Sign-up

VARIoT news about IoT security

The Log4j bug exposes a bigger issue: Open-source funding (Updated)

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 1:22 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Urgent Microsoft warning as hackers target huge weakness to hold you to ransom - how to protect yourself NOW

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 15, 2021, 8:01 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point
vendor: zoho model: manageengine adselfservice plus
db: NVD ids: CVE-2021-44228

13 Best VAPT Tools Ranked for 2021 (Paid, Free Trials & Open-source)

Trust: 3.25

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: cross-site scripting, sql injection
Affected productsExternal IDs
vendor: netbsd model: current
vendor: netbsd model: netbsd
vendor: wireshark model: wireshark
vendor: cisco model: routers
vendor: aircrack-ng model: aircrack-ng

Launch extended detection and response steps to manage Log4j vulnerability - OpenText Blogs

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 15, 2021, 12:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

‘Internet’s on Fire Right Now’: Millions of Devices at Risk Over New Software Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 15, 2021, 11 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
vendor: canary model: canary
db: NVD ids: CVE-2021-44228

Vulnerability in Widely Used Logging System Could Be Behind Recent Cyber Attacks

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 9:06 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Log4j: Just How Screwed Are We?

Related entries in the VARIoT vulnerabilities database: VAR-202112-0562, VAR-202112-0566

Trust: 4.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 15, 2021, 2:30 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: icloud
vendor: huawei model: huawei
vendor: huawei model: nice
vendor: check point model: check point
vendor: trendmicro model: security
vendor: blackberry model: blackberry
db: NVD ids: CVE-2021-45046, CVE-2021-44228

Multiple Vulnerabilities in Gryphon Tower Router - Research Advisory | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-202112-0702, VAR-202112-0711, VAR-202112-0705, VAR-202112-0704, VAR-202112-0703, VAR-202112-0709, VAR-202112-0707, VAR-202112-0706, VAR-202112-0708, VAR-202112-0710

Trust: 5.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 7, 2021, 4:42 p.m.
 Vulnerabilities: cross-site scripting, remote command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2021-20146, CVE-2021-20137, CVE-2021-20143, CVE-2021-20144, CVE-2021-20145, CVE-2021-20139, CVE-2021-20141, CVE-2021-20142, CVE-2021-20140, CVE-2021-20138

Explained: Why does the Log4j vulnerability have tech firms worried? | Explained News,The Indian Express

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 16, 2021, 3:59 a.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: icloud
vendor: check point model: check point
vendor: check point model: express
vendor: cisco model: meeting server
vendor: cisco model: webex
vendor: cisco model: meeting
vendor: cisco model: cisco webex
vendor: cisco model: webex meeting server
vendor: check point software technologies model: check point
vendor: check point software technologies model: express
db: NVD ids: CVE-2021-44228

Windows Mobile Device Management 0-day vulnerability could lead to local privilege escalation - Securezoo

Trust: 4.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Nov. 30, 2021, 5:22 p.m.
 Vulnerabilities: information disclosure, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-24084

Update on Our Response to the Log4j Vulnerability | Datadog

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0562, VAR-202112-0566

Trust: 3.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-45046, CVE-2021-44228

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 9, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 4, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

Update: Apache Log4J Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

PSIRT Advisories | FortiGuard

Trust: 5.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 7, 2022, midnight
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: fortigate model: fortios

KLA12384 RCE vulnerability in Microsoft Device

Related entries in the VARIoT vulnerabilities database: VAR-202111-0697, VAR-202112-1833, VAR-202112-0562, VAR-202112-0566

Trust: 4.25

Fetched: Dec. 28, 2021, 9:20 a.m., Published: -
 Vulnerabilities: denial of service, information disclosure, privilege escalation...
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: safari
vendor: schneider model: concept
vendor: schneider electric model: concept
vendor: google model: android
vendor: google model: chrome
vendor: sophos model: mobile
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2021-43226, CVE-2021-43891, CVE-2021-4055, CVE-2021-43893, CVE-2021-4059, CVE-2021-41379, CVE-2021-42315, CVE-2021-4053, CVE-2021-41360, CVE-2021-43207, CVE-2021-4054, CVE-2021-43242, CVE-2021-43244, CVE-2021-43238, CVE-2021-43240, CVE-2021-43907, CVE-2021-4062, CVE-2021-42312, CVE-2021-43239, CVE-2021-43214, CVE-2021-43245, CVE-2021-42313, CVE-2021-43215, CVE-2021-43882, CVE-2021-40453, CVE-2021-42294, CVE-2021-43889, CVE-2021-43255, CVE-2021-43247, CVE-2021-43896, CVE-2021-43892, CVE-2021-4066, CVE-2021-43224, CVE-2021-40441, CVE-2021-4063, CVE-2021-38666, CVE-2021-43246, CVE-2021-4068, CVE-2021-43256, CVE-2021-43877, CVE-2021-42320, CVE-2021-43225, CVE-2021-43236, CVE-2021-41333, CVE-2021-40452, CVE-2021-43228, CVE-2021-43237, CVE-2021-43235, CVE-2021-24084, CVE-2021-43243, CVE-2021-43908, CVE-2021-4056, CVE-2021-43890, CVE-2021-42314, CVE-2021-4065, CVE-2021-43905, CVE-2021-43223, CVE-2021-45046, CVE-2021-43216, CVE-2021-43875, CVE-2021-43880, CVE-2021-42310, CVE-2021-4052, CVE-2021-43232, CVE-2021-4057, CVE-2021-4058, CVE-2021-43219, CVE-2021-42309, CVE-2021-43248, CVE-2021-43230, CVE-2021-42293, CVE-2021-43227, CVE-2021-43217, CVE-2021-44228, CVE-2021-43222, CVE-2021-4067, CVE-2021-4064, CVE-2021-4061, CVE-2021-43229, CVE-2021-43883, CVE-2021-28474, CVE-2021-42311, CVE-2021-43899, CVE-2021-43234, CVE-2021-43233, CVE-2021-41365, CVE-2021-42295, CVE-2021-43888, CVE-2021-43231, CVE-2021-45056

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

Vulnerabilities

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202109-1909, VAR-202008-0248

Trust: 5.5

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 10 a.m.
 Vulnerabilities: directory traversal, use after free, privilege escalation...
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: citrix model: sd-wan wanop
db: NVD ids: CVE-2021-28483, CVE-2019-1222, CVE-2021-28480, CVE-2021-26855, CVE-2020-12388, CVE-2021-28481, CVE-2020-3765, CVE-2021-28482, CVE-2020-27955, CVE-2021-44228, CVE-2018-4878, CVE-2021-17095, CVE-2019-19781, CVE-2021-40444, CVE-2019-1181, CVE-2020-16898, CVE-2019-1182, CVE-2021-42321, CVE-2021-30563, CVE-2019-0604, CVE-2019-1226, CVE-2020-1472, CVE-2019-0708, CVE-2020-0609, CVE-2020-17051, CVE-2020-0796, CVE-2020-6457, CVE-2020-0665

Research finds some medical devices vulnerable to hackers

Trust: 3.0

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Nov. 9, 2021, 10:06 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus

Log4j vulnerability explained in 10 points: What is it, should you be worried?

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.75

Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 14, 2021, 12:55 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: apple model: iphone
vendor: apple model: icloud
vendor: oneplus model: oneplus
vendor: oneplus model: one
db: NVD ids: CVE-2021-44228