Sign-up

VARIoT news about IoT security

Introducing Vade Remote Browser Isolation (RBI)

Trust: 4.75

Fetched: Sept. 22, 2023, 9:35 a.m., Published: Sept. 19, 2023, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: trend model: security

Are You Protected from the 12 Most Exploited Vulnerabilities? | Mend.io

Related entries in the VARIoT vulnerabilities database: VAR-202206-0004, VAR-201906-0815, VAR-202205-1958, VAR-202205-0394, VAR-202112-0566

Trust: 3.75

Fetched: Sept. 22, 2023, 9:31 a.m., Published: Sept. 5, 2023, 4:03 p.m.
 Vulnerabilities: code execution, security feature bypass, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2021-26084, CVE-2021-31207, CVE-2022-26134, CVE-2021-34523, CVE-2018-13379, CVE-2022-30190, CVE-2022-22954, CVE-2022-1388, CVE-2022-22960, CVE-2021-40539, CVE-2021-44228, CVE-2021-34473

CryptoJacking - A Technique Using By Hackers To Mine CryptoCurrencies - Hackers Online Club (HOC)

Trust: 3.5

Fetched: Sept. 22, 2023, 9:30 a.m., Published: Aug. 17, 2022, 1:40 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks
db: NVD ids: CVE-2017-10271, CVE-2016-3088

iOS 16.7, macOS 13.6, and macOS 12.7 fix exploited vulnerabilities by attackers; update now

Trust: 4.5

Fetched: Sept. 22, 2023, 9:29 a.m., Published: Sept. 21, 2023, 5:40 p.m.
 Vulnerabilities: code execution, certificate validation issue
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: webkit
db: NVD ids: CVE-2023-41992, CVE-2023-41991, CVE-2023-41993

Fileless Remote Code Execution on Juniper Firewalls - Blog - VulnCheck

Trust: 5.5

Fetched: Sept. 22, 2023, 9:22 a.m., Published: June 22, 2023, midnight
 Vulnerabilities: code execution, information leak
Affected productsExternal IDs
vendor: embedthis model: appweb
db: NVD ids: CVE-2023-36846, CVE-2023-36844, CVE-2023-36845, CVE-2023-36851, CVE-2023-36847

Medical device vulnerability could let hackers steal Wi-Fi credentials - Wi-Fi, cyber security - Channel Asia Singapore

Trust: 3.75

Fetched: Sept. 22, 2023, 9:22 a.m., Published: Sept. 22, 2023, midnight
 Vulnerabilities: format string vulnerability
Affected productsExternal IDs

Electronics | Free Full-Text | Machine-Learning-Based Vulnerability Detection and Classification in Internet of Things Device Security

Trust: 5.0

Fetched: Sept. 22, 2023, 9:20 a.m., Published: Jan. 22, 2023, midnight
 Vulnerabilities: resource exhaustion, replay attack, code execution...
Affected productsExternal IDs
vendor: schneider electric model: monitor
vendor: google model: android
vendor: google model: home
vendor: schneider model: monitor
vendor: treck model: tcp/ip stack
vendor: tp-link model: gateway
db: NVD ids: CVE-2020-11898, CVE-2020-11897, CVE-2020-11896, CVE-2020-11901

What is an Attack Surface? (And the Best Way to Reduce It) | StrongDM

Trust: 3.75

Fetched: Sept. 22, 2023, 9:19 a.m., Published: Sept. 2, 2023, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs

7 Best Penetration Testing Tools & Software in 2023 | eSP

Trust: 3.5

Fetched: Sept. 22, 2023, 9:17 a.m., Published: Sept. 15, 2023, 6:20 p.m.
 Vulnerabilities: traffic interception, privilege escalation
Affected productsExternal IDs
vendor: rapid model: scada

Estimated 12,000 Juniper Devices Vulnerable to RCE Vulnerability - Security Boulevard

Trust: 3.0

Fetched: Sept. 22, 2023, 9:15 a.m., Published: Sept. 20, 2023, 8:52 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-36845

CISA Says Owl Labs Vulnerabilities Requiring Close Physical Range Exploited in Attacks - SecurityWeek

Related entries in the VARIoT vulnerabilities database: VAR-201704-1556, VAR-202201-1001, VAR-201505-0274

Trust: 4.0

Fetched: Sept. 22, 2023, 9:15 a.m., Published: Sept. 19, 2023, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2017-6884, CVE-2022-22265, CVE-2014-8361, CVE-2021-3129

Apple fixes three serious bugs in iOS and macOS - update your iPhone and Mac right now | Tom's Guide

Trust: 4.0

Fetched: Sept. 22, 2023, 9:13 a.m., Published: Sept. 21, 2023, 8:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: watch
vendor: apple model: watchos
vendor: apple model: macos
db: NVD ids: CVE-2023-41992, CVE-2023-41991, CVE-2023-41933

Can My iPhone Be Hacked? Learn How to Secure Your Device

Trust: 3.5

Fetched: Sept. 22, 2023, 9:12 a.m., Published: Sept. 7, 2023, 5:40 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: safari
vendor: apple model: icloud
vendor: apple model: iphone
vendor: apple model: watch
vendor: essential model: phone

How to Perform AWS Security Scanning and Configuration Monitoring?

Trust: 3.25

Fetched: Sept. 20, 2023, 10:04 a.m., Published: Oct. 2, 2017, 8:33 a.m.
 Vulnerabilities: sql injection, information leakage, privilege escalation...
Affected productsExternal IDs
vendor: node.js model: node.js
vendor: google model: chrome

Cisco BroadWorks platform hit by serious vulnerability - Techzine Europe

Trust: 5.0

Fetched: Sept. 20, 2023, 10 a.m., Published: Sept. 8, 2023, 10:15 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-20238

Fuzzing Against The Machine: Automate vulnerability research with emulated IoT devices on Qemu - Eduardo Blázquez’s Personal Webpage

Trust: 3.0

Fetched: Sept. 20, 2023, 10 a.m., Published: Aug. 28, 2023, 10:20 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: mobile

The GoAnywhere data breach explained | ITPro

Trust: 3.75

Fetched: Sept. 20, 2023, 10 a.m., Published: April 6, 2023, 11:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-0669

ZDI-23-1296: D-Link DAP-1325 HNAP SetAPLanSettings DeviceName Command Injection Remote Code Execution Vulnerability | allinfosecnews.com

Trust: 3.0

Fetched: Sept. 20, 2023, 9:58 a.m., Published: Sept. 7, 2023, 5 a.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs

Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202205-0394, VAR-202206-0004, VAR-202205-1958, VAR-202112-0566

Trust: 4.5

Fetched: Sept. 20, 2023, 9:57 a.m., Published: Aug. 24, 2023, 7:07 p.m.
 Vulnerabilities: security feature bypass, authentication bypass, authentication vulnerability...
Affected productsExternal IDs
vendor: zoho model: manageengine adselfservice plus
db: NVD ids: CVE-2021-40539, CVE-2018-13379, CVE-2022-22954, CVE-2021-34523, CVE-2022-1388, CVE-2022-26134, CVE-2021-26084, CVE-2021-34473, CVE-2022-22960, CVE-2022-30190, CVE-2021-44228, CVE-2021-31207

What Are The Cybersecurity Risks Of Smart Home Devices?

Trust: 3.5

Fetched: Sept. 20, 2023, 9:56 a.m., Published: Sept. 2, 2023, 12:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home