VARIoT latest news about IoT security

TOP Free Hacking Tools used by Black Hat Hackers 2021 Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: April 25, 2021, midnight	Vulnerabilities: denial of service, session hijacking, sql injection...

Affected products

External IDs

vendor:	cisco	model:	information server
vendor:	cisco	model:	access points
vendor:	cisco	model:	routers
vendor:	novell	model:	client
vendor:	ring	model:	ring
vendor:	wireshark	model:	wireshark
vendor:	google	model:	wifi
vendor:	netbsd	model:	netbsd
vendor:	aircrack-ng	model:	aircrack-ng

Researchers say they've found a flaw exposing millions of devices' camera data and audio to hackers - Washington Times Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	home
vendor:	google	model:	google home
vendor:	home assistant	model:	assistant

CVE-2021-40114 : Multiple Cisco products are affected by a vulnerability in the way the Snort detection engine processes ICMP traffic tha Related entries in the VARIoT vulnerabilities database: VAR-202110-1353 Trust: 5.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	series
vendor:	snort	model:	snort

db:

NVD

ids:

CVE-2009-1234, CVE-2021-40114

NVD - CVE-2021-1523 Trust: 4.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	nexus 9000 series
vendor:	cisco	model:	series
vendor:	cisco	model:	nexus
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	cisco nexus 9000 series
vendor:	cisco	model:	cisco systems
vendor:	cisco	model:	nexus 9000
vendor:	cisco systems	model:	nexus 9000 series
vendor:	cisco systems	model:	series
vendor:	cisco systems	model:	nexus
vendor:	cisco systems	model:	nx-os
vendor:	cisco systems	model:	cisco nexus 9000 series
vendor:	cisco systems	model:	cisco systems
vendor:	cisco systems	model:	nexus 9000

db:

NVD

ids:

CVE-2021-1523

Apple patches ForcedEntry vulnerability used by spyware firm NSO Related entries in the VARIoT vulnerabilities database: VAR-202108-1057 Trust: 5.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, midnight	Vulnerabilities: integer overflow, code execution

Affected products

External IDs

vendor:	apple	model:	ipod touch
vendor:	apple	model:	ipad
vendor:	apple	model:	watchos
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2021-30860

Disclosure of three 0-day iOS vulnerabilities and critique of Apple Security Bounty program / Habr Trust: 3.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	wifi
vendor:	delegate	model:	delegate

db:

NVD

ids:

cve-2020-27937

Cybersecurity Vulnerability Could Affect Millions of Hikvision Cameras - Infosecurity Magazine Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 24, 2021, 10:30 a.m.	Vulnerabilities: command injection

Affected products

External IDs

vendor:

hikvision

model:

hikvision

What You Need To Know About New IoT Vulnerabilities - My TechDecisions Trust: 5.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: command injection, memory corruption

Affected products

External IDs

vendor:

realtek

model:

realtek sdk

Apple releases iOS 15.0.2 to fix two zero-day exploits - gHacks Tech News Related entries in the VARIoT vulnerabilities database: VAR-202108-2057 Trust: 3.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 14, 2021, 3:04 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	ipod touch
vendor:	apple	model:	ipad

db:

NVD

ids:

CVE-2021-30883

IoT/connected device discovery and vulnerability assessment using IoTVAS API Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 4, 2022, midnight	Vulnerabilities: system crash, default credentials

Affected products

External IDs

vendor:

trend

model:

security

db:

NVD

ids:

CVE-2016-2148

FDA warns BlackBerry vulnerability may hit drug manufacturing, medical devices \| RAPS Trust: 4.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: integer overflow, denial of service

Affected products

External IDs

vendor:	blackberry	model:	blackberry
vendor:	mbed	model:	mbed

Column - Destigmatizing Medical Device Vulnerability Disclosures to Improve Healthcare Cybersecurity - MedTech Intelligence Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

serve

model:

serve

db:

ICS CERT

ids:

ICSMA-20-049-02, ICSMA-20-023-01

New IoT Device Vulnerability Announced Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 15, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28372

Critical Vulnerability Affects Millions of IoT Devices Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 17, 2021, 8:45 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-28372

New BrakTooth Vulnerabilities has affected billion of Bluetooth devices around the world - Craffic Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 7, 2021, 1:26 p.m.	Vulnerabilities: code execution

Affected products	External IDs

Exploitation of the CVE-2021-40444 vulnerability in MSHTML \| Securelist Related entries in the VARIoT vulnerabilities database: VAR-202107-1010, VAR-202106-0639, VAR-202109-1909 Trust: 4.0 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-34527, CVE-2021-1675, CVE-2021-40444

Are your IoT devices leaving you vulnerable to cyberattacks? - INTRUSION Trust: 3.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 13, 2021, 6:51 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

home

Multiple Vulnerabilities Fix Trust: 3.25 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2020-28050

Vulnerability Database Trust: 4.75 Fetched: Nov. 4, 2021, 1:02 p.m., Published: -	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	google chrome

db:

NVD

ids:

CVE-2021-43350

November Related entries in the VARIoT vulnerabilities database: VAR-202103-0287, VAR-202105-1432, VAR-202110-1864, VAR-202111-1769, VAR-202112-0354, VAR-202110-1869, VAR-202105-0585, VAR-202105-1431, VAR-202110-1487, VAR-202111-1766, VAR-202111-1764, VAR-202112-0345, VAR-202105-1477, VAR-202111-1768, VAR-202012-1546, VAR-202112-0224, VAR-202112-0344, VAR-202110-1499, VAR-202105-0257, VAR-202110-1865, VAR-202111-1765, VAR-202110-1134, VAR-202111-1770, VAR-202006-0946, VAR-202105-1428, VAR-202111-1767, VAR-202109-0009, VAR-202111-1763, VAR-202110-1119, VAR-202110-1133, VAR-202110-1851, VAR-202012-1547, VAR-202105-0449 Trust: 5.5 Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 9, 2021, 11:12 a.m.	Vulnerabilities: code execution, input verification vulnerability, directory traversal

Affected products

External IDs

vendor:	huawei	model:	hisuite
vendor:	huawei	model:	emui
vendor:	huawei	model:	huawei

db:

NVD

ids:

CVE-2020-27825, CVE-2021-0643, CVE-2020-35508, CVE-2021-0706, CVE-2020-24587, CVE-2021-0129, CVE-2021-37125, CVE-2021-39974, CVE-2021-0703, CVE-2021-0937, CVE-2021-37039, CVE-2021-31916, CVE-2021-0870, CVE-2021-0935, CVE-2021-32399, CVE-2021-39978, CVE-2021-1891, CVE-2020-25641, CVE-2020-24588, CVE-2020-12352, CVE-2021-1967, CVE-2021-29647, CVE-2021-36988, CVE-2021-27666, CVE-2021-39966, CVE-2021-39967, CVE-2021-37069, CVE-2020-25656, CVE-2021-0651, CVE-2020-26146, CVE-2020-14314, CVE-2021-39973, CVE-2020-29661, CVE-2021-37096, CVE-2021-0708, CVE-2021-37074, CVE-2020-27786, CVE-2021-22481, CVE-2020-26145, CVE-2021-37126, CVE-2019-25045, CVE-2020-17541, CVE-2021-37112, CVE-2021-0483, CVE-2021-0936, CVE-2021-0702, CVE-2021-1977, CVE-2021-39969, CVE-2020-15358, CVE-2020-26141, CVE-2021-30305, CVE-2021-3564, CVE-2021-0691, CVE-2019-20934, CVE-2021-1969, CVE-2021-37133, CVE-2021-1966, CVE-2020-11264, CVE-2020-24490, CVE-2021-37118, CVE-2021-0705, CVE-2021-30306, CVE-2021-0941, CVE-2021-1980, CVE-2021-37110, CVE-2020-29660, CVE-2021-0652, CVE-2021-1927

VARIoT news about IoT security