VARIoT latest news about IoT security

Threat and Vulnerability Management now supports all major platforms - Microsoft Security Blog Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 3.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: May 11, 2021, 6 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	google	model:	google chrome

db:

NVD

ids:

cve-2021-44228, CVE-2021-44228

BlueBorne Attack Research & Solutions \| Armis Labs Trust: 4.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Oct. 17, 2021, 7:32 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	mobile devices
vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile phones
vendor:	samsung	model:	mobile
vendor:	broadcom	model:	linux
vendor:	broadcom	model:	broadcom
vendor:	google	model:	wifi
vendor:	google	model:	android
vendor:	serve	model:	serve

db:

NVD

ids:

CVE-2017-0783, CVE-2017-8628

Windows Hello Vulnerability Allows Attackers To Bypass Biometric Authentication Using Spoofed Images - CPO Magazine Trust: 3.75 Fetched: Dec. 16, 2021, 3:47 p.m., Published: July 30, 2021, 2:33 p.m.	Vulnerabilities: authentication vulnerability

Affected products	External IDs

Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability - Microsoft Security Blog Related entries in the VARIoT vulnerabilities database: VAR-202112-2011, VAR-202112-1782, VAR-202112-0562, VAR-202112-0566 Trust: 4.5 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 12, 2021, 5:29 a.m.	Vulnerabilities: command execution, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44832, CVE-2021-34473, CVE-2021-26084, CVE-2021-45105, CVE-2021-44428, CVE-2021-45046, CVE-2021-4428, CVE-2021-44228

Log4j zero-day flaw: What you need to know and how to protect yourself \| ZDNet Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 5.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 14, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

Zero-day vulnerability in Hillrom cardiology devices could allow attackers full control \| The Daily Swig Trust: 4.0 Fetched: Dec. 16, 2021, 3:47 p.m., Published: Dec. 13, 2021, 2:03 p.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2021-43935

11 Best Network Vulnerability Scanners Tested 2021 (Free + Paid Tools) Trust: 3.5 Fetched: Dec. 9, 2021, 11:28 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	router
vendor:	cisco	model:	series
vendor:	cisco	model:	routers
vendor:	cisco	model:	adaptive security appliance
vendor:	cisco	model:	guard
vendor:	cisco	model:	cisco adaptive security appliance
vendor:	cisco	model:	ios

17 Best Vulnerability Assessment Scanning Tools Trust: 3.5 Fetched: Dec. 9, 2021, 11:28 a.m., Published: -	Vulnerabilities: sql injection

Affected products

External IDs

vendor:	aircrack-ng	model:	aircrack-ng
vendor:	cisco	model:	router
vendor:	cisco	model:	nexus
vendor:	openscap	model:	openscap
vendor:	netbsd	model:	netbsd
vendor:	netbsd	model:	current

OWASP Top 10 Security Vulnerabilities in 2021 \| ImmuniWeb Trust: 5.5 Fetched: Dec. 9, 2021, 11:28 a.m., Published: Jan. 10, 2022, midnight	Vulnerabilities: sql injection, cross-site scripting, denial of service

Affected products

External IDs

vendor:

trend

model:

security

14 best open-source web application vulnerability scanners [updated for 2020] - Infosec Resources Trust: 3.5 Fetched: Dec. 9, 2021, 11:28 a.m., Published: May 7, 2021, 6:39 p.m.	Vulnerabilities: command execution, remote file inclusion, local file inclusion...

Affected products	External IDs

10 Best Vulnerability Scanning Tools - 2021 (Updated) Trust: 3.5 Fetched: Dec. 9, 2021, 11:28 a.m., Published: July 4, 2021, 3:36 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	wireshark	model:	wireshark
vendor:	netbsd	model:	netbsd
vendor:	aircrack-ng	model:	aircrack-ng
vendor:	tripwire	model:	ip360

OWASP Mobile Top 10 \| OWASP Foundation Trust: 3.5 Fetched: Dec. 7, 2021, 8:04 a.m., Published: Jan. 10, 2022, midnight	Vulnerabilities: integer overflow

Affected products

External IDs

vendor:	cisco systems	model:	cisco systems
vendor:	cisco	model:	cisco systems
vendor:	blackberry	model:	smartphone
vendor:	blackberry	model:	blackberry
vendor:	google	model:	wifi
vendor:	google	model:	android

[no-title] Related entries in the VARIoT vulnerabilities database: VAR-202109-1910 Trust: 3.75 Fetched: Dec. 7, 2021, 8:04 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	siemens	model:	simatic
vendor:	siemens	model:	simatic net

db:

SIEMENS

ids:

SSA-549234

[no-title] Related entries in the VARIoT vulnerabilities database: VAR-202109-1918 Trust: 3.0 Fetched: Dec. 7, 2021, 8:04 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

SIEMENS

ids:

SSA-500748

Multiple RTOS (Update D) \| CISA Related entries in the VARIoT vulnerabilities database: VAR-202104-1963, VAR-202104-1960 Trust: 5.25 Fetched: Dec. 7, 2021, 8:04 a.m., Published: Jan. 1, 2022, midnight	Vulnerabilities: buffer overflow, code execution, memory corruption...

Affected products

External IDs

vendor:	cesanta	model:	mongoose
vendor:	cesanta	model:	mongoose os
vendor:	riot	model:	riot
vendor:	samsung	model:	samsung
vendor:	blackberry	model:	blackberry
vendor:	blackberry	model:	link
vendor:	windriver	model:	river vxworks
vendor:	windriver	model:	vxworks
vendor:	mbed	model:	mbed

db:

NVD

ids:

CVE-2020-35198, CVE-2021-27429, CVE-2021-27433, CVE-2021-27419, CVE-2021-27427, CVE-2021-27417, CVE-2021-22684, CVE-2021-26706, CVE-2021-22156, CVE-2021-27421, CVE-2021-27411, CVE-2021-3420, CVE-2021-30636, CVE-2021-27425, CVE-2020-28895, CVE-2021-26461, CVE-2021-22636, CVE-2021-27504, CVE-2021-31571, CVE-2021-31572, CVE-2021-27435, CVE-2020-13603, CVE-2021-27431, CVE-2021-22680, CVE-2021-27439, CVE-2021-27502

The Best Parental Control Apps and Devices, From Circle to eero \| Fatherly Trust: 3.5 Fetched: Dec. 7, 2021, 8:04 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	serve	model:	serve
vendor:	mesh	model:	mesh
vendor:	google	model:	wifi
vendor:	google	model:	home

This Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control - Synack Trust: 3.5 Fetched: Dec. 7, 2021, 8:04 a.m., Published: Nov. 24, 2021, 9:06 p.m.	Vulnerabilities: integer overflow, code execution, memory access violation...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-34535

New TCP/IP Stacks Vulnerabilities Impact Millions of Devices \| New Jersey Cybersecurity & Communications Integration Cell Related entries in the VARIoT vulnerabilities database: VAR-202111-1607, VAR-202111-1616, VAR-202111-1605, VAR-202111-1604 Trust: 5.75 Fetched: Dec. 7, 2021, 8:04 a.m., Published: -	Vulnerabilities: information leak, code execution

Affected products

External IDs

vendor:

siemens

model:

nucleus

db:

NVD

ids:

CVE-2021-31884, CVE-2021-31888, CVE-2021-31886, CVE-2021-31887

Lab Minutes Trust: 3.25 Fetched: Dec. 7, 2021, 8:04 a.m., Published: Jan. 9, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

palo

model:

firewall

Securezoo Home - Securezoo Related entries in the VARIoT vulnerabilities database: VAR-202201-1613 Trust: 3.75 Fetched: Dec. 7, 2021, 8:04 a.m., Published: Jan. 1, 2022, 11:54 p.m.	Vulnerabilities: cross-site request forgery, request forgery

Affected products

External IDs

db:

NVD

ids:

CVE-2022-22588, CVE-2022-21825

VARIoT news about IoT security