VARIoT latest news about IoT security

(PDF) Assessing medical device vulnerabilities on the Internet of Things Trust: 5.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: -	Vulnerabilities: default credentials

Affected products

External IDs

vendor:	dropbear	model:	ssh server
vendor:	proftpd	model:	proftpd

db:

MICROSOFT

ids:

MS17-010

BrakTooth Bluetooth vulnerability exposes millions of Windows and Android devices - MSPoweruser Trust: 4.0 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Sept. 6, 2021, 10:01 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

dell

model:

optiplex

db:

NVD

ids:

CVE-2021-28139

HP Analyzes Zero Day Remote Code Execution Vulnerability - MSSP Alert Trust: 5.0 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 18, 2021, 7 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-404441

Apple releases updates to all iOS/iPad devices to fix security vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202108-2172, VAR-202108-1057 Trust: 3.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Sept. 14, 2021, 2:09 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2021-30858, CVE-2021-30860

Critical vulnerabilities expose Cisco equipment to hijacking attacks \| Usa science news Trust: 5.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Dec. 16, 2021, 10:49 p.m.	Vulnerabilities: injection attack, command injection

Affected products

External IDs

vendor:	cisco	model:	series
vendor:	cisco	model:	catalyst
vendor:	cisco	model:	series switches

db:

NVD

ids:

CVE-2021-40113, CVE-2021-34795

Exploitable Vulnerabilities Affect ZTE MF971R Router Related entries in the VARIoT vulnerabilities database: VAR-202110-0395, VAR-202110-0396 Trust: 5.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 19, 2021, 5:31 p.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

vendor:	huawei	model:	huawei
vendor:	d-link	model:	router
vendor:	cisco	model:	routers
vendor:	cisco	model:	router
vendor:	netgear	model:	router

db:

NVD

ids:

CVE-2021-21749, CVE-2021-21748

Google Android : List of security vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202110-0187, VAR-202107-1287, VAR-202110-0165, VAR-202110-0188, VAR-202110-0189 Trust: 5.25 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 2, 2021, midnight	Vulnerabilities: use after free, path traversal, input validation vulnerability...

Affected products

External IDs

vendor:	samsung	model:	mobile
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile devices
vendor:	google	model:	android

db:

NVD

ids:

CVE-2021-25501, CVE-2021-25450, CVE-2021-25393, CVE-2021-25463, CVE-2021-25451, CVE-2021-25429, CVE-2021-30161, CVE-2021-26689, CVE-2021-25395, CVE-2021-25456, CVE-2021-25390, CVE-2021-38591, CVE-2021-25410, CVE-2021-25391, CVE-2021-25472, CVE-2021-25426, CVE-2021-25486, CVE-2021-30162, CVE-2021-25443, CVE-2021-25484, CVE-2021-25490, CVE-2021-25482, CVE-2021-25454, CVE-2021-25428, CVE-2021-25453, CVE-2021-25412, CVE-2021-25394, CVE-2021-25502, CVE-2021-25449, CVE-2021-25485, CVE-2021-25458, CVE-2021-25444, CVE-2021-25409, CVE-2021-25460, CVE-2009-1234, CVE-2021-25430, CVE-2021-25392, CVE-2021-25483, CVE-2021-25397, CVE-2021-25473, CVE-2021-25461, CVE-2021-25413, CVE-2021-25417, CVE-2021-25414, CVE-2021-25459, CVE-2021-25462, CVE-2021-26687, CVE-2021-25427, CVE-2021-27901, CVE-2021-25474, CVE-2021-25455

Critical PrintNightmare Vulnerability Patched by Microsoft - Update Now! \| Trend Micro News Related entries in the VARIoT vulnerabilities database: VAR-202107-1010 Trust: 3.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Aug. 27, 2021, 8:43 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	trend micro	model:	trend micro security
vendor:	trend micro	model:	security
vendor:	trend micro	model:	micro security
vendor:	trend	model:	trend micro security
vendor:	trend	model:	security
vendor:	trend	model:	micro security

db:

NVD

ids:

CVE-2021-34527

Medtronic Recalls Medical Devices Due to Security Risks That Can Lead to Injury, Death \| SecurityWeek.Com Trust: 3.5 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 7, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	medtronic	model:	minimed 508
vendor:	medtronic	model:	paradigm

Critical Vulnerability Affects Millions of IoT Devices - The Cyber Post Trust: 4.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Aug. 18, 2021, 7:32 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28372

Can a hacker remotely connect to Your Wi-Fi camera? A new vulnerability suggests yes - SAM Seamless Network Trust: 4.0 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 26, 2021, 8 a.m.	Vulnerabilities: -

Affected products	External IDs

Patchday: Attackers target Android devices Trust: 3.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 3, 2021, 11:53 a.m.	Vulnerabilities: use after free

Affected products

External IDs

vendor:	huawei	model:	huawei
vendor:	samsung	model:	galaxy
vendor:	samsung	model:	samsung
vendor:	google	model:	pixel
vendor:	google	model:	android
vendor:	trend	model:	security

Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution Trust: 5.25 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 7, 2022, 7:33 p.m.	Vulnerabilities: use after free, code execution

Affected products

External IDs

vendor:	google	model:	home
vendor:	google	model:	chrome
vendor:	google	model:	google chrome

db:

NVD

ids:

CVE-2021-38001, CVE-2021-38003, CVE-2021-37999, CVE-2021-38000, CVE-2021-37998, CVE-2021-38002, CVE-2021-37997

iPhone Users, Act Now: Install Emergency Security Patch To Fix Flaws That Make Your Device Vulnerable Related entries in the VARIoT vulnerabilities database: VAR-202108-2057, VAR-202110-0332 Trust: 5.5 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Oct. 12, 2021, 9:35 a.m.	Vulnerabilities: memory corruption

Affected products

External IDs

vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	ipod touch
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2021-30883, CVE-2021-30807

Multiple Vulnerabilities in Microsoft Edge Could Allow for Arbitrary Code Execution Trust: 5.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 7, 2022, 7:34 p.m.	Vulnerabilities: information leakage, use after free, code execution

Affected products

External IDs

vendor:

google

model:

home

db:

NVD

ids:

CVE-2021-37960, CVE-2021-37956, CVE-2021-37959, CVE-2021-37963, CVE-2021-37966, CVE-2021-37970, CVE-2021-37967, CVE-2021-37972, CVE-2021-37969, CVE-2021-37958, CVE-2021-37965, CVE-2021-37968, CVE-2021-37973, CVE-2021-37961, CVE-2021-37971, CVE-2021-37957, CVE-2021-37964, CVE-2021-37962

CISA Warns That BrakTooth Vulnerabilities Can Now Be Exploited \| PCMag Trust: 4.0 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 11, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:

samsung

model:

samsung

Apple Spyware Vulnerability Emergency Security Update \| HYPEBEAST Trust: 3.0 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Sept. 14, 2021, 9:43 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	watchos
vendor:	apple	model:	iphone
vendor:	apple	model:	macos

CISA Warns That BrakTooth Vulnerabilities Can Now Be Exploited Trust: 5.0 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Nov. 4, 2021, 8:25 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

samsung

model:

samsung

Update Now: Apple Patches iOS, Mac Attack That Uses Malicious PDFs to Hack Devices \| PCMag Related entries in the VARIoT vulnerabilities database: VAR-202108-2172, VAR-202108-1057 Trust: 4.75 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 11, 2022, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	watchos
vendor:	apple	model:	watch
vendor:	apple	model:	safari
vendor:	apple	model:	tvos
vendor:	apple	model:	macos
vendor:	apple	model:	webkit
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2021-30858, CVE-2021-30860

ESB-2021.3458 Related entries in the VARIoT vulnerabilities database: VAR-202109-1854, VAR-202109-1855, VAR-202109-1856 Trust: 5.25 Fetched: Nov. 9, 2021, 12:59 p.m., Published: Jan. 17, 2021, midnight	Vulnerabilities: path traversal, denial of service, cross-site request forgery...

Affected products

External IDs

vendor:	siemens	model:	scalance w1750d
vendor:	siemens	model:	scalance
vendor:	siemens	model:	w1750d
vendor:	aruba	model:	arubaos
vendor:	aruba networks	model:	arubaos

db:

NVD

ids:

CVE-2021-37721, CVE-2021-37728, CVE-2021-37717, CVE-2021-37720, CVE-2021-37733, CVE-2021-37722, CVE-2021-37725, CVE-2021-37731, CVE-2021-37724, CVE-2020-37719, CVE-2019-5318, CVE-2021-37729, CVE-2021-37718, CVE-2021-37723, CVE-2021-37716

VARIoT news about IoT security