Sign-up

VARIoT news about IoT security

TLStorm vulnerabilities detected in APC Smart-UPS devices used across data centers, industrial facilities, hospitals - Industrial Cyber

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: March 11, 2022, 12:43 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor

NVD - CVE-2022-23042

Trust: 5.75

Fetched: June 1, 2022, 8:58 a.m., Published: June 3, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: ring model: ring
db: NVD ids: CVE-2022-23039, CVE-2022-23037, CVE-2022-23038, CVE-2022-23041, CVE-2022-23040, CVE-2022-23042, CVE-2022-23036

Cisco Patches 11 High-Severity Vulnerabilities in Security Products | SecurityWeek.Com

Related entries in the VARIoT vulnerabilities database: VAR-202204-2027

Trust: 5.75

Fetched: June 1, 2022, 8:58 a.m., Published: June 11, 2022, midnight
 Vulnerabilities: privilege escalation, denial of service
Affected productsExternal IDs
vendor: cisco model: firepower threat defense
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower management center
vendor: cisco model: telepresence
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: expressway
db: NVD ids: CVE-2022-20746

Cybersecurity vulnerability ensnares imaging, radiation therapy firms

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: March 10, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

Armis Finds Three Critical Zero-Day Vulnerabilities in APC Smart-UPS Devices, Dubbed "TLStorm," Exposing More than 20 Million Enterprise Devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235, VAR-202108-1890

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: March 8, 2022, 11 a.m.
 Vulnerabilities: buffer overflow, memory corruption, code execution...
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715, CVE-2021-37160

RCE vulnerabilities found in Avaya, Aruba network switches

Trust: 4.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 3, 2022, midnight
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: hewlett packard enterprise model: switches
vendor: extreme model: ers3500
vendor: aruba model: web management portal
vendor: hewlett packard model: switches
vendor: extreme networks model: ers3500
db: NVD ids: CVE-2022-23676, CVE-2022-29861, CVE-2022-23677, CVE-2022-29860

CISA warns about cyber flaw in Philips MRI monitoring software | MedTech Dive

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: March 30, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: philips model: e-alert

Security Advisories | Aruba

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: June 12, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: aruba model: clearpass policy manager
vendor: aruba model: clearpass
db: NVD ids: CVE-2022-23675, CVE-2022-23671, CVE-2022-23666, CVE-2022-23669, CVE-2022-23657, CVE-2022-23665, CVE-2022-23670, CVE-2021-33503, CVE-2022-23667, CVE-2022-23668, CVE-2022-23672, CVE-2022-23664, CVE-2022-23660, CVE-2022-23661, CVE-2021-21419, CVE-2022-23673, CVE-2022-23663, CVE-2022-23662, CVE-2022-23658, CVE-2022-23674, CVE-2022-23659

NVD - CVE-2022-20795

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 3, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco systems model: firepower_threat_defense
vendor: cisco systems model: firepower threat defense
vendor: cisco systems model: adaptive_security_appliance
vendor: cisco systems model: adaptive security appliance
vendor: cisco systems model: firepower
vendor: cisco systems model: cisco adaptive security appliance
vendor: cisco systems model: asa_5505
vendor: cisco systems model: anyconnect ssl vpn
vendor: cisco model: firepower_threat_defense
vendor: cisco model: firepower threat defense
vendor: cisco model: adaptive_security_appliance
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa_5505
vendor: cisco model: anyconnect ssl vpn
db: NVD ids: CVE-2022-20795

CVE Record | CVE

Related entries in the VARIoT vulnerabilities database: VAR-202204-1420

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: ios xe
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
db: NVD ids: CVE-2022-20679

CVE-2022-1480 - Security Update Guide - Microsoft - Chromium: CVE-2022-1480 Use after free in Device API

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: use after free
Affected productsExternal IDs
db: NVD ids: CVE-2022-1480

Critical Vulnerabilities In APC Smart-UPS Devices - Check Point Software

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235, VAR-202108-1890

Trust: 4.25

Fetched: June 1, 2022, 8:58 a.m., Published: April 5, 2022, 11:10 a.m.
 Vulnerabilities: buffer overflow, memory corruption, code execution...
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor
vendor: check point model: check point
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715, CVE-2021-37160

Update now! F5 BIG-IP vulnerability being actively exploited | Malwarebytes Labs

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394

Trust: 3.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 9, 2022, 3:39 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-1388

Vulnerabilities in Aruba and Avaya Switches Expose Enterprise Networks to Attacks | SecurityWeek.Com

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-23676, CVE-2022-29861, CVE-2022-23677, CVE-2022-29860

Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability - Cisco

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: April 6, 2022, 11:11 a.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine

Announcing Microsoft Defender Vulnerability Management in public preview - Microsoft Tech Community

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 12, 2022, 3:41 p.m.
 Vulnerabilities: service disruption
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Zyxel silently patches command-injection vulnerability with 9.8 severity rating | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-202205-0957

Trust: 5.5

Fetched: June 1, 2022, 8:58 a.m., Published: June 9, 2022, midnight
 Vulnerabilities: authentication vulnerability, command injection, remote command injection
Affected productsExternal IDs
vendor: zyxel model: atp200
vendor: zyxel model: usg20w-vpn
vendor: zyxel model: usg20-vpn
db: NVD ids: CVE-2022-30525

HP Patches UEFI Vulnerabilities Affecting Over 200 Computers | SecurityWeek.Com

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: lenovo model: desktop
vendor: lenovo model: system
vendor: lenovo model: bios
vendor: lenovo model: updates
vendor: dell model: bios
db: NVD ids: CVE-2021-3809, CVE-2021-3808

Microsoft Details Severe Vulnerabilities in Pre-Installed Android Apps

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 28, 2022, 4:22 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-42600, CVE-2021-42598, CVE-2021-42599, CVE-2021-42601

Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

Trust: 3.5

Fetched: June 1, 2022, 8:58 a.m., Published: May 25, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs