Sign-up

VARIoT news about IoT security

Zero-day flaws in IoT baby monitors could give attackers access to camera feeds | The Daily Swig

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 2, 2021, 4:15 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: realtek model: realtek sdk

Detect & Prioritize NSO Pegasus iPhone Spyware Vulnerabilities Using VMDR for Mobile Devices | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-2172

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 20, 2021, 2:47 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: ipod touch
vendor: apple model: watchos
vendor: apple model: ipad air
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2021-30860, CVE-2021-30858

BrakTooth Bluetooth vulnerabilities could affect billions of devices - SiliconANGLE

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 7, 2021, 2:05 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-28139

Update Apple devices immediately to close a critical security vulnerability | HMS IT

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: macos

Crashing SIP IoT Clients with a Single Malformed Header

Trust: 5.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 31, 2021, 3 p.m.
 Vulnerabilities: pointer dereference vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2021-33056

Apple patches “FORCEDENTRY” zero-day exploited by Pegasus spyware | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-2172

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Feb. 16, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: itunes
vendor: apple model: watch
vendor: apple model: ipad
vendor: apple model: watchos
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2021-30860, CVE-2021-30858

Technical Analysis of CVE-2021-30864 - Perception Point

Related entries in the VARIoT vulnerabilities database: VAR-202109-1407, VAR-202108-2070

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 3, 2021, 11:30 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30783, CVE-2021-30864

Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection - Microsoft Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 28, 2021, 4 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30892

Apple fixes zero-day in iOS and iPadOS 15.0.2 emergency release: Detect and Prioritize Vulnerabilities using VMDR for Mobile Devices | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202104-0751, VAR-202109-1315, VAR-202109-1420, VAR-202110-0332, VAR-202109-1313, VAR-202109-1316, VAR-202109-1419, VAR-202104-0753, VAR-202108-2172, VAR-202108-2057, VAR-202109-1311, VAR-202108-1057, VAR-202108-1374, VAR-202104-0750, VAR-202104-0647

Trust: 4.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 18, 2021, 7:41 a.m.
 Vulnerabilities: integer overflow
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: ipad
vendor: apple model: ipod touch
vendor: apple model: ipad air
vendor: apple model: iphone
db: NVD ids: CVE-2021-1871, CVE-2021-30665, CVE-2021-30762, CVE-2021-30807, CVE-2021-30663, CVE-2021-30666, CVE-2021-30761, CVE-2021-1879, CVE-2021-30858, CVE-2021-30883, CVE-2021-30661, CVE-2021-30860, CVE-2021-30869, CVE-2021-1870, CVE-2021-1782

BrakTooth: New Bluetooth Vulnerabilities Could Affect Millions of Devices | SecurityWeek.Com

Trust: 3.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 16, 2022, midnight
 Vulnerabilities: denial of service, code execution, service crash
Affected productsExternal IDs
vendor: espressif model: esp-wrover-kit
vendor: espressif systems model: esp-wrover-kit

Privacy Tip #297 - Vulnerability in Smart Home Devices Including Baby Monitors | Robinson+Cole Data Privacy + Security Insider - JDSupra

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Android Security Bulletin-September 2021 | Android Open Source Project

Related entries in the VARIoT vulnerabilities database: VAR-202109-0298, VAR-202109-0390, VAR-202107-0543, VAR-202109-0569, VAR-202109-0186, VAR-202107-0541, VAR-202107-0545, VAR-202107-0544, VAR-202109-0387, VAR-202109-0391

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 16, 2021, midnight
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs
vendor: motorola model: motorola
vendor: motorola model: android
vendor: samsung model: notes
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: huawei model: huawei
vendor: broadcom model: broadcom
vendor: nokia model: nokia
vendor: google model: android
vendor: google model: pixel
db: NVD ids: CVE-2021-1946, CVE-2021-0687, CVE-2021-1971, CVE-2021-0684, CVE-2021-0695, CVE-2021-0690, CVE-2021-0681, CVE-2021-1933, CVE-2021-0636, CVE-2021-0683, CVE-2021-0635, CVE-2021-0689, CVE-2021-0688, CVE-2021-1890, CVE-2021-30295, CVE-2021-1909, CVE-2021-1952, CVE-2021-0680, CVE-2021-1886, CVE-2021-0686, CVE-2021-1888, CVE-2021-0685, CVE-2021-1889, CVE-2021-1935, CVE-2021-0595, CVE-2021-1934, CVE-2021-1923

Patch Tuesday, October 2021 Edition - Krebs on Security

Related entries in the VARIoT vulnerabilities database: VAR-202110-1687, VAR-202108-2057

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 19, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2021-38672, CVE-2021-36970, CVE-2021-26427, CVE-2021-40449, CVE-2021-30883, CVE-2021-40461

New macOS vulnerability could allow attackers to bypass SIP: Microsoft | Technology

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 29, 2021, 5:02 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30892

Microsoft warns of nasty new macOS vulnerability with an excellent name | TechRadar

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 29, 2021, 1:44 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30892

Rooting malware discovered on Google Play, Samsung Galaxy Store - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202003-0573, VAR-201910-0902

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 3, 2021, 6:45 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: google model: android
db: NVD ids: CVE-2020-0041, CVE-2020-0069, CVE-2019-2215

Microsoft Announces New Endpoint Security Solution for SMBs | SecurityWeek.Com

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 16, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: rising model: antivirus

Multiple Vulnerabilities in Mozilla Firefox Could Allow for Arbitrary Code Execution

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 7, 2022, 7:33 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-38505, CVE-2021-38506, CVE-2021-38504, CVE-2021-38508, CVE-2021-38503, CVE-2021-38510, CVE-2021-38509, CVE-2021-38507

Microsoft warns of nasty new macOS vulnerability with an excellent name | TechRadar

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 29, 2021, 1:44 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30892

Google warns Android users of zero-day vulnerability being actively attacked

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 10, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android