Sign-up

VARIoT news about IoT security

Best Practices for Communicating Medical Device Vulnerabilities to Patients - ComplianceJunction

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 12, 2021, 3:27 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: medtronic model: paradigm
vendor: medtronic model: minimed 508

Critical IoT security camera vulnerability allows attackers to remotely watch live video - and gain access to networks | ZDNet

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 17, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: watch
db: NVD ids: CVE-2021-28372

Millions of IoT Devices Exposed to Attacks Due to Cloud Platform Vulnerability | SecurityWeek.Com

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: realtek model: realtek sdk
db: NVD ids: CVE-2021-28372

NVD - CVE-2021-1534

Trust: 3.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco systems model: cisco systems
vendor: cisco systems model: cisco email security appliance
vendor: cisco systems model: asyncos software
vendor: cisco systems model: cisco asyncos
vendor: cisco systems model: email security appliance
vendor: cisco systems model: asyncos
vendor: cisco model: cisco systems
vendor: cisco model: cisco email security appliance
vendor: cisco model: asyncos software
vendor: cisco model: cisco asyncos
vendor: cisco model: email security appliance
vendor: cisco model: asyncos
db: NVD ids: CVE-2021-1534

Time to check software and security settings for Windows network vulnerabilities | CSO Online

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 13, 2021, 7 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-40444

Researcher discloses several zero-day iOS, iPadOS vulnerabilities - The Mac Security Blog

Trust: 3.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 24, 2021, 9:42 p.m.
 Vulnerabilities: authentication vulnerability, information disclosure
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: watch
vendor: apple model: ipad
vendor: apple model: ipod touch

BrakTooth vulnerabilities impact closed-source Bluetooth stacks used in chips from Espressif, Intel, Qualcomm... - CNX Software

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, 3:55 a.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: espressif systems model: systems esp32
vendor: espressif systems model: esp32-devkitc
vendor: espressif model: systems esp32
vendor: espressif model: esp32-devkitc

Microsoft patches 66 vulnerabilities in September update

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 15, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-36965, CVE-2021-38657, CVE-2021-36956, CVE-2021-40444, CVE-2021-38667, CVE-2021-38647, CVE-2021-38671, CVE-2021-26435, CVE-2021-40447

NVD - CVE-2021-34734

Related entries in the VARIoT vulnerabilities database: VAR-202108-0822

Trust: 5.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 26, 2021, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco systems
vendor: cisco model: link layer discovery protocol
vendor: cisco model: series
vendor: cisco systems model: cisco systems
vendor: cisco systems model: link layer discovery protocol
vendor: cisco systems model: series
db: NVD ids: CVE-2021-34734

Update Apple devices immediately to close a critical security vulnerability | Access Tufts

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 17, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: watchos

MikroTik blog - Mēris botnet

Related entries in the VARIoT vulnerabilities database: VAR-201808-0384

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 15, 2021, midnight
 Vulnerabilities: weak password
Affected productsExternal IDs
vendor: mikrotik model: routers
vendor: mikrotik model: mikrotik router
vendor: mikrotik model: routeros
vendor: mikrotik model: mikrotik
vendor: mikrotik model: router
db: NVD ids: CVE-2018-14847

Apple patches zero-day flaw affecting all devices - Security - iTnews

Trust: 3.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 4, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos

How a Medical Device Vulnerability Can Compromise Privacy

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Dec. 18, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom

Devices From Many Vendors Can Be Hacked Remotely Due to Flaws in Realtek SDK | SecurityWeek.Com

Trust: 4.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 14, 2022, midnight
 Vulnerabilities: denial of service, command injection
Affected productsExternal IDs
vendor: realtek model: audio driver
vendor: realtek model: realtek sdk
vendor: asus model: asus
vendor: huawei model: huawei
db: NVD ids: CVE-2021-35392, CVE-2021-35395

Bluetooth devices proven to be vulnerable to unfixable security problems

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 1, 2021, 10:42 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: asus model: asus

New Research Uncovers 5 Vulnerabilities in Mitsubishi Safety PLCs

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 5, 2021, 3:01 a.m.
 Vulnerabilities: account lockout
Affected productsExternal IDs

Report: 83 Million Cameras, Other Devices Prone to IoT Vulnerability - Commercial Integrator

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 17, 2021, 2:45 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

New BrakTooth Flaws Leave Millions of Bluetooth-enabled Devices Vulnerable - duckduck WHO ?

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28139

Multiple Flaws in Realtek SDK Affect Wide Range of IoT Devices | Decipher

Trust: 4.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 16, 2021, midnight
 Vulnerabilities: command injection, buffer overflow
Affected productsExternal IDs
vendor: realtek model: realtek sdk
vendor: asus model: asus

Microsoft MSHTML Remote Code Execution Vulnerability: Security Bulletins: Information Security & Policy: Indiana University

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 12, 2022, midnight
 Vulnerabilities: file execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-40444