VARIoT latest news about IoT security

Microsoft Exchange Remote Code Execution Vulnerability Flaws & Fixes Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: April 16, 2021, 11:44 a.m.	Vulnerabilities: denial of service, code execution, authentication bypass...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28480, CVE-2021-28481, CVE-2021-42321

Android Security Bulletin-October 2021 \| Android Open Source Project Related entries in the VARIoT vulnerabilities database: VAR-202110-1118, VAR-202110-1132, VAR-202110-1125, VAR-202110-1126, VAR-202110-1123, VAR-202012-1547, VAR-202110-1131, VAR-202110-1128, VAR-202110-1032, VAR-202110-1127, VAR-202105-1475, VAR-202110-1207, VAR-202110-1208, VAR-202110-1139, VAR-202110-1130, VAR-202110-1034, VAR-202110-1129, VAR-202110-1124, VAR-202105-1429 Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 16, 2021, midnight	Vulnerabilities: denial of service, code execution, information disclosure

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	samsung	model:	mobile
vendor:	samsung	model:	notes
vendor:	nokia	model:	nokia
vendor:	broadcom	model:	broadcom
vendor:	huawei	model:	huawei
vendor:	google	model:	android
vendor:	google	model:	pixel
vendor:	motorola	model:	android
vendor:	motorola	model:	motorola

db:

NVD

ids:

CVE-2021-30310, CVE-2021-0870, CVE-2021-1983, CVE-2021-30291, CVE-2021-0703, CVE-2021-30288, CVE-2021-30302, CVE-2021-30297, CVE-2020-29660, CVE-2021-1984, CVE-2021-1932, CVE-2021-0483, CVE-2021-30257, CVE-2021-27666, CVE-2021-1949, CVE-2021-30258, CVE-2021-1913, CVE-2020-26147, CVE-2021-1917, CVE-2021-1936, CVE-2021-29647, CVE-2021-1959, CVE-2021-1985, CVE-2020-11303, CVE-2021-30256, CVE-2020-10768, CVE-2021-30292, CVE-2020-26140

Vulnerabilities Grow as Utilities Link Control Systems to the Internet - Defense One Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 29, 2021, 10 a.m.	Vulnerabilities: default credentials

Affected products

External IDs

vendor:

trend

model:

security

Apple releases emergency update to fix spyware vulnerability \| Healthcare IT News Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, 6:54 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	watchos
vendor:	apple	model:	macos
vendor:	trend	model:	security

Cybersecurity Vulnerabilities in BlackBerry QNX Could Compromise Certain Medical Devices and Drug Manufacturing Equipment - MedTech Intelligence Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 12:39 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

blackberry

model:

blackberry

New Annke Vulnerability Shows Risks of IoT Security Camera Systems Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 26, 2021, 4 p.m.	Vulnerabilities: cross-site request forgery, request forgery, code execution...

Affected products

External IDs

db:

NVD

ids:

CVE-2021-32941

Aviso de Segurança - Vulnerabilidade de autorização imprópria em alguns produtos da Huawei Related entries in the VARIoT vulnerabilities database: VAR-202109-1642 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 8, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

huawei

model:

huawei

db:

NVD

ids:

CVE-2021-37101

ProxyShell vulnerabilities in Microsoft Exchange: What to do - Sophos News Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, 6 p.m.	Vulnerabilities: privilege elevation, code execution

Affected products

External IDs

vendor:	sophos	model:	mobile
vendor:	sophos	model:	endpoint protection

db:

NVD

ids:

CVE-2021-34523, CVE-2021-31207, CVE-2021-34473

Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices Related entries in the VARIoT vulnerabilities database: VAR-202110-1321 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 20, 2021, 7:20 a.m.	Vulnerabilities: security bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42299

Microsoft issues advisory for Surface Pro 3 TPM bypass vulnerability Related entries in the VARIoT vulnerabilities database: VAR-202110-1321 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight	Vulnerabilities: security feature bypass, feature bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2021-42299

Vulnerabilities Found in QNAP Were Fixed Trust: 6.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 1, 2021, 12:04 p.m.	Vulnerabilities: cross-site scripting, command injection

Affected products

External IDs

vendor:

qnap

model:

photo station

db:

NVD

ids:

CVE-2021-34356, CVE-2021-34352, CVE-2021-34354, CVE-2021-34355

Update Your Apple Devices Right Now to Patch This Serious iMessage Bug Related entries in the VARIoT vulnerabilities database: VAR-202112-0004 Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, noon	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	watch
vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2021-20860

Android Multiple Vulnerabilities - DIGITPOL Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 3, 2021, midnight	Vulnerabilities: denial of service, code execution, information disclosure

Affected products	External IDs

Critical macOS Bug Could Allow Threat Actors Install Undetectable Malware In Apple Devices Related entries in the VARIoT vulnerabilities database: VAR-202108-2056 Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 2, 2021, 3:39 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	macos
vendor:	apple	model:	macbook air
vendor:	apple	model:	macbook
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2021-30892

Critical Vulnerability Affects Millions of IoT Devices - Synergetics India Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 1, 2021, 7:54 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28372

Update Now: Apple Patches iOS, Mac Attack That Uses Malicious PDFs to Hack Devices Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-2172 Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, 8:49 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	iphone
vendor:	apple	model:	macos
vendor:	apple	model:	safari
vendor:	apple	model:	watchos
vendor:	apple	model:	tvos

db:

NVD

ids:

CVE-2021-30860, CVE-2021-30858

Realtek AP-Router SDK vulnerabilities could impact millions of routers and IoT devices - CNX Software Trust: 4.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 9:21 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

realtek

model:

realtek sdk

Microsoft fixes critical PrintNightmare and Office document vulnerabilities in Windows 10 \| Windows Central Related entries in the VARIoT vulnerabilities database: VAR-202109-1909 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 15, 2021, 12:21 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-36958, CVE-2021-40444

Apps of 16 popular smart home devices vulnerable to cyberattack - The Hindu Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 28, 2021, 7:03 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	home
vendor:	google	model:	google home
vendor:	google	model:	wifi

Microsoft finally fixes PrintNightmare vulnerability with KB5005031 and KB5005033 updates Related entries in the VARIoT vulnerabilities database: VAR-202107-1010 Trust: 3.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 11, 2021, 7:41 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-34481, CVE-2021-34527

VARIoT news about IoT security