VARIoT latest news about IoT security

Update now your devices now! Apple patches actively exploited vulnerability for iPhones Related entries in the VARIoT vulnerabilities database: VAR-202212-1751 Trust: 4.5 Fetched: Dec. 20, 2022, 9:19 a.m., Published: Dec. 16, 2022, 5:57 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	macos
vendor:	apple	model:	webkit
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2022-42856

Security Answers from TechTarget Trust: 3.25 Fetched: Dec. 20, 2022, 9:11 a.m., Published: Dec. 3, 2022, midnight	Vulnerabilities: cross-site scripting, account lockout

Affected products

External IDs

vendor:	trend	model:	antivirus
vendor:	trend	model:	security

Securing Systems Before Going on a Holiday Trust: 3.75 Fetched: Dec. 18, 2022, 9:25 a.m., Published: Dec. 9, 2022, 1:57 a.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

essential

model:

phone

macOS Activation Lock Vulnerability discovered by r/Mac : apple Trust: 3.0 Fetched: Dec. 18, 2022, 9:25 a.m., Published: March 18, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

Protect Your Network with Zero-Day Threat Protection Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 5.5 Fetched: Dec. 18, 2022, 9:24 a.m., Published: Dec. 9, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security
vendor:	cisco	model:	guard

db:

NVD

ids:

CVE-2021-44228

Critical Update Now To Ios 11 2 2 To Patch Spectre And Meltdown Iphone Vulnerability \| grovetech Related entries in the VARIoT vulnerabilities database: VAR-201801-1712, VAR-201801-0826 Trust: 3.75 Fetched: Dec. 18, 2022, 9:23 a.m., Published: Dec. 14, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	watch
vendor:	apple	model:	ipad
vendor:	apple	model:	iphone
vendor:	apple	model:	ipod touch
vendor:	apple	model:	apple tv
vendor:	apple	model:	safari
vendor:	apple	model:	ipad air
vendor:	apple	model:	webkit

db:

NVD

ids:

CVE-2017-5753, CVE-2017-5715

New Galaxy S22 & A52 update brings latest vulnerability fixes Trust: 3.75 Fetched: Dec. 18, 2022, 9:22 a.m., Published: Dec. 18, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	samsung galaxy
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	note
vendor:	google	model:	android

Tenable Discloses Details of Vulnerability Discovered in a NETGEAR Router - Security MEA Trust: 3.0 Fetched: Dec. 18, 2022, 9:22 a.m., Published: Dec. 16, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	netgear	model:	netgear router
vendor:	netgear	model:	router

JVNVU#97099584: Multiple vulnerabilities in Buffalo network devices Related entries in the VARIoT vulnerabilities database: VAR-202212-0950, VAR-202212-0948, VAR-202212-0949 Trust: 4.75 Fetched: Dec. 18, 2022, 9:22 a.m., Published: Dec. 9, 2022, midnight	Vulnerabilities: os command injection, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2022-43466, CVE-2022-43486, CVE-2022-43443

Alert issued to update Citrix ADC, Gateway devices \| IT World Canada News Trust: 4.75 Fetched: Dec. 18, 2022, 9:21 a.m., Published: Dec. 14, 2022, 3:55 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	citrix	model:	gateway
vendor:	citrix	model:	application delivery controller

db:

NVD

ids:

CVE-2022-27518

Patch now! Google Chrome's GPU code has a zero-day Trust: 5.5 Fetched: Dec. 18, 2022, 9:19 a.m., Published: Dec. 8, 2022, 7:15 p.m.	Vulnerabilities: buffer overflow, denial of service

Affected products

External IDs

vendor:	google	model:	home
vendor:	google	model:	google chrome
vendor:	google	model:	chrome

db:

NVD

ids:

CVE-2022-4135

CyRC Vulnerability Advisory: Remote code execution vulnerabilities in mouse and keyboard apps - Security Boulevard Trust: 4.5 Fetched: Dec. 18, 2022, 9:18 a.m., Published: Nov. 30, 2022, 1 p.m.	Vulnerabilities: weak password, code execution

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2022-45483, CVE-2022-45479, CVE-2022-45480, CVE-2022-45482, CVE-2022-45478, CVE-2022-45477, CVE-2022-45481

CVE-2022-41974- Red Hat Customer Portal Trust: 4.0 Fetched: Dec. 18, 2022, 9:17 a.m., Published: Oct. 13, 2022, 9:03 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2022-41973, CVE-2022-41974

Cisco SD-WAN Arbitrary File Deletion Vulnerability - Cisco Trust: 3.0 Fetched: Dec. 18, 2022, 9:17 a.m., Published: Dec. 16, 2022, 7:38 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	sd-wan
vendor:	cisco	model:	cisco sd-wan

Moobot Uses a Fake Vulnerability - Blog - VulnCheck Related entries in the VARIoT vulnerabilities database: VAR-202205-1549, VAR-202205-1480, VAR-202205-1571, VAR-201910-0717, VAR-201909-1437, VAR-202007-1255, VAR-202007-0675, VAR-201802-0965 Trust: 5.25 Fetched: Dec. 18, 2022, 9:15 a.m., Published: Dec. 6, 2022, midnight	Vulnerabilities: command execution, command injection, authentication bypass

Affected products

External IDs

vendor:	d-link	model:	dir-816l
vendor:	d-link	model:	router

db:

NVD

ids:

CVE-2022-28955, CVE-2022-28956, CVE-2022-28958, CVE-2019-17506, CVE-2019-10891, CVE-2020-9376, CVE-2020-15894, CVE-2018-7034

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products \| CISA Related entries in the VARIoT vulnerabilities database: VAR-202212-1314, VAR-202212-1311, VAR-202212-1312, VAR-202212-1313 Trust: 4.75 Fetched: Dec. 18, 2022, 9:15 a.m., Published: Dec. 1, 2022, midnight	Vulnerabilities: improper validation, denial of service

Affected products

External IDs

vendor:	siemens	model:	simatic et 200sp
vendor:	siemens	model:	simatic s7-1500 cpu family
vendor:	siemens	model:	simatic s7-1500 software controller
vendor:	siemens	model:	simatic s7-plcsim advanced
vendor:	siemens	model:	simatic et
vendor:	siemens	model:	simatic et 200sp open controller
vendor:	siemens	model:	s7-1200 cpu
vendor:	siemens	model:	s7-1500 cpu
vendor:	siemens	model:	simatic s7-plcsim
vendor:	siemens	model:	simatic et 200sp open
vendor:	siemens	model:	tim 1531 irc
vendor:	siemens	model:	simatic drive controller family
vendor:	siemens	model:	simatic
vendor:	siemens	model:	simatic s7-1500
vendor:	siemens	model:	simatic s7-1200 cpu
vendor:	siemens	model:	simatic s7-1500 cpu
vendor:	siemens	model:	et 200sp open controller
vendor:	siemens	model:	simatic et 200sp open controller cpu 1515sp pc2
vendor:	siemens	model:	simatic s7-1200 cpu family
vendor:	siemens	model:	simatic s7-1200

db:

NVD

ids:

CVE-2021-44695, CVE-2021-44693, CVE-2021-44694, CVE-2021-40365

New Go-based Botnet Exploiting Exploiting Dozens of IoT Vulnerabilities to Expand its Network Trust: 3.0 Fetched: Dec. 16, 2022, 9:20 a.m., Published: Dec. 7, 2022, 4:03 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

d-link

model:

dns-320

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks - PlanetJon Network Trust: 3.75 Fetched: Dec. 16, 2022, 9:20 a.m., Published: Dec. 16, 2022, 5:45 a.m.	Vulnerabilities: denial of service, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2022-26501, CVE-2022-26500

The Biggest Vulnerabilities To Your Website Security 2022 Trust: 3.5 Fetched: Dec. 16, 2022, 9:18 a.m., Published: Dec. 15, 2022, 7:38 a.m.	Vulnerabilities: cross-site scripting, sql injection

Affected products	External IDs

Security researcher shows off kernel vulnerability on iPhone 14 running iOS 16.1.2 Trust: 3.0 Fetched: Dec. 16, 2022, 9:17 a.m., Published: Dec. 11, 2022, 4:50 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

iphone

VARIoT news about IoT security