VARIoT news about IoT security

Trust: 4.0

Fetched: May 18, 2025, 9:04 a.m., Published: April 26, 2025, 9:03 a.m.
Vulnerabilities: default credentials, default password
Affected productsExternal IDs
vendor: essential model: phone
vendor: smarter model: coffee

Trust: 3.5

Fetched: May 16, 2025, 9:44 a.m., Published: May 11, 2025, 1:30 p.m.
Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
Related entries in the VARIoT vulnerabilities database: VAR-202505-1034, VAR-202505-1414, VAR-202505-1415

Trust: 5.75

Fetched: May 16, 2025, 9:43 a.m., Published: May 8, 2025, 7:33 a.m.
Vulnerabilities: command injection, path traversal, remote command injection...
Affected productsExternal IDs
vendor: sonicwall model: sma 100
vendor: sonicwall model: web application firewall
vendor: sonicwall model: secure mobile access
db: NVD ids: CVE-2025-32821, CVE-2025-32820, CVE-2025-32819

Trust: 4.0

Fetched: May 16, 2025, 9:43 a.m., Published: May 7, 2025, 11:19 a.m.
Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: industrial ethernet
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios software
vendor: cisco model: device manager
Related entries in the VARIoT vulnerabilities database: VAR-201805-0262, VAR-202406-0975

Trust: 6.0

Fetched: May 16, 2025, 9:43 a.m., Published: May 7, 2025, 9:46 a.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: snort model: snort
db: NVD ids: CVE-2018-10561, CVE-2024-6047, CVE-2024-11120

Trust: 3.75

Fetched: May 16, 2025, 9:41 a.m., Published: Jan. 16, 2025, midnight
Vulnerabilities: directory traversal
Affected productsExternal IDs
db: NVD ids: CVE-2024-0204

Trust: 5.0

Fetched: May 16, 2025, 9:41 a.m., Published: May 13, 2025, 9:07 a.m.
Vulnerabilities: default password
Affected productsExternal IDs
vendor: essential model: phone

Trust: 3.25

Fetched: May 16, 2025, 9:39 a.m., Published: May 15, 2025, 6:27 a.m.
Vulnerabilities: encryption vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-27524

Trust: 5.0

Fetched: May 16, 2025, 9:38 a.m., Published: May 11, 2025, midnight
Vulnerabilities: resource exhaustion, memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2022-49924

Trust: 3.5

Fetched: May 16, 2025, 9:38 a.m., Published: Dec. 10, 2020, 7:32 a.m.
Vulnerabilities: default administrator username, request forgery, code execution...
Affected productsExternal IDs
vendor: essential model: phone

Trust: 5.0

Fetched: May 16, 2025, 9:37 a.m., Published: -
Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2025-22252

Trust: 3.25

Fetched: May 16, 2025, 9:37 a.m., Published: May 15, 2025, 6:45 a.m.
Vulnerabilities: information exposure
Affected productsExternal IDs
db: NVD ids: CVE-2025-27525

Trust: 3.0

Fetched: May 16, 2025, 9:36 a.m., Published: May 14, 2025, midnight
Vulnerabilities: code execution
Affected productsExternal IDs

Trust: 5.0

Fetched: May 16, 2025, 9:36 a.m., Published: May 8, 2025, 3:55 p.m.
Vulnerabilities: file overwrite vulnerability
Affected productsExternal IDs
vendor: cisco model: catalyst
vendor: cisco model: wan manager
vendor: cisco model: sd-wan

Trust: 4.75

Fetched: May 16, 2025, 9:35 a.m., Published: April 26, 2025, 11 a.m.
Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: iphone
db: NVD ids: CVE-2025-24091

Trust: 3.0

Fetched: May 16, 2025, 9:34 a.m., Published: April 29, 2025, 1:12 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Trust: 3.0

Fetched: May 16, 2025, 9:34 a.m., Published: May 7, 2025, 3:53 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: series
vendor: cisco model: series switches
vendor: cisco model: catalyst
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios software

Trust: 3.75

Fetched: May 16, 2025, 9:34 a.m., Published: Jan. 10, 2023, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: ruggedcom
db: NVD ids: CVE-2024-32122, CVE-2024-52963

Trust: 3.0

Fetched: May 16, 2025, 9:33 a.m., Published: May 1, 2025, 2:09 p.m.
Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2022-49836

Trust: 4.0

Fetched: May 16, 2025, 9:32 a.m., Published: May 7, 2025, 3:53 p.m.
Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe