Sign-up

VARIoT news about IoT security

CISA issues four ICS advisories highlighting hardware vulnerabilities in critical infrastructure equipment - Industrial Cyber

Trust: 4.5

Fetched: Oct. 30, 2024, 9:34 a.m., Published: Oct. 28, 2024, 9:59 a.m.
 Vulnerabilities: improper access control, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-6981, CVE-2024-5947, CVE-2024-10313, CVE-2024-9692

Considerations and Safeguards Addressing Potential Vulnerabilities in Connected Medical Devices and the Internet of Things (IoT) | Healthcare IT Today

Trust: 3.75

Fetched: Oct. 30, 2024, 9:32 a.m., Published: Oct. 28, 2024, 8:26 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs

Delta Electronics InfraSuite Device Master | CISA

Trust: 4.75

Fetched: Oct. 30, 2024, 9:31 a.m., Published: Oct. 30, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2024-10456

Mitigating CVE-2024-41999: Debug Code Vulnerability in Smart-tab Android App

Trust: 3.0

Fetched: Oct. 30, 2024, 9:31 a.m., Published: Sept. 30, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-41999

Critical Command Injection Vulnerability in D-Link Devices (CVE-2024-8213) | SecurityVulnerability.io - SecuirtyVulnerability.io

Related entries in the VARIoT vulnerabilities database: VAR-202408-2337

Trust: 6.0

Fetched: Oct. 30, 2024, 9:30 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: d-link model: dns-323
vendor: d-link model: dnr-322l
vendor: d-link model: dns-327l
vendor: d-link model: dns-325
vendor: d-link model: dns-320l
vendor: d-link model: dns-320
vendor: d-link model: dns-340l
vendor: d-link model: dnr-326
vendor: d-link model: dns-345
vendor: d-link model: dns-320lw
db: NVD ids: CVE-2024-8213

About the security content of macOS Sonoma 14.7.1 - Apple Support

Trust: 4.25

Fetched: Oct. 30, 2024, 9:29 a.m., Published: July 14, 2001, midnight
 Vulnerabilities: information disclosure, buffer overflow, bounds access issue...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
vendor: apple model: macos
db: NVD ids: CVE-2024-44218, CVE-2024-44215, CVE-2024-44278, CVE-2024-44137, CVE-2024-44156, CVE-2024-44297, CVE-2024-44270, CVE-2024-44260, CVE-2024-44213, CVE-2024-44247, CVE-2024-44253, CVE-2024-44256, CVE-2024-44240, CVE-2024-44279, CVE-2024-44197, CVE-2024-44275, CVE-2024-44216, CVE-2024-44175, CVE-2024-44159, CVE-2024-44236, CVE-2024-44295, CVE-2024-44301, CVE-2024-44267, CVE-2024-44283, CVE-2024-44122, CVE-2024-40855, CVE-2024-44302, CVE-2024-44144, CVE-2024-44222, CVE-2024-44294, CVE-2024-44284, CVE-2024-44281, CVE-2024-44273, CVE-2024-44239, CVE-2024-44287, CVE-2024-44257, CVE-2024-44269, CVE-2024-44255, CVE-2024-44280, CVE-2024-44289, CVE-2024-44282, CVE-2024-44264, CVE-2024-44254, CVE-2024-44265, CVE-2024-44237, CVE-2024-44196

ShadyShader: Crashing Apple Devices with a Single Click - vulnerability database | Vulners.com

Trust: 5.25

Fetched: Oct. 30, 2024, 9:28 a.m., Published: Oct. 22, 2024, 1 p.m.
 Vulnerabilities: kernel panic, system crash, resource exhaustion
Affected productsExternal IDs
vendor: google model: pixel
vendor: apple model: safari
vendor: apple model: macos
db: NVD ids: CVE-2023-40441

Improper Privilege Management Vulnerability Affects ZTE Networking Devices (CVE-2024-22068) | SecurityVulnerability.io - SecuirtyVulnerability.io

Related entries in the VARIoT vulnerabilities database: VAR-202410-1229

Trust: 3.25

Fetched: Oct. 30, 2024, 9:27 a.m., Published: -
 Vulnerabilities: privilege management vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2024-22068

Apple Vision Pro Vulnerabilities Addressed In VisionOS 2.1

Trust: 4.25

Fetched: Oct. 30, 2024, 9:27 a.m., Published: Oct. 29, 2024, 6:08 a.m.
 Vulnerabilities: information disclosure, memory corruption
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
vendor: apple model: safari
vendor: apple model: webkit
db: NVD ids: CVE-2024-44262, CVE-2024-44229, CVE-2024-44285, CVE-2024-44244, CVE-2024-44240, CVE-2024-44215, CVE-2024-44278, CVE-2024-44255, CVE-2024-44296, CVE-2024-44282, CVE-2024-44239, CVE-2024-44273, CVE-2024-44259

Understanding and Mitigating CVE-2024-20083: MediaTek Devices Out-of-Bounds Write Vulnerability

Trust: 3.0

Fetched: Oct. 30, 2024, 9:26 a.m., Published: Oct. 12, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-20083

CVE-2024-34617: Vulnerability in Samsung Mobile Devices and Mitigation Strategies

Trust: 3.75

Fetched: Oct. 30, 2024, 9:20 a.m., Published: Aug. 7, 2024, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: samsung mobile
vendor: samsung model: mobile devices
db: NVD ids: CVE-2024-34617

Xerox Printers Vulnerability Let Attackers Remotely Takeover Devices

Trust: 5.0

Fetched: Oct. 30, 2024, 9:19 a.m., Published: Oct. 23, 2024, 4:45 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: xerox model: altalink c8030
vendor: xerox model: altalink b8045
vendor: xerox model: workcentre
db: NVD ids: CVE-2024-6333

Solar-Log Base 15 | CISA

Trust: 5.0

Fetched: Oct. 30, 2024, 9:19 a.m., Published: Oct. 15, 2024, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2023-46344

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

Related entries in the VARIoT vulnerabilities database: VAR-201801-0826

Trust: 3.75

Fetched: Oct. 30, 2024, 9:16 a.m., Published: Oct. 29, 2024, 5:53 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dram model: dram
db: NVD ids: CVE-2023-38575, CVE-2017-5715, CVE-2022-23824

How Insecure Network Devices Can Expose Data Centers to Attack

Trust: 3.75

Fetched: Oct. 29, 2024, 9:39 a.m., Published: Oct. 5, 2024, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: nx-os
vendor: cisco model: meeting
vendor: cisco model: router

Wi-Fi Alliance test suite has a worrying security flaw | TechRadar

Trust: 3.75

Fetched: Oct. 29, 2024, 9:39 a.m., Published: Oct. 28, 2024, 5:46 p.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs

Revealing the Risks: Key Takeaways from Pwn2Own Ireland 2024 on Home and Office Device Security - NAS Compares

Trust: 5.0

Fetched: Oct. 29, 2024, 9:38 a.m., Published: Oct. 29, 2024, midnight
 Vulnerabilities: memory corruption, authentication bypass, command injection...
Affected productsExternal IDs
vendor: sonos model: sonos
vendor: lexmark model: lexmark
vendor: lexmark model: printer
vendor: lexmark model: lexmark printer
vendor: samsung model: samsung
vendor: samsung model: printers
vendor: samsung model: note
vendor: samsung model: samsung galaxy
vendor: samsung model: printer
vendor: samsung model: mobile
vendor: samsung model: galaxy
vendor: samsung model: mobile phones
vendor: synology model: drive
vendor: synology model: diskstation

Samsung phone users exposed to EoP attacks, Google warns • The Register

Trust: 3.75

Fetched: Oct. 29, 2024, 9:37 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: exynos
vendor: samsung model: mobile
vendor: samsung model: mobile devices
vendor: samsung model: note
vendor: samsung model: samsung
db: NVD ids: CVE-2024-44068

Hacking Smart Buildings. If you are in IT, you are probably not… | by Robert Vamosi | Oct, 2024 | Medium

Trust: 4.25

Fetched: Oct. 29, 2024, 9:30 a.m., Published: Oct. 29, 2024, midnight
 Vulnerabilities: buffer overflow, denial of service, default password...
Affected productsExternal IDs
vendor: cisco model: netscaler gateway
vendor: cisco model: router
vendor: samsung model: samsung
vendor: samsung model: notes
vendor: samsung model: mobile
vendor: google model: home
vendor: essential model: phone
vendor: sophos model: mobile
vendor: trend model: internet security
vendor: trend model: security
vendor: citrix model: gateway
vendor: citrix model: netscaler
vendor: citrix model: netscaler gateway

Vulnerability Recap 10/28/24: Cisco, Fortinet, VMware

Trust: 5.25

Fetched: Oct. 29, 2024, 9:29 a.m., Published: Oct. 28, 2024, 9:51 p.m.
 Vulnerabilities: denial of service, command injection, resource exhaustion...
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
vendor: cisco model: cisco adaptive security appliance
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: samsung model: exynos
vendor: samsung model: samsung mobile
db: NVD ids: CVE-2024-20481, CVE-2024-44068, CVE-2024-47575, CVE-2024-38094, CVE-2024-38813, CVE-2024-38812