Sign-up

VARIoT news about IoT security

Is your Asus router part of a botnet? How to check - and what you can do | ZDNET

Related entries in the VARIoT vulnerabilities database: VAR-202309-0729

Trust: 3.5

Fetched: June 8, 2025, 9:07 a.m., Published: June 2, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home
vendor: asus model: routers
vendor: asus model: asus
vendor: asus model: router
db: NVD ids: CVE-2023-41348, CVE-2023-39780, CVE-2023-41346, CVE-2023-41345, CVE-2023-41347

Cisco Unified Communications Products Command Injection Vulnerability

Trust: 5.25

Fetched: June 8, 2025, 9:06 a.m., Published: June 4, 2025, 3:54 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: unified communications

IoT Scanner: Check DoS Vulnerability of Your Devices

Trust: 3.75

Fetched: June 8, 2025, 9:06 a.m., Published: June 8, 2025, 5:04 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

Top 10 Types of Cybersecurity Vulnerabilities | Accountable

Trust: 4.25

Fetched: June 8, 2025, 9:03 a.m., Published: June 10, 2025, midnight
 Vulnerabilities: session hijacking, denial of service, service disruption...
Affected productsExternal IDs
vendor: essential model: phone

Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services | Trend Micro (GB)

Trust: 4.25

Fetched: June 6, 2025, 9:45 a.m., Published: -
 Vulnerabilities: code execution, sql injection
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security

Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services | Trend Micro (US)

Trust: 4.25

Fetched: June 6, 2025, 9:45 a.m., Published: -
 Vulnerabilities: code execution, sql injection
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security

cisco-sa-vos-command-inject-65s2UCYy - Cisco Unified Communications Products Command Injection Vulnerability - SecAlerts

Trust: 5.0

Fetched: June 6, 2025, 9:44 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: unified communications

CVE-2025-20276 - Cisco Unified Contact Center Express Remote Code Execution Vulnerability - SecAlerts

Trust: 4.75

Fetched: June 6, 2025, 9:43 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco unified contact center express
vendor: cisco model: unified contact center express
db: NVD ids: CVE-2025-20276

CVE-2025-20277 - Cisco Unified Contact Center Express Path Traversal Vulnerability - SecAlerts

Trust: 4.75

Fetched: June 6, 2025, 9:43 a.m., Published: -
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: cisco model: cisco unified contact center express
vendor: cisco model: unified contact center express
db: NVD ids: CVE-2025-20277

Network Infrastructure VAPT: Step by Step Guide - [UPDATED: 2025]

Trust: 3.25

Fetched: June 6, 2025, 9:42 a.m., Published: June 3, 2025, 10:07 a.m.
 Vulnerabilities: privilege escalation, default credentials
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: series

Google Releases June Security Bulletin for Android Devices to Fix Vulnerabilities | Data Privacy + Cybersecurity Insider

Trust: 3.25

Fetched: June 6, 2025, 9:42 a.m., Published: June 5, 2025, 4:59 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Hackers Exploiting Edge Devices: How to Defend Your Organization - CompliancePoint

Trust: 3.75

Fetched: June 6, 2025, 9:42 a.m., Published: May 12, 2025, 7:53 p.m.
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: guard

CISA Adds Qualcomm Vulnerabilities to KEV Catalog - TheCyberThrone

Related entries in the VARIoT vulnerabilities database: VAR-202312-0888

Trust: 5.5

Fetched: June 6, 2025, 9:41 a.m., Published: June 4, 2025, 5 p.m.
 Vulnerabilities: memory corruption, integer overflow, denial of service...
Affected productsExternal IDs
vendor: google model: android
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: mikrotik model: mikrotik
db: NVD ids: CVE-2024-43047, CVE-2022-22071, CVE-2023-33107, CVE-2023-33063, CVE-2023-33106, CVE-2025-27038, CVE-2025-21480, CVE-2025-21479

CVE-2025-31929 : Vulnerability in Siemens IEC 1Ph and 3Ph Products Leaves Devices Exposed

Related entries in the VARIoT vulnerabilities database: VAR-202505-1586

Trust: 4.25

Fetched: June 6, 2025, 9:41 a.m., Published: May 13, 2025, 9:38 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-31929

How Hackers Exploit IIoT Vulnerabilities in Smart Manufacturing

Trust: 3.75

Fetched: June 6, 2025, 9:40 a.m., Published: June 4, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

CVE-2025-20278 - Cisco Unified Communications Products Command Injection Vulnerability - SecAlerts

Trust: 6.0

Fetched: June 6, 2025, 9:40 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: unified communications
db: NVD ids: CVE-2025-20278

CVE-2025-27524 - Hitachi JP1/IT Desktop Management 2 - Smart Device Manager Weak Encryption Vulnerability

Trust: 6.0

Fetched: June 6, 2025, 9:39 a.m., Published: May 15, 2025, 7:15 a.m.
 Vulnerabilities: encryption vulnerability
Affected productsExternal IDs
vendor: hitachi model: jp1/it desktop management
vendor: hitachi model: device manager
db: NVD ids: CVE-2025-27524

CVE-2025-20163 - Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability - SecAlerts

Trust: 3.75

Fetched: June 6, 2025, 9:39 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: google model: nexus
db: NVD ids: CVE-2025-20163

Critical Cisco Nexus Dashboard Vulnerability Lets Attackers Impersonate Managed Devices

Trust: 3.75

Fetched: June 6, 2025, 9:39 a.m., Published: June 5, 2025, 8:56 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: cisco model: data center network manager
vendor: cisco model: cisco data center network manager
db: NVD ids: CVE-2025-20163

Networking Essentials: Course Final Exam Answers

Trust: 4.0

Fetched: June 6, 2025, 9:33 a.m., Published: June 2, 2025, 8:37 a.m.
 Vulnerabilities: buffer overflow, brute force attack, system crash...
Affected productsExternal IDs
vendor: mesh model: mesh
vendor: apple model: macos
vendor: google model: android
vendor: google model: home
vendor: trend model: data loss prevention
vendor: trend model: security
vendor: dram model: dram
vendor: cisco model: router
vendor: cisco model: cisco ios
vendor: cisco model: 1100
vendor: cisco model: eigrp
vendor: cisco model: routers
vendor: cisco model: device manager
vendor: cisco model: access points
vendor: cisco model: ios software
vendor: cisco model: intrusion prevention system
vendor: cisco model: ip phones
vendor: cisco model: wireless access point
vendor: cisco model: meeting
vendor: cisco model: cisco routers
vendor: hybrid model: cable modem