April 5, 2023, 11:24 a.m.	Vulnerabilities: code execution, information disclosure

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	pixel

db:

NVD

ids:

CVE-2023-21096, CVE-2023-21085

Cisco Identity Services Engine Path Traversal Vulnerabilities Trust: 6.0 Fetched: May 21, 2023, 9:11 a.m., Published: May 17, 2023, 3:53 p.m.	Vulnerabilities: path traversal

Affected products

External IDs

vendor:	cisco	model:	cisco identity services engine
vendor:	cisco	model:	identity services engine

db:

NVD

ids:

CVE-2023-20166, CVE-2023-20167

SAP Patches Critical Vulnerabilities in Diagnostics Agent, BusinessObjects - SecurityWeek Related entries in the VARIoT vulnerabilities database: VAR-202304-0875 Trust: 3.0 Fetched: May 21, 2023, 9:11 a.m., Published: April 12, 2023, 11:38 a.m.	Vulnerabilities: directory traversal, improper access control, information disclosure...

Affected products

External IDs

db:

NVD

ids:

CVE-2023-27497, CVE-2023-29186, CVE-2023-28765, CVE-2023-27267

VARIoT news about IoT security