Sign-up

VARIoT news about IoT security

Siemens RADIUS Client of SIPROTEC 5 Devices | CISA

Trust: 3.5

Fetched: March 22, 2023, 9:16 a.m., Published: March 5, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: siprotec
vendor: siemens model: siprotec 5
vendor: siemens model: cp300
db: NVD ids: CVE-2022-38767

Cisco Releases Security Advisory for Cisco IP Phones | CISA

Trust: 3.0

Fetched: March 22, 2023, 9:16 a.m., Published: March 22, 8800, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phones
vendor: cisco model: series

Delta Electronics InfraSuite Device Master | CISA

Trust: 5.25

Fetched: March 22, 2023, 9:15 a.m., Published: March 9, 2023, midnight
 Vulnerabilities: command injection, access control vulnerability, path traversal...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2023-1140, CVE-2023-1138, CVE-2023-1139, CVE-2023-1133, CVE-2023-1141, CVE-2023-1137, CVE-2023-1143, CVE-2023-1144, CVE-2023-1134, CVE-2023-1145, CVE-2023-1136, CVE-2023-1135, CVE-2023-1142

How to keep your phone safe from the scary Exynos modem vulnerability

Trust: 5.5

Fetched: March 22, 2023, 9:15 a.m., Published: March 21, 2023, 6:57 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: samsung model: notes
vendor: samsung model: galaxy
vendor: samsung model: mobile
vendor: samsung model: android phone
vendor: samsung model: exynos
vendor: samsung model: samsung galaxy
vendor: vivo model: modem
vendor: vivo model: modems
db: NVD ids: CVE-2023-26498, CVE-2023-24033, CVE-2023-26496, CVE-2023-26497

MS-ISAC Advisory: A vulnerability has been discovered in Clam AntiVirus | RegSource

Trust: 3.75

Fetched: March 21, 2023, 9:20 a.m., Published: March 20, 2023, 5:04 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: clamav model: clamav
vendor: clam model: clamav
vendor: cisco model: advanced malware protection
vendor: cisco model: web security appliance
vendor: cisco model: guard
vendor: cisco model: clamav

Several zero day vulnerabilities are plaguing Android devices with Samsung chips, warns Google | PC Help Forum

Trust: 4.75

Fetched: March 21, 2023, 9:19 a.m., Published: Feb. 26, 2000, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: exynos
vendor: samsung model: mobile
vendor: vivo model: modems
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-24033

Vulnerabilities found in Samsung's Exynos modems can lead to loss of control over smartphone: On which devices are they used? | NEWS.am TECH - Innovations and science

Trust: 3.75

Fetched: March 21, 2023, 9:19 a.m., Published: March 18, 2023, 12:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: samsung model: galaxy
vendor: samsung model: exynos
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile
vendor: vivo model: modem
vendor: vivo model: modems
db: NVD ids: CVE-2023-24033

Critical RCE Vulnerability Discovered in ClamAV Open Source Antivirus Software - SPIXNET C2S

Related entries in the VARIoT vulnerabilities database: VAR-202302-1614, VAR-202302-1598, VAR-202302-1452

Trust: 5.5

Fetched: March 21, 2023, 9:18 a.m., Published: Feb. 21, 2023, 11:40 a.m.
 Vulnerabilities: buffer overflow, information leak, entity injection...
Affected productsExternal IDs
vendor: clamav model: clamav
vendor: cisco model: advanced malware protection
vendor: cisco model: web security appliance
vendor: cisco model: clamav
vendor: cisco model: management appliance
vendor: cisco model: nexus
vendor: cisco model: email security appliance
vendor: google model: nexus
db: NVD ids: CVE-2023-20075, CVE-2023-20052, CVE-2023-20009, CVE-2023-20032, CVE-2023-20014

Google Uncovers 18 Zero-Day Vulnerabilities in Samsung’s Exynos Chipsets

Trust: 5.75

Fetched: March 21, 2023, 9:18 a.m., Published: March 18, 2023, 11:47 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: note
vendor: samsung model: mobile
vendor: samsung model: samsung galaxy
vendor: samsung model: exynos
vendor: google model: wifi
vendor: google model: pixel
db: NVD ids: CVE-2023-26072, CVE-2023-26075, CVE-2023-24033, CVE-2023-26074, CVE-2023-26073

Google Warning! Samsung Galaxy, Pixel Phones Critical Vulnerabilities Allows Full Device Hack Using Just The Phone Number

Trust: 3.75

Fetched: March 21, 2023, 9:18 a.m., Published: March 21, 2023, 6:40 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
vendor: samsung model: galaxy
vendor: samsung model: exynos
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile
db: NVD ids: CVE-2023-26076, CVE-2023-26072, CVE-2023-26075, CVE-2023-26074, CVE-2023-26073

BREAKING NEWS: 18 Zero-Day Bugs Found in Samsung's Exynos Chipsets, Impacting Millions of Devices

Trust: 4.75

Fetched: March 21, 2023, 9:17 a.m., Published: March 20, 2023, 12:42 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: exynos
vendor: google model: pixel
db: NVD ids: CVE-2023-24033

Serious security vulnerabilities in many smartphones and car computers. This is a list of infected devices - Teller Report

Trust: 3.5

Fetched: March 21, 2023, 9:15 a.m., Published: March 19, 2023, 5:09 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: exynos
vendor: samsung model: samsung galaxy
vendor: vivo model: modem
vendor: vivo model: modems
vendor: google model: pixel

Google’s bug bounty team detects 18 zero-day vulnerabilities in Samsung’s Exynos chipset - The Hindu

Trust: 4.75

Fetched: March 21, 2023, 9:14 a.m., Published: March 20, 2023, 8:31 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: exynos
vendor: vivo model: modem
vendor: google model: pixel

Unpatched Samsung Chipset Vulnerabilities Open Android Users to RCE Attacks

Trust: 5.5

Fetched: March 21, 2023, 9:14 a.m., Published: March 20, 2023, 8 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: mobile devices
vendor: samsung model: galaxy
vendor: samsung model: exynos
vendor: samsung model: notes
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-26498, CVE-2023-24033, CVE-2023-26497, CVE-2023-26496

Multiple vulnerabilities in Siemens SCALANCE W1750D Devices

Related entries in the VARIoT vulnerabilities database: VAR-202302-0195, VAR-202302-0482

Trust: 5.25

Fetched: March 21, 2023, 9:13 a.m., Published: March 15, 2023, midnight
 Vulnerabilities: denial of service, use after free, information exposure
Affected productsExternal IDs
vendor: siemens model: scalance w1750d
vendor: siemens model: w1750d
vendor: siemens model: scalance
db: NVD ids: CVE-2022-4450, CVE-2023-0215, CVE-2022-4304, CVE-2023-0286

Cyberattackers Continue Assault Against Fortinet Devices

Trust: 3.75

Fetched: March 21, 2023, 9:13 a.m., Published: March 15, 2023, 8:53 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2023-25610, CVE-2022-41328

Disclosure: Supervisor security vulnerability - Home Assistant

Related entries in the VARIoT vulnerabilities database: VAR-202303-0543

Trust: 3.25

Fetched: March 21, 2023, 9:12 a.m., Published: March 8, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-27482

Companies urged to patch critical vulnerability in Fortinet FortiNAC | CSO Online

Related entries in the VARIoT vulnerabilities database: VAR-202302-1271

Trust: 4.75

Fetched: March 21, 2023, 9:11 a.m., Published: Feb. 23, 2023, 9:20 p.m.
 Vulnerabilities: path traversal, code execution, command execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-39952

'New Class of Bugs' in Apple Devices Opens the Door to Complete Takeover

Related entries in the VARIoT vulnerabilities database: VAR-202302-2045, VAR-202302-2240

Trust: 3.5

Fetched: March 21, 2023, 9:10 a.m., Published: Feb. 24, 2023, 7:41 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2023-23530, CVE-2023-23531

Google warns users about 18 vulnerabilities in Samsung Exynos chipsets: Here’s the list of affected devices - Buopso News

Trust: 4.75

Fetched: March 19, 2023, 9:21 a.m., Published: March 17, 2023, 12:25 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: exynos
vendor: samsung model: mobile
vendor: samsung model: mobile devices
vendor: google model: android
vendor: google model: pixel