IoT

Security incidents tagged IoT. Newest first.

0 IoT incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Incidents: 4
Live: 0
Patched: 4
Days without an incident: 1036; Longest quiet run: 1036 days (Dec 22–Oct 22)

Show 4 older incidents

Dec 21HighQNAP VioStor NVR: OS Command Injection (CVE-2023-47565)Patched
QNAP VioStor NVR Patched
QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network. Added to CISA KEV on 2023-12-21.
Open incident →CVE-2023-47565
Dec 11CriticalUnitronics Vision PLC and HMI: Insecure Default Password (CVE-2023-6448)Patched
Unitronics Vision PLC and HMI Patched
Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands. Added to CISA KEV on 2023-12-11.
Open incident →CVE-2023-6448

Jun 23CriticalZyxel Multiple Network-Attached Storage (NAS) Devices: Command Injection (CVE-2023-27992)Patched
Zyxel Multiple Network-Attached Storage (NAS) Devices Patched
Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a crafted HTTP request. Added to CISA KEV on 2023-06-23.
Open incident →CVE-2023-27992

May 12CriticalRuckus Wireless Multiple Products: CSRF and RCE (CVE-2023-25717)Patched
Ruckus Wireless Multiple Products Patched
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. Added to CISA KEV on 2023-05-12.
Open incident →CVE-2023-25717