Sign-up

VARIoT news about IoT security

Security Vulnerabilities fixed in Firefox 93 - Mozilla

Trust: 3.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: April 3, 2021, midnight
 Vulnerabilities: memory leak, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2021-38500, CVE-2021-38499, CVE-2021-38497, CVE-2021-38501, CVE-2021-32810, CVE-2021-38496, CVE-2021-38498

Intel Processor Vulnerability Comprises Encryption Security

Trust: 4.25

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 22, 2021, 12:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-0146

Vulnerability In Cisco Security Devices Is Dangerous For Business Processes In Large Companies

Related entries in the VARIoT vulnerabilities database: VAR-202005-0696, VAR-202005-0685, VAR-202110-1796

Trust: 5.5

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 22, 2021, 5:31 p.m.
 Vulnerabilities: denial of service, buffer overflow
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: device manager
vendor: cisco model: series
db: NVD ids: CVE-2020-3259, CVE-2020-3187, CVE-2021-34704

These cybersecurity vulnerabilities could leave millions of connected medical devices open to attack. - Kreesna.com

Related entries in the VARIoT vulnerabilities database: VAR-202111-1616, VAR-202111-1605, VAR-202111-1604

Trust: 6.25

Fetched: Nov. 25, 2021, 9:59 a.m., Published: -
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: siemens model: nucleus
vendor: siemens model: nucleus net
db: NVD ids: CVE-2021-31888, CVE-2021-31886, CVE-2021-31887

Serious Vulnerabilities Found in Wi-Fi Module Designed for Critical Industrial Applications | SecurityWeek.Com

Trust: 4.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: file inclusion, os command injection, local file inclusion...
Affected productsExternal IDs
vendor: cisco model: series

Vulnerability in MediaTek chips used in Android smartphones | Born's Tech and Windows World

Trust: 3.5

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 24, 2021, 3:12 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: vivo model: vivo
vendor: check point model: check point
db: NVD ids: CVE-2021-0663, CVE-2021-0662, CVE-2021-0673, CVE-2021-0661

Vulnerability in Cisco security devices could cause firewalls to fail

Related entries in the VARIoT vulnerabilities database: VAR-202005-0685, VAR-202110-1796, VAR-202005-0696, VAR-202007-1057

Trust: 5.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 23, 2021, 6:15 p.m.
 Vulnerabilities: buffer overflow, denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: device manager
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
db: NVD ids: CVE-2020-3187, CVE-2021-34704, CVE-2020-3259, CVE-2020-3452

Cisco vulnerability could cause your firewalls to fail | TechRadar

Related entries in the VARIoT vulnerabilities database: VAR-202110-1796

Trust: 5.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 23, 2021, 3:20 a.m.
 Vulnerabilities: buffer overflow, denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
db: NVD ids: CVE-2021-34704

Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability - Cisco

Trust: 3.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Dec. 30, 2021, 10:58 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: ios xe software
vendor: cisco model: ios xe

CVE - CVE-2021-1587

Trust: 5.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco systems model: cisco nx-os
vendor: cisco systems model: nx-os software
vendor: cisco systems model: nx-os
vendor: cisco systems model: cisco systems
vendor: cisco model: cisco nx-os
vendor: cisco model: nx-os software
vendor: cisco model: nx-os
vendor: cisco model: cisco systems
db: NVD ids: CVE-2021-1587

Vulnerability in Cisco security devices could cause firewalls to fail

Related entries in the VARIoT vulnerabilities database: VAR-202005-0685, VAR-202110-1796, VAR-202005-0696, VAR-202007-1057

Trust: 5.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 23, 2021, 6:15 p.m.
 Vulnerabilities: buffer overflow, denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: device manager
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
db: NVD ids: CVE-2020-3187, CVE-2021-34704, CVE-2020-3259, CVE-2020-3452

Proof-of-concept Test Finds Apple Vulnerability

Trust: 3.0

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Sept. 15, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Philips Patient Monitoring Devices (Update B) | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202009-0606, VAR-202009-0607, VAR-202009-0602, VAR-202009-0604, VAR-202009-0605, VAR-202009-0603, VAR-202009-0608, VAR-202009-0595

Trust: 5.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Jan. 1, 2022, midnight
 Vulnerabilities: cross-site scripting, improper validation, service crash
Affected productsExternal IDs
vendor: philips model: intellivue patient monitors mx100
db: NVD ids: CVE-2020-16220, CVE-2020-16222, CVE-2020-16212, CVE-2020-16216, CVE-2020-16218, CVE-2020-16214, CVE-2020-16224, CVE-2020-16228

Smart Home Devices. More Security Vulnerabilities. Daniel Wroclawski, Consumer Reports. Cybercrime Magazine podcast

Trust: 3.0

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 22, 2021, 7:36 p.m.
 Vulnerabilities: -
Affected productsExternal IDs

NVD - CVE-2021-40125

Related entries in the VARIoT vulnerabilities database: VAR-202110-1402

Trust: 5.25

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Jan. 2, 2022, midnight
 Vulnerabilities: use after free, denial of service
Affected productsExternal IDs
vendor: cisco systems model: cisco adaptive security appliance
vendor: cisco systems model: asa_5545-x_firmware
vendor: cisco systems model: firepower
vendor: cisco systems model: firepower_threat_defense
vendor: cisco systems model: asa_5580
vendor: cisco systems model: asa_5505_firmware
vendor: cisco systems model: asa_5555-x_firmware
vendor: cisco systems model: asa_5585-x
vendor: cisco systems model: firepower threat defense
vendor: cisco systems model: asa_5580_firmware
vendor: cisco systems model: adaptive security appliance
vendor: cisco systems model: cisco systems
vendor: cisco systems model: adaptive_security_appliance
vendor: cisco systems model: asa_5585-x_firmware
vendor: cisco systems model: asa_5525-x_firmware
vendor: cisco systems model: asa_5505
vendor: cisco systems model: asa_5512-x_firmware
vendor: cisco systems model: asa_5515-x_firmware
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa_5545-x_firmware
vendor: cisco model: firepower
vendor: cisco model: firepower_threat_defense
vendor: cisco model: asa_5580
vendor: cisco model: asa_5505_firmware
vendor: cisco model: asa_5555-x_firmware
vendor: cisco model: asa_5585-x
vendor: cisco model: firepower threat defense
vendor: cisco model: asa_5580_firmware
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco systems
vendor: cisco model: adaptive_security_appliance
vendor: cisco model: asa_5585-x_firmware
vendor: cisco model: asa_5525-x_firmware
vendor: cisco model: asa_5505
vendor: cisco model: asa_5512-x_firmware
vendor: cisco model: asa_5515-x_firmware
db: NVD ids: CVE-2021-40125

NVD - CVE-2021-34787

Related entries in the VARIoT vulnerabilities database: VAR-202110-1354

Trust: 3.5

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: cisco adaptive security appliance
vendor: cisco systems model: asa_5545-x_firmware
vendor: cisco systems model: firepower
vendor: cisco systems model: firepower_threat_defense
vendor: cisco systems model: asa_5580
vendor: cisco systems model: asa_5505_firmware
vendor: cisco systems model: asa_5555-x_firmware
vendor: cisco systems model: asa_5585-x
vendor: cisco systems model: firepower threat defense
vendor: cisco systems model: asa_5580_firmware
vendor: cisco systems model: adaptive security appliance
vendor: cisco systems model: cisco systems
vendor: cisco systems model: adaptive_security_appliance
vendor: cisco systems model: asa_5585-x_firmware
vendor: cisco systems model: asa_5525-x_firmware
vendor: cisco systems model: asa_5505
vendor: cisco systems model: asa_5512-x_firmware
vendor: cisco systems model: asa_5515-x_firmware
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa_5545-x_firmware
vendor: cisco model: firepower
vendor: cisco model: firepower_threat_defense
vendor: cisco model: asa_5580
vendor: cisco model: asa_5505_firmware
vendor: cisco model: asa_5555-x_firmware
vendor: cisco model: asa_5585-x
vendor: cisco model: firepower threat defense
vendor: cisco model: asa_5580_firmware
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco systems
vendor: cisco model: adaptive_security_appliance
vendor: cisco model: asa_5585-x_firmware
vendor: cisco model: asa_5525-x_firmware
vendor: cisco model: asa_5505
vendor: cisco model: asa_5512-x_firmware
vendor: cisco model: asa_5515-x_firmware
db: NVD ids: CVE-2021-34787

Positive Technologies Discovers Vulnerability in Intel Processors used in Laptops, Cars and Other devices - Global Security Mag Online

Trust: 4.75

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Nov. 15, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: tesla model: model 3
vendor: tesla model: model
db: NVD ids: CVE-2021-0146

71 Windows vulnerabilities | Kaspersky official blog

Related entries in the VARIoT vulnerabilities database: VAR-202110-1687

Trust: 5.0

Fetched: Nov. 25, 2021, 9:59 a.m., Published: -
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-41338, CVE-2021-40469, cve-2021-40449, CVE-2021-40449, CVE-2021-41335

Command Injection Vulnerability | Security Advisory | Hikvision

Trust: 4.25

Fetched: Nov. 25, 2021, 9:59 a.m., Published: Jan. 15, 2022, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: hikvision model: hikvision

Israeli spy tech firm exploited vulnerability on ALL IPHONE devices to implant ‘Pegasus’ malware - report - RT World News

Trust: 3.5

Fetched: Nov. 24, 2021, 2:35 p.m., Published: Sept. 13, 2021, 8:53 p.m.
 Vulnerabilities: integer overflow
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: watch