Sign-up

VARIoT news about IoT security

Critical Axeda vulnerabilities pose takeover risk to hundreds of IoT devices | The Daily Swig

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 9, 2022, 3:35 p.m.
 Vulnerabilities: denial of service, directory traversal, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25247, CVE-2022-25248, CVE-2022-25249, CVE-2022-25246, CVE-2022-25251, CVE-2022-25250

FortiOS and SSL Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-201905-0764, VAR-201906-0815, VAR-201906-0818

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Aug. 28, 2019, 7 a.m.
 Vulnerabilities: path traversal, authorization vulnerability, buffer overflow...
Affected productsExternal IDs
db: NVD ids: CVE-2018-13383, CVE-2018-13379, CVE-2018-13382

Widely used UPS devices can be hijacked and destroyed remotely - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 11:12 a.m.
 Vulnerabilities: authentication bypass, buffer overflow, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715

R7-2014-18: Hikvision DVR Devices - Multiple Vulnerabilities | Rapid7 Blog

Related entries in the VARIoT vulnerabilities database: VAR-201412-0174, VAR-201411-0522, VAR-201411-0537, VAR-201403-0122

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Nov. 19, 2014, 8:17 p.m.
 Vulnerabilities: default password, buffer overflow, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2014-4880, CVE-2014-4878, CVE-2014-4879, CVE-2013-4977

BlueFrag security vulnerability allows code execution over Bluetooth on some Android devices

Related entries in the VARIoT vulnerabilities database: VAR-202002-0214

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Feb. 8, 2020, 8:09 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2020-0022

Vulnerability and Patch Management Guide - DNSstuff

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: July 21, 2020, 7:28 a.m.
 Vulnerabilities: service disruption, configuration problem
Affected productsExternal IDs

Critical Vulnerability Found in Majority of LG NAS Devices

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 5, 2022, midnight
 Vulnerabilities: remote command injection, command execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2018-10818

What you need to do about the WPA2 Wi-Fi network vulnerability

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 1, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs

The OWASP IoT Top 10 List of Vulnerabilities - InfoSec Insights

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 30, 2020, 10 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

What to know about Vulnerability Scanners and Scanning Tools | Balbix

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Nov. 27, 2019, 4:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

These new vulnerabilities put millions of IoT devices at risk, so patch now | ZDNet

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 5, 2022, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs

Vulnerabilities in remote management agent impacts thousands of medical devices - ARN

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 8, 2022, midnight
 Vulnerabilities: information leak, code execution, directory traversal...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25248, CVE-2022-25247, CVE-2022-25246, CVE-2022-25249, CVE-2022-25251, CVE-2022-25250

DSA-2019-039: Dell Wyse Device Agent Buffer Overflow Vulnerability | Dell Polska

Related entries in the VARIoT vulnerabilities database: VAR-201903-0148

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: May 7, 2022, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2019-3712

HP Device Manager vulnerabilities may allow full system takeover - Help Net Security

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Oct. 7, 2020, 12:52 p.m.
 Vulnerabilities: command execution, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2020-6926, CVE-2020-6927, CVE-2020-6925

FDA informs patients, providers and manufacturers about potential cybersecurity vulnerabilities for connected medical devices and health care networks that use certain communication software | FDA

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Oct. 1, 2019, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs

Microsoft January 2022 Patch Tuesday Fixes 97 Vulnerabilities, Six Zero-Day

Related entries in the VARIoT vulnerabilities database: VAR-202201-0640, VAR-202107-1503, VAR-202109-1789

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Feb. 10, 2022, 9:35 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21919, CVE-2021-36976, CVE-2022-21874, CVE-2021-22947, CVE-2022-21836, CVE-2022-21839

Sophos Firewall Remote Code Execution Vulnerability: What You Need to Know - Security Boulevard

Trust: [5.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 28, 2022, 7:17 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-1040

DistroWatch.com: Damn Vulnerable Linux

Trust: [4.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 1, 2022, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs

New Supply Chain Vulnerabilities Impact Medical and IoT Devices - Security Boulevard

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 8, 2022, 5:10 a.m.
 Vulnerabilities: directory traversal, information disclosure, buffer overflow...
Affected productsExternal IDs
db: NVD ids: CVE-2022-25252, CVE-2022-25248, CVE-2022-25247, CVE-2022-25249, CVE-2022-25246, CVE-2022-25251, CVE-2022-25250

Medical and IoT devices from more than 100 vendors vulnerable to attack - Urgent Comms

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 10, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs