Sign-up

VARIoT news about IoT security

Over 40,000 Cisco devices exploited with the latest zero-day vulnerability | CSO Online

Trust: 6.0

Fetched: Oct. 22, 2023, 9:07 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
db: NVD ids: CVE-2023-20198

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution

Trust: 5.25

Fetched: Oct. 22, 2023, 9:07 a.m., Published: Oct. 22, 2023, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android

Cisco's Zero-Day Vulnerability (CVE-2023-20198) | UpGuard

Related entries in the VARIoT vulnerabilities database: VAR-202309-2754, VAR-202103-0773

Trust: 4.5

Fetched: Oct. 22, 2023, 9:06 a.m., Published: Oct. 22, 2022, midnight
 Vulnerabilities: command execution, code execution, injection attack...
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: cisco ios xe
vendor: cisco model: routers
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
db: NVD ids: CVE-2023-20198, CVE-2023-20231, CVE-2021-1435

CGSI network spotted Cisco Devices Compromise through IOS XE Zero-Day Vulnerability (CVE-2023-20198) - Cyble

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 5.25

Fetched: Oct. 22, 2023, 9:06 a.m., Published: Oct. 19, 2023, 1:06 p.m.
 Vulnerabilities: command injection, arbitrary command execution, command execution
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: iox
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco routers
vendor: cisco model: routers
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: snort model: snort
db: NVD ids: CVE-2023-20198, CVE-2021-1435

Cisco IOS XE zero-day exploited by attackers to deliver implant (CVE-2023-20198) - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 5.5

Fetched: Oct. 22, 2023, 9:06 a.m., Published: Oct. 16, 2023, 7:28 p.m.
 Vulnerabilities: command injection, arbitrary command execution, command execution...
Affected productsExternal IDs
vendor: orange model: web server
vendor: cisco model: ios xe
vendor: cisco model: cisco ios xe
vendor: cisco model: routers
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: snort model: snort
db: NVD ids: CVE-2023-20198, CVE-2021-1435

Cisco zero-day bug under exploit allows router hijacking • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 4.5

Fetched: Oct. 22, 2023, 9:04 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco routers
vendor: cisco model: routers
vendor: cisco model: router
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
db: NVD ids: CVE-2023-20198, CVE-2023-20109, CVE-2021-1435

Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 - SecurityWeek

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 5.0

Fetched: Oct. 22, 2023, 9:04 a.m., Published: Oct. 19, 2023, 11:01 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: ios xe
vendor: cisco model: ios software
db: NVD ids: CVE-2023-20198, CVE-2021-1435

Cisco IOS XE Zero-Day: Network Supply Chain Vulnerabilities Underscore Lack of Threat Detection - Eclypsium | Supply Chain Security for the Modern Enterprise

Trust: 3.5

Fetched: Oct. 20, 2023, 9:29 a.m., Published: Oct. 19, 2023, 4:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: routers
vendor: cisco model: access points
vendor: cisco model: cisco ios
db: NVD ids: CVE-2023-20198

Manufacturers of Smart Products Must Wage a Cyber Battle on Two Fronts - The Protiviti View

Trust: 3.75

Fetched: Oct. 20, 2023, 9:28 a.m., Published: Oct. 11, 2023, 3:33 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Cisco zero-day vulnerability hits 40,000+ devices in a matter of days | ITPro

Trust: 4.0

Fetched: Oct. 20, 2023, 9:21 a.m., Published: Oct. 19, 2023, 11:53 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
db: NVD ids: CVE-2023-20198

Critical Atlassian Confluence flaw with vulnerability score of 10 draws federal warning - SiliconANGLE

Trust: 4.75

Fetched: Oct. 20, 2023, 9:21 a.m., Published: Oct. 16, 2023, 11:06 p.m.
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2023-22515

Attacks on 5G Infrastructure From User Devices: ASN.1 Vulnerabilities in 5G Cores

Trust: 3.5

Fetched: Oct. 20, 2023, 9:20 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2022-43677

Unidentified attackers breach tens of thousands of Cisco devices | CyberScoop

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 3.75

Fetched: Oct. 20, 2023, 9:20 a.m., Published: Oct. 18, 2023, 3:34 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: routers
vendor: cisco model: access points
db: NVD ids: CVE-2023-20198, CVE-2021-1435

Cisco Warns of Exploitation of a Maximum Severity Zero-Day Vulnerability in IOS XE: CVE-2023-20198

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 5.25

Fetched: Oct. 20, 2023, 9:20 a.m., Published: Oct. 17, 2023, 11:22 a.m.
 Vulnerabilities: privilege escalation, command injection
Affected productsExternal IDs
vendor: snort model: snort
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: routers
vendor: cisco model: cisco ios
db: NVD ids: CVE-2023-20198, CVE-2021-1435

Cisco IOS XE Zero-Day: Network Supply Chain Vulnerabilities Underscore Lack of Threat Detection - Security Boulevard

Trust: 3.5

Fetched: Oct. 20, 2023, 9:19 a.m., Published: Oct. 19, 2023, 4:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: routers
vendor: cisco model: access points
vendor: cisco model: cisco ios
db: NVD ids: CVE-2023-20198

Tens of Thousands of Cisco Devices Hacked via Zero-Day Vulnerability - SecurityWeek

Related entries in the VARIoT vulnerabilities database: VAR-202103-0773

Trust: 4.0

Fetched: Oct. 20, 2023, 9:19 a.m., Published: Oct. 18, 2023, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe
vendor: cisco model: ios software
vendor: cisco model: ios xe
vendor: cisco model: routers
db: NVD ids: CVE-2023-20198, CVE-2021-1435

9 top mobile security threats and how you can avoid them | ZDNET

Trust: 4.5

Fetched: Oct. 20, 2023, 9:18 a.m., Published: Oct. 20, 2023, midnight
 Vulnerabilities: service disruption
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: note
vendor: samsung model: mobile devices
vendor: avast model: antivirus
vendor: apple model: iphone
vendor: apple model: watch
vendor: essential model: phone
vendor: motorola model: android
vendor: motorola model: motorola
vendor: google model: android

Cisco IOS XE vulnerability widely exploited in the wild

Trust: 4.75

Fetched: Oct. 20, 2023, 9:18 a.m., Published: Oct. 18, 2023, 1:51 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: routers
vendor: cisco model: cisco ios
vendor: cisco model: wireless lan controllers
db: NVD ids: CVE-2023-20198

CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Information Disclosure Exploited in the Wild - Blog | Tenable®

Trust: 5.25

Fetched: Oct. 20, 2023, 9:16 a.m., Published: Oct. 18, 2023, 4:39 p.m.
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: citrix model: gateway
vendor: citrix model: netscaler gateway
vendor: citrix model: netscaler
vendor: citrix model: netscaler adc
db: NVD ids: CVE-2023-4966, CVE-2019-19781, CVE-2023-4967, CVE-2022-27518

Threat Brief: Cisco IOS XE Web UI Privilege Escalation Vulnerability (Updated)

Trust: 5.75

Fetched: Oct. 20, 2023, 9:15 a.m., Published: Oct. 19, 2023, 12:30 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: palo model: networks
vendor: palo model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
db: NVD ids: CVE-2023-20198