VARIoT latest news about IoT security

Explained: Why does the Log4j vulnerability have tech firms worried? \| Explained News,The Indian Express Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.5 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 16, 2021, 3:59 a.m.	Vulnerabilities: denial of service, code execution

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	apple	model:	icloud
vendor:	check point	model:	check point
vendor:	check point	model:	express
vendor:	cisco	model:	meeting server
vendor:	cisco	model:	webex
vendor:	cisco	model:	meeting
vendor:	cisco	model:	cisco webex
vendor:	cisco	model:	webex meeting server
vendor:	check point software technologies	model:	check point
vendor:	check point software technologies	model:	express

db:

NVD

ids:

CVE-2021-44228

Windows Mobile Device Management 0-day vulnerability could lead to local privilege escalation - Securezoo Trust: 4.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Nov. 30, 2021, 5:22 p.m.	Vulnerabilities: information disclosure, privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2021-24084

Update on Our Response to the Log4j Vulnerability \| Datadog Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0562, VAR-202112-0566 Trust: 3.75 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 17, 2022, midnight	Vulnerabilities: denial of service, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-45105, CVE-2021-45046, CVE-2021-44228

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 9, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 4, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Update: Apache Log4J Vulnerability Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

PSIRT Advisories \| FortiGuard Trust: 5.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 7, 2022, midnight	Vulnerabilities: path traversal

Affected products

External IDs

vendor:

fortigate

model:

fortios

KLA12384 RCE vulnerability in Microsoft Device Related entries in the VARIoT vulnerabilities database: VAR-202111-0697, VAR-202112-1833, VAR-202112-0562, VAR-202112-0566 Trust: 4.25 Fetched: Dec. 28, 2021, 9:20 a.m., Published: -	Vulnerabilities: denial of service, information disclosure, privilege escalation...

Affected products

External IDs

vendor:	apple	model:	webkit
vendor:	apple	model:	safari
vendor:	schneider	model:	concept
vendor:	schneider electric	model:	concept
vendor:	google	model:	android
vendor:	google	model:	chrome
vendor:	sophos	model:	mobile
vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2021-43226, CVE-2021-43891, CVE-2021-4055, CVE-2021-43893, CVE-2021-4059, CVE-2021-41379, CVE-2021-42315, CVE-2021-4053, CVE-2021-41360, CVE-2021-43207, CVE-2021-4054, CVE-2021-43242, CVE-2021-43244, CVE-2021-43238, CVE-2021-43240, CVE-2021-43907, CVE-2021-4062, CVE-2021-42312, CVE-2021-43239, CVE-2021-43214, CVE-2021-43245, CVE-2021-42313, CVE-2021-43215, CVE-2021-43882, CVE-2021-40453, CVE-2021-42294, CVE-2021-43889, CVE-2021-43255, CVE-2021-43247, CVE-2021-43896, CVE-2021-43892, CVE-2021-4066, CVE-2021-43224, CVE-2021-40441, CVE-2021-4063, CVE-2021-38666, CVE-2021-43246, CVE-2021-4068, CVE-2021-43256, CVE-2021-43877, CVE-2021-42320, CVE-2021-43225, CVE-2021-43236, CVE-2021-41333, CVE-2021-40452, CVE-2021-43228, CVE-2021-43237, CVE-2021-43235, CVE-2021-24084, CVE-2021-43243, CVE-2021-43908, CVE-2021-4056, CVE-2021-43890, CVE-2021-42314, CVE-2021-4065, CVE-2021-43905, CVE-2021-43223, CVE-2021-45046, CVE-2021-43216, CVE-2021-43875, CVE-2021-43880, CVE-2021-42310, CVE-2021-4052, CVE-2021-43232, CVE-2021-4057, CVE-2021-4058, CVE-2021-43219, CVE-2021-42309, CVE-2021-43248, CVE-2021-43230, CVE-2021-42293, CVE-2021-43227, CVE-2021-43217, CVE-2021-44228, CVE-2021-43222, CVE-2021-4067, CVE-2021-4064, CVE-2021-4061, CVE-2021-43229, CVE-2021-43883, CVE-2021-28474, CVE-2021-42311, CVE-2021-43899, CVE-2021-43234, CVE-2021-43233, CVE-2021-41365, CVE-2021-42295, CVE-2021-43888, CVE-2021-43231, CVE-2021-45056

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 14, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Vulnerabilities Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202109-1909, VAR-202008-0248 Trust: 5.5 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 10 a.m.	Vulnerabilities: directory traversal, use after free, privilege escalation...

Affected products

External IDs

vendor:	google	model:	google chrome
vendor:	google	model:	chrome
vendor:	citrix	model:	application delivery controller
vendor:	citrix	model:	gateway
vendor:	citrix	model:	sd-wan wanop

db:

NVD

ids:

CVE-2021-28483, CVE-2019-1222, CVE-2021-28480, CVE-2021-26855, CVE-2020-12388, CVE-2021-28481, CVE-2020-3765, CVE-2021-28482, CVE-2020-27955, CVE-2021-44228, CVE-2018-4878, CVE-2021-17095, CVE-2019-19781, CVE-2021-40444, CVE-2019-1181, CVE-2020-16898, CVE-2019-1182, CVE-2021-42321, CVE-2021-30563, CVE-2019-0604, CVE-2019-1226, CVE-2020-1472, CVE-2019-0708, CVE-2020-0609, CVE-2020-17051, CVE-2020-0796, CVE-2020-6457, CVE-2020-0665

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Nov. 9, 2021, 10:06 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Log4j vulnerability explained in 10 points: What is it, should you be worried? Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 4.75 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 14, 2021, 12:55 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	samsung	model:	samsung
vendor:	apple	model:	iphone
vendor:	apple	model:	icloud
vendor:	oneplus	model:	oneplus
vendor:	oneplus	model:	one

db:

NVD

ids:

CVE-2021-44228

FreakOut Botnet Is Now Going After Vulnerable Video DVR Devices Trust: 5.5 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Oct. 13, 2021, 12:41 p.m.	Vulnerabilities: command injection

Affected products

External IDs

vendor:	genexis	model:	platinum
vendor:	genexis	model:	platinum 4410

db:

NVD

ids:

CVE-2021-2900, CVE-2019-12725, CVE-2020-15568, CVE-2020-25494, CVE-2020-28188

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 1, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 17, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Vulnerabilities in Internet of Things (IoT) Devices \| SecureCoding Trust: 4.5 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 22, 2021, 1:56 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:

serve

model:

serve

7 Cloud Vulnerabilities Endangering Your Data! - Kratikal Trust: 4.5 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Dec. 13, 2021, 8:40 a.m.	Vulnerabilities: os command injection, command injection

Affected products

External IDs

vendor:

serve

model:

serve

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 3, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Nov. 9, 2021, 10:06 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

Research finds some medical devices vulnerable to hackers Trust: 3.0 Fetched: Dec. 28, 2021, 9:20 a.m., Published: Jan. 17, 2022, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

nucleus

VARIoT news about IoT security