Sign-up

VARIoT news about IoT security

D-Link DCS-5020L Buffer Overflow Vulnerability (May 2025) (CVE-2025-5215) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202505-2067

Trust: 6.0

Fetched: July 4, 2025, 9:22 a.m., Published: May 4, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: d-link model: dcs-5020l
db: NVD ids: CVE-2025-5215

D-Link DIR-859 Multiple Vulnerabilities (2019 - 2024) (CVE-2019-17508, CVE-2020-25506, CVE-2022-25106...) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202203-0955, VAR-201910-0719, VAR-202102-0290

Trust: 4.0

Fetched: July 4, 2025, 9:21 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: d-link model: dir-859
db: NVD ids: CVE-2022-25106, CVE-2019-17508, CVE-2020-25506

Xiaomi's Interoperability App Vulnerability Let Hackers Gain Unauthorized Access to the Victim's Device

Trust: 4.75

Fetched: July 4, 2025, 9:20 a.m., Published: June 24, 2025, 12:02 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-45347

D-Link Multiple DNS NAS Devices Multiple Vulnerabilities (2024 - 2025) (CVE-2024-10914, CVE-2024-10915, CVE-2024-10916...) - Vulnerability & Exploit Database

Related entries in the VARIoT vulnerabilities database: VAR-202411-0375, VAR-202411-0293, VAR-202411-0368

Trust: 3.0

Fetched: July 4, 2025, 9:20 a.m., Published: July 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-10916, CVE-2024-10914, CVE-2024-10915

What is a MAC Address? (Unveiling Your Device's Identity)

Trust: 3.25

Fetched: July 4, 2025, 9:19 a.m., Published: June 7, 2025, 9:27 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone
vendor: apple model: macos
vendor: cisco model: routers
vendor: cisco model: network access control
vendor: cisco model: device manager

​​Critical infrastructure warned of rising Iranian cyber threats; urged to detect, disconnect vulnerable OT, ICS devices - Industrial Cyber

Trust: 4.25

Fetched: July 4, 2025, 9:18 a.m., Published: July 2, 2025, 7:33 a.m.
 Vulnerabilities: password guessing, denial of service, default credentials
Affected productsExternal IDs
vendor: tridium model: tridium niagara
vendor: tridium model: niagara framework
vendor: tridium model: niagara
vendor: tridium model: framework

Explain Various Types of Vulnerabilities

Trust: 4.0

Fetched: July 4, 2025, 9:13 a.m., Published: July 3, 2025, midnight
 Vulnerabilities: code execution, code injection, privilege escalation...
Affected productsExternal IDs

Critical Chrome Zero-Day CVE-2025-6554 Exploited - What It Is and How to Stay Safe

Trust: 3.75

Fetched: July 4, 2025, 9:13 a.m., Published: July 9, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: android
vendor: apple model: webkit
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2025-6554

Roundcube RCE Vulnerability - Review | Security Curated

Trust: 3.75

Fetched: July 4, 2025, 9:11 a.m., Published: July 1, 2025, 3:23 a.m.
 Vulnerabilities: code execution, object injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-49113, CVE-2024-42009

What Is an Attack Surface?

Trust: 4.5

Fetched: July 2, 2025, 9:33 a.m., Published: July 2, 2025, midnight
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-27997, CVE-2025-22457, CVE-2024-21762, CVE-2025-33053

Cyware Daily Threat Intelligence, June 30, 2025 - Jun 30, 2025 | Cyware

Related entries in the VARIoT vulnerabilities database: VAR-202506-0315, VAR-202506-0316, VAR-202506-0261, VAR-202506-0240, VAR-202506-0262

Trust: 5.5

Fetched: July 2, 2025, 9:28 a.m., Published: July 2, 2025, midnight
 Vulnerabilities: os command injection, code execution, command injection
Affected productsExternal IDs
vendor: d-link model: dir-816
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler
db: NVD ids: CVE-2025-5624, CVE-2025-20700, CVE-2025-5622, CVE-2025-20701, CVE-2025-5777, CVE-2025-5623, CVE-2025-5620, CVE-2025-6543, CVE-2025-20702, CVE-2025-5621

CVE-2022-50195 : Linux Kernel Vulnerability in ARM Device Tree for Qualcomm

Trust: 4.25

Fetched: July 2, 2025, 9:28 a.m., Published: June 18, 2025, 11:03 a.m.
 Vulnerabilities: kernel panic
Affected productsExternal IDs
db: NVD ids: CVE-2022-50195

Bluetooth Chip Vulnerability Could Let Hackers Eavesdrop on Microphones and Mobile Phones - Thailand Computer Emergency Response Team (ThaiCERT)

Trust: 4.0

Fetched: July 2, 2025, 9:27 a.m., Published: July 1, 2025, 8:25 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-20702, CVE-2025-20700, CVE-2025-20701

Update your Chrome to fix new actively exploited zero-day vulnerability | Malwarebytes

Trust: 3.75

Fetched: July 2, 2025, 9:27 a.m., Published: July 1, 2025, 3:12 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2025-6554

Critical Vulnerability in Microsens Devices Exposes Systems to Hackers

Trust: 4.0

Fetched: July 2, 2025, 9:27 a.m., Published: July 1, 2025, 1:50 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2025-49153, CVE-2025-49152, CVE-2025-49151

Are Brother’s Insecure Printers Illegal in the UK? - Terence Eden’s Blog

Trust: 3.5

Fetched: July 2, 2025, 9:26 a.m., Published: July 1, 2025, 9:16 a.m.
 Vulnerabilities: default administrator password, default password
Affected productsExternal IDs

CVE-2025-47819 | Vulnerability Database | Aqua Security

Trust: 4.0

Fetched: July 2, 2025, 9:25 a.m., Published: June 27, 2025, midnight
 Vulnerabilities: improper access control
Affected productsExternal IDs
db: NVD ids: CVE-2025-47819

Multiple Vulnerabilities in Brother Devices Enable Attackers to Execute Arbitrary HTTP Requests

Trust: 4.75

Fetched: July 2, 2025, 9:19 a.m., Published: June 25, 2025, 7:04 p.m.
 Vulnerabilities: authentication bypass, default administrator password, credential disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51978, CVE-2024-51982, CVE-2024-51977, CVE-2024-51984, CVE-2024-51983, CVE-2024-51979, CVE-2024-51980

748 models of Ricoh, Konica Minolta, Fujifilm, Toshiba, and Brother copiers have vulnerabilities that expose passwords and leak information - GIGAZINE

Trust: 4.75

Fetched: July 2, 2025, 9:16 a.m., Published: -
 Vulnerabilities: default administrator password, default password, information leakage...
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51978, CVE-2024-51982, CVE-2024-51977, CVE-2024-51984, CVE-2024-51983, CVE-2024-51979, CVE-2024-51980

CVE-2024-51978 - Cisco Device Default Administrator Password Disclosure Vulnerability

Trust: 3.75

Fetched: July 2, 2025, 9:16 a.m., Published: June 25, 2025, 8:15 a.m.
 Vulnerabilities: default administrator password, password disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51978, CVE-2024-51982, CVE-2024-51977, CVE-2024-51984, CVE-2024-51983, CVE-2024-51979, CVE-2024-51980