Sign-up

VARIoT news about IoT security

Fixing Your Apple Devices At Authorised Service Providers Is Now Pricier - TechTRP

Trust: 3.0

Fetched: March 3, 2023, 9:39 a.m., Published: March 2, 2023, 7:53 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Methods to Protect Your Devices and Accounts Coming from Hackers -

Trust: 3.0

Fetched: March 3, 2023, 9:34 a.m., Published: Feb. 19, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs

MyloBot malware targets Windows systems worldwide - SISA Weekly Threat Watch

Related entries in the VARIoT vulnerabilities database: VAR-202302-1097

Trust: 3.75

Fetched: March 3, 2023, 9:32 a.m., Published: Feb. 27, 2023, 4:34 p.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2023-23376, CVE-2023-21715, CVE-2023-21823, CVE-2023-23529

New Mirai Botnet Variant 'V3G4' Exploiting 13 Flaws to Target Linux and IoT Devices - Interware

Trust: 5.75

Fetched: March 3, 2023, 9:32 a.m., Published: Feb. 17, 2023, 2:28 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: palo model: networks
vendor: draytek model: vigor
vendor: draytek model: routers
vendor: palo alto networks model: networks
db: NVD ids: CVE-2012-4869

Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability

Trust: 5.0

Fetched: March 3, 2023, 9:31 a.m., Published: March 2, 2023, 8:35 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: finesse
vendor: cisco model: cisco finesse

Miral malware targets Linux servers and IoT devices

Related entries in the VARIoT vulnerabilities database: VAR-202006-1056, VAR-202206-0004, VAR-202002-1447

Trust: 4.75

Fetched: March 3, 2023, 9:31 a.m., Published: Feb. 24, 2023, 1:29 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: draytek model: vigor
vendor: draytek model: routers
db: NVD ids: CVE-2020-15415, CVE-2022-4257, CVE-2012-4869, CVE-2022-26134, CVE-2020-8515, CVE-2019-15107

Cisco Secure Web Appliance Content Encoding Filter Bypass Vulnerabilities

Trust: 3.0

Fetched: March 3, 2023, 9:30 a.m., Published: March 2, 2023, 8:18 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco web security appliance
vendor: cisco model: asyncos software
vendor: cisco model: cisco asyncos
vendor: cisco model: asyncos
vendor: cisco model: web security appliance

Google's Vulnerability Program helped identify 2,900 security flaws

Trust: 3.75

Fetched: March 3, 2023, 9:29 a.m., Published: Feb. 27, 2023, 11:51 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: android

6 Common Cybersecurity Risks That Could Impact Your Business (2023) | Parachute

Trust: 3.5

Fetched: March 3, 2023, 9:28 a.m., Published: March 1, 2023, 2:22 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: home

Bug Bounty Radar // The latest bug bounty programs for March 2023 | The Daily Swig

Trust: 3.5

Fetched: March 3, 2023, 9:28 a.m., Published: Feb. 28, 2023, 7:15 p.m.
 Vulnerabilities: cross-site scripting, authentication bypass, code execution
Affected productsExternal IDs
vendor: google model: android

Top 10 Cybersecurity Threats in 2023 | Embroker

Trust: 3.75

Fetched: March 3, 2023, 9:26 a.m., Published: Jan. 26, 2022, 3:10 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point

LastPass says employee’s home computer was hacked and corporate vault taken | Ars Technica

Trust: 3.0

Fetched: March 3, 2023, 9:26 a.m., Published: Feb. 28, 2023, 1:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

CVE - CVE-2023-20057

Trust: 3.75

Fetched: March 3, 2023, 9:26 a.m., Published: March 3, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: asyncos software
vendor: cisco systems model: email security appliance
vendor: cisco systems model: cisco email security appliance
vendor: cisco systems model: cisco asyncos
vendor: cisco systems model: asyncos
vendor: cisco model: asyncos software
vendor: cisco model: email security appliance
vendor: cisco model: cisco email security appliance
vendor: cisco model: cisco asyncos
vendor: cisco model: asyncos
db: NVD ids: CVE-2023-20057

Millions of IoT devices vulnerable to remote vulnerabilities

Trust: 6.0

Fetched: March 3, 2023, 9:25 a.m., Published: Oct. 28, 2022, 11:13 a.m.
 Vulnerabilities: command injection, buffer overflow, code execution
Affected productsExternal IDs
vendor: realtek model: realtek sdk
db: NVD ids: CVE-2021-28372, CVE-2021-35392, CVE-2021-35393, CVE-2021-35394, CVE-2021-35395

Cisco patches critical Web UI RCE flaw in multiple IP phones

Related entries in the VARIoT vulnerabilities database: VAR-202212-0864, VAR-202303-0475, VAR-202303-0357

Trust: 5.75

Fetched: March 3, 2023, 9:23 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: ip phones
vendor: cisco model: series
vendor: cisco model: ip phone
vendor: cisco model: unified ip conference phone
vendor: cisco model: unified ip phone 7900 series
vendor: cisco model: unified ip conference phone 8831
vendor: cisco model: link layer discovery protocol
vendor: cisco model: 8831
vendor: cisco model: ip phone 7900 series
vendor: cisco model: cisco unified ip phone
vendor: cisco model: unified ip phone
vendor: cisco model: ip conference phone
db: NVD ids: CVE-2022-20968, CVE-2023-20078, CVE-2023-20079

Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202303-0357

Trust: 3.75

Fetched: March 3, 2023, 9:23 a.m., Published: March 1, 2023, 3:51 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phones
vendor: cisco model: series
vendor: cisco model: ip phone
vendor: cisco model: unified ip conference phone
vendor: cisco model: unified ip phone 7900 series
vendor: cisco model: unified ip conference phone 8831
vendor: cisco model: unified ip phones
vendor: cisco model: 8831
vendor: cisco model: ip phone 7900 series
vendor: cisco model: cisco unified ip phone
vendor: cisco model: unified ip phone
vendor: cisco model: ip conference phone
db: NVD ids: CVE-2023-20079

RONDS Equipment Predictive Maintenance Solution | CISA

Trust: 4.75

Fetched: March 3, 2023, 9:22 a.m., Published: Jan. 12, 2023, midnight
 Vulnerabilities: path traversal, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-2893, CVE-2022-3091

When Pwning Cisco Persistence Is Key When Pwning Supply Chain Cisco Is Key

Related entries in the VARIoT vulnerabilities database: VAR-202302-0213

Trust: 5.5

Fetched: March 3, 2023, 9:22 a.m., Published: Feb. 1, 2023, 6 a.m.
 Vulnerabilities: remote command injection, command injection, privilege escalation...
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: industrial isrs
vendor: cisco model: series
vendor: cisco model: ir510 wpan
vendor: cisco model: router
vendor: cisco model: routers
vendor: cisco model: wireless access point
vendor: cisco model: cgr1000
vendor: cisco model: catalyst
vendor: cisco model: 4431
vendor: cisco model: access points
vendor: cisco model: ic3000
db: NVD ids: CVE-2007-4559, CVE-2023-20076

Positive Technologies helped to fix a vulnerability in Zyxel switches

Related entries in the VARIoT vulnerabilities database: VAR-202301-0921

Trust: 4.25

Fetched: March 3, 2023, 9:21 a.m., Published: March 8, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-43393

Wireless Network Vulnerability Scanning | CISA

Trust: 4.25

Fetched: March 3, 2023, 9:21 a.m., Published: -
 Vulnerabilities: weak password
Affected productsExternal IDs