Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

D-Link DCS-5020L Buffer Overflow Vulnerability (May 2025) (CVE-2025-5215) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202505-2067

Trust: 6.0

Fetched: July 4, 2025, 9:22 a.m., Published: May 4, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: d-link model: dcs-5020l
db: NVD ids: CVE-2025-5215

D-Link DIR-859 Multiple Vulnerabilities (2019 - 2024) (CVE-2019-17508, CVE-2020-25506, CVE-2022-25106...) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202203-0955, VAR-201910-0719, VAR-202102-0290

Trust: 4.0

Fetched: July 4, 2025, 9:21 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: d-link model: dir-859
db: NVD ids: CVE-2022-25106, CVE-2019-17508, CVE-2020-25506

Xiaomi's Interoperability App Vulnerability Let Hackers Gain Unauthorized Access to the Victim's Device

Trust: 4.75

Fetched: July 4, 2025, 9:20 a.m., Published: June 24, 2025, 12:02 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-45347

D-Link Multiple DNS NAS Devices Multiple Vulnerabilities (2024 - 2025) (CVE-2024-10914, CVE-2024-10915, CVE-2024-10916...) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202411-0375, VAR-202411-0293, VAR-202411-0368

Trust: 3.0

Fetched: July 4, 2025, 9:20 a.m., Published: July 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-10916, CVE-2024-10914, CVE-2024-10915

What is a MAC Address? (Unveiling Your Device's Identity)

Trust: 3.25

Fetched: July 4, 2025, 9:19 a.m., Published: June 7, 2025, 9:27 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone
vendor: apple model: macos
vendor: cisco model: routers
vendor: cisco model: network access control
vendor: cisco model: device manager

​​Critical infrastructure warned of rising Iranian cyber threats; urged to detect, disconnect vulnerable OT, ICS devices - Industrial Cyber

Trust: 4.25

Fetched: July 4, 2025, 9:18 a.m., Published: July 2, 2025, 7:33 a.m.
 Vulnerabilities: password guessing, denial of service, default credentials
Affected productsExternal IDs
vendor: tridium model: tridium niagara
vendor: tridium model: niagara framework
vendor: tridium model: niagara
vendor: tridium model: framework

Explain Various Types of Vulnerabilities

Trust: 4.0

Fetched: July 4, 2025, 9:13 a.m., Published: July 3, 2025, midnight
 Vulnerabilities: code execution, code injection, privilege escalation...
Affected productsExternal IDs

Critical Chrome Zero-Day CVE-2025-6554 Exploited - What It Is and How to Stay Safe

Trust: 3.75

Fetched: July 4, 2025, 9:13 a.m., Published: July 9, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: android
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2025-6554

Roundcube RCE Vulnerability - Review | Security Curated

Trust: 3.75

Fetched: July 4, 2025, 9:11 a.m., Published: July 1, 2025, 3:23 a.m.
 Vulnerabilities: code execution, object injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-49113, CVE-2024-42009

What Is an Attack Surface?

Trust: 4.5

Fetched: July 2, 2025, 9:33 a.m., Published: July 2, 2025, midnight
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-27997, CVE-2025-22457, CVE-2024-21762, CVE-2025-33053

Cyware Daily Threat Intelligence, June 30, 2025 - Jun 30, 2025 | Cyware

Related entries in the VARIoT vulnerabilities database: VAR-202506-0315, VAR-202506-0316, VAR-202506-0261, VAR-202506-0240, VAR-202506-0262

Trust: 5.5

Fetched: July 2, 2025, 9:28 a.m., Published: July 2, 2025, midnight
 Vulnerabilities: os command injection, code execution, command injection
Affected productsExternal IDs
vendor: d-link model: dir-816
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler
db: NVD ids: CVE-2025-5624, CVE-2025-20700, CVE-2025-5622, CVE-2025-20701, CVE-2025-5777, CVE-2025-5623, CVE-2025-5620, CVE-2025-6543, CVE-2025-20702, CVE-2025-5621

CVE-2022-50195 : Linux Kernel Vulnerability in ARM Device Tree for Qualcomm

Trust: 4.25

Fetched: July 2, 2025, 9:28 a.m., Published: June 18, 2025, 11:03 a.m.
 Vulnerabilities: kernel panic
Affected productsExternal IDs
db: NVD ids: CVE-2022-50195

Bluetooth Chip Vulnerability Could Let Hackers Eavesdrop on Microphones and Mobile Phones - Thailand Computer Emergency Response Team (ThaiCERT)

Trust: 4.0

Fetched: July 2, 2025, 9:27 a.m., Published: July 1, 2025, 8:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-20702, CVE-2025-20700, CVE-2025-20701

Update your Chrome to fix new actively exploited zero-day vulnerability | Malwarebytes

Trust: 3.75

Fetched: July 2, 2025, 9:27 a.m., Published: July 1, 2025, 3:12 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2025-6554

Critical Vulnerability in Microsens Devices Exposes Systems to Hackers

Trust: 4.0

Fetched: July 2, 2025, 9:27 a.m., Published: July 1, 2025, 1:50 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2025-49153, CVE-2025-49152, CVE-2025-49151

Are Brother’s Insecure Printers Illegal in the UK? - Terence Eden’s Blog

Trust: 3.5

Fetched: July 2, 2025, 9:26 a.m., Published: July 1, 2025, 9:16 a.m.
 Vulnerabilities: default administrator password, default password
Affected productsExternal IDs

CVE-2025-47819 | Vulnerability Database | Aqua Security

Trust: 4.0

Fetched: July 2, 2025, 9:25 a.m., Published: June 27, 2025, midnight
 Vulnerabilities: improper access control
Affected productsExternal IDs
db: NVD ids: CVE-2025-47819

Multiple Vulnerabilities in Brother Devices Enable Attackers to Execute Arbitrary HTTP Requests

Trust: 4.75

Fetched: July 2, 2025, 9:19 a.m., Published: June 25, 2025, 7:04 p.m.
 Vulnerabilities: authentication bypass, default administrator password, credential disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51978, CVE-2024-51982, CVE-2024-51977, CVE-2024-51984, CVE-2024-51983, CVE-2024-51979, CVE-2024-51980

748 models of Ricoh, Konica Minolta, Fujifilm, Toshiba, and Brother copiers have vulnerabilities that expose passwords and leak information - GIGAZINE

Trust: 4.75

Fetched: July 2, 2025, 9:16 a.m., Published: -
 Vulnerabilities: default administrator password, default password, information leakage...
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51978, CVE-2024-51982, CVE-2024-51977, CVE-2024-51984, CVE-2024-51983, CVE-2024-51979, CVE-2024-51980

CVE-2024-51978 - Cisco Device Default Administrator Password Disclosure Vulnerability

Trust: 3.75

Fetched: July 2, 2025, 9:16 a.m., Published: June 25, 2025, 8:15 a.m.
 Vulnerabilities: default administrator password, password disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51978, CVE-2024-51982, CVE-2024-51977, CVE-2024-51984, CVE-2024-51983, CVE-2024-51979, CVE-2024-51980