VARIoT latest news about IoT security

What Vulnerability Management Software Is And What It Does - Iredell Humane Trust: 3.0 Fetched: Nov. 25, 2022, 9:31 a.m., Published: Nov. 23, 2022, 7:06 p.m.	Vulnerabilities: denial of service

Affected products	External IDs

What Vulnerability Management Software Is And What It Does - Dogs n Sox Trust: 3.0 Fetched: Nov. 25, 2022, 9:30 a.m., Published: Nov. 23, 2022, 6:54 p.m.	Vulnerabilities: denial of service

Affected products	External IDs

What Are The Benefits Of Using Vulnerability Management Software - BH Polo Trust: 3.0 Fetched: Nov. 25, 2022, 9:29 a.m., Published: Nov. 23, 2022, 7:08 p.m.	Vulnerabilities: denial of service

Affected products	External IDs

Mali GPU driver vulnerability affects many devices - The Vocal Vixen Trust: 4.0 Fetched: Nov. 25, 2022, 9:26 a.m., Published: Nov. 25, 2022, 12:32 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2022-33917

Patch Gap issues puts millions of Android devices to vulnerability \| IT Security News Trust: 3.75 Fetched: Nov. 25, 2022, 9:26 a.m., Published: Nov. 25, 2022, 5:37 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	pixel

db:

NVD

ids:

CVE-2021-28372

Cisco Patches 33 Vulnerabilities in Enterprise Firewall Products \| SecurityWeek.Com Related entries in the VARIoT vulnerabilities database: VAR-202211-1257, VAR-202211-0550 Trust: 4.5 Fetched: Nov. 25, 2022, 9:26 a.m., Published: Nov. 25, 2033, midnight	Vulnerabilities: improper memory management, cross-site scripting, default credentials

Affected products

External IDs

vendor:	citrix	model:	gateway
vendor:	cisco	model:	firepower
vendor:	cisco	model:	adaptive security appliance
vendor:	cisco	model:	cisco adaptive security appliance
vendor:	cisco	model:	series
vendor:	cisco	model:	firepower management center
vendor:	cisco	model:	firepower threat defense

db:

NVD

ids:

CVE-2022-20946, CVE-2022-20927

Fortinet Confirms Zero-Day Vulnerability Exploited in One Attack \| SecurityWeek.Com Related entries in the VARIoT vulnerabilities database: VAR-202210-0198 Trust: 6.25 Fetched: Nov. 25, 2022, 9:24 a.m., Published: Nov. 25, 2022, midnight	Vulnerabilities: authentication bypass

Affected products

External IDs

vendor:

fortigate

model:

fortios

db:

NVD

ids:

CVE-2022-40684

Rapid Vulnerability Detection overview \| Security Command Center \| Google Cloud Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202110-1691, VAR-202109-1802 Trust: 3.5 Fetched: Nov. 25, 2022, 9:22 a.m., Published: Nov. 19, 2022, midnight	Vulnerabilities: file inclusion, local file inclusion, request forgery...

Affected products

External IDs

db:

NVD

ids:

CVE-2020-14882, CVE-2021-25646, CVE-2021-22205, CVE-2020-14883, CVE-2021-44228, CVE-2021-26084, CVE-2021-35464, CVE-2021-41773, CVE-2020-14750, CVE-2021-40438, CVE-2021-43798, CVE-2021-41277

Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure \| CISA Related entries in the VARIoT vulnerabilities database: VAR-202008-0248 Trust: 4.5 Fetched: Nov. 25, 2022, 9:16 a.m., Published: March 1, 2022, midnight	Vulnerabilities: code execution, password guessing

Affected products

External IDs

vendor:

rising

model:

antivirus

db:

NVD

ids:

CVE-2020-1472

BMC Firmware Vulnerabilities Expose OT, IoT Devices to Remote Attacks Trust: 3.5 Fetched: Nov. 23, 2022, 10:02 a.m., Published: Nov. 22, 2022, midnight	Vulnerabilities: access control issue, code execution, command injection

Affected products

External IDs

vendor:	asus	model:	asus
vendor:	asus	model:	bmc firmware
vendor:	lenovo	model:	system

BMC Firmware Vulnerabilities Expose OT, IoT Devices to Remote Attacks \| IT Security News Trust: 3.0 Fetched: Nov. 23, 2022, 10:01 a.m., Published: Nov. 22, 2022, 5:37 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

lenovo

model:

system

Vulnerabilities in BMC Firmware Affect OT/IoT Device Security - Part 1 - Security Boulevard Trust: 5.25 Fetched: Nov. 23, 2022, 10 a.m., Published: Nov. 22, 2022, 8:35 a.m.	Vulnerabilities: session fixation, code execution, buffer overflow...

Affected products

External IDs

vendor:	asus	model:	asus
vendor:	asus	model:	bmc firmware
vendor:	lenovo	model:	bios
vendor:	lenovo	model:	system
vendor:	lenovo	model:	bios firmware
vendor:	dell	model:	bios

db:

NVD

ids:

CVE-2021-26731, CVE-2021-26729, CVE-2021-26730, CVE-2021-4228, CVE-2021-44467, CVE-2021-45925, CVE-2021-26732, CVE-2021-26733, CVE-2021-44769, CVE-2021-26727, CVE-2021-26728, CVE-2021-44776, CVE-2021-46279

BMC Firmware Vulnerabilities Expose OT, IoT Devices to Remote Attacks \| SecurityWeek.Com Trust: 3.5 Fetched: Nov. 23, 2022, 9:59 a.m., Published: Nov. 23, 2022, midnight	Vulnerabilities: access control issue, code execution, command injection

Affected products

External IDs

vendor:	asus	model:	asus
vendor:	asus	model:	bmc firmware
vendor:	lenovo	model:	system

Vulnerabilities in BMC Firmware Affect OT/IoT Device Security - Part 1 Trust: 5.25 Fetched: Nov. 23, 2022, 9:57 a.m., Published: Nov. 22, 2022, 8:35 a.m.	Vulnerabilities: session fixation, code execution, buffer overflow...

Affected products

External IDs

vendor:	asus	model:	asus
vendor:	asus	model:	bmc firmware
vendor:	lenovo	model:	bios
vendor:	lenovo	model:	system
vendor:	lenovo	model:	bios firmware
vendor:	dell	model:	bios

db:

NVD

ids:

CVE-2021-26731, CVE-2021-26729, CVE-2021-26730, CVE-2021-4228, CVE-2021-44467, CVE-2021-45925, CVE-2021-26732, CVE-2021-26733, CVE-2021-44769, CVE-2021-26727, CVE-2021-26728, CVE-2021-44776, CVE-2021-46279

OpenSSL update patches high-severity vulnerabilities \| Venafi Trust: 3.5 Fetched: Nov. 23, 2022, 9:56 a.m., Published: Nov. 1, 2022, midnight	Vulnerabilities: denial of service, buffer overflow, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2022-3602, CVE-2022-3786

Delta Electronics InfraSuite Device Master \| CISA Trust: 5.25 Fetched: Nov. 23, 2022, 9:56 a.m., Published: Nov. 1, 2022, midnight	Vulnerabilities: path traversal, code execution

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2022-41778, CVE-2022-41688, CVE-2022-41657, CVE-2022-40202, CVE-2022-41629, CVE-2022-38142, CVE-2022-41776, CVE-2022-41779, CVE-2022-41772, CVE-2022-41644

Vulnerable SDK components lead to supply chain risks in IoT and OT environments - Microsoft Security Blog Trust: 4.25 Fetched: Nov. 23, 2022, 9:55 a.m., Published: Nov. 22, 2022, 5 p.m.	Vulnerabilities: default credentials, information disclosure

Affected products

External IDs

vendor:	realtek	model:	realtek sdk
vendor:	snort	model:	snort

db:

NVD

ids:

CVE-2021-35395, CVE-2021-33558, CVE-2022-27255, CVE-2017-9833

Millions of Android phones may be vulnerable to camera spying vulnerability Trust: 3.0 Fetched: Nov. 23, 2022, 9:54 a.m., Published: May 23, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

BMC Firmware Vulnerabilities Expose OT, IoT Devices to Remote Attacks \| SecurityWeek.Com Trust: 3.5 Fetched: Nov. 23, 2022, 9:54 a.m., Published: Nov. 23, 2022, midnight	Vulnerabilities: access control issue, code execution, command injection

Affected products

External IDs

vendor:	asus	model:	asus
vendor:	asus	model:	bmc firmware
vendor:	lenovo	model:	system

Linux has been bitten by its most high-severity vulnerability in years \| Ars Technica Related entries in the VARIoT vulnerabilities database: VAR-202203-0043 Trust: 3.0 Fetched: Nov. 23, 2022, 9:51 a.m., Published: March 8, 2022, 2:39 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2022-0847

VARIoT news about IoT security