Sign-up

VARIoT news about IoT security

Apple Patched a macOS Gatekeeper Bypass Vulnerability - Veille Techno

Trust: 3.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 28, 2021, 11:49 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

Forescout’s Response to Apache Log4j Vulnerabilities - Forescout

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0562, VAR-202112-0566, VAR-202112-2011

Trust: 4.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 13, 2021, 2:19 a.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-45046, CVE-2021-44228, CVE-2021-44832

Threat actors targeting MikroTik routers, devices

Trust: 3.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 9, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: mikrotik model: mikrotik routers
vendor: mikrotik model: mikrotik
vendor: mikrotik model: routers
vendor: mikrotik model: mikrotik router
vendor: mikrotik model: router
vendor: mikrotik model: winbox
vendor: mikrotik model: routeros

Fixing software vulnerabilities

Trust: 3.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs

0patch fixes LPE vulnerability (CVE-2021-24084) in Mobile Device Management Service | Born's Tech and Windows World

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909, VAR-202108-1005, VAR-202008-0248, VAR-202107-1010

Trust: 5.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Nov. 27, 2021, 11:38 a.m.
 Vulnerabilities: privilege escalation, information disclosure
Affected productsExternal IDs
vendor: zoom model: zoom
db: NVD ids: CVE-2020-0687, CVE-2020-1337, CVE-2021-40444, CVE-2021-24084, CVE-2021-26877, CVE-2020-1530, CVE-2021-26415, CVE-2020-08810, CVE-2021-34484, CVE-2020-06830, CVE-2020-1048, CVE-2020-1113, CVE-2020-1472, CVE-2020-06740, CVE-2020-1300, CVE-2020-1062, CVE-2021-34527, CVE-2020-1013, CVE-2020-1015, CVE-2021-319590

Apache Releases Log4j Version 2.15.0 to Address Critical RCE Vulnerability Under Exploitation | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Firmware Download | Security Notification - Command Injection Vulnerability in Some Hikvision products | Hikvision

Trust: 4.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Jan. 17, 2022, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: hikvision model: hikvision

Log4j Developer Response - Cisco Blogs

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 16, 2021, 2:57 a.m.
 Vulnerabilities: command execution, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Medical Device cyber security vulnerability: Apache-Log4j

Trust: 3.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 27, 2021, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs

The risks of silent patching and why it must end

Related entries in the VARIoT vulnerabilities database: VAR-202103-0365

Trust: 3.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 29, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: nucleus
db: NVD ids: CVE-2016-20009

The Log4j Vulnerability: What You Need to Know - Randori

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 4.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Jan. 5, 2022, 4:32 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Log4Shell / Apache Log4j Injection Vulnerability CVE-2021-44228: Impact and Response - Truesec

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-202112-0562

Trust: 3.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 10, 2021, midnight
 Vulnerabilities: code execution, request forgery, injection attack
Affected productsExternal IDs
db: NVD ids: CVE-2021-45105, CVE-2021-44228, CVE-2021-45046

The Apache Log4j vulnerability: What you need to know | RBRO

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

CVE-2021-44228 Apache Log4j vulnerability | Platform.sh

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-202112-0562

Trust: 4.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 13, 2021, midnight
 Vulnerabilities: code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228, CVE-2021-45046

What is Remote Code Execution (RCE)? - Check Point Software

Trust: 4.75

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 22, 2021, 2:38 p.m.
 Vulnerabilities: denial of service, code execution, injection attack...
Affected productsExternal IDs
vendor: check point model: check point

Ordr Response to Log4j Vulnerability

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 5.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 16, 2021, 6:26 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

NVD - CVE-2021-37036

Related entries in the VARIoT vulnerabilities database: VAR-202111-1436

Trust: 5.5

Fetched: Dec. 30, 2021, 11:51 a.m., Published: -
 Vulnerabilities: information leak, information leakage
Affected productsExternal IDs
vendor: huawei model: ecns280_td_firmware
vendor: huawei model: v100r005c00
vendor: huawei model: huawei
vendor: huawei model: fusioncompute
db: NVD ids: CVE-2021-37036

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability - Cisco

Trust: 4.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Oct. 27, 2021, 2:29 p.m.
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs
vendor: cisco model: firepower threat defense software
vendor: cisco model: firepower
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: cisco firepower management center
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower management center
vendor: cisco model: adaptive security appliance software
vendor: cisco model: cisco adaptive security appliance software

Critical Apache Log4j Vulnerability Updates | FortiGuard Labs

Related entries in the VARIoT vulnerabilities database: VAR-202112-1782, VAR-202112-0566, VAR-201803-1048, VAR-202112-0562

Trust: 4.25

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 21, 2021, 8 a.m.
 Vulnerabilities: denial of service, information leak, code execution
Affected productsExternal IDs
vendor: canary model: canary
vendor: huawei model: huawei
vendor: huawei model: hg532
db: NVD ids: CVE-2021-26084, CVE-2021-45105, CVE-2021-44228, CVE-2017-17215, CVE-2021-4104, CVE-2021-45046

High Severity Security Flaw in Intel CPUs Allows Attackers to Access Encryption Keys and Bypass TPM, BitLocker, and DRM - CPO Magazine

Trust: 4.0

Fetched: Dec. 30, 2021, 11:51 a.m., Published: Dec. 3, 2021, 5:49 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2021-0146