Sign-up

VARIoT news about IoT security

Finding Bugs in Windows Drivers, Part 1 - WDM

Trust: 4.5

Fetched: Oct. 17, 2023, 9:11 a.m., Published: May 24, 2022, midnight
 Vulnerabilities: memory corruption, privilege escalation, information leakage...
Affected productsExternal IDs
vendor: smarter model: coffee
db: NVD ids: CVE-2021-40328, CVE-2021-40332

Vulnerabilities in Medtronic Product Can Allow Hackers to Control Cardiac Devices - SecurityWeek

Trust: 3.75

Fetched: Oct. 17, 2023, 9:10 a.m., Published: Dec. 15, 2020, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2020-25187, CVE-2020-27252, CVE-2020-25183

Which mobile device vulnerability relies on your device automatically picking up the access point with the strongest signal?

Related entries in the VARIoT vulnerabilities database: VAR-202105-1428, VAR-202105-0257, VAR-202105-1493, VAR-202105-1476, VAR-202105-1432, VAR-202105-1429, VAR-202105-1475, VAR-202105-1430, VAR-202105-1477, VAR-202105-1431

Trust: 3.75

Fetched: Oct. 17, 2023, 9:09 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2020-26141, CVE-2021-26139, CVE-2020-26145, CVE-2020-26143, CVE-2020-26144, CVE-2020-24586, CVE-2020-24587, CVE-2020-26140, CVE-2020-26147, CVE-2020-26139, CVE-2020-26142, CVE-2020-26146, CVE-2020-24588

Decades-Old Code Is Putting Millions of Critical Devices at Risk | WIRED

Trust: 3.0

Fetched: Oct. 17, 2023, 9:09 a.m., Published: Oct. 1, 2019, 3:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

This Free Tool Finds Vulnerable Devices on Your Network | Tom's Guide

Trust: 5.75

Fetched: Oct. 17, 2023, 9:08 a.m., Published: June 7, 2017, 4:23 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: printer
vendor: samsung model: android phone
vendor: samsung model: printers

Management Interfaces Cisco Networking Devices Vulnerable to RCE Attacks | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-201902-0427

Trust: 5.75

Fetched: Oct. 17, 2023, 9:08 a.m., Published: Feb. 27, 2019, 8:55 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: cisco model: rv110w wireless-n vpn
vendor: cisco model: rv215w
vendor: cisco model: router
vendor: cisco model: rv215w wireless-n vpn router
vendor: cisco model: rv130w
vendor: cisco model: rv215w wireless-n vpn
vendor: cisco model: rv130w wireless-n multifunction vpn router
vendor: cisco model: rv110w
vendor: cisco model: rv110w wireless-n vpn firewall
db: NVD ids: CVE-2019-1663

CyberMDX Research Team Discovers Two Major Medical Device Vulnerabilities | Business Wire

Trust: 3.0

Fetched: Oct. 17, 2023, 9:07 a.m., Published: Aug. 28, 2018, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Vulnerable TCP/IP stacks open millions of IoT and OT devices to attack - Help Net Security

Trust: 4.75

Fetched: Oct. 17, 2023, 9:06 a.m., Published: Dec. 9, 2020, 5:30 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: treck model: tcp/ip stack
vendor: contiki-ng model: contiki-ng
vendor: contiki-ng model: contiki
vendor: contiki os model: contiki
vendor: contiki model: contiki-ng

New Attack exploiting serious Bluetooth weakness can intercept sensitive data | Ars Technica

Related entries in the VARIoT vulnerabilities database: VAR-201908-1958

Trust: 4.75

Fetched: Oct. 17, 2023, 9:05 a.m., Published: Aug. 17, 2019, 1:56 p.m.
 Vulnerabilities: brute force attack
Affected productsExternal IDs
vendor: motorola model: motorola
db: NVD ids: CVE-2019-9506

Security And Vulnerability Management Market Size & Forecast

Trust: 3.25

Fetched: Oct. 17, 2023, 9:04 a.m., Published: Sept. 20, 2023, 6:15 a.m.
 Vulnerabilities: sql injection, buffer overflow, denial of service
Affected productsExternal IDs
vendor: symantec model: antivirus
vendor: rising model: antivirus

Microsoft Warns of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability

Trust: 4.75

Fetched: Oct. 15, 2023, 9:32 a.m., Published: Oct. 11, 2023, 4:12 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2023-22515

Update now! Atlassian Confluence vulnerability is being actively exploited

Trust: 3.5

Fetched: Oct. 15, 2023, 9:29 a.m., Published: -
 Vulnerabilities: access control vulnerability, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-22515, CVE-2021-26084

Govt issues high-risk warning for Google Chrome users, know all details here - BusinessToday

Trust: 3.5

Fetched: Oct. 15, 2023, 9:27 a.m., Published: Oct. 13, 2023, 6:53 a.m.
 Vulnerabilities: buffer overflow, use after free
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: google model: android

End-to-end security in Azure | Microsoft Learn

Trust: 3.0

Fetched: Oct. 15, 2023, 9:23 a.m., Published: Jan. 29, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs

Achieve Zero Trust at Scale With Tanium and Microsoft Entra ID | Tanium

Trust: 3.0

Fetched: Oct. 15, 2023, 9:22 a.m., Published: Oct. 2, 2023, 3:37 p.m.
 Vulnerabilities: configuration issue
Affected productsExternal IDs

SSA-843070

Trust: 5.25

Fetched: Oct. 15, 2023, 9:21 a.m., Published: Oct. 1, 2023, midnight
 Vulnerabilities: input validation vulnerability, code execution, denial of service...
Affected productsExternal IDs
vendor: aruba model: instantos
vendor: aruba model: arubaos
db: NVD ids: CVE-2023-22790, CVE-2023-22785, CVE-2023-22789, CVE-2023-22780, CVE-2023-22782, CVE-2023-22786, CVE-2023-22779, CVE-2023-22783, CVE-2023-22791, CVE-2023-22788, CVE-2023-22787, CVE-2023-22781, CVE-2023-22784

Azure threat protection | Microsoft Learn

Trust: 4.25

Fetched: Oct. 15, 2023, 9:18 a.m., Published: Jan. 20, 2023, midnight
 Vulnerabilities: file inclusion, sql injection, command execution...
Affected productsExternal IDs
vendor: imperva model: web application firewall
vendor: barracuda model: running
vendor: barracuda model: web application firewall
vendor: barracuda model: barracuda

Vulnerability Disclosure Program - Qwilr

Trust: 3.75

Fetched: Oct. 15, 2023, 9:18 a.m., Published: Oct. 2, 2023, midnight
 Vulnerabilities: privilege escalation, code execution, denial of service
Affected productsExternal IDs

Released 09 October 2023 CVE (Common Vulnerabilities and Exposures)

Trust: 4.75

Fetched: Oct. 15, 2023, 9:16 a.m., Published: Oct. 9, 2023, midnight
 Vulnerabilities: request forgery, information exposure, cross-site scripting...
Affected productsExternal IDs
vendor: lenovo model: notebook
db: NVD ids: CVE-2023-45353, CVE-2023-44378, CVE-2023-45612, CVE-2023-43700, CVE-2023-5100, CVE-2023-44236, CVE-2023-45350, CVE-2023-43643, CVE-2023-44238, CVE-2023-43699, CVE-2023-45352, CVE-2023-45356, CVE-2023-45373, CVE-2023-45369, CVE-2023-45351, CVE-2023-43697, CVE-2023-44246, CVE-2023-25822, CVE-2022-35950, CVE-2023-45372, CVE-2023-36820, CVE-2023-5333, CVE-2023-44393, CVE-2023-39194, CVE-2023-41667, CVE-2023-44240, CVE-2023-44237, CVE-2023-5103, CVE-2023-43698, CVE-2023-41660, CVE-2023-44232, CVE-2023-5330, CVE-2023-5460, CVE-2023-5459, CVE-2023-45371, CVE-2023-45613, CVE-2023-39193, CVE-2023-45370, CVE-2023-45354, CVE-2023-41669, CVE-2023-39192, CVE-2023-5331, CVE-2022-3431, CVE-2023-3589, CVE-2023-45247, CVE-2023-45374, CVE-2023-44231, CVE-2023-45248, CVE-2023-45349, CVE-2023-45364, CVE-2023-45367, CVE-2023-43696, CVE-2023-41670, CVE-2023-44993, CVE-2023-5101, CVE-2023-41672, CVE-2023-44260, CVE-2023-39189, CVE-2023-41668, CVE-2023-45363, CVE-2023-45355

How to Protect Your Personal Devices and Data from Cyber Threats

Trust: 3.5

Fetched: Oct. 15, 2023, 9:14 a.m., Published: Oct. 3, 2023, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: wifi
vendor: apple model: watch