Sign-up

VARIoT news about IoT security

Web Application Vulnerabilities: Most Common Types To Beware | Benzinga

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 5, 2022, midnight
 Vulnerabilities: cross-site request forgery, cross-site scripting, request forgery...
Affected productsExternal IDs

Spring4Shell (CVE-2022-22965): Are you vulnerable to this Zero Day?

Related entries in the VARIoT vulnerabilities database: VAR-202203-1506

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 31, 2022, midnight
 Vulnerabilities: code injection
Affected productsExternal IDs
db: NVD ids: CVE-2022-22963, CVE-2010-1622, CVE-2022-22965

Vulners - Johnson Controls Metasys

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 5, 2022, midnight
 Vulnerabilities: request forgery
Affected productsExternal IDs
db: NVD ids: CVE-2021-36202

Russia-backed Hackers Bypassed MFA, Exploited Print Vulnerability - MSSP Alert

Related entries in the VARIoT vulnerabilities database: VAR-202107-1010

Trust: [4.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 23, 2022, 8:07 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-34527

Dahua Broken Access Control Vulnerability

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Jan. 25, 2022, 3:53 p.m.
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs

New TCG guidance simplifies creating cyber resilient devices - Global Security Mag Online

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 7, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Protecting patients by securing medical devices and the Internet of Medical Things (IoMT) | AT&T Cybersecurity

Trust: [4.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 2, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Critical Vulnerabilities In APC Smart-UPS Devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0236, VAR-202203-0237, VAR-202203-0235

Trust: [5.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 11, 2022, 6:21 a.m.
 Vulnerabilities: memory corruption, authentication bypass, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-22806, CVE-2022-22805, CVE-2022-0715

Log4j vulnerability explained: Zero-day attacks and how to contain them - Infosec Resources

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: [3.75, []]

Fetched: May 13, 2022, 10:50 a.m., Published: Feb. 23, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

The Dirty Pipe Vulnerability - The Dirty Pipe Vulnerability documentation

Related entries in the VARIoT vulnerabilities database: VAR-202203-0043, VAR-201611-0386

Trust: [3.5, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 5, 2022, midnight
 Vulnerabilities: privilege escalation, heap corruption
Affected productsExternal IDs
db: NVD ids: CVE-2022-0847, CVE-2016-5195

Vulnerabilities found in 250 HP printer models - ARN

Trust: [5.25, []]

Fetched: May 13, 2022, 10:50 a.m., Published: April 7, 2022, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2022-24292, CVE-2022-3942, CVE-2022-24291, CVE-2022-24293

CISA Adds Four Known Exploited Vulnerabilities to Catalog | CISA

Trust: [3.0, []]

Fetched: May 13, 2022, 10:50 a.m., Published: March 11, 2022, midnight
 Vulnerabilities: cross-site scripting, code execution, code injection
Affected productsExternal IDs
db: NVD ids: CVE-2014-6352, CVE-2022-24682, CVE-2017-0222, CVE-2017-8570

Smarter MSP - Helping MSPs Build Better Businesses

Related entries in the VARIoT vulnerabilities database: VAR-202203-0043

Trust: 5.0

Fetched: May 13, 2022, 10:45 a.m., Published: -
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2022-0847, CVE-2022-049

oss-sec: Xen Security Advisory 396 v3 (CVE-2022-23036,CVE-2022-23037,CVE-2022-23038,CVE-2022-23039,CVE-2022-23040,CVE-2022-23041,CVE-2022-23042) - Linux PV device frontends vulnerable to attacks by backends

Trust: 4.75

Fetched: May 13, 2022, 10:45 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-23039, CVE-2022-23036, CVE-2022-23042, CVE-2022-23040, CVE-2022-23038, CVE-2022-23041, CVE-2022-23037

Weekly Threat Report 28th January 2022 - NCSC.GOV.UK

Trust: 3.0

Fetched: May 13, 2022, 10:45 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs

Singapore discloses four critical Riverbed flaws • The Register

Trust: 4.5

Fetched: May 13, 2022, 10:45 a.m., Published: -
 Vulnerabilities: code execution, directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2021-42787, CVE-2021-42786, CVE-2021-42853, CVE-2021-42854

QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices - on March 30, 2022 at 11:30 pm - STETSON CyberGroup

Trust: [4.0, []]

Fetched: May 13, 2022, 9:12 a.m., Published: March 30, 2022, 11:30 p.m.
 Vulnerabilities: infinite loop vulnerability
Affected productsExternal IDs

FREE and ONLINE SQL injection Scanner with sqlmap

Trust: 4.0

Fetched: May 13, 2022, 8:17 a.m., Published: Dec. 6, 2022, midnight
 Vulnerabilities: code injection, sql injection
Affected productsExternal IDs

Smart home security devices may be vulnerable to smart hackers | William & Mary

Trust: 4.25

Fetched: May 13, 2022, 8:17 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: wifi
vendor: google model: home

New Mirai Variant Exploits NAS Device Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202003-1707

Trust: 4.5

Fetched: May 13, 2022, 8:17 a.m., Published: May 19, 2022, midnight
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: palo alto networks model: palo alto networks
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: palo model: palo alto networks
vendor: palo model: networks
vendor: palo model: firewall
db: NVD ids: CVE-2020-9054