Sign-up

VARIoT news about IoT security

Critical flaws in 'millions of Aruba, Avaya switches' • The Register

Trust: 5.75

Fetched: June 1, 2022, 8:58 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: extreme model: ers3500
vendor: aruba model: web management portal
vendor: extreme networks model: ers3500
db: NVD ids: CVE-2022-23676, CVE-2022-29861, CVE-2022-23677, CVE-2022-29860

These popular VPNs, firewalls are actively under attack | TechRadar

Related entries in the VARIoT vulnerabilities database: VAR-202205-0957

Trust: 4.0

Fetched: June 1, 2022, 8:58 a.m., Published: May 16, 2022, 5:34 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-30525

Rapid7 discovers critical vulnerability in Zyxel firewalls - Techzine Europe

Related entries in the VARIoT vulnerabilities database: VAR-202205-0957

Trust: 5.0

Fetched: June 1, 2022, 8:58 a.m., Published: June 6, 2022, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-30525

Vulnerability Alert: TLStorm 2

Trust: 3.75

Fetched: June 1, 2022, 8:58 a.m., Published: May 4, 2022, midnight
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs

Exploits created for critical F5 BIG-IP flaw, install patch immediately

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394

Trust: 4.75

Fetched: June 1, 2022, 8:58 a.m., Published: June 1, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-1388

When “secure” isn’t secure at all: High‑impact UEFI vulnerabilities discovered in Lenovo consumer laptops | WeLiveSecurity

Trust: 4.25

Fetched: June 1, 2022, 8:16 a.m., Published: April 19, 2022, 9:30 a.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: ring model: ring
vendor: lenovo model: 110-15ibr
vendor: lenovo model: updates
vendor: lenovo model: bios
vendor: lenovo model: 330-15igm
vendor: lenovo model: system
vendor: lenovo model: power management
vendor: lenovo model: yoga
db: NVD ids: CVE-2021-3972, CVE-2021-3971, CVE-2021-3970

Microsoft Security Bulletins: March 2022

Related entries in the VARIoT vulnerabilities database: VAR-202203-0039, VAR-202009-1442, VAR-202203-0090, VAR-202006-1623

Trust: 5.25

Fetched: June 1, 2022, 8:16 a.m., Published: March 1, 2022, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-24464, CVE-2022-23277, CVE-2022-24452, CVE-2022-24457, CVE-2022-24461, CVE-2022-24508, CVE-2022-23285, CVE-2022-24453, CVE-2022-21967, CVE-2022-24509, CVE-2022-24462, CVE-2022-24501, CVE-2022-21990, CVE-2022-23297, CVE-2022-24526, CVE-2022-23288, CVE-2022-24502, CVE-2022-24455, CVE-2022-22006, CVE-2022-23299, CVE-2022-23296, CVE-2020-8927, CVE-2022-23283, CVE-2022-23290, CVE-2022-23287, CVE-2022-24463, CVE-2022-24454, CVE-2022-24512, CVE-2022-24503, CVE-2022-24505, CVE-2022-24451, CVE-2022-24511, CVE-2022-23295, CVE-2022-23282, CVE-2022-22010, CVE-2022-23294, CVE-2022-24522, CVE-2022-24510, CVE-2020-9827, CVE-2022-21977, CVE-2022-24460, CVE-2022-23284, CVE-2022-24459, CVE-2022-24507, CVE-2022-23293, CVE-2022-23253, CVE-2022-24456, CVE-2022-23300, CVE-2022-23291, CVE-2022-21973, CVE-2022-22007, CVE-2022-23301, CVE-2022-21975, CVE-2022-23298, CVE-2022-24525, CVE-2022-23286, CVE-2022-23281

The anatomy of Spring4Shell vulnerability-and how to prevent its effects | Dynatrace news

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: 3.5

Fetched: June 1, 2022, 8:16 a.m., Published: April 14, 2022, 9:40 p.m.
 Vulnerabilities: code execution, injection attack, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-22965

Vulnerable Audio Decoder Exposes Conversations of Millions of Android Users (CVE-2021-30351)

Related entries in the VARIoT vulnerabilities database: VAR-202112-0901

Trust: 4.5

Fetched: June 1, 2022, 8:16 a.m., Published: April 21, 2022, 12:24 p.m.
 Vulnerabilities: code execution, privilege escalation, memory access issue...
Affected productsExternal IDs
vendor: serve model: serve
vendor: check point model: check point
db: NVD ids: CVE-2021-0675, CVE-2021-30351, CVE-2021-0674

Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202205-0957

Trust: 4.75

Fetched: June 1, 2022, 8:16 a.m., Published: May 13, 2022, 6:24 a.m.
 Vulnerabilities: code execution, buffer overflow, privilege escalation...
Affected productsExternal IDs
db: NVD ids: CVE-2022-26413, CVE-2022-30525, CVE-2022-0556, CVE-2022-26414

NVIDIA Fixes 10 GPU Display Driver Vulnerabilities - Lansweeper

Trust: 3.75

Fetched: June 1, 2022, 8:16 a.m., Published: May 18, 2022, 12:13 p.m.
 Vulnerabilities: code execution, information disclosure, denial of service...
Affected productsExternal IDs
db: NVD ids: CVE-2022-28184, CVE-2022-28187, CVE-2022-28182, CVE-2022-28190, CVE-2022-28185, CVE-2022-28189, CVE-2022-28183, CVE-2022-28188, CVE-2022-28181, CVE-2022-28186

Zyxel firewall, VPN device vulnerabilities addressed

Related entries in the VARIoT vulnerabilities database: VAR-202203-1898

Trust: 5.5

Fetched: June 1, 2022, 8:16 a.m., Published: April 1, 2022, 5:10 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
vendor: zyxel model: zywall
db: NVD ids: CVE-2022-26871, CVE-2022-1040, CVE-2022-0342

New Dell BIOS Vulnerability in Alienware, Inspiron, Vostro, XPS Devices

Trust: 3.25

Fetched: June 1, 2022, 8:16 a.m., Published: March 23, 2022, 11:36 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Researchers find potentially vulnerable smart home devices - Stacey on IoT | Internet of Things news and analysis

Trust: 3.5

Fetched: June 1, 2022, 8:16 a.m., Published: March 8, 2022, 4:19 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: note
vendor: samsung model: samsung

Serious Java vulnerability lets hackers masquerade as anyone they please | TechRadar

Trust: 4.0

Fetched: June 1, 2022, 8:16 a.m., Published: April 25, 2022, 9:30 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: yubico model: yubikey
db: NVD ids: CVE-2022-21449

Three critical vulnerabilities discovered in APC Smart-UPS devices - Techzine Europe

Trust: 4.75

Fetched: June 1, 2022, 8:16 a.m., Published: March 9, 2022, 11:56 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor

WiFi IoT Device Security Issues Found on ESP32 and ESP8266

Trust: 3.75

Fetched: June 1, 2022, 8:16 a.m., Published: Dec. 18, 2020, 4:16 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2019-12588, CVE-2019-12586, CVE-2019-12587

Zyxel firewall, VPN device vulnerabilities addressed

Related entries in the VARIoT vulnerabilities database: VAR-202203-1898

Trust: 5.5

Fetched: June 1, 2022, 8:16 a.m., Published: April 1, 2022, 5:10 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
vendor: zyxel model: zywall
db: NVD ids: CVE-2022-26871, CVE-2022-1040, CVE-2022-0342

10 Most Common Web Security Vulnerabilities

Trust: 3.5

Fetched: June 1, 2022, 8:16 a.m., Published: Oct. 1, 2020, 6:30 p.m.
 Vulnerabilities: system crash, request forgery, session fixation...
Affected productsExternal IDs
vendor: google model: home

Lenovo Offers Patch For Millions Of Vulnerable Laptops

Trust: 3.5

Fetched: June 1, 2022, 8:16 a.m., Published: April 19, 2022, 4:56 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: lenovo model: system
vendor: lenovo model: updates
vendor: lenovo model: bios