Sign-up

VARIoT news about IoT security

Improper Authentication Vulnerability in QVR - Security Advisory | QNAP

Trust: 5.25

Fetched: May 13, 2022, 7:54 a.m., Published: May 6, 2022, midnight
 Vulnerabilities: authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2021-38686

Cybersecurity, Research and Intelligence Blog | Secureworks

Trust: [4.0, []]

Fetched: May 13, 2022, 7:38 a.m., Published: May 19, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs

A major vulnerability has been discovered in the open source Kubernetes development tool - Bestgamingpro

Trust: [3.75, []]

Fetched: May 13, 2022, 7:36 a.m., Published: May 10, 2022, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2022-24348

New Botnet Targets Linux Devices Via Log4J Vulnerability - .:: CHASLES CORP. ::.

Trust: [3.25, []]

Fetched: March 18, 2022, 11:17 a.m., Published: -
 Vulnerabilities: command execution
Affected productsExternal IDs

The threat is coming from inside the power supply • The Register

Related entries in the VARIoT vulnerabilities database: VAR-202203-0235, VAR-202203-0236, VAR-202203-0237

Trust: [4.5, []]

Fetched: March 15, 2022, 8:18 a.m., Published: -
 Vulnerabilities: authentication bypass, code execution, buffer overflow...
Affected productsExternal IDs
db: NVD ids: CVE-2022-0715, CVE-2022-22806, CVE-2022-22805

Medtech companies issue alerts for Axeda cybersecurity vulnerability | RAPS

Trust: [4.25, []]

Fetched: March 15, 2022, 8:18 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

Moxa’s Response Regarding the PwnKit Vulnerability

Trust: [3.25, []]

Fetched: March 15, 2022, 8:18 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-4034

IoT insecurity: Z-Wave vulnerability could affect up to 100 million devices - Breaking News

Trust: [3.0, []]

Fetched: March 10, 2022, 12:54 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs

Akamai Blog | Mirai Botnet Abusing Log4j Vulnerability

Trust: [4.0, []]

Fetched: March 10, 2022, 12:54 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

VMware patches critical security vulnerabilities • The Register

Trust: [5.0, []]

Fetched: March 9, 2022, 11:15 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2021-22050, CVE-2020-4004, CVE-2021-22043, CVE-2021-22041, CVE-2021-22042, CVE-2021-22040

NPort IAW5000A-I/O Series Serial Device Servers Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202012-0501, VAR-202012-0523, VAR-202012-0503, VAR-202012-0506, VAR-202012-0507, VAR-202012-0504

Trust: [4.0, []]

Fetched: March 9, 2022, 11:15 a.m., Published: -
 Vulnerabilities: information exposure, session fixation, weak password
Affected productsExternal IDs
db: NVD ids: CVE-2020-25190, CVE-2020-25153, CVE-2020-25192, CVE-2020-25196, CVE-2020-25198, CVE-2020-25194

Vulnerability in Web Services on Devices (WSD) API - Microsoft Security Response Center

Trust: [3.75, []]

Fetched: March 3, 2022, 2:21 p.m., Published: -
 Vulnerabilities: code execution, application crash
Affected productsExternal IDs
db: NVD ids: CVE-2009-2512

OESIS Framework February 15, 2022 Release | OPSWAT

Related entries in the VARIoT vulnerabilities database: VAR-202108-1233, VAR-202108-1238, VAR-202108-1239

Trust: [3.0, []]

Fetched: March 3, 2022, 2:21 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-30897, CVE-2021-37852, CVE-2022-0538, CVE-2021-30923, CVE-2015-5165, CVE-2021-30924

Security Vulnerabilities fixed in Firefox ESR 91.6 - Mozilla

Trust: [3.0, []]

Fetched: Feb. 24, 2022, 1:33 p.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs

Log4J2 Vulnerability to Zero-Day Exploit within CodeSonar and CodeSentry - GrammaTech

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-2011, VAR-202112-0562, VAR-202112-1782

Trust: [3.75, []]

Fetched: Feb. 24, 2022, 1:33 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-44832, CVE-2021-45046, CVE-2021-45105

More than 100,000 Zyxel networking products could be vulnerable to a hardcoded credential vulnerability (CVE-2020-29583) potentially allowing cybercriminal device takeover. | ConspiracyRevelation.Com

Related entries in the VARIoT vulnerabilities database: VAR-202012-0977

Trust: [3.0, []]

Fetched: Feb. 22, 2022, 10:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-29583

Log4j Vulnerability Sparks a Warning From the FTC | Davis Wright Tremaine

Trust: [3.0, []]

Fetched: Feb. 18, 2022, 8:38 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs

PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034) | Web Hosting Talk

Trust: [3.75, []]

Fetched: Feb. 16, 2022, 7:13 a.m., Published: -
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-4034

Vulnerability In This Cisco Software Could Allow Hackers Access | Mid-Atlantic Computer Solutions

Trust: 5.5

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: staros
vendor: cisco model: cisco staros
db: NVD ids: CVE-2022-20649

Vulnerability In This Cisco Software Could Allow Hackers Access | The NIC GROUP INC.

Trust: 5.5

Fetched: Feb. 10, 2022, 2:48 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: staros
vendor: cisco model: cisco staros
db: NVD ids: CVE-2022-20649