Sign-up

VARIoT news about IoT security

Firmware Download | Security Notification - Command Injection Vulnerability in Some Hikvision products | Hikvision

Trust: 4.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: hikvision model: hikvision

Log4j Developer Response - Cisco Blogs

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 16, 2021, 2:57 a.m.
 Vulnerabilities: command execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Medical Device cyber security vulnerability: Apache-Log4j

Trust: 3.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 27, 2021, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs

The risks of silent patching and why it must end

Related entries in the VARIoT vulnerabilities database: VAR-202103-0365

Trust: 3.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 29, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus
db: NVD ids: CVE-2016-20009

The Log4j Vulnerability: What You Need to Know - Randori

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Jan. 5, 2022, 4:32 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Log4Shell / Apache Log4j Injection Vulnerability CVE-2021-44228: Impact and Response - Truesec

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 3.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: code execution, request forgery, injection attack
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

The Apache Log4j vulnerability: What you need to know | RBRO

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

CVE-2021-44228 Apache Log4j vulnerability | Platform.sh

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 4.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 13, 2021, midnight
 Vulnerabilities: code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-45046

What is Remote Code Execution (RCE)? - Check Point Software

Trust: 4.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 22, 2021, 2:38 p.m.
 Vulnerabilities: denial of service, code execution, injection attack...
Affected productsExternal IDs
vendor: check point model: check point

Ordr Response to Log4j Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 16, 2021, 6:26 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

NVD - CVE-2021-37036

Related entries in the VARIoT vulnerabilities database: VAR-202111-1436

Trust: 5.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: information leak, information leakage
Affected productsExternal IDs
vendor: huawei model: ecns280_td_firmware
vendor: huawei model: v100r005c00
vendor: huawei model: huawei
vendor: huawei model: fusioncompute
db: NVD ids: CVE-2021-37036

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability - Cisco

Trust: 4.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Oct. 27, 2021, 2:29 p.m.
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs
vendor: cisco model: firepower threat defense software
vendor: cisco model: firepower
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco firepower management center
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower management center
vendor: cisco model: adaptive security appliance software
vendor: cisco model: cisco adaptive security appliance software

Critical Apache Log4j Vulnerability Updates | FortiGuard Labs

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-201803-1048, VAR-202112-0562

Trust: 4.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 21, 2021, 8 a.m.
 Vulnerabilities: denial of service, information leak, code execution
Affected productsExternal IDs
vendor: canary model: canary
vendor: huawei model: huawei
vendor: huawei model: hg532
db: NVD ids: CVE-2021-26084, CVE-2021-45105, CVE-2021-44228, CVE-2017-17215, CVE-2021-4104, CVE-2021-45046

High Severity Security Flaw in Intel CPUs Allows Attackers to Access Encryption Keys and Bypass TPM, BitLocker, and DRM - CPO Magazine

Trust: 4.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 3, 2021, 5:49 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-0146

SAM Name impersonation - Microsoft Tech Community

Related entries in the VARIoT vulnerabilities database: VAR-202111-0660

Trust: 3.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 20, 2021, 4:31 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-42278, CVE-2021-42287

Vulnerabilities Can Allow Hackers to Tamper With Walk-Through Metal Detectors | SecurityWeek.Com

Trust: 4.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: cisco model: router

Security warning: New zero-day in the Log4j Java library is already being exploited | ZDNet

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

INTEL-SA-00646

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 5.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Jan. 12, 2022, 6:26 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-45046

Security Notice: NVIDIA Response to Log4j Vulnerabilities - December 2021 | NVIDIA

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782

Trust: 3.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 16, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2021-45105

Log4j vulnerability Protection for Endpoints - Check Point Software

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 23, 2021, 10:48 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
db: NVD ids: CVE-2021-44228