Sign-up

VARIoT news about IoT security

About the security content of iOS 16.2 and iPadOS 16.2 - Apple Support

Related entries in the VARIoT vulnerabilities database: VAR-202212-1411, VAR-202212-1440, VAR-202212-1466, VAR-202302-1859, VAR-202212-1531, VAR-202212-1523, VAR-202212-1306, VAR-202212-1387, VAR-202212-1533, VAR-202212-1297, VAR-202212-1489, VAR-202212-1560, VAR-202212-1685, VAR-202212-1308, VAR-202212-1532, VAR-202212-1213, VAR-202212-1332, VAR-202212-1559, VAR-202212-1412, VAR-202212-1442, VAR-202212-1516, VAR-202212-1221, VAR-202212-1410, VAR-202212-1325, VAR-202212-1619, VAR-202212-1592, VAR-202212-1530, VAR-202212-1503, VAR-202212-1331, VAR-202212-1751, VAR-202212-1309, VAR-202212-1248, VAR-202212-1488, VAR-202212-1216, VAR-202212-1324, VAR-202212-1441, VAR-202212-1310

Trust: 5.25

Fetched: April 5, 2023, 9:16 a.m., Published: April 16, 2023, midnight
 Vulnerabilities: code execution, integer overflow, memory corruption...
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: safari
vendor: apple model: itunes
vendor: apple model: watch
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2022-42867, CVE-2022-42846, CVE-2022-46698, CVE-2022-46705, CVE-2022-42855, CVE-2022-42852, CVE-2022-42850, CVE-2022-32943, CVE-2022-46700, CVE-2022-42844, CVE-2022-46696, CVE-2022-46689, CVE-2022-46716, CVE-2022-46694, CVE-2022-42862, CVE-2022-46691, CVE-2022-46703, CVE-2022-42837, CVE-2022-46692, CVE-2022-42864, CVE-2022-46699, CVE-2022-46690, CVE-2022-42865, CVE-2022-42849, CVE-2022-46717, CVE-2022-42859, CVE-2022-42842, CVE-2022-46702, CVE-2022-42843, CVE-2022-42848, CVE-2022-42863, CVE-2022-42861, CVE-2022-42856, CVE-2022-46695, CVE-2022-42851, CVE-2022-46693, CVE-2022-42845, CVE-2022-42840, CVE-2022-42866, CVE-2022-46720, CVE-2022-46701

Nexx Smart Home Device Vulnerabilities Allow Unauthorized Access

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.0

Fetched: April 5, 2023, 9:14 a.m., Published: April 5, 2023, 7:13 a.m.
 Vulnerabilities: input validation vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2023-1750, CVE-2023-1749, CVE-2023-1752, CVE-2022-42475, CVE-2023-1751, CVE-2023-1748

Cisco Access Point Software Denial of Service Vulnerability

Trust: 5.0

Fetched: April 5, 2023, 9:14 a.m., Published: March 22, 2023, 3:49 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: mobility express
vendor: cisco model: series wireless controller
vendor: cisco model: wireless controller
vendor: cisco model: wireless lan controller
vendor: cisco model: catalyst
vendor: cisco model: series
vendor: cisco model: catalyst 9800

Nexx Smart Home Device | CISA

Trust: 3.75

Fetched: April 5, 2023, 9:13 a.m., Published: March 9, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-1750, CVE-2023-1749, CVE-2023-1752, CVE-2023-1751, CVE-2023-1748

Cisco IOS XE Software Privilege Escalation Vulnerability

Trust: 4.0

Fetched: April 5, 2023, 9:12 a.m., Published: March 24, 2023, 7:59 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Vulnerability Alert: How a Benchmark Test Uncovered Vulnerabilities in Over 80,000 QNAP Devices - Global Security Mag Online

Trust: 3.75

Fetched: April 5, 2023, 9:11 a.m., Published: April 4, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-27598, CVE-2022-27597

Why medical device vulnerabilities are hard to prioritize | TechTarget

Trust: 4.75

Fetched: April 5, 2023, 9:10 a.m., Published: Sept. 5, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-27410

Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices

Trust: 3.25

Fetched: April 2, 2023, 9:21 a.m., Published: March 29, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

OESIS Framework March 28, 2023 Release - OPSWAT

Related entries in the VARIoT vulnerabilities database: VAR-201902-0445, VAR-201803-2160

Trust: 3.75

Fetched: April 2, 2023, 9:20 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: webex
vendor: cisco model: webex
db: NVD ids: CVE-2023-22883, CVE-2023-1530, CVE-2023-1534, CVE-2023-24578, CVE-2023-25738, CVE-2019-1798, CVE-2023-25737, CVE-2023-25745, CVE-2023-25733, CVE-2023-25729, CVE-2019-1677, CVE-2023-25741, CVE-2023-1532, CVE-2023-25743, CVE-2023-25734, CVE-2023-1531, CVE-2019-11068, CVE-2023-1529, CVE-2023-25735, CVE-2018-4844, CVE-2023-25740, CVE-2023-0767, CVE-2023-25134, CVE-2023-25744, CVE-2023-24577, CVE-2019-16168, CVE-2023-28155, CVE-2023-25731, CVE-2023-25732, CVE-2023-25736, CVE-2023-25739, CVE-2023-25742, CVE-2023-1533, CVE-2023-1528, CVE-2023-25730, CVE-2023-25728, CVE-2019-12383, CVE-2023-24579, CVE-2022-42331

The Hacker News on Twitter: "🚨 #Google's TAG reveals commercial spyware vendors exploited zero-day vulnerabilities on #Android & iOS devices last year. Learn more: https://t.co/35jrXhzEjU These highly targeted campaigns put dissidents, journalists, & human rights workers at risk. #infosec #cybersecurity" / Twitter

Trust: 3.25

Fetched: April 2, 2023, 9:20 a.m., Published: April 2, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Most Weaponized Vulnerabilities of 2022 and 5 Key Risks: Report - Security news - NewsLocker

Trust: 4.75

Fetched: April 2, 2023, 9:19 a.m., Published: April 2, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: essential model: phone
vendor: apple model: iphone
vendor: apple model: apple ipad
vendor: apple model: ipad
vendor: apple model: watch
vendor: oneplus model: one
vendor: motorola model: motorola
vendor: google model: pixel
vendor: google model: home

CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog - SecOperations

Related entries in the VARIoT vulnerabilities database: VAR-202108-2051

Trust: 4.5

Fetched: April 2, 2023, 9:18 a.m., Published: April 1, 2023, 9:36 p.m.
 Vulnerabilities: cross-site scripting, code execution, memory corruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: android
vendor: apple model: macos
db: NVD ids: CVE-2021-30900, CVE-2013-3163, CVE-2023-0266, CVE-2022-42948, CVE-2022-22706, CVE-2017-7494, CVE-2022-39197, CVE-2022-38181, CVE-2022-3038

20 Security Vulnerabilities and Prevention Tips - Sapphire

Trust: 4.75

Fetched: April 2, 2023, 9:15 a.m., Published: March 28, 2023, 2:09 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: delegate model: delegate

Update your Windows now to avoid the Acropalypse vulnerability | Fox News

Trust: 3.5

Fetched: April 2, 2023, 9:14 a.m., Published: May 2, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-28303

Weakness at the Network Edge: Mandiant Examines 2022's Zero-Day Exploits | eSecurityPlanet

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132, VAR-202205-1958, VAR-202205-1370, VAR-202207-0874

Trust: 4.5

Fetched: April 2, 2023, 9:12 a.m., Published: March 25, 2023, 5:56 p.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
vendor: fortigate model: fortios
vendor: google model: google chrome
vendor: google model: chrome
vendor: trend model: security
db: NVD ids: CVE-2022-42475, CVE-2022-30190, CVE-2022-2294, CVE-2022-22047, CVE-2022-41328, CVE-2022-26485

Google - these serious security threats are targeting both Android and iOS devices | TechRadar

Related entries in the VARIoT vulnerabilities database: VAR-202108-2051, VAR-202212-1751

Trust: 3.75

Fetched: April 2, 2023, 9:11 a.m., Published: March 30, 2023, 1:10 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: google model: chrome
vendor: samsung model: mobile
vendor: xiaomi model: browser
db: NVD ids: CVE-2021-30900, CVE-2023-0266, CVE-2022-4262, CVE-2022-22706, CVE-2022-4135, CVE-2022-38181, CVE-2022-3723, CVE-2022-42856, CVE-2022-3038

Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability

Trust: 4.0

Fetched: April 2, 2023, 9:10 a.m., Published: March 22, 2023, 3:49 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
vendor: cisco model: iox application
vendor: cisco model: ios xe
vendor: cisco model: ios xe software

Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

Trust: 4.0

Fetched: April 2, 2023, 9:10 a.m., Published: March 22, 2023, 3:49 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: fxos
vendor: cisco model: firepower management center
vendor: cisco model: nx-os
vendor: cisco model: ios xr
vendor: cisco model: intrusion prevention system
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: ios xe
vendor: cisco model: nx-os software
vendor: cisco model: ios xe software
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower threat defense
vendor: cisco model: ios xr software
vendor: cisco model: firepower

Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices - 443News

Related entries in the VARIoT vulnerabilities database: VAR-202212-1751, VAR-202108-2051

Trust: 4.75

Fetched: March 31, 2023, 9:11 a.m., Published: March 9, 2023, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome
vendor: samsung model: note
db: NVD ids: CVE-2022-3038, CVE-2022-4135, CVE-2022-42856, CVE-2022-3723, CVE-2023-26083, CVE-2022-22706, CVE-2022-38181, CVE-2023-0266, CVE-2022-4262, CVE-2021-30900

PSA: Make Sure to Update Older Devices to iOS 15.7.4 to Fix Actively Exploited Vulnerability - Software Curated

Trust: 3.0

Fetched: March 31, 2023, 9:11 a.m., Published: March 27, 2023, 9:19 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: ipad