Sign-up

VARIoT news about IoT security

Security Researchers Delve Into Major Vulnerability Patched in iOS 16.3 and macOS 13.2 - MacRumors

Related entries in the VARIoT vulnerabilities database: VAR-202302-2045, VAR-202302-2240

Trust: 5.75

Fetched: Feb. 22, 2023, 9:05 a.m., Published: Feb. 16, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2023-23530, CVE-2023-23531

Apple Patches Multiple Vulnerabilities In Latest Security Updates - Spiceworks

Trust: 4.75

Fetched: Feb. 22, 2023, 9:04 a.m., Published: Feb. 21, 2023, midnight
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: icloud

Lexmark CVE-2023-23560 Vulnerability Audit - Lansweeper

Trust: 3.5

Fetched: Feb. 22, 2023, 9:04 a.m., Published: Jan. 27, 2023, 4:06 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-23560

ClamAV DMG File Parsing XML Entity Expansion Vulnerability Affecting Cisco Products: February 2023

Trust: 3.75

Fetched: Feb. 22, 2023, 9:04 a.m., Published: Feb. 15, 2023, 8:15 p.m.
 Vulnerabilities: entity injection
Affected productsExternal IDs
vendor: clamav model: clamav
vendor: cisco model: clamav

New Mirai botnet variant V3G4 targets Linux servers, IoT devices - ARN

Related entries in the VARIoT vulnerabilities database: VAR-202006-1056, VAR-202002-1447, VAR-202206-0004

Trust: 6.0

Fetched: Feb. 21, 2023, 9:17 a.m., Published: Feb. 21, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: draytek model: vigor
db: NVD ids: CVE-2020-15415, CVE-2020-8515, CVE-2012-4869, CVE-2022-4257, CVE-2022-26134, CVE-2019-15107

Has your Apple device got worms? Security check needed!

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097

Trust: 5.0

Fetched: Feb. 21, 2023, 9:16 a.m., Published: Feb. 14, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2023-23529

Mirai botnet variant V3G4 targeting 13 unpatched IoT vulnerabilities - SPIXNET C2S

Trust: 5.0

Fetched: Feb. 21, 2023, 9:15 a.m., Published: Feb. 20, 2023, 1:23 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: draytek model: vigor
db: NVD ids: CVE-2022-46169

QNAP devices found to have critical code injection vulnerability - Cyber and Fraud Centre - Scotland

Trust: 3.0

Fetched: Feb. 21, 2023, 9:14 a.m., Published: Feb. 2, 2023, 10:57 a.m.
 Vulnerabilities: code execution, code injection
Affected productsExternal IDs

Newly Identified Vulnerability Makes EOL Arris Routers Vulnerable

Trust: 4.75

Fetched: Feb. 21, 2023, 9:14 a.m., Published: Feb. 20, 2023, 1:57 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-45701

New Samsung Message Guard Protects Mobile Devices Against Zero-Click Exploits - SecurityWeek

Trust: 3.75

Fetched: Feb. 21, 2023, 9:14 a.m., Published: Feb. 20, 2023, 1:54 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy
vendor: samsung model: gallery
vendor: samsung model: knox
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: google model: android

Update now! Apple patches vulnerabilities in MacOS and iOS

Related entries in the VARIoT vulnerabilities database: VAR-202302-1169, VAR-202302-1097, VAR-202302-1170

Trust: 5.5

Fetched: Feb. 21, 2023, 9:13 a.m., Published: Feb. 15, 2023, 11:48 a.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: ipad air
db: NVD ids: CVE-2023-23514, CVE-2023-23529, CVE-2023-23522

Arris router vulnerability could lead to complete takeover|黑客技术网

Trust: 4.5

Fetched: Feb. 19, 2023, 9:29 a.m., Published: -
 Vulnerabilities: default credentials, command injection, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-45701

SAP's February 2023 Security Updates Patch High-Severity Vulnerabilities - SecurityWeek

Trust: 4.0

Fetched: Feb. 19, 2023, 9:29 a.m., Published: Feb. 15, 2023, 11:11 a.m.
 Vulnerabilities: privilege escalation, file upload bug, code injection...
Affected productsExternal IDs
db: NVD ids: CVE-2023-0020, CVE-2023-24523, CVE-2023-24530

PSA: Make Sure to Update Soon, macOS Ventura 13.2.1 and iOS 16.3.1 Address Actively Exploited Vulnerability | Page 5 | MacRumors Forums

Trust: 4.0

Fetched: Feb. 19, 2023, 9:28 a.m., Published: Feb. 13, 2001, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: icloud

iOS 16.3.1 fixes major vulnerabilities but may cause a problem for this popular app

Trust: 3.75

Fetched: Feb. 19, 2023, 9:28 a.m., Published: March 16, 2001, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: android
vendor: apple model: iphone
vendor: apple model: icloud

New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices

Trust: 5.75

Fetched: Feb. 19, 2023, 9:28 a.m., Published: Feb. 17, 2023, 9:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: draytek model: routers
vendor: draytek model: vigor
vendor: palo model: networks
db: NVD ids: CVE-2012-4869

KB5008380-Authentication updates (CVE-2021-42287) - Microsoft Support

Trust: 3.0

Fetched: Feb. 19, 2023, 9:27 a.m., Published: Nov. 9, 2021, midnight
 Vulnerabilities: security bypass
Affected productsExternal IDs
db: NVD ids: CVE-2021-42287

Arris Router Vulnerability Leaves EOL Devices Exposed

Trust: 4.75

Fetched: Feb. 19, 2023, 9:26 a.m., Published: Feb. 17, 2023, 11:28 a.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-45701

Critical RCE Vulnerability Discovered in ClamAV Open Source Antivirus Software - Domedigita

Related entries in the VARIoT vulnerabilities database: VAR-202302-1598, VAR-202302-1614, VAR-202302-1452

Trust: 5.5

Fetched: Feb. 19, 2023, 9:26 a.m., Published: Feb. 17, 2023, 9:14 a.m.
 Vulnerabilities: code execution, privilege escalation, information leak...
Affected productsExternal IDs
vendor: clamav model: clamav
vendor: google model: nexus
vendor: cisco model: management appliance
vendor: cisco model: web security appliance
vendor: cisco model: nexus
vendor: cisco model: advanced malware protection
vendor: cisco model: clamav
vendor: cisco model: email security appliance
db: NVD ids: CVE-2023-20009, CVE-2023-20075, CVE-2023-20032, CVE-2023-20014, CVE-2023-20052

4 ways to address cyber vulnerabilities in your business

Trust: 3.0

Fetched: Feb. 19, 2023, 9:25 a.m., Published: Feb. 4, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs