Sign-up

VARIoT news about IoT security

Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability

Trust: 5.0

Fetched: March 8, 2023, 9:08 a.m., Published: March 1, 2023, 3:51 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: cisco model: cisco prime infrastructure
vendor: cisco model: prime infrastructure
vendor: cisco model: evolved programmable network manager

Network Vulnerability | Network Security Vulnerabilities

Trust: 3.5

Fetched: March 8, 2023, 9:07 a.m., Published: May 8, 2023, midnight
 Vulnerabilities: sql injection, cross-site scripting
Affected productsExternal IDs
vendor: essential model: phone

TPM 2.0 Library Vulnerabilities May Affect Billions of IoT Devices - Fast VPN Proxy

Trust: 3.0

Fetched: March 7, 2023, 9:21 a.m., Published: March 5, 2023, 6:25 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-1018

IoT Devices are at Risk due to TPM 2.0 Library Vulnerabilities - TheCyberThrone

Trust: 4.25

Fetched: March 7, 2023, 9:21 a.m., Published: March 6, 2023, 2:17 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2023-1018

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices

Trust: 4.0

Fetched: March 7, 2023, 9:21 a.m., Published: March 2, 2023, midnight
 Vulnerabilities: information disclosure, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2023-1018, CVE-2023-1017

New Flaws in TPM 2.0 Library Pose Threat to Billions of IoT and Enterprise Devices - Domedigita

Trust: 3.0

Fetched: March 7, 2023, 9:20 a.m., Published: March 4, 2023, 8:14 a.m.
 Vulnerabilities: information disclosure, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2023-1018, CVE-2023-1017

TPM 2.0 Library Vulnerabilities May Affect Billions of IoT Devices - Cyber Security Reviews

Trust: 4.0

Fetched: March 7, 2023, 9:20 a.m., Published: March 5, 2023, 12:59 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2023-1018

OWASP Top 10 Vulnerabilities | Craw Cyber Security - Craw Security

Trust: 3.5

Fetched: March 7, 2023, 9:19 a.m., Published: March 6, 2023, 7:17 a.m.
 Vulnerabilities: cross-site scripting, sql injection, privilege escalation...
Affected productsExternal IDs

Billions of PCs and other devices vulnerable to newly discovered TPM 2.0 flaws | Sounds Nerdy

Trust: 4.75

Fetched: March 7, 2023, 9:18 a.m., Published: March 2, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
db: NVD ids: CVE-2023-1018, CVE-2023-1017

Billion Devices at Risk: Two Buffer Overflow Flaws Found in TPM 2.0 Specification | Black Hat Ethical Hacking

Trust: 4.75

Fetched: March 7, 2023, 9:17 a.m., Published: March 6, 2023, 8:25 a.m.
 Vulnerabilities: information disclosure, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2023-1018, CVE-2023-1017

Billions of PCs and other devices vulnerable to newly discovered TPM 2.0 flaws

Trust: 4.75

Fetched: March 7, 2023, 9:17 a.m., Published: March 2, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
vendor: asus model: asus
db: NVD ids: CVE-2023-1018, CVE-2023-1017

Billions of PCs and other devices vulnerable to newly discovered TPM 2.0 flaws | Tom's Guide

Trust: 4.75

Fetched: March 7, 2023, 9:16 a.m., Published: March 6, 2023, 4:54 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
db: NVD ids: CVE-2023-1018, CVE-2023-1017

About the security content of iOS 16.3.1 and iPadOS 16.3.1 - Apple Support

Related entries in the VARIoT vulnerabilities database: VAR-202302-2116, VAR-202302-1169, VAR-202302-1097

Trust: 5.5

Fetched: March 7, 2023, 9:15 a.m., Published: March 16, 2001, midnight
 Vulnerabilities: use after free, code execution
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: webkit
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2023-23524, CVE-2023-23514, CVE-2023-23529

ARC Informatique PcVue (Update A) | CISA

Trust: 3.5

Fetched: March 7, 2023, 9:15 a.m., Published: Feb. 9, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: arc informatique model: pcvue
vendor: arc informatique model: informatique pcvue
db: NVD ids: CVE-2022-4311, CVE-2022-4312

Cisco NX-OS Software CLI Command Injection Vulnerability

Trust: 4.0

Fetched: March 7, 2023, 9:14 a.m., Published: Feb. 22, 2023, 3:50 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: 1000v
vendor: cisco model: nexus
vendor: cisco model: nexus 1000v
vendor: cisco model: nx-os software
vendor: cisco model: series
vendor: cisco model: cisco nexus 9000 series
vendor: cisco model: nexus 9000 series
vendor: cisco model: nx-os
vendor: cisco model: cisco nx-os
vendor: cisco model: series switches
vendor: cisco model: nexus 7000
vendor: cisco model: nexus 3000
vendor: cisco model: nexus 9000

Sierra Wireless Airlink ACEmanager Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-201905-0851

Trust: 5.25

Fetched: March 7, 2023, 9:13 a.m., Published: Jan. 30, 2023, midnight
 Vulnerabilities: command execution, code execution, command injection
Affected productsExternal IDs
vendor: sierra model: mp70
vendor: sierra model: rv50x
vendor: sierra model: es450
vendor: sierra model: gx450
vendor: sierra model: rv50
vendor: sierra model: aleos
vendor: sierra wireless model: mp70
vendor: sierra wireless model: rv50x
vendor: sierra wireless model: es450
vendor: sierra wireless model: gx450
vendor: sierra wireless model: rv50
vendor: sierra wireless model: aleos
db: NVD ids: CVE-2022-46650, CVE-2018-4061, CVE-2022-46649

Multiple vulnerabilities in Audiocodes Device Manager Express

Trust: 4.75

Fetched: March 7, 2023, 9:13 a.m., Published: Feb. 27, 2023, midnight
 Vulnerabilities: input validation error, cross-site scripting, sql injection...
Affected productsExternal IDs
db: NVD ids: CVE-2022-24632, CVE-2022-24629, CVE-2022-24628, CVE-2022-24631, CVE-2022-24627, CVE-2022-24630

Cisco Unified Intelligence Center Vulnerabilities

Trust: 3.0

Fetched: March 7, 2023, 9:13 a.m., Published: March 1, 2023, 3:51 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco unified intelligence center
vendor: cisco model: unified intelligence center

Cisco patches critical bugs in IP Phones | SC Media

Related entries in the VARIoT vulnerabilities database: VAR-202303-0475, VAR-202303-0357

Trust: 5.5

Fetched: March 7, 2023, 9:12 a.m., Published: March 2, 2023, 3:29 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: cisco model: ip phone 7900 series
vendor: cisco model: ip phone
vendor: cisco model: 8831
vendor: cisco model: unified ip conference phone 8831
vendor: cisco model: unified ip conference phone
vendor: cisco model: series
vendor: cisco model: ip conference phone
vendor: cisco model: ip phones
vendor: cisco model: unified ip phone 7900 series
vendor: cisco model: unified ip phone
db: NVD ids: CVE-2023-20078, CVE-2023-20079

Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities - Cisco

Related entries in the VARIoT vulnerabilities database: VAR-202303-0357

Trust: 3.75

Fetched: March 7, 2023, 9:11 a.m., Published: March 6, 2023, 7:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phone
vendor: cisco model: ip conference phone
vendor: cisco model: ip phones
vendor: cisco model: ip phone 7900 series
vendor: cisco model: unified ip conference phone 8831
vendor: cisco model: series
vendor: cisco model: unified ip phone
vendor: cisco model: unified ip phones
vendor: cisco model: unified ip phone 7900 series
vendor: cisco model: 8831
vendor: cisco model: unified ip conference phone
vendor: cisco model: cisco unified ip phone
db: NVD ids: CVE-2023-20079