VARIoT latest news about IoT security

Article: What is... a Vulnerability \| F-Secure Trust: 3.0 Fetched: May 13, 2022, 8:17 a.m., Published: May 13, 2022, midnight	Vulnerabilities: -

Affected products	External IDs

SAP Addresses Log4Shell Vulnerability Patching in 20 Applications Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.75 Fetched: May 13, 2022, 8:17 a.m., Published: May 20, 2022, midnight	Vulnerabilities: denial of service, request forgery, code injection...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

Log4j under siege, millions of devices vulnerable \| Futuralistech.com Trust: 3.0 Fetched: May 13, 2022, 8:17 a.m., Published: May 13, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

check point

model:

check point

WordPress plugin exploit puts over 90,000 sites at risk \| IT PRO Trust: 3.0 Fetched: May 13, 2022, 8:17 a.m., Published: May 13, 2022, midnight	Vulnerabilities: access control vulnerability

Affected products	External IDs

Smart Yet Flawed: IoT Device Vulnerabilities Explained - Security News Related entries in the VARIoT vulnerabilities database: VAR-202003-1707 Trust: 4.25 Fetched: May 13, 2022, 8:16 a.m., Published: Aug. 5, 2022, midnight	Vulnerabilities: default credentials, denial of service

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend	model:	home network security
vendor:	sonos	model:	sonos
vendor:	trend micro	model:	security
vendor:	trend micro	model:	home network security
vendor:	serve	model:	serve

db:

NVD

ids:

CVE-2020-9054

FireEye, CISA Warn of Critical IoT Device Vulnerability Trust: 3.75 Fetched: May 13, 2022, 8:16 a.m., Published: May 19, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

watch

db:

NVD

ids:

CVE-2021-28372

Critical macOS vulnerability found to bypass SIP restrictions \| IT PRO Related entries in the VARIoT vulnerabilities database: VAR-202108-2056 Trust: 3.75 Fetched: May 13, 2022, 8:16 a.m., Published: May 13, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

db:

NVD

ids:

CVE-2021-30892

NetUSB flaw exposes millions of routers to remote code execution \| IT PRO Related entries in the VARIoT vulnerabilities database: VAR-202112-2341 Trust: 4.5 Fetched: May 13, 2022, 8:16 a.m., Published: May 13, 2022, midnight	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:	tp-link	model:	routers
vendor:	d-link	model:	router
vendor:	kcodes	model:	netusb
vendor:	netgear	model:	router

db:

NVD

ids:

CVE-2021-45608

Vulnerability - Definition Related entries in the VARIoT vulnerabilities database: VAR-201808-0959, VAR-201710-0214, VAR-201710-0974, VAR-201801-1711, VAR-201501-0338, VAR-201905-0711, VAR-201709-0464, VAR-201905-0710, VAR-201710-0975, VAR-201505-0233, VAR-201409-1156, VAR-201801-0826, VAR-201912-0572, VAR-201710-0207, VAR-201710-0212, VAR-201703-0755, VAR-201710-0209, VAR-201410-1418, VAR-201905-0709, VAR-201404-0592, VAR-201409-1155, VAR-201710-0206, VAR-201808-0958, VAR-201710-0213, VAR-201710-0208, VAR-201710-0211, VAR-201905-1248, VAR-201801-1712, VAR-201808-0957 Trust: 4.75 Fetched: May 13, 2022, 8:16 a.m., Published: Aug. 5, 2022, midnight	Vulnerabilities: denial of service, code execution, privilege escalation...

Affected products

External IDs

vendor:

dram

model:

dram

db:

NVD

ids:

CVE-2018-3615, CVE-2018-1002105, CVE-2019-0708, CVE-2017-13086, CVE-2015-3827, CVE-2017-13087, CVE-2017-0144, CVE-2015-1538, CVE-2017-5754, CVE-2015-3864, CVE-2015-3826, CVE-2019-1069, CVE-2015-0204, CVE-2018-12130, CVE-2017-14315, CVE-2015-3824, CVE-2017-8628, CVE-2018-12127, CVE-2017-13088, CVE-2015-3828, CVE-2015-4000, CVE-2014-6271, CVE-2017-5715, CVE-2019-8635, CVE-2017-13080, CVE-2017-0781, CVE-2017-13079, CVE-2017-5638, CVE-2017-13082, CVE-2017-0147, CVE-2017-1000251, CVE-2015-3829, CVE-2014-3566, CVE-2019-5736, CVE-2017-0146, CVE-2015-6602, CVE-2017-1000250, CVE-2018-12126, CVE-2014-0160, CVE-2014-7169, CVE-2017-13077, CVE-2018-3620, CVE-2017-0782, CVE-2017-0016, CVE-2017-13084, CVE-2017-0785, CVE-2017-13081, CVE-2017-13078, CVE-2015-1539, CVE-2019-1208, CVE-2019-11091, CVE-2018-7600, CVE-2017-5753, CVE-2017-11882, CVE-2017-0783, CVE-2018-3646

Latest Security Advisories & Notable Vulnerabilities - Threat Encyclopedia Trust: 5.5 Fetched: May 13, 2022, 8:16 a.m., Published: Aug. 5, 2022, midnight	Vulnerabilities: memory corruption, code execution

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2021-26411, CVE-2021-26877, CVE-2021-26855, CVE-2021-27076, CVE-2021-26897

Microsoft October Patches Address More Than 70 Vulnerabilities -- Redmondmag.com Related entries in the VARIoT vulnerabilities database: VAR-202110-0829, VAR-202108-2057, VAR-202110-1687, VAR-202110-0498 Trust: 5.5 Fetched: May 13, 2022, 8:16 a.m., Published: Oct. 13, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	apple	model:	watch
vendor:	cisco	model:	series
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2021-40450, CVE-2021-30883, CVE-2021-38672, CVE-2021-41335, CVE-2021-40469, CVE-2021-41338, CVE-2021-41332, CVE-2021-40449, CVE-2021-36970, CVE-2021-41357, CVE-2021-40461

Reflected XSS Vulnerability in TFTP Server - Security Advisory \| QNAP Trust: 4.0 Fetched: May 13, 2022, 8:16 a.m., Published: May 6, 2022, midnight	Vulnerabilities: cross-site scripting

Affected products

External IDs

db:

NVD

ids:

CVE-2021-38674

Smart Yet Flawed: IoT Device Vulnerabilities Explained - Security News - Trend Micro AE Related entries in the VARIoT vulnerabilities database: VAR-202003-1707 Trust: 4.25 Fetched: May 13, 2022, 8:16 a.m., Published: Aug. 5, 2022, midnight	Vulnerabilities: default credentials, denial of service

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend	model:	home network security
vendor:	sonos	model:	sonos
vendor:	trend micro	model:	security
vendor:	trend micro	model:	home network security
vendor:	serve	model:	serve

db:

NVD

ids:

CVE-2020-9054

Command Injection Vulnerability in QVR - Security Advisory \| QNAP (US) Trust: 5.25 Fetched: May 13, 2022, 8:16 a.m., Published: May 6, 2022, midnight	Vulnerabilities: command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2021-38685

"Doctor Web discovered vulnerabilities in children’s smart watches Trust: 3.5 Fetched: May 13, 2022, 8:16 a.m., Published: May 13, 2022, midnight	Vulnerabilities: default password, information leak

Affected products	External IDs

Cisco patches critical vulnerabilities in SME routers - Networking - Security - Software - iTnews Trust: 3.0 Fetched: May 13, 2022, 8:16 a.m., Published: Feb. 4, 2022, 9 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	rv345
vendor:	cisco	model:	rv340
vendor:	cisco	model:	rv345p
vendor:	cisco	model:	series

What's new in Sophos Central Trust: 3.5 Fetched: May 13, 2022, 8:16 a.m., Published: April 14, 2022, midnight	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	sophos	model:	mobile
vendor:	sophos	model:	xg firewall
vendor:	sophos	model:	cloud optix
vendor:	sophos	model:	sophos anti-virus
vendor:	sophos	model:	anti-virus
vendor:	sophos	model:	endpoint protection
vendor:	google	model:	android

Vulnerability In This Cisco Software Could Allow Hackers Access \| Computer Experts Group - IT Support Trust: 5.5 Fetched: May 13, 2022, 8:16 a.m., Published: May 13, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	cisco	model:	staros
vendor:	cisco	model:	cisco staros

db:

NVD

ids:

CVE-2022-20649

Linux : Security vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202107-0788, VAR-202112-2255, VAR-202107-1361, VAR-202107-0793, VAR-202112-1696, VAR-202107-0790, VAR-202107-0791, VAR-202107-0789, VAR-202107-0792 Trust: 5.5 Fetched: May 13, 2022, 8:15 a.m., Published: May 13, 2050, midnight	Vulnerabilities: denial of service, buffer overflow, memory leak...

Affected products

External IDs

vendor:

acrn

model:

acrn

db:

NVD

ids:

CVE-2021-38202, CVE-2021-38206, CVE-2021-37576, CVE-2021-36143, CVE-2021-42327, CVE-2021-38198, CVE-2021-41073, CVE-2021-42739, CVE-2021-41864, CVE-2021-45485, CVE-2021-45480, CVE-2021-34556, CVE-2021-33909, CVE-2021-38199, CVE-2021-38205, CVE-2021-36148, CVE-2021-38160, CVE-2021-35477, CVE-2021-38207, CVE-2021-44733, CVE-2021-38204, CVE-2021-42252, CVE-2021-33624, CVE-2021-45486, CVE-2021-43976, CVE-2021-38209, CVE-2021-34693, CVE-2021-42008, CVE-2021-36145, CVE-2021-43975, CVE-2021-38200, CVE-2021-37159, CVE-2021-43057, CVE-2021-36146, CVE-2021-36144, CVE-2021-38203, CVE-2021-38300, CVE-2021-45095, CVE-2021-38166, CVE-2021-40490, CVE-2021-35039, CVE-2021-45469, CVE-2021-36147, CVE-2021-38208, CVE-2021-38201, CVE-2021-43267, CVE-2021-43389, CVE-2021-33200, CVE-2021-43056, CVE-2021-33034

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: May 13, 2022, 8:15 a.m., Published: May 13, 2048, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

VARIoT news about IoT security