VARIoT latest news about IoT security

SecurityWizardry.com - Vulnerability Details Trust: 4.75 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

vendor:	schneider	model:	modicon m340
vendor:	schneider	model:	m340
vendor:	schneider	model:	connexium
vendor:	schneider electric	model:	modicon m340
vendor:	schneider electric	model:	m340
vendor:	schneider electric	model:	connexium
vendor:	codesys	model:	codesys
vendor:	codesys	model:	gateway
vendor:	codesys	model:	runtime

Vulnerability in Apple devices that made them unusable finally fixed. Update immediately iOS \| LaptrinhX Trust: 3.75 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: resource depletion, denial of service

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	icloud
vendor:	apple	model:	iphone

Infineon SCSI & RAID Devices Driver Trust: 3.25 Fetched: Jan. 25, 2022, 12:14 p.m., Published: -	Vulnerabilities: feature bypass, security feature bypass

Affected products

External IDs

vendor:	dell	model:	bios
vendor:	infineon	model:	trusted platform
vendor:	infineon technologies	model:	trusted platform

Acunetix Web Vulnerability Scanner Download For Android Trust: 4.5 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 18, 2022, 6:13 a.m.	Vulnerabilities: sql injection, buffer overflow, cross-site scripting

Affected products

External IDs

vendor:

google

model:

android

Security Alert - Netgear leaves vulnerabilities unpatched in Nighthawk router \| MalwareTips Community Trust: 3.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: -	Vulnerabilities: default credentials

Affected products

External IDs

vendor:	netgear	model:	r6700v3
vendor:	netgear	model:	r6700

New Safari Bug Help Hackers Steal Your Data From Apple iPhone And Others Devices - News18 - Business Fast Trust: 3.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 18, 2022, 4 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	safari
vendor:	apple	model:	iphone

Researcher Discloses Unpatched Vulnerabilities In NUUO NVRmini2 Devices - Veille Techno Trust: 3.25 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 17, 2022, 5:50 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

nuuo

model:

nvrmini2

Apache releases new 2.17.0 patch for Log4j to solve denial of service vulnerability \| ZDNet Related entries in the VARIoT vulnerabilities database: VAR-202112-1782 Trust: 4.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Feb. 17, 2000, midnight	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45105

Microsoft Researchers Detail macOS Vulnerability That Could Let Attackers Gain User Data \| Technology News Related entries in the VARIoT vulnerabilities database: VAR-202108-1285 Trust: 5.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 13, 2022, 1:43 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	icloud
vendor:	apple	model:	macos

db:

NVD

ids:

CVE-2021-30970

IDEMIA Vulnerability Lets Hackers Unlock Doors And Turnstiles Trust: 4.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 18, 2022, 7:58 a.m.	Vulnerabilities: denial of service, code execution, buffer overflow...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-35520, CVE-2021-35522, CVE-2021-35521

Apple HomeKit vulnerability can lock Apple devices Trust: 3.5 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 19, 2022, midnight	Vulnerabilities: denial of service, buffer overflow

Affected products

External IDs

vendor:

apple

model:

icloud

Millions Devices At Risk Because Of New Software Vulnerability - The True Reporter Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Dec. 15, 2021, 10:54 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

13 Best VAPT Tools Ranked for 2022 (Paid, Free Trials & Open-source) Trust: 3.5 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Oct. 10, 2019, 12:27 p.m.	Vulnerabilities: sql injection, cross-site scripting

Affected products

External IDs

vendor:

netbsd

model:

current

Joker Malware Marks Another Return to the Play Store, Infects 500K Android Devices \| Toolbox It Security Trust: 3.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Dec. 20, 2021, 4:05 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

Log4j zero-day vulnerability: What it is and how it impacts users, all explained in 5 points - Technology News Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 5.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Dec. 13, 2021, 8:52 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

icloud

db:

NVD

ids:

CVE-2021-44228

F-Secure discovers vulnerabilities affecting over 150 HP printer models \| F-Secure Press Room Trust: 3.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-39238, CVE-2021-39237

2022-01 Security Bulletin: Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS (CVE-2022-22154) - Juniper Networks Related entries in the VARIoT vulnerabilities database: VAR-202201-0632 Trust: 4.25 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Jan. 20, 2022, midnight	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2022-22154

Critical RCE Vulnerability Is Affecting Java : msp Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566 Trust: 4.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: March 20, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:

apple

model:

icloud

db:

NVD

ids:

CVE-2021-45105, CVE-2021-44228

CyRC Vulnerability Advisory: Multiple vulnerabilities discovered in GOautodial \| Synopsys Trust: 4.75 Fetched: Jan. 20, 2022, 8:28 a.m., Published: Dec. 7, 2021, 2 p.m.	Vulnerabilities: information disclosure, path traversal, file inclusion...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-43175, CVE-2021-43176

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability \| WTKG 1230 AM Trust: 3.0 Fetched: Jan. 20, 2022, 8:28 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

icloud

VARIoT news about IoT security