Sign-up

VARIoT news about IoT security

Siemens Xpedition Layout Browser | CISA

Trust: 3.75

Fetched: Oct. 13, 2023, 9:25 a.m., Published: Jan. 10, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2023-30900

Fortifying IoT Devices: Unraveling the Art of Securing Embedded Systems | Tripwire

Trust: 3.75

Fetched: Oct. 13, 2023, 9:24 a.m., Published: Oct. 13, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone

Google Cloud, AWS, and Cloudflare report largest DDoS attacks ever | ZDNET

Related entries in the VARIoT vulnerabilities database: VAR-202310-0175

Trust: 4.75

Fetched: Oct. 13, 2023, 9:24 a.m., Published: Oct. 13, 2023, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2023-44487

.NET October 2023 Updates - .NET 7.0.12, .NET 6.0.23 - .NET Blog

Related entries in the VARIoT vulnerabilities database: VAR-202310-0175

Trust: 4.75

Fetched: Oct. 13, 2023, 9:23 a.m., Published: Oct. 10, 2023, 5:04 p.m.
 Vulnerabilities: memory leak, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2023-44487, CVE-2023-38171, CVE-2023-36435

SSA-594373

Related entries in the VARIoT vulnerabilities database: VAR-202310-0197

Trust: 5.0

Fetched: Oct. 13, 2023, 9:22 a.m., Published: Oct. 1, 2023, midnight
 Vulnerabilities: code execution, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2023-35796

Badbox Operation Targets Android Devices in Fraud Schemes

Trust: 3.0

Fetched: Oct. 13, 2023, 9:21 a.m., Published: Oct. 10, 2023, 8:30 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

10 zero-day vulnerabilities in industrial cell router could lead to code execution, buffer overflows

Trust: 5.5

Fetched: Oct. 13, 2023, 9:21 a.m., Published: Oct. 11, 2023, 4 p.m.
 Vulnerabilities: code execution, authentication bypass, buffer overflow
Affected productsExternal IDs
vendor: snort model: snort
vendor: apple model: webkit
vendor: apple model: safari
vendor: snort.org model: snort
vendor: cisco model: router
db: NVD ids: CVE-2023-32632, CVE-2023-24479, CVE-2023-39928, CVE-2023-32645

HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202310-0175

Trust: 3.25

Fetched: Oct. 13, 2023, 9:21 a.m., Published: Oct. 2, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-44487

ICS Patch Tuesday: Siemens Ruggedcom Devices Affected by Nozomi Component Flaws - SecurityWeek

Related entries in the VARIoT vulnerabilities database: VAR-202310-0161

Trust: 4.5

Fetched: Oct. 13, 2023, 9:21 a.m., Published: Oct. 11, 2023, 8:20 a.m.
 Vulnerabilities: information disclosure, code execution, privilege escalation...
Affected productsExternal IDs
vendor: nozomi model: guardian
vendor: siemens model: cp devices
vendor: siemens model: simatic cp
vendor: siemens model: ruggedcom
vendor: siemens model: w1750d
vendor: siemens model: sicam pas
vendor: siemens model: sicam pas/pqs
vendor: siemens model: scalance
vendor: siemens model: scalance w1750d
vendor: siemens model: simatic
vendor: siemens model: sinema server
vendor: siemens model: sicam
vendor: siemens model: sicam a8000
vendor: siemens model: sinec nms
db: NVD ids: CVE-2023-43625, CVE-2023-36380

How Axonius Helps Identify the New Curl Vulnerabilities CVE-2023-38545 and CVE-2023-38546

Trust: 5.0

Fetched: Oct. 13, 2023, 9:20 a.m., Published: Oct. 12, 2023, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2023-38546, CVE-2023-40477, CVE-2023-38831, CVE-2023-38545

Siemens CPCI85 Firmware of SICAM A8000 Devices | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202310-0161

Trust: 3.5

Fetched: Oct. 13, 2023, 9:19 a.m., Published: Jan. 10, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: sicam
vendor: siemens model: sicam a8000
db: NVD ids: CVE-2023-36380

IZ1H9 Campaign Enhances Its Arsenal with Scores of Exploits | FortiGuard Labs

Related entries in the VARIoT vulnerabilities database: VAR-202102-0290, VAR-201709-0173, VAR-202303-1268, VAR-202202-1281, VAR-202109-0597, VAR-202210-1176, VAR-202002-0403, VAR-202209-2068

Trust: 6.5

Fetched: Oct. 13, 2023, 9:13 a.m., Published: Oct. 9, 2023, 2 p.m.
 Vulnerabilities: command injection, arbitrary command execution, code execution...
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: d-link model: router
vendor: netis model: wf2419
vendor: prolink model: prc2402m
db: NVD ids: CVE-2020-25506, CVE-2015-1187, CVE-2021-36380, CVE-2023-1389, CVE-2023-23295, CVE-2021-27561, CVE-2021-45382, CVE-2021-33544, CVE-2016-20017, CVE-2019-19356, CVE-2022-40475

How to Shield Your Devices from Vulnerabilities

Trust: 3.75

Fetched: Oct. 13, 2023, 9:13 a.m., Published: Oct. 11, 2023, 6:20 p.m.
 Vulnerabilities: brute force attack
Affected productsExternal IDs

What is Network Vulnerability Scanning? | Definition from TechTarget

Trust: 3.5

Fetched: Oct. 13, 2023, 9:12 a.m., Published: Oct. 13, 2023, midnight
 Vulnerabilities: sql injection, cross-site scripting
Affected productsExternal IDs

Security Research Device - Apple Security Research

Trust: 3.25

Fetched: Oct. 13, 2023, 9:11 a.m., Published: Oct. 31, 2023, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Govt issues critical warning for Android 13 and older devices: risk, affected devices, how to protect your phone - India Today

Trust: 4.0

Fetched: Oct. 11, 2023, 9:50 a.m., Published: Oct. 11, 2023, 6:09 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: android

Apple Rolls Out iOS/iPadOS 16.7.1 to Address Zero-Day Vulnerability - VULNERA

Trust: 3.0

Fetched: Oct. 11, 2023, 9:43 a.m., Published: Oct. 11, 2023, 4:03 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-5217, CVE-2023-42824

System BIOS dla komputera Dell Latitude 3330 | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: Oct. 11, 2023, 9:41 a.m., Published: Oct. 11, 3330, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: latitude
vendor: dell model: bios

Plus applications user manual: NDI Optotrak Certus optical pose tracker

Trust: 3.0

Fetched: Oct. 11, 2023, 9:34 a.m., Published: Feb. 9, 2000, midnight
 Vulnerabilities: application crash
Affected productsExternal IDs

What's new

Trust: 3.75

Fetched: Oct. 11, 2023, 9:32 a.m., Published: April 11, 2019, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
vendor: apple model: macos