Sign-up

VARIoT news about IoT security

What Is Lateral Movement In Cyber Security 2024

Trust: 3.75

Fetched: April 2, 2024, 9:25 a.m., Published: March 27, 2024, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

Study Finds Alarming Vulnerabilities in Medical Devices - NetSec.News

Trust: 3.0

Fetched: April 2, 2024, 9:24 a.m., Published: March 18, 2024, 11:04 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

Beware of These Hardware Security Vulnerabilities | Advanced Technology Center, Inc.

Trust: 4.25

Fetched: April 2, 2024, 9:24 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs

One-day, n-day, and zero-day vulnerabilities explained

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.5

Fetched: April 2, 2024, 9:23 a.m., Published: March 11, 2024, midnight
 Vulnerabilities: authentication bypass, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2024-1708, CVE-2024-1709

Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability - Cisco

Trust: 3.75

Fetched: April 2, 2024, 9:22 a.m., Published: March 27, 2024, 11:12 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Windows admin-to-kernel exploit went unpatched for 6 months • The Register

Trust: 4.75

Fetched: April 2, 2024, 9:22 a.m., Published: -
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: apple model: safari
vendor: cisco model: series
db: NVD ids: CVE-2024-23288, CVE-2024-2197, CVE-2024-23296, CVE-2024-21338, CVE-2024-23277, CVE-2024-23225, CVE-2024-23243, CVE-2024-20337

Cisco IOS XE Software Privilege Escalation Vulnerability - Cisco

Trust: 5.0

Fetched: April 2, 2024, 9:22 a.m., Published: March 27, 2024, 11:13 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Update Windows 11 now! March update fixes 61 vulnerabilities including 2 critical flaws | Laptop Mag

Trust: 4.0

Fetched: April 2, 2024, 9:20 a.m., Published: March 13, 2024, 7:15 p.m.
 Vulnerabilities: code execution, denial of service, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2024-21407, CVE-2024-26170, CVE-2024-21390, CVE-2024-21408, CVE-2024-21400, CVE-2024-21433

Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability - Cisco

Trust: 4.0

Fetched: April 2, 2024, 9:20 a.m., Published: March 27, 2024, 11:12 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Cisco IOS XE Software DHCP Snooping with Endpoint Analytics Denial of Service Vulnerability - Cisco

Trust: 4.0

Fetched: April 2, 2024, 9:20 a.m., Published: March 27, 2024, 11:12 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
vendor: cisco model: ios xe software

Beware of These Hardware Security Vulnerabilities | The Human IT Company

Trust: 4.25

Fetched: April 2, 2024, 9:19 a.m., Published: March 15, 2024, 3 p.m.
 Vulnerabilities: default password
Affected productsExternal IDs

Cisco IOS and IOS XE Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

Trust: 3.75

Fetched: April 2, 2024, 9:19 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Common Network Security Vulnerabilities | RapidFire Tools

Trust: 3.75

Fetched: April 2, 2024, 9:18 a.m., Published: March 27, 2024, 1 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

Cisco IOS XE Software OSPFv2 Denial of Service Vulnerability

Trust: 4.0

Fetched: April 2, 2024, 9:18 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Cisco Catalyst Center Authorization Bypass Vulnerability

Trust: 3.25

Fetched: April 2, 2024, 9:17 a.m., Published: March 27, 2024, 3:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: catalyst

Gaining kernel code execution on an MTE-enabled Pixel 8 - The GitHub Blog

Trust: 4.25

Fetched: April 2, 2024, 9:15 a.m., Published: March 18, 2024, 12:38 p.m.
 Vulnerabilities: side channel attack, code execution, memory corruption...
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2023-6241

Beware of These Hardware Security Vulnerabilities | Zephyr Consulting Limited

Trust: 4.25

Fetched: April 2, 2024, 9:14 a.m., Published: -
 Vulnerabilities: default password
Affected productsExternal IDs

CVE-2024-20278 - vulnerability database | Vulners.com

Trust: 6.0

Fetched: April 2, 2024, 9:14 a.m., Published: March 27, 2024, 5:15 p.m.
 Vulnerabilities: improper validation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
db: NVD ids: CVE-2024-20278

150K+ Fortinet Devices Vulnerable to Critical Code Execution Flaw

Trust: 5.0

Fetched: April 2, 2024, 9:14 a.m., Published: March 10, 2024, 3:44 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-21762

(RHSA-2024:1110) Moderate: device-mapper-multipath security ... - vulnerability database | Vulners.com

Trust: 3.25

Fetched: April 2, 2024, 9:13 a.m., Published: March 5, 2024, 10:45 a.m.
 Vulnerabilities: symlink attack
Affected productsExternal IDs
db: NVD ids: CVE-2022-41973