Sign-up

VARIoT news about IoT security

Security Advisory - CSV Injection Vulnerability in Some Huawei Products

Related entries in the VARIoT vulnerabilities database: VAR-202110-1355

Trust: 4.0

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Oct. 17, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: huawei model: huawei
db: NVD ids: CVE-2021-37131

Log4j - 3 Steps to Detect and Patch the Log4Shell Vulnerability Now - deepwatch

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.5

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 27, 2021, 10:32 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: meeting
vendor: apple model: icloud
db: NVD ids: CVE-2021-44228

Apache Log4j Vulnerability | HP® Customer Support

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.0

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Jan. 2, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hp model: omen
db: NVD ids: CVE-2021-44228

Search tool for important firmware update | Security Notification - Command Injection Vulnerability in Some Hikvision products | Hikvision

Trust: 4.25

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: hikvision model: hikvision

Multiple Vulnerabilities Impact Netgear Nighthawk R6700 Routers | SecurityWeek.Com

Related entries in the VARIoT vulnerabilities database: VAR-202112-2039, VAR-202112-2044, VAR-202112-2042, VAR-202112-2041, VAR-202112-2038, VAR-202112-2043

Trust: 5.75

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: netgear model: r6700v3
vendor: netgear model: r6700
vendor: jquery model: jquery
db: NVD ids: CVE-2021-45077, CVE-2021-20173, CVE-2021-20175, CVE-2021-23147, CVE-2021-45732, CVE-2021-20174

Log4Shell - Wikipedia

Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 4.5

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Jan. 17, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point software technologies model: check point
vendor: trend micro model: security
vendor: trend model: security
vendor: check point model: check point
vendor: palo model: networks
vendor: palo model: palo alto networks
vendor: apple model: icloud
vendor: palo alto networks model: networks
vendor: palo alto networks model: palo alto networks
db: NVD ids: CVE-2021-44832, CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

VMSA-2021-0028.8

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 4.25

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-45046

A Log4J Vulnerability Has Set the Internet 'On Fire' | WIRED

Trust: 3.0

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 10, 2021, 7:54 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Log4j could be the most serious security threat ever seen, CISA head warns | TechRadar

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.25

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 14, 2021, 1:21 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Mitigating Log4Shell and Other Log4j-Related Vulnerabilities | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 3.75

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 23, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

iOS Users Could Face Freezing, Crashing of Devices Due to HomeKit Issue |

Trust: 3.5

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Jan. 4, 2022, 9:12 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: icloud

Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability - Microsoft | Public Press Partner

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 4.5

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Jan. 2, 2022, midnight
 Vulnerabilities: command execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-44428, CVE-2021-45046, CVE-2021-4428

Everything you need to know about ProxyShell vulnerabilities

Trust: 4.0

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 29, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-34473, CVE-2021-34523, CVE-2021-31207

Rewterz Threat Advisory - Multiple SonicWall SMA 100 Series Devices Vulnerabilities | | Rewterz

Related entries in the VARIoT vulnerabilities database: VAR-202110-1958, VAR-202112-1591

Trust: 5.75

Fetched: Jan. 4, 2022, 1:51 p.m., Published: Dec. 27, 2021, 11:05 a.m.
 Vulnerabilities: improper access control
Affected productsExternal IDs
vendor: sonicwall model: sma 100
vendor: sonicwall model: sma100
db: NVD ids: CVE-2021-20050, CVE-2021-20049

Research, News, and Perspectives

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Jan. 4, 2022, 1:51 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2021-44228

Apache Log4j2 Remote Code Execution vulnerability CVE-2021-44228

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: mesh model: mesh
db: NVD ids: CVE-2021-44228

Instagram

Trust: 3.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: serve model: serve

Document - Notice: (Revision) Apache Software Log4j - Security Vulnerabilities (CVE-2021-44228, CVE-2021-45046, CVE-2021-4104, CVE-2021-45105, CVE-2021-44832) | HPE Support

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-2011, VAR-202112-0562

Trust: 4.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: aruba model: clearpass policy manager
vendor: aruba model: arubaos
vendor: aruba model: cx switches
vendor: aruba model: clearpass
vendor: aruba model: aruba instant
vendor: aruba model: instant
vendor: brocade model: fibre channel san
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-4104, CVE-2021-44832, CVE-2021-45046

Cisco : Security vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202110-1351, VAR-202109-0623, VAR-202110-0622, VAR-202110-0623, VAR-202111-1197, VAR-202110-0619, VAR-202108-0824, VAR-202110-0213, VAR-202111-0401, VAR-202110-1297, VAR-202110-1286, VAR-202110-1367, VAR-202110-1377, VAR-202110-1393, VAR-202110-1352, VAR-202109-0617, VAR-202110-0211, VAR-202110-0617, VAR-202111-0413, VAR-202110-0209, VAR-202110-0618, VAR-202111-0418, VAR-202112-0566, VAR-202110-1402, VAR-202111-0412, VAR-202110-1350, VAR-202110-0203, VAR-202110-1395, VAR-202110-1392, VAR-202110-1065, VAR-202111-1198, VAR-202110-1376, VAR-202110-1354, VAR-202111-0400, VAR-202111-0419, VAR-202111-1196, VAR-202110-1375, VAR-202111-0417, VAR-202109-0631, VAR-202109-0624, VAR-202111-0393, VAR-202110-1298, VAR-202111-0664, VAR-202110-1305, VAR-202109-0622, VAR-202110-0212, VAR-202110-1353, VAR-202110-1366, VAR-202110-1394, VAR-202109-0618

Trust: 5.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: cross-site request forgery, improper validation, denial of service...
Affected productsExternal IDs
vendor: cisco model: meeting
vendor: cisco model: policy suite
vendor: cisco model: umbrella
vendor: cisco model: cisco web security appliance
vendor: cisco model: meeting server
vendor: cisco model: firepower management center
vendor: cisco model: webex video mesh
vendor: cisco model: roomos
vendor: cisco model: prime infrastructure
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco unified communications manager
vendor: cisco model: unified communications manager session management edition
vendor: cisco model: cisco evolved programmable network manager
vendor: cisco model: cisco webex meetings
vendor: cisco model: cisco telepresence management suite
vendor: cisco model: cisco identity services engine
vendor: cisco model: cisco telepresence
vendor: cisco model: firepower threat defense
vendor: cisco model: common services platform collector
vendor: cisco model: nexus
vendor: cisco model: telepresence management suite
vendor: cisco model: cisco anyconnect secure mobility client
vendor: cisco model: adaptive security appliance
vendor: cisco model: small business
vendor: cisco model: unified communications manager
vendor: cisco model: series
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco small business
vendor: cisco model: cisco prime infrastructure
vendor: cisco model: unified communications
vendor: cisco model: webex
vendor: cisco model: small business rv series routers
vendor: cisco model: cisco firepower management center
vendor: cisco model: cisco ios
vendor: cisco model: cisco roomos
vendor: cisco model: telepresence
vendor: cisco model: ios xr
vendor: cisco model: webex meetings
vendor: cisco model: anyconnect secure mobility client
vendor: cisco model: cisco policy suite
vendor: cisco model: series routers
vendor: cisco model: cisco meeting
vendor: cisco model: cisco webex
vendor: cisco model: ios xr software
vendor: cisco model: dna center
vendor: cisco model: evolved programmable network manager
vendor: cisco model: cisco meeting server
vendor: cisco model: web security appliance
vendor: cisco model: firepower
vendor: cisco model: routers
vendor: cisco model: small business rv
vendor: cisco model: telepresence collaboration endpoint
vendor: cisco model: identity services engine
vendor: mesh model: mesh
vendor: snort model: snort
db: NVD ids: CVE-2021-40117, CVE-2021-34759, CVE-2021-34789, CVE-2021-34760, CVE-2021-40130, CVE-2021-40121, CVE-2021-34749, CVE-2021-34772, CVE-2021-40115, CVE-2021-34756, CVE-2021-34754, CVE-2021-34763, CVE-2021-34792, CVE-2021-34790, CVE-2021-40116, CVE-2021-34785, CVE-2021-34758, CVE-2021-40123, CVE-2021-40120, CVE-2021-34748, CVE-2021-40122, CVE-2021-34774, CVE-2021-44228, CVE-2021-40125, CVE-2021-40124, CVE-2021-40118, CVE-2021-34782, CVE-2021-34781, CVE-2021-34791, CVE-2021-34762, CVE-2021-40129, CVE-2021-34793, CVE-2021-34787, CVE-2021-40128, CVE-2021-34773, CVE-2021-40131, CVE-2021-34794, CVE-2021-34784, CVE-2021-34771, CVE-2021-34765, CVE-2021-40126, CVE-2021-34755, CVE-2021-40119, CVE-2021-34761, CVE-2021-34746, CVE-2021-34766, CVE-2021-40114, CVE-2021-34764, CVE-2021-34783, CVE-2021-34786

Apache Log4j vulnerability actively exploited, impacting millions of Java-based apps | CSO Online

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228