Sign-up

VARIoT news about IoT security

Mass exploitation of on-prem Exchange servers :( : msp

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: March 3, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom
db: NVD ids: CVE-2021-26855

CVE-2021-30657 macOS vulnerability explained

Related entries in the VARIoT vulnerabilities database: VAR-202109-1307

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 21, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2021-30657

Cisco warns of IOS IE security vulnerability

Trust: 6.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 25, 2021, 7:50 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: sd-wan
vendor: cisco model: ios xe
vendor: cisco model: ios xe sd-wan software
db: NVD ids: CVE-2021-1529

BlackBerry resisted announcing major flaw in software powering cars, hospital equipment - POLITICO

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Aug. 17, 2021, 2:42 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: blackberry model: blackberry

Expert Advise On News That IoT Devices More Vulnerable Than Ever Before - Information Security Buzz

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 10, 2021, 6:14 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: mesh model: mesh

Critical macOS Bug Could Allow Threat Actors Install Undetectable Malware In Apple Devices - Hilster

Related entries in the VARIoT vulnerabilities database: VAR-202108-2056

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macbook
vendor: apple model: macbook air
vendor: apple model: ipad
vendor: apple model: macos
db: NVD ids: CVE-2021-30892

Microsoft reports three critical vulnerabilities, a fourth ‘high’ vulnerability actively exploited

Related entries in the VARIoT vulnerabilities database: VAR-202110-1687

Trust: 5.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Oct. 12, 2021, 6:10 p.m.
 Vulnerabilities: privilege elevation
Affected productsExternal IDs
db: NVD ids: CVE-2021-40486, CVE-2021-40461, CVE-2021-38672, CVE-2021-40449

Computing Security Scores for IoT Device Vulnerabilities | IEEE Conference Publication | IEEE Xplore

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 15, 2022, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Microsoft discovers a new vulnerability in macOS and takes the opportunity to revive the debate about whether Macs need antivirus

Trust: 3.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 3, 2021, 3:25 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom

CVE - CVE-2021-20986

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2021-20986

News Item

Trust: 4.25

Fetched: Nov. 4, 2021, 1:02 p.m., Published: May 11, 2021, 6:39 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hikvision model: hikvision
db: NVD ids: CVE-2021-36260

Pegasus Spyware Resurfaces with Newly Revealed Zero-Click Vulnerability - Zimperium Mobile Security Blog

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057

Trust: 3.75

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 14, 2021, 2:53 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: watchos
vendor: apple model: macos
db: NVD ids: CVE-2021-30860

News Item

Related entries in the VARIoT vulnerabilities database: VAR-202108-1057, VAR-202108-2172

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: May 11, 2021, 6:39 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-30860, CVE-2021-30858

CVE - CVE-2021-28702

Trust: 4.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Jan. 3, 2022, midnight
 Vulnerabilities: memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2021-28702

How to Find 'Stalkerware' on Your Devices - The New York Times

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Sept. 29, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Risk and Vulnerability - Pacific Disaster Center

Trust: 3.0

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 5, 2021, 7:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: zoom model: zoom

Google patches zero-day vulnerability, and others, in Android

Related entries in the VARIoT vulnerabilities database: VAR-202111-0579, VAR-202111-0609

Trust: 5.5

Fetched: Nov. 4, 2021, 1:02 p.m., Published: Nov. 2, 2021, 4:48 p.m.
 Vulnerabilities: use after free, code execution, buffer overflow
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2021-1048, CVE-2021-0913, CVE-2021-1924, CVE-2021-0889, CVE-2021-0918, CVE-2021-0930, CVE-2021-1975