VARIoT latest news about IoT security

Log4J Vulnerability FAQs \| Secureworks Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-2011, VAR-202112-0562 Trust: 3.5 Fetched: Jan. 18, 2022, 11:17 a.m., Published: Jan. 16, 2022, midnight	Vulnerabilities: information leak, denial of service, code execution...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45105, CVE-2021-44228, CVE-2021-4104, CVE-2021-44832, CVE-2021-45046

Critical security vulnerability for multiple ONVIF-based devices Trust: 4.25 Fetched: Jan. 18, 2022, 11:17 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

axis

model:

axis

db:

NVD

ids:

CVE-2017-9765

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability \| KFI AM 640 Trust: 3.0 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 14, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

icloud

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability \| News Radio 94.3 WSC Trust: 3.0 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 14, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

icloud

Hundreds Of Millions Of Devices At Risk From New Software Vulnerability \| WHP 580 Trust: 3.0 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 14, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

icloud

CVE-2021-41375 - Security Update Guide - Microsoft - Azure Sphere Information Disclosure Vulnerability Trust: 5.25 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: information disclosure

Affected products

External IDs

db:

NVD

ids:

CVE-2021-41375

CVE-2021-40444 - Security Update Guide - Microsoft - Microsoft MSHTML Remote Code Execution Vulnerability Related entries in the VARIoT vulnerabilities database: VAR-202109-1909 Trust: 3.0 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-40444

CVE-2021-26430 - Security Update Guide - Microsoft - Azure Sphere Denial of Service Vulnerability Trust: 5.25 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2021-26430

CVE-2021-26429 - Security Update Guide - Microsoft - Azure Sphere Elevation of Privilege Vulnerability Trust: 3.25 Fetched: Jan. 18, 2022, 11:16 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-26429

Apple Issues iOS Patches for Security Problems -- Redmondmag.com Related entries in the VARIoT vulnerabilities database: VAR-202108-2172, VAR-202108-1057 Trust: 5.5 Fetched: Jan. 18, 2022, 11:15 a.m., Published: Jan. 17, 2022, midnight	Vulnerabilities: integer overflow, use after free

Affected products

External IDs

vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	safari
vendor:	apple	model:	watchos

db:

NVD

ids:

CVE-2021-30858, CVE-2021-30860

NVD - CVE-2021-1624 Trust: 5.5 Fetched: Jan. 18, 2022, 11:15 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	asr_1000
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	cisco systems
vendor:	cisco	model:	ios xe software
vendor:	cisco	model:	asr_1001-hx
vendor:	cisco systems	model:	cisco ios xe
vendor:	cisco systems	model:	asr_1000
vendor:	cisco systems	model:	cisco ios
vendor:	cisco systems	model:	ios xe
vendor:	cisco systems	model:	cisco systems
vendor:	cisco systems	model:	ios xe software
vendor:	cisco systems	model:	asr_1001-hx

db:

NVD

ids:

CVE-2021-1624

SonicWall fixes critical bug allowing SMA 100 device takeover Related entries in the VARIoT vulnerabilities database: VAR-202109-1777, VAR-202102-0898, VAR-201912-0828 Trust: 4.5 Fetched: Jan. 18, 2022, 11:15 a.m., Published: Sept. 24, 2021, 2:19 a.m.	Vulnerabilities: improper access control, access control vulnerability

Affected products

External IDs

vendor:	sonicwall	model:	sma 100
vendor:	sonicwall	model:	remote access
vendor:	sonicwall	model:	secure mobile access

db:

NVD

ids:

CVE-2021-20034, CVE-2021-20016, CVE-2019-7481

Notice - Security Vulnerability Impacting Certain Devices \| LOREX Support Related entries in the VARIoT vulnerabilities database: VAR-202109-1874, VAR-202109-1875 Trust: 3.25 Fetched: Jan. 18, 2022, 11:15 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-33045, CVE-2021-33044

Vulnerabilities in MediaTek chips expose millions of Android devices to eavesdropping \| PC Help Forum Trust: 3.0 Fetched: Jan. 18, 2022, 11:15 a.m., Published: Jan. 13, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

check point

model:

check point

Apps for popular smart home devices contain security flaws Trust: 3.75 Fetched: Jan. 18, 2022, 11:14 a.m., Published: Jan. 18, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	ring	model:	ring
vendor:	google	model:	home
vendor:	google	model:	google home
vendor:	roku	model:	roku

11 Best Network Vulnerability Scanners Tested 2022 (Free + Paid Tools) Trust: 3.5 Fetched: Jan. 18, 2022, 11:14 a.m., Published: Feb. 27, 2019, 1:38 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	guard
vendor:	cisco	model:	adaptive security appliance
vendor:	cisco	model:	cisco adaptive security appliance
vendor:	cisco	model:	series
vendor:	cisco	model:	ios
vendor:	cisco	model:	router
vendor:	cisco	model:	routers

Test Your Browser Security for Vulnerabilities Trust: 3.25 Fetched: Jan. 18, 2022, 11:14 a.m., Published: April 25, 2020, 11:07 a.m.	Vulnerabilities: information leak, cross-site scripting, code injection

Affected products

External IDs

vendor:	serve	model:	serve
vendor:	google	model:	chrome
vendor:	apple	model:	safari

Pepperl+Fuchs Hart Device DTM Vulnerability \| CISA Related entries in the VARIoT vulnerabilities database: VAR-201501-0399 Trust: 5.75 Fetched: Jan. 18, 2022, 11:14 a.m., Published: Oct. 30, 2018, midnight	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:

codewrights

model:

hart device type manager

db:

NVD

ids:

CVE-2014-9191

Device Security, Vulnerabilities, and Windows - How to, Technology and PC Security Forum \| SensorsTechForum.com Trust: 5.0 Fetched: Jan. 18, 2022, 11:14 a.m., Published: Nov. 2, 2016, 11:39 a.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:

google

model:

chrome

db:

NVD

ids:

CVE-2016-7855

MikroTik Device Vulnerability to 𝙀𝙭𝙥𝙡𝙤𝙞𝙩 (CVE-2018-14847)🔥🔥 - YouTube Related entries in the VARIoT vulnerabilities database: VAR-201808-0384 Trust: 3.75 Fetched: Jan. 18, 2022, 11:14 a.m., Published: Sept. 14, 2018, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

mikrotik

model:

mikrotik

db:

NVD

ids:

CVE-2018-14847

VARIoT news about IoT security