Sign-up

VARIoT news about IoT security

Cisco Nexus Dashboard Cross-Site Scripting Vulnerability

Trust: 5.25

Fetched: March 14, 2023, 9:19 a.m., Published: Feb. 15, 2023, 3:53 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: nexus

Unpatched Zero-Day Bugs in Smart Intercom Allow Eavesdropping

Trust: 5.0

Fetched: March 14, 2023, 9:18 a.m., Published: March 10, 2023, 6:36 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-0354, CVE-2023-0348

Remote Code Execution and Camera Access Flaws Found in Smart Intercoms - Infosecurity Magazine

Trust: 3.75

Fetched: March 14, 2023, 9:18 a.m., Published: March 13, 2023, 5:30 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-0354, CVE-2023-0348, CVE-2023-0351

Electronics | Free Full-Text | Analysis of Consumer IoT Device Vulnerability Quantification Frameworks

Trust: 4.0

Fetched: March 14, 2023, 9:14 a.m., Published: Jan. 14, 2023, midnight
 Vulnerabilities: code execution, code injection, data injection...
Affected productsExternal IDs
vendor: google model: home
vendor: google model: android
vendor: google model: google home
vendor: trend model: security
vendor: belkin model: router
vendor: tp-link model: routers
vendor: tp-link model: gateway
vendor: symantec model: system works

Smart device vulnerabilities and securing against them | Kaspersky official blog

Trust: 4.25

Fetched: March 14, 2023, 9:14 a.m., Published: Jan. 14, 2050, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
vendor: century model: router
vendor: apple model: watch

Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability - Cisco

Trust: 4.0

Fetched: March 12, 2023, 9:22 a.m., Published: March 8, 2023, 2:29 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: series
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios xr
vendor: cisco model: ios xr
vendor: cisco model: cisco ios
vendor: cisco model: series routers
vendor: cisco model: routers

The Cyber Security Hub™ på LinkedIn: Unpatched Akuvox Smart Intercom Vulnerabilities Can Be Exploited for Spying

Trust: 3.0

Fetched: March 12, 2023, 9:22 a.m., Published: March 2, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hub model: hub

The Cyber Security Hub™ on LinkedIn: Unpatched Akuvox Smart Intercom Vulnerabilities Can Be Exploited for Spying

Trust: 3.0

Fetched: March 12, 2023, 9:21 a.m., Published: March 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hub model: hub

The Cyber Security Hub™ en LinkedIn: Unpatched Akuvox Smart Intercom Vulnerabilities Can Be Exploited for Spying

Trust: 3.0

Fetched: March 12, 2023, 9:21 a.m., Published: March 1, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hub model: hub

Proof-of-concept for critical Microsoft Word vulnerability published | Black Hat Ethical Hacking

Trust: 3.75

Fetched: March 12, 2023, 9:20 a.m., Published: March 7, 2023, 8:54 a.m.
 Vulnerabilities: heap corruption, code execution, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2023-21716

[no-title]

Trust: 5.0

Fetched: March 12, 2023, 9:19 a.m., Published: Feb. 16, 2023, 8:42 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: draytek model: vigor
db: NVD ids: CVE-2022-46169

Security Researchers Delve Into Major Vulnerability Patched in iOS 16.

Related entries in the VARIoT vulnerabilities database: VAR-202302-2045, VAR-202302-2240

Trust: 4.75

Fetched: March 12, 2023, 9:18 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2023-23530, CVE-2023-23531

Suspected Chinese cyber spies target unpatched SonicWall devices | Vumetric Cyber Portal

Related entries in the VARIoT vulnerabilities database: VAR-202102-0898, VAR-201912-0828, VAR-201912-0830

Trust: 3.75

Fetched: March 12, 2023, 9:16 a.m., Published: March 12, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: sma 100
vendor: sonicwall model: secure mobile access
db: NVD ids: CVE-2021-20016, CVE-2019-7481, CVE-2019-7483, CVE-2021-20028

Critical vulnerabilities in Android 11, 12 and 13 - B2B Cyber ​​Security

Trust: 4.75

Fetched: March 12, 2023, 9:16 a.m., Published: March 11, 2023, 7:19 a.m.
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-20906, CVE-2023-20963, CVE-2023-20911, CVE-2023-20956, CVE-2023-20958, CVE-2023-20964, CVE-2023-20947, CVE-2023-20917, CVE-2023-20951, CVE-2023-20954

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution

Trust: 5.25

Fetched: March 12, 2023, 9:14 a.m., Published: March 8, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android

5 Best SMB Vulnerability Scanners for 2023 | eSecurity Planet

Trust: 4.5

Fetched: March 12, 2023, 9:14 a.m., Published: March 9, 2023, 4:56 p.m.
 Vulnerabilities: cross-site scripting, sql injection, default credentials
Affected productsExternal IDs
vendor: zoom model: client

Patch Tuesday - February 2023 | Noise

Related entries in the VARIoT vulnerabilities database: VAR-202302-1035, VAR-202002-0458

Trust: 3.75

Fetched: March 12, 2023, 9:13 a.m., Published: March 14, 2023, midnight
 Vulnerabilities: denial of service, code execution, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2023-23382, CVE-2023-21687, CVE-2023-23378, CVE-2023-21699, CVE-2023-21707, CVE-2023-21573, CVE-2023-21808, CVE-2023-21706, CVE-2023-21713, CVE-2023-21693, CVE-2023-23379, CVE-2023-23390, CVE-2023-21691, CVE-2023-21710, CVE-2023-21721, CVE-2023-21528, CVE-2023-21722, CVE-2023-21690, CVE-2023-21801, CVE-2023-21818, CVE-2023-21703, CVE-2023-21804, CVE-2023-21811, CVE-2023-21815, CVE-2023-21816, CVE-2023-21717, CVE-2023-21684, CVE-2023-21819, CVE-2023-21571, CVE-2023-21695, CVE-2023-21777, CVE-2023-21702, CVE-2023-23374, CVE-2023-21807, CVE-2023-21803, CVE-2023-21809, CVE-2023-21566, CVE-2023-21718, CVE-2023-21715, CVE-2023-21564, CVE-2023-21799, CVE-2023-21716, CVE-2023-21572, CVE-2023-23377, CVE-2019-15126, CVE-2023-21797, CVE-2023-21813, CVE-2023-21812, CVE-2023-21568, CVE-2023-23376, CVE-2023-21692, CVE-2023-21800, CVE-2023-21806, CVE-2023-21701, CVE-2023-21689, CVE-2023-21705, CVE-2023-21714, CVE-2023-21778, CVE-2023-21686, CVE-2023-21805, CVE-2023-21720, CVE-2023-21794, CVE-2023-21820, CVE-2023-21567, CVE-2023-21694, CVE-2023-21570, CVE-2023-21685, CVE-2023-21817, CVE-2023-21704, CVE-2023-21529, CVE-2023-23381, CVE-2023-21553, CVE-2023-21823, CVE-2023-21697, CVE-2023-21802, CVE-2023-21688, CVE-2023-21822, CVE-2023-21798, CVE-2023-21700

Chinese cyberspies target unpatched SonicWall gear • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202102-0898, VAR-201912-0828, VAR-201912-0830

Trust: 3.5

Fetched: March 12, 2023, 9:12 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: email security
vendor: sonicwall model: sma 100
vendor: sonicwall model: secure mobile access
db: NVD ids: CVE-2021-20016, CVE-2019-7481, CVE-2019-7483, CVE-2021-20028

How To Fix CVE-2021-22045- Heap Overflow Vulnerability In VMWare Products? - The Sec Master

Trust: 4.25

Fetched: March 12, 2023, 9:12 a.m., Published: Jan. 11, 2022, 9 a.m.
 Vulnerabilities: improper validation
Affected productsExternal IDs
db: NVD ids: CVE-2021-22045, CVE-2021-220457

Three security vulnerabilities to be aware of in printing devices

Trust: 3.0

Fetched: March 12, 2023, 9:11 a.m., Published: Feb. 20, 2023, 8:18 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs