Sign-up

VARIoT news about IoT security

Wormable Windows 11 vulnerability could let malware spead like wildfire

Trust: 4.0

Fetched: May 13, 2022, 7:59 a.m., Published: May 11, 2022, midnight
 Vulnerabilities: information disclosure, denial of service, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2022-21907

Analyzing an Old Bug and Discovering CVE-2021-30995

Related entries in the VARIoT vulnerabilities database: VAR-202108-1149, VAR-202108-2078, VAR-202109-0285

Trust: 5.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 13, 2021, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30995, CVE-2021-30855, CVE-2021-1740

Re-addressing Log4j vulnerability | Office of Information Technology

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011

Trust: 3.25

Fetched: May 13, 2022, 7:59 a.m., Published: Dec. 30, 2021, 11:05 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44832

Reporting Suspected Vulnerabilities - Huawei

Trust: 3.0

Fetched: May 13, 2022, 7:59 a.m., Published: May 13, 2040, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: huawei model: huawei

Vulnerabilities in McAfee Agent allows privilege escalation and code execution as Windows SYSTEM | Born's Tech and Windows World

Trust: 5.0

Fetched: May 13, 2022, 7:59 a.m., Published: May 4, 2022, midnight
 Vulnerabilities: command injection, code execution, privilege escalation...
Affected productsExternal IDs
db: NVD ids: CVE-2022-0166, CVE-2021-31854

Cloudflare reports a massive 175% increase in DDoS attacks | Digital Trends

Trust: 4.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 15, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: trend model: security

Log4j vulnerabilities and the long slog through remediation and risk management.

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 1, 2022, midnight
 Vulnerabilities: improper validation, denial of service, information leak...
Affected productsExternal IDs
db: NVD ids: CVE-2021-4483220, CVE-2019-17571502, CVE-2017-5645502, CVE-2021-44228502, CVE-2021-45046502, CVE-2021-4510520, CVE-2021-4104502, CVE-2021-44228, CVE-2020-9488295

More than half of medical devices found to have critical vulnerabilities | ZDNet - OneNewsTech - Latest News, Internet & Tech News

Trust: 3.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 13, 2022, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Security Advisory - Cross-Site Scripting(XSS) Vulnerability in Huawei WS318n Product

Related entries in the VARIoT vulnerabilities database: VAR-202112-2524

Trust: 5.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 13, 2040, midnight
 Vulnerabilities: information disclosure, cross-site scripting
Affected productsExternal IDs
vendor: huawei model: huawei
db: NVD ids: CVE-2021-40041

Vulnerability in GitHub Actions Allowed Attackers to Take Control of Victim’s Device | IT Security News

Related entries in the VARIoT vulnerabilities database: VAR-202110-0794

Trust: 3.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 18, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2021-38178

Microsoft Issues Serious Windows 10, Windows 11 Upgrade Warning

Related entries in the VARIoT vulnerabilities database: VAR-202107-1503, VAR-202109-1789, VAR-202201-0640

Trust: 3.75

Fetched: May 13, 2022, 7:59 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21874, CVE-2021-36976, CVE-2022-21839, CVE-2022-21836, CVE-2021-22947, CVE-2022-21919

Attackers Are Targeting Unknown SolarwWnds Vulnerability, Microsoft Warns - KoDDoS Blog

Trust: 4.5

Fetched: May 13, 2022, 7:59 a.m., Published: Jan. 23, 2022, 7:27 a.m.
 Vulnerabilities: input validation bug, code execution
Affected productsExternal IDs
vendor: solarwinds model: serv-u
db: NVD ids: CVE-2021-35247, CVE-2021-35211

CentOS have Vulnerabilities

Trust: 4.75

Fetched: May 13, 2022, 7:59 a.m., Published: Jan. 25, 2022, midnight
 Vulnerabilities: code execution, command execution, file inclusion
Affected productsExternal IDs
db: NVD ids: CVE-2021-45466, CVE-2021-45467

Investigation of Log4j Vulnerability with Illumina instruments

Related entries in the VARIoT vulnerabilities database: VAR-202112-0562, VAR-202112-2011, VAR-202112-0566

Trust: 3.0

Fetched: May 13, 2022, 7:59 a.m., Published: May 13, 2000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-45046, CVE-2021-44832, CVE-2021-44228

iOS Devices Can Freeze, Crash Due to a HomeKit Vulnerability | Dagold News

Trust: 3.5

Fetched: May 13, 2022, 7:59 a.m., Published: May 13, 2012, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: icloud
vendor: apple model: macos
vendor: apple model: iphone

Log4j vulnerability targeted

Trust: 5.0

Fetched: May 13, 2022, 7:59 a.m., Published: May 18, 2022, midnight
 Vulnerabilities: input validation problem
Affected productsExternal IDs
vendor: solarwinds model: serv-u
db: NVD ids: CVE-2021-35247

MSP facing vulnerabilities| WatchGuard Blog

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: May 13, 2022, 7:59 a.m., Published: May 19, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Microsoft January 2022 Security Updates address 10 Critical vulnerabilities - Securezoo

Related entries in the VARIoT vulnerabilities database: VAR-202109-1789, VAR-202112-0566

Trust: 4.25

Fetched: May 13, 2022, 7:59 a.m., Published: Jan. 13, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-21846, CVE-2022-21840, CVE-2022-21857, CVE-2021-22947, CVE-2021-44228, CVE-2022-21917, CVE-2022-21833, CVE-2022-21912, CVE-2022-21907, CVE-2022-21898

QNAP Product Information Disclosure Vulnerability

Trust: 3.5

Fetched: May 13, 2022, 7:59 a.m., Published: Sept. 10, 2021, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs

CISA Listed Multiple Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202103-0965

Trust: 5.5

Fetched: May 13, 2022, 7:58 a.m., Published: Jan. 24, 2022, midnight
 Vulnerabilities: os command injection, information disclosure, denial of service...
Affected productsExternal IDs
vendor: nagios model: nagios xi
vendor: solarwinds model: serv-u
vendor: aviatrix model: controller
vendor: node.js model: node.js
db: NVD ids: CVE-2006-1547, CVE-2021-40870, CVE-2021-32648, CVE-2020-11978, CVE-2021-33766, CVE-2021-21315, CVE-2021-22991, CVE-2021-25298, CVE-2018-8453, CVE-2012-0391, CVE-2021-25296, CVE-2021-35247, CVE-2020-13671, CVE-2020-14864, CVE-2021-21975, CVE-2021-25297, CVE-2020-13927