Sign-up

VARIoT news about IoT security

Log4j vulnerability explained and how to respond - OpenText Blogs

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562, VAR-202112-2011, VAR-202112-1782

Trust: 4.0

Fetched: Jan. 18, 2022, 11:14 a.m., Published: Dec. 22, 2021, 9:38 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-45046, CVE-2021-44832, CVE-2021-4104, CVE-2021-45105

Researcher discloses alleged zero-day vulnerabilities in NUUO NVRmini2 recording device - Hard News Hard Hitting News Source Global Political News

Trust: 5.5

Fetched: Jan. 18, 2022, 11:14 a.m., Published: Jan. 15, 2022, midnight
 Vulnerabilities: command injection, path traversal, code execution
Affected productsExternal IDs
vendor: nuuo model: network video recorder
vendor: nuuo model: nvrmini2
db: NVD ids: CVE-2011-5325

Vulnerability CVE-2022-23178

Trust: 3.25

Fetched: Jan. 18, 2022, 11:14 a.m., Published: Jan. 15, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-23178

Top 50 Interview Questions & Answers | Penetration Testing [Updated 2022] - All About Testing

Trust: 4.5

Fetched: Jan. 18, 2022, 11:14 a.m., Published: Oct. 30, 2017, 3:36 p.m.
 Vulnerabilities: cross-site scripting, directory traversal, denial of service...
Affected productsExternal IDs
vendor: wireshark model: wireshark

Luxul Firmware | Legrand AV

Trust: 3.0

Fetched: Jan. 18, 2022, 11:13 a.m., Published: Dec. 1, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve

How To Keep Your Data Secure In Light Of Apache Log4j Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 4.75

Fetched: Jan. 18, 2022, 11:12 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-45046

VMSA-2021-0028: Questions & Answers about Log4j | VMware

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 5.5

Fetched: Jan. 18, 2022, 11:11 a.m., Published: Sept. 29, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: serve model: serve
vendor: dell model: emc vxrail
vendor: dell emc model: emc vxrail
db: NVD ids: CVE-2021-44832, CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

Apps of 16 popular smart home devices vulnerable to cyberattack - Indian Herald

Trust: 3.75

Fetched: Jan. 18, 2022, 11:10 a.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
vendor: google model: google home
vendor: google model: wifi

Vulnerabilities in MediaTek chips expose millions of Android devices to eavesdropping

Trust: 3.0

Fetched: Jan. 18, 2022, 11:10 a.m., Published: Nov. 24, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: check point model: check point

Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

Related entries in the VARIoT vulnerabilities database: VAR-201910-0546, VAR-201803-2171, VAR-201808-0384, VAR-202111-0616, VAR-201910-0547

Trust: 5.5

Fetched: Jan. 18, 2022, 11:10 a.m., Published: Dec. 9, 2021, midnight
 Vulnerabilities: buffer overflow, directory traversal, code execution
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: mikrotik model: mikrotik routers
vendor: mikrotik model: mikrotik
vendor: mikrotik model: routers
vendor: mikrotik model: winbox
vendor: mikrotik model: routeros
vendor: hikvision model: hikvision
db: NVD ids: CVE-2019-3977, CVE-2018-7445, CVE-2018-14847, CVE-2021-36260, CVE-2021-41653, CVE-2019-3978

Geotab’s Log4j-vulnerability response | Geotab

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-2011

Trust: 4.0

Fetched: Jan. 18, 2022, 11:09 a.m., Published: Jan. 18, 2022, 10:09 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-44832

Zero-Day Vulnerability Explained

Trust: 3.75

Fetched: Jan. 18, 2022, 11:09 a.m., Published: Jan. 18, 2022, 11:06 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: home

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability | AM 800 KXIC

Trust: 3.0

Fetched: Jan. 18, 2022, 11:09 a.m., Published: Jan. 18, 2022, 11:09 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: icloud

Attackers Now Scanning for 'ProxyShell' Vulnerabilities in Exchange Server -- Redmondmag.com

Trust: 4.75

Fetched: Jan. 18, 2022, 11:08 a.m., Published: Jan. 18, 2022, 11:08 a.m.
 Vulnerabilities: code execution, request forgery
Affected productsExternal IDs
db: NVD ids: CVE-2021-34473, CVE-2021-34523, CVE-2021-31207

NPort 5100A Series Serial Device Servers Vulnerability

Trust: 3.0

Fetched: Jan. 18, 2022, 11:07 a.m., Published: Jan. 16, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: moxa model: nport 5100a series
vendor: moxa model: nport 5100a series firmware
vendor: moxa model: moxa
vendor: moxa model: nport
vendor: moxa model: nport 5100a

Apple iOS vulnerable to HomeKit 'doorLock' denial of service bug

Trust: 4.5

Fetched: Jan. 18, 2022, 10:43 a.m., Published: Jan. 6, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: icloud
vendor: apple model: ipad

Apple says iOS 15.2.1 fixes its HomeKit denial of service vulnerability | iMore

Trust: 5.0

Fetched: Jan. 18, 2022, 10:43 a.m., Published: Jan. 13, 2022, 3:06 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: icloud
vendor: apple model: iphone

Thousands of AT&T customers in the US infected by new data-stealing malware | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-201705-3536

Trust: 4.5

Fetched: Jan. 18, 2022, 10:39 a.m., Published: Jan. 18, 2017, midnight
 Vulnerabilities: denial of service, default credentials
Affected productsExternal IDs
vendor: qemu model: qemu
vendor: ribbon model: edgemarc
vendor: edgewater model: edgemarc
vendor: ribbon communications model: edgemarc
db: NVD ids: CVE-2017-6079

Log4j: List of vulnerable products and vendor advisories

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Jan. 18, 2022, 10:39 a.m., Published: Jan. 6, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco webex meetings server
vendor: cisco model: cisco webex
vendor: cisco model: webex
vendor: cisco model: sd-wan
vendor: cisco model: meetings server
vendor: cisco model: webex meetings
vendor: cisco model: cisco webex meetings
vendor: cisco model: identity services engine
vendor: cisco model: firepower
vendor: cisco model: cisco sd-wan
vendor: cisco model: data center network manager
vendor: cisco model: firepower threat defense
vendor: cisco model: webex meetings server
vendor: cisco model: sd-wan vmanage
vendor: cisco model: series
vendor: tippingpoint model: tippingpoint
vendor: couchbase model: server
vendor: citrix model: gateway
vendor: trend micro model: security
vendor: symantec model: web security
vendor: symantec model: symantec endpoint protection
vendor: symantec model: endpoint protection
vendor: ubiquiti model: unifi
vendor: cpanel model: cpanel
vendor: trendmicro model: security
vendor: broadcom model: api gateway
vendor: broadcom model: broadcom
vendor: broadcom model: linux
vendor: sophos model: cloud optix
vendor: sophos model: mobile
vendor: sophos model: endpoint protection
vendor: trend model: security
vendor: sonicwall model: email security
vendor: sonicwall model: analyzer
vendor: dovecot model: dovecot
db: NVD ids: CVE-2021-44228

security - Does the Log4j vulnerability affect Android users? - Android Enthusiasts Stack Exchange

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Jan. 18, 2022, 10:39 a.m., Published: -
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: google model: android
vendor: serve model: serve
db: NVD ids: CVE-2021-44228