Sign-up

VARIoT news about IoT security

Smart Door Phone Vulnerabilities Leave Privacy Ajar - CCTV Buyers Guide and News

Trust: 5.75

Fetched: March 10, 2023, 9:30 a.m., Published: March 10, 2023, 4:05 a.m.
 Vulnerabilities: command injection, default password, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-0348, CVE-2023-0351, CVE-2023-0354

Fortinet Buffer Underwrite Vulnerability Audit - Lansweeper

Trust: 3.0

Fetched: March 10, 2023, 9:29 a.m., Published: March 9, 2023, 2:36 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Best Practices for Thwarting Medical Device Cyberattacks | 24x7

Trust: 3.5

Fetched: March 10, 2023, 9:28 a.m., Published: March 7, 2023, 3:58 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Apple issues emergency security updates for all of its platforms - update your iPhone, iPad and Mac Now

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097

Trust: 4.0

Fetched: March 10, 2023, 9:27 a.m., Published: Feb. 14, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: imac
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macbook
db: NVD ids: CVE-2023-23529

New Apple Vulnerabilities Identified: Top Takeaways from Recent Discovery - Zimperium

Trust: 4.5

Fetched: March 10, 2023, 9:27 a.m., Published: March 9, 2023, 6:50 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macos

10 Most Common Types of Cyber Attacks Today | CrowdStrike

Trust: 3.25

Fetched: March 10, 2023, 9:26 a.m., Published: March 8, 2023, 5:22 p.m.
 Vulnerabilities: brute force attack, code injection, denial of service...
Affected productsExternal IDs
vendor: nokia model: series
vendor: nokia model: impact
vendor: essential model: phone

Apple fixes new WebKit zero-day exploited to hack iPhones, Macs

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097, VAR-202302-1169

Trust: 5.5

Fetched: March 10, 2023, 9:25 a.m., Published: -
 Vulnerabilities: use after free, code execution
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2023-23529, CVE-2023-23514

3 Types of Vulnerability Scanners Explained | Datamation

Trust: 4.25

Fetched: March 10, 2023, 9:25 a.m., Published: March 8, 2023, 9:20 p.m.
 Vulnerabilities: command injection, cross-site scripting
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus
vendor: google model: home

5 Reasons You Should Care About Unmanaged Assets

Trust: 3.75

Fetched: March 10, 2023, 9:24 a.m., Published: March 23, 2023, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Recent Data Breaches - 2023

Trust: 3.5

Fetched: March 10, 2023, 9:23 a.m., Published: March 9, 2023, 11:08 p.m.
 Vulnerabilities: session hijacking
Affected productsExternal IDs
vendor: samsung model: note
vendor: samsung model: mobile
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: macos

Android Update Fixes Critical Vulnerabilities | SecureTeam

Related entries in the VARIoT vulnerabilities database: VAR-202303-0155

Trust: 4.75

Fetched: March 10, 2023, 9:23 a.m., Published: March 8, 2023, 12:25 p.m.
 Vulnerabilities: buffer overflow, memory corruption, improper validation...
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-20954, CVE-2023-20951, CVE-2022-33256, CVE-2022-33213

Top 10 Cybersecurity Threats in 2023 | Embroker

Trust: 3.75

Fetched: March 10, 2023, 9:22 a.m., Published: Jan. 26, 2022, 3:10 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point

BitSight identifies thousands of organizations using Internet-facing and exposed webcams | BitSight

Trust: 3.75

Fetched: March 10, 2023, 9:22 a.m., Published: March 9, 2023, midnight
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2022-34150

Android Critical Vulnerabilities CVE-2023-20951 and CVE-2023-20954: Description, Impact, Vulnerable Devices, and Mitigation

Trust: 5.0

Fetched: March 10, 2023, 9:21 a.m., Published: March 3, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-20954, CVE-2023-20951

Fortinet plugs critical RCE hole in FortiOS, FortiProxy (CVE-2023-25610) - Help Net Security

Trust: 5.25

Fetched: March 10, 2023, 9:21 a.m., Published: March 9, 2023, 11:11 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2023-25610

Vulnerability scanner for Linux | Intruder

Related entries in the VARIoT vulnerabilities database: VAR-202203-0043, VAR-202101-1926

Trust: 4.5

Fetched: March 10, 2023, 9:20 a.m., Published: May 10, 2023, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: antivirus
db: NVD ids: CVE-2022-0847, CVE-2021-41073, CVE-2021-3156

Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability

Trust: 5.0

Fetched: March 10, 2023, 9:19 a.m., Published: March 8, 2023, 3:32 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios xr
vendor: cisco model: ios xr

Akuvox Smart Intercom Vulnerabilities Leave Privacy Ajar | Claroty

Trust: 4.75

Fetched: March 10, 2023, 9:19 a.m., Published: March 9, 2023, midnight
 Vulnerabilities: command injection, default password, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-0348, CVE-2023-0351, CVE-2023-0354

Update Android now! Two critical vulnerabilities patched

Related entries in the VARIoT vulnerabilities database: VAR-202303-0155

Trust: 5.75

Fetched: March 10, 2023, 9:18 a.m., Published: March 9, 2023, 1:43 p.m.
 Vulnerabilities: memory corruption, information disclosure, code execution...
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2022-33256, CVE-2023-20951, CVE-2021-33655, CVE-2022-33213, CVE-2023-20954

Critical Vulnerability in Cisco IP Phones

Trust: 3.25

Fetched: March 10, 2023, 9:18 a.m., Published: March 10, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phones