Sign-up

VARIoT news about IoT security

Billions of devices affected by UPnP vulnerability - Naked Security

Related entries in the VARIoT vulnerabilities database: VAR-202006-0391

Trust: 3.25

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-12695

Top 15 Paid and Free Vulnerability Scanner Tools - DNSstuff

Trust: 3.25

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: sql injection, path traversal, cross-site scripting...
Affected productsExternal IDs
vendor: tripwire model: ip360
vendor: wireshark model: wireshark

IP-in-IP Vulnerability Affects Devices From Cisco and Others | SecurityWeek.Com

Related entries in the VARIoT vulnerabilities database: VAR-202006-0258

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 15, 2022, midnight
 Vulnerabilities: information leak, process crash
Affected productsExternal IDs
vendor: digi model: saros
vendor: cisco model: nx-os
vendor: cisco model: firepower
vendor: cisco model: mds 9000
vendor: cisco model: nx-os software
vendor: cisco model: nexus 9000
vendor: cisco model: series
vendor: cisco model: 1000v
vendor: cisco model: firepower 2100
vendor: cisco model: nexus 9000 series
vendor: cisco model: nexus
vendor: cisco model: firepower 9300
vendor: cisco model: mds 9000 series
vendor: hewlett packard enterprise model: hewlett packard enterprise
vendor: hewlett packard enterprise model: switches
vendor: hewlett packard enterprise model: 9000
vendor: hewlett packard enterprise model: hewlett packard
vendor: hewlett packard enterprise model: 1000 series
vendor: hewlett packard model: hewlett packard enterprise
vendor: hewlett packard model: switches
vendor: hewlett packard model: 9000
vendor: hewlett packard model: hewlett packard
vendor: hewlett packard model: 1000 series
vendor: digi international model: saros
db: NVD ids: CVE-2020-10136

2 Million IoT Devices Vulnerable to Complete Takeover | Threatpost

Related entries in the VARIoT vulnerabilities database: VAR-202012-0977

Trust: 3.25

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-29583, CVE-2019-11220, CVE-2019-11219

FragAttacks: Security flaws in all Wi-Fi devices

Related entries in the VARIoT vulnerabilities database: VAR-202105-1431, VAR-202105-1477, VAR-202105-1430, VAR-202105-1432, VAR-202105-1476, VAR-202105-1428, VAR-202105-0257, VAR-202009-0518, VAR-202105-1475, VAR-202105-1493, VAR-202105-1429

Trust: 5.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 7, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: home
db: NVD ids: CVE-2020-24588, CVE-2020-26146, CVE-2020-26142, CVE-2020-26139, CVE-2020-24587, CVE-2020-24586, CVE-2020-26144, CVE-2020-26141, CVE-2019-18991, CVE-2020-26145, CVE-2019-18989, CVE-2019-18990, CVE-2020-26147, CVE-2020-26143, CVE-2020-26140

SweynTooth Vulnerabilities | CISA

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: memory corruption, security bypass, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2019-17517, CVE-2019-17060, CVE-2019-19196, CVE-2019-19194, CVE-2019-17519, CVE-2019-17061, CVE-2019-19195, CVE-2019-17518, CVE-2019-16336, CVE-2019-19192, CVE-2019-17520, CVE-2019-19193
db: ICS CERT ALERT ids: ICS-ALERT-20-063-01

Common SNMP Vulnerability: 9-Step Guide to Protect Your Network

Related entries in the VARIoT vulnerabilities database: VAR-200202-0006, VAR-200202-0007

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: general electric model: industrial solutions ups snmp/web adapter
vendor: symantec model: symantec web gateway
vendor: symantec model: web gateway
db: NVD ids: CVE-2002-0012, CVE-2002-0013

Device Hardening, Vulnerability Scanning and Threat Mitigation for Compliance and Security

Trust: 3.75

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs
db: POSIVITIVE TECHNOLOGY ids: ID:10

AVTECH IP Camera / NVR / DVR Devices - Multiple Vulnerabilities - CGI webapps Exploit

Trust: 5.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: -
 Vulnerabilities: information leakage, authentication bypass, default password...
Affected productsExternal IDs
vendor: avtech model: ip camera

FragAttack: New Wi-Fi vulnerabilities that affect... basically everything | Malwarebytes Labs

Related entries in the VARIoT vulnerabilities database: VAR-202105-1429, VAR-202105-1475, VAR-202105-1493, VAR-202105-1431, VAR-202105-1476, VAR-202105-1428, VAR-202105-1432, VAR-202105-1430, VAR-202105-1477, VAR-202105-0257

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: May 12, 2021, 5:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: netbsd model: netbsd
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy
vendor: samsung model: galaxy s3
vendor: samsung model: samsung
db: NVD ids: CVE-2020-26140, CVE-2020-26147, CVE-2020-26143, CVE-2020-24588, CVE-2020-26144, CVE-2020-26141, CVE-2020-24587, CVE-2020-26139, CVE-2020-24586, CVE-2020-26142, CVE-2020-26146, CVE-2020-26145

"Internet's On Fire Right Now": Millions Of Devices At Risk Over New Software Vulnerability | ZeroHedge

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 15, 2021, 8:20 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: canary model: canary
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228

Mobile Systems Vulnerabilities - Infosec Resources

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: March 27, 2021, 9:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: android

Cisco Firepower Device Manager On-Box Software Remote Code Execution Vulnerability

Trust: 5.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Sept. 2, 2021, 1:36 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: device manager

Cisco Adaptive Security Device Manager Remote Code Execution Vulnerability

Trust: 5.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 5, 2021, 5:20 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: asdm
vendor: cisco model: adaptive security device manager
vendor: cisco model: security device manager
vendor: cisco model: device manager

Vulnerable TCP/IP stack is used by almost 200 device vendors - Help Net Security

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 4, 2021, 12:53 p.m.
 Vulnerabilities: denial of service, information leak, code execution
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: schneider model: monitor

Critical Vulnerability Affects Millions of IoT Devices

Trust: 4.75

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Aug. 17, 2021, 8:45 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28372

Peloton Bike+ vulnerability allowed complete takeover of devices

Trust: 3.0

Fetched: Dec. 16, 2021, 3:47 p.m., Published: June 16, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: POSIVITIVE TECHNOLOGY ids: ID:10

Report Highlights Employee Device IoT Vulnerabilities - RTInsights

Trust: 3.25

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Sept. 9, 2021, 4:47 a.m.
 Vulnerabilities: -
Affected productsExternal IDs

TALOS-2021-1366 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Related entries in the VARIoT vulnerabilities database: VAR-202111-1728, VAR-202111-1732, VAR-202111-1727, VAR-202111-1760, VAR-202111-1723, VAR-202111-1724, VAR-202111-1726, VAR-202111-1759, VAR-202111-1761, VAR-202111-1762, VAR-202111-1729, VAR-202111-1722, VAR-202111-1725, VAR-202111-1730

Trust: 4.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Nov. 22, 2021, midnight
 Vulnerabilities: sql injection, cross-site request forgery, request forgery
Affected productsExternal IDs
vendor: cisco model: routers
db: NVD ids: CVE-2021-21934, CVE-2021-21937, CVE-2021-21933, CVE-2021-21925, CVE-2021-21929, CVE-2021-21930, CVE-2021-21932, CVE-2021-21924, CVE-2021-21927, CVE-2021-21928, CVE-2021-21935, CVE-2021-21926, CVE-2021-21931, CVE-2021-21936

General FAQ | Qualys

Trust: 3.5

Fetched: Dec. 16, 2021, 3:47 p.m., Published: Jan. 1, 2022, midnight
 Vulnerabilities: sql injection, cross-site scripting
Affected productsExternal IDs