Sign-up

VARIoT news about IoT security

Cyber Security Asean

Trust: 4.75

Fetched: May 13, 2022, 8:12 a.m., Published: May 17, 2022, midnight
 Vulnerabilities: denial of service, feature bypass, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2022-21907, CVE-2022-21849, CVE-2022-21837, CVE-2022-21840, CVE-2022-21846

Inside the Log4j2 vulnerability (CVE-2021-44228)

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.0

Fetched: May 13, 2022, 8:11 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Moxa NPort Device Vulnerabilities (Update A) | CISA

Related entries in the VARIoT vulnerabilities database: VAR-201702-0594, VAR-201702-0851, VAR-201702-0596, VAR-201702-0860, VAR-201702-0597, VAR-201702-0593, VAR-201702-0862, VAR-201702-0595

Trust: 4.5

Fetched: May 13, 2022, 8:11 a.m., Published: March 21, 2017, midnight
 Vulnerabilities: resource exhaustion, code execution, cross-site request forgery...
Affected productsExternal IDs
vendor: moxa model: nport 5200 series
vendor: moxa model: nport
vendor: moxa model: nport 5450ai-m12
vendor: moxa model: nport 5600-8-dtl series
vendor: moxa model: nport 5100a series
vendor: moxa model: nport 5400 series
vendor: moxa model: nport 5600-8-dt
vendor: moxa model: nport 5200a
vendor: moxa model: nport 5110
vendor: moxa model: nport 5600 series
vendor: moxa model: nport 5150ai-m12
vendor: moxa model: nport 5130
vendor: moxa model: nport 5250ai-m12
vendor: moxa model: nport 5100a
vendor: moxa model: nport 5600-8-dtl
vendor: moxa model: nport ia5450a
vendor: moxa model: nport 5200a series
vendor: moxa model: nport p5150a
db: NVD ids: CVE-2016-9366, CVE-2016-9348, CVE-2016-9369, CVE-2016-9361, CVE-2016-9371, CVE-2016-9365, CVE-2016-9363, CVE-2016-9367

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: May 13, 2022, 8:11 a.m., Published: May 15, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

"Multiple Vulnerabilities Impact Netgear Nighthawk R6700 Routers" | CPS-VO

Related entries in the VARIoT vulnerabilities database: VAR-202112-2041, VAR-202112-2044

Trust: 3.75

Fetched: May 13, 2022, 8:11 a.m., Published: Jan. 3, 2022, 10:41 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: netgear model: r6700v3
vendor: netgear model: r6700
db: NVD ids: CVE-2021-23147, CVE-2021-20173

More than half of medical devices found to have critical vulnerabilities

Trust: 3.75

Fetched: May 13, 2022, 8:11 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

HomeKit vulnerability may cause iOS devices to freeze, crash - Digital India Web

Trust: 5.5

Fetched: May 13, 2022, 8:11 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: icloud

Linux flaw that allows anyone to hijack Internet traffic also affects 80% of Android devices

Trust: 3.75

Fetched: May 13, 2022, 8:11 a.m., Published: Aug. 15, 2016, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2016-5696

Log4j2 Vulnerability: How to Mitigate CVE-2021-44228 | CrowdStrike

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: May 13, 2022, 8:11 a.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: snort model: snort
db: NVD ids: CVE-2021-44228

Over Half of Medical IoT Devices Found Vulnerable to Cyberattacks

Trust: 4.0

Fetched: May 13, 2022, 8:11 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Outdated IoT healthcare devices pose major security threats | CSO Online

Trust: 4.75

Fetched: May 13, 2022, 8:11 a.m., Published: May 5, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ip phone

An In-Depth Look at the 23 High-Impact Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202202-0009, VAR-202202-0007, VAR-202202-0108, VAR-202106-0358, VAR-202202-0147, VAR-202202-0037, VAR-202110-0264, VAR-202202-0129, VAR-202202-0102

Trust: 4.25

Fetched: May 13, 2022, 8:11 a.m., Published: May 23, 2022, midnight
 Vulnerabilities: code execution, memory corruption, privilege escalation
Affected productsExternal IDs
vendor: dell model: bios
vendor: lenovo model: system
vendor: lenovo model: bios
db: NVD ids: CVE-2021-33627, CVE-2021-43522, CVE-2021-41839, CVE-2020-5953, CVE-2021-45971, CVE-2021-43323, CVE-2021-45970, CVE-2021-41840, CVE-2021-42060, CVE-2021-42113, CVE-2022-24031, CVE-2021-41837, CVE-2021-41841, CVE-2021-45969, CVE-2022-24030, CVE-2020-27339, CVE-2021-43615, CVE-2021-42554, CVE-2021-33625, CVE-2021-33626, CVE-2022-24069, CVE-2021-42059, CVE-2021-41838

Half of IoT devices in hospitals have a known critical - Inavate

Trust: 3.25

Fetched: May 13, 2022, 8:11 a.m., Published: Jan. 31, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Apple iOS 15.3 and iPadOS 15.3 address a number of security vulnerabilities | Digit

Related entries in the VARIoT vulnerabilities database: VAR-202201-0561, VAR-202201-0554

Trust: 5.5

Fetched: May 13, 2022, 8:11 a.m., Published: May 15, 2022, midnight
 Vulnerabilities: denial of service, memory corruption
Affected productsExternal IDs
vendor: apple model: ipod touch
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: icloud
vendor: apple model: iphone
vendor: apple model: ipad air
db: NVD ids: CVE-2022-22587, CVE-2022-22594

Two Dozen UEFI Vulnerabilities Impact Millions of Devices From Major Vendors | SecurityWeek.Com

Trust: 4.75

Fetched: May 13, 2022, 8:11 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: siemens model: ip camera
vendor: lenovo model: system
vendor: lenovo model: edge

Major device vendors face 23 UEFI firmware vulnerabilities

Trust: 4.5

Fetched: May 13, 2022, 8:11 a.m., Published: May 23, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: dell model: bios
vendor: lenovo model: updates
vendor: lenovo model: bios firmware
vendor: lenovo model: system
vendor: lenovo model: bios

SpiderLabs Blog | Trustwave

Trust: 4.0

Fetched: May 13, 2022, 8:11 a.m., Published: May 24, 2022, midnight
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs

BlueZ

Trust: 3.0

Fetched: May 13, 2022, 8:11 a.m., Published: March 19, 2005, 6:18 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: mesh model: mesh

Google Patches 48 Vulnerabilities With First Set of 2022 Android Updates - Security & Networking - Scot's Newsletter Forums

Trust: 3.0

Fetched: May 13, 2022, 8:11 a.m., Published: May 13, 2048, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: google model: pixel

Dahua Broken Access Control Vulnerability

Trust: 3.0

Fetched: May 13, 2022, 8:11 a.m., Published: Jan. 25, 2022, 10:53 a.m.
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs