Sign-up

VARIoT news about IoT security

CVE-2021-3927[67]: Fortress S03 WiFi Home Security System Vulnerabilities | Rapid7 Blog

Trust: 5.0

Fetched: Jan. 14, 2022, 12:41 p.m., Published: Aug. 31, 2021, 1 p.m.
 Vulnerabilities: replay attack
Affected productsExternal IDs
vendor: serve model: serve
db: NVD ids: CVE-2021-3927, CVE-2021-39277, CVE-2021-39276

New Windows zero-day with public exploit lets you become an admin

Related entries in the VARIoT vulnerabilities database: VAR-202111-0697

Trust: 4.0

Fetched: Jan. 14, 2022, 12:41 p.m., Published: Jan. 14, 2050, midnight
 Vulnerabilities: privilege elevation
Affected productsExternal IDs
db: NVD ids: CVE-2021-41379

Widely-Used Hikvision Security Cameras Vulnerable To Remote Hijacking

Trust: 3.75

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Sept. 22, 2021, 2:49 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: hikvision model: hikvision
vendor: hikvision model: camera

Security Bulletin: NVIDIA GPU display driver contains multiple vulnerabilities in the kernel mode layer handler | NVIDIA

Trust: 5.5

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Sept. 29, 2021, 1:07 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: citrix model: xenserver
vendor: citrix model: licensing
db: NVD ids: CVE-2017-6256, CVE-2017-6251, CVE-2017-6260, CVE-2017-6252, CVE-2017-6257, CVE-2017-6254, CVE-2017-6259, CVE-2017-6253, CVE-2017-6255

Bluetooth devices proven to be vulnerable to | EurekAlert!

Trust: 3.75

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Sept. 5, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: asus model: asus
vendor: samsung model: samsung

Microsoft Confirms Another PrintNightmare Bug

Trust: 5.25

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Aug. 12, 2021, 1:58 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-36958

Phillips Vulnerabilities: IntelliBridge, Patient Information Center, and Efficia Patient Monitors - Medigate Blog

Related entries in the VARIoT vulnerabilities database: VAR-202111-1714

Trust: 4.0

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Nov. 22, 2021, 9:45 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2021-43548

Researcher Releases Updated 0-Day Vulnerability for Windows Systems after Patch Tuesday

Related entries in the VARIoT vulnerabilities database: VAR-202111-0697

Trust: 3.0

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Jan. 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-41379

Google hikes bounty for Linux kernel vulnerabilities | TechRadar

Trust: 4.0

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Nov. 2, 2021, 3:54 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android

About the security content of iOS 14.4 and iPadOS 14.4 - Apple Support

Related entries in the VARIoT vulnerabilities database: VAR-202104-0615, VAR-202104-0614, VAR-202104-0617, VAR-202104-0619, VAR-202104-0633, VAR-202104-0628, VAR-202104-0606, VAR-202104-0636, VAR-202104-0610, VAR-202104-0598, VAR-202104-0627, VAR-202104-0649, VAR-202104-0625, VAR-202104-0592, VAR-202104-0624, VAR-202104-0647, VAR-202104-0648, VAR-202104-0616, VAR-202104-0629, VAR-202109-0352, VAR-202104-0605, VAR-202104-0635, VAR-202104-0612, VAR-202109-0286, VAR-202104-0621, VAR-202104-0596, VAR-202108-1374, VAR-202104-0609, VAR-202104-0750, VAR-202104-0608, VAR-202104-0595, VAR-202104-0751, VAR-202104-0618, VAR-202104-0599, VAR-202104-0601, VAR-202104-0623, VAR-202104-0620, VAR-202104-0639, VAR-202104-0641, VAR-202104-0645, VAR-202104-0597, VAR-202104-0637, VAR-202104-0600, VAR-202104-0646, VAR-202104-0594, VAR-202104-0611, VAR-202104-0603, VAR-202104-0626, VAR-202104-0643, VAR-202104-0638, VAR-202104-0630, VAR-202104-0587, VAR-202104-0604, VAR-202104-0632

Trust: 5.25

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: heap corruption, denial of service, code execution...
Affected productsExternal IDs
vendor: trend micro model: security
vendor: apple model: webkit
vendor: apple model: itunes
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: ipod touch
vendor: trend model: security
db: NVD ids: CVE-2021-1792, CVE-2021-1791, CVE-2021-1794, CVE-2021-1796, CVE-2021-1754, CVE-2021-1747, CVE-2021-1769, CVE-2021-1757, CVE-2021-1787, CVE-2021-1760, CVE-2021-1746, CVE-2021-1785, CVE-2021-1744, CVE-2021-1818, CVE-2021-1743, CVE-2021-1782, CVE-2021-1783, CVE-2021-1793, CVE-2021-1748, CVE-2021-1838, CVE-2021-1768, CVE-2021-1756, CVE-2021-1789, CVE-2021-1762, CVE-2021-1799, CVE-2021-1741, CVE-2021-30869, CVE-2021-1786, CVE-2021-1870, CVE-2021-1772, CVE-2021-1738, CVE-2021-1871, CVE-2021-1795, CVE-2021-1761, CVE-2021-1764, CVE-2021-1742, CVE-2021-1797, CVE-2021-1774, CVE-2021-1776, CVE-2021-1780, CVE-2021-1759, CVE-2021-1758, CVE-2021-1763, CVE-2021-1781, CVE-2021-1737, CVE-2021-1788, CVE-2021-1766, CVE-2021-1745, CVE-2021-1778, CVE-2021-1773, CVE-2021-1750, CVE-2021-1801, CVE-2021-1767, CVE-2021-1753

Security Bulletin: Multiple vulnerabilities in the NVIDIA Windows GPU Display Driver kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape and a vulnerability in the Linux GPU Display Driver kernel mode layer (nvidia.ko) | NVIDIA

Trust: 5.5

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Sept. 29, 2021, 1:04 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: device manager
vendor: cisco model: series
db: NVD ids: CVE-2016-8826, CVE-2016-8825, CVE-2016-8821, CVE-2016-8824, CVE-2016-8822, CVE-2016-8823

Apple Addresses “Shrootless” Vulnerability - Binary Defense

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 5.0

Fetched: Jan. 14, 2022, 12:26 p.m., Published: Jan. 4, 2022, midnight
 Vulnerabilities: security feature bypass, feature bypass
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30892

Zero-Day Disclosure: PAN GlobalProtect CVE-2021-3064

Trust: 5.25

Fetched: Jan. 14, 2022, 12:19 p.m., Published: Dec. 10, 2021, 3:41 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: firewall
vendor: palo alto networks model: palo alto networks
vendor: palo model: networks
vendor: palo model: pan-os
vendor: palo model: firewall
vendor: palo model: palo alto networks
db: NVD ids: CVE-2021-3064

Hackers Can Exploit Apple AirTag Vulnerability to Lure Users to Malicious Sites | SecurityWeek.Com

Trust: 3.75

Fetched: Jan. 14, 2022, 12:19 p.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: apple model: icloud

Positive Technologies Discovers Vulnerability in Intel Processors used in Laptops, Cars and Other devices

Trust: 4.75

Fetched: Jan. 14, 2022, 12:19 p.m., Published: Jan. 8, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: tesla model: model 3
vendor: tesla model: model
db: NVD ids: CVE-2021-0146

13 critical Nucleus TCP/IP flaws pose denial-of-service risk to medical devices

Related entries in the VARIoT vulnerabilities database: VAR-202103-0365

Trust: 4.5

Fetched: Jan. 14, 2022, 12:15 p.m., Published: Nov. 15, 2021, 12:20 p.m.
 Vulnerabilities: improper validation, code execution
Affected productsExternal IDs
vendor: siemens model: nucleus
vendor: siemens model: nucleus net
db: NVD ids: CVE-2016-20009

Siemens software vulnerabilities potentially put millions of medical devices at risk | MedTech Dive

Trust: 3.5

Fetched: Jan. 14, 2022, 11:53 a.m., Published: Nov. 11, 2021, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: siemens model: nucleus

BrakTooth Bluetooth Vulnerability Crashes Devices, Reveals Need for IoT Device Testing - Embedded Computing Design

Trust: 3.75

Fetched: Jan. 14, 2022, 11:53 a.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs

Forescout, JFrog reveal new vulnerabilities in industrial systems, showing challenges in edge network, device security | Edge Industry Review

Trust: 3.0

Fetched: Jan. 14, 2022, 11:53 a.m., Published: Aug. 8, 2021, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs

Vulnerabilities Discovered in IoT Software Suite " ADMIN Magazine

Trust: 3.25

Fetched: Jan. 14, 2022, 11:53 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs