Sign-up

VARIoT news about IoT security

Attackers Exploit Flaw that Could Impact Millions of Routers, IoT Devices | eSecurityPlanet

Related entries in the VARIoT vulnerabilities database: VAR-202104-0768

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 10, 2021, 11:45 p.m.
 Vulnerabilities: password guessing, cross-site request forgery, request forgery...
Affected productsExternal IDs
vendor: tenda model: ac11
vendor: tenda model: router
vendor: palo model: networks
vendor: palo model: palo alto networks
vendor: cisco model: routers
vendor: cisco model: hyperflex
vendor: cisco model: cisco systems
vendor: cisco model: router
vendor: palo alto networks model: networks
vendor: palo alto networks model: palo alto networks
vendor: cisco systems model: routers
vendor: cisco systems model: hyperflex
vendor: cisco systems model: cisco systems
vendor: cisco systems model: router
vendor: dlink model: router
db: NVD ids: CVE-2021-20090

Cars and hospital equipment running Blackberry QNX may be affected by BadAlloc vulnerability | Malwarebytes Labs

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 5:33 p.m.
 Vulnerabilities: denial of service, integer overflow, code execution...
Affected productsExternal IDs
vendor: serve model: serve
vendor: blackberry model: blackberry
db: NVD ids: CVE-2021-22156

Exposure score in threat and vulnerability management | Microsoft Docs

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 24, 2021, 6:41 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Malicious Actor Discloses FortiGate SSL-VPN Credentials

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 8, 2021, 7 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2018-13379

NSO Pegasus iPhone Spyware Vulnerabilities Fixed by Apple - Detect & Prioritize Using VMDR for Mobile Devices | Qualys Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202110-1684, VAR-202108-1057, VAR-202108-1374, VAR-202108-2172, VAR-202110-1685

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 29, 2021, 8:28 a.m.
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: ipod touch
db: NVD ids: CVE-2021-30847, CVE-2021-30860, CVE-2021-30869, CVE-2021-30858, CVE-2021-30835

Researchers Develop Toolkit to Test Apple Security, Find Vulnerability | NC State News

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, 8:34 a.m.
 Vulnerabilities: timing attack
Affected productsExternal IDs
vendor: apple model: iphone

Hikvision Has "Highest Level of Critical Vulnerability," Impacting 100+ Million Devices

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 20, 2021, 12:04 p.m.
 Vulnerabilities: default password, denial of service, code execution...
Affected productsExternal IDs
vendor: dahua model: camera
vendor: dahua model: ip camera
vendor: cisco model: routers
vendor: cisco model: router
vendor: cisco model: series
vendor: huawei model: huawei
vendor: huawei model: mate
vendor: axis model: axis
vendor: axis model: ip cameras
vendor: hikvision model: camera
vendor: hikvision model: hikvision
vendor: hikvision model: ip cameras
vendor: avigilon model: multiple
vendor: phillips model: hue
db: NVD ids: CVE-2021-36260

Microsoft Exchange Remote Code Execution Vulnerability Flaws & Fixes

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: April 16, 2021, 11:44 a.m.
 Vulnerabilities: denial of service, code execution, authentication bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2021-28480, CVE-2021-28481, CVE-2021-42321

ProxyShell vulnerabilities in Microsoft Exchange: What to do - Sophos News

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 23, 2021, 6 p.m.
 Vulnerabilities: privilege elevation, code execution
Affected productsExternal IDs
vendor: sophos model: mobile
vendor: sophos model: endpoint protection
db: NVD ids: CVE-2021-34523, CVE-2021-31207, CVE-2021-34473

Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices

Related entries in the VARIoT vulnerabilities database: VAR-202110-1321

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 20, 2021, 7:20 a.m.
 Vulnerabilities: security bypass
Affected productsExternal IDs
db: NVD ids: CVE-2021-42299

Vulnerabilities Found in QNAP Were Fixed

Trust: 6.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 1, 2021, 12:04 p.m.
 Vulnerabilities: cross-site scripting, command injection
Affected productsExternal IDs
vendor: qnap model: photo station
db: NVD ids: CVE-2021-34356, CVE-2021-34352, CVE-2021-34354, CVE-2021-34355

Update Your Apple Devices Right Now to Patch This Serious iMessage Bug

Related entries in the VARIoT vulnerabilities database: VAR-202112-0004

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, noon
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad
db: NVD ids: CVE-2021-20860

Critical Vulnerability Affects Millions of IoT Devices - Synergetics India

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 1, 2021, 7:54 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28372

Update Now: Apple Patches iOS, Mac Attack That Uses Malicious PDFs to Hack Devices

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-2172

Trust: 4.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 13, 2021, 8:49 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macos
vendor: apple model: safari
vendor: apple model: watchos
vendor: apple model: tvos
db: NVD ids: CVE-2021-30860, CVE-2021-30858

Realtek AP-Router SDK vulnerabilities could impact millions of routers and IoT devices - CNX Software

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 18, 2021, 9:21 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: realtek model: realtek sdk

Microsoft fixes critical PrintNightmare and Office document vulnerabilities in Windows 10 | Windows Central

Related entries in the VARIoT vulnerabilities database: VAR-202109-1909

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 15, 2021, 12:21 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-36958, CVE-2021-40444

Apps of 16 popular smart home devices vulnerable to cyberattack - The Hindu

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 28, 2021, 7:03 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
vendor: google model: google home
vendor: google model: wifi

Microsoft finally fixes PrintNightmare vulnerability with KB5005031 and KB5005033 updates

Related entries in the VARIoT vulnerabilities database: VAR-202107-1010

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 11, 2021, 7:41 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-34481, CVE-2021-34527

Microsoft and Google have had a vulnerable 2021, Atlas VPN declares | Windows Central

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 20, 2021, 6:54 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Apple Patches New Zero-Day iOS Vulnerability Possibly Under Exploitation | PCMag

Related entries in the VARIoT vulnerabilities database: VAR-202108-2057

Trust: 5.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 11, 2022, midnight
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: ipad air
vendor: apple model: iphone
vendor: apple model: ipad
db: NVD ids: CVE-2021-30883