Sign-up

VARIoT news about IoT security

Cisco Nexus Dashboard の脆弱性 CVE-2025-20163 が FIX：SSH ホスト・キーに対する不十分な検証 - IoT OT Security News

Trust: 4.0

Fetched: June 18, 2025, 9:28 a.m., Published: June 5, 2025, 9:47 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: data center network manager
vendor: cisco model: cisco data center network manager
vendor: cisco model: nexus
db: NVD ids: CVE-2025-20163

WPA3 vs WPA2: Which Wi-Fi Security Protocol Reigns Supreme? - Elevate Your Test

Trust: 4.0

Fetched: June 18, 2025, 9:28 a.m., Published: June 13, 2025, 10:52 p.m.
 Vulnerabilities: password guessing
Affected productsExternal IDs

WAGO Device Manager Vulnerabilities Expose Critical Industrial Infrastructure to Remote Exploits

Trust: 4.25

Fetched: June 18, 2025, 9:16 a.m., Published: June 18, 2025, 12:08 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: wago model: wago
db: NVD ids: CVE-2025-25265, CVE-2025-25264

Android Help

Trust: 3.25

Fetched: June 18, 2025, 9:15 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Send email from a printer, scanner, or app - Google Workspace Admin Help

Trust: 3.75

Fetched: June 18, 2025, 9:14 a.m., Published: May 1, 2025, midnight
 Vulnerabilities: authentication error
Affected productsExternal IDs
vendor: epson model: connect

Back up or restore data on your Android device - Android Help

Trust: 3.75

Fetched: June 18, 2025, 9:13 a.m., Published: June 9, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Download apps & digital content - Google Play Help

Trust: 3.0

Fetched: June 18, 2025, 9:12 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Darknet drug marketplace closed for business.

Related entries in the VARIoT vulnerabilities database: VAR-202506-0643

Trust: 3.5

Fetched: June 17, 2025, 9:17 a.m., Published: June 1, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2025-3052, CVE-2025-36633, CVE-2025-36632, CVE-2025-36631

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721 - Cyber Security Review

Trust: 4.75

Fetched: June 17, 2025, 9:15 a.m., Published: June 6, 2025, 7:10 a.m.
 Vulnerabilities: code execution, path traversal, certificate validation vulnerability
Affected productsExternal IDs
vendor: mitel model: micollab
db: NVD ids: CVE-2024-3721, CVE-2024-41713, CVE-2024-55550, CVE-2024-48865, CVE-2024-11667

Disrupting Ring Cameras: A Comprehensive Guide - BlinksAndButtons

Trust: 4.5

Fetched: June 17, 2025, 9:14 a.m., Published: June 16, 2025, midnight
 Vulnerabilities: weak password

D-Link Technical Support

Related entries in the VARIoT vulnerabilities database: VAR-202506-0630, VAR-202506-0539

Trust: 3.5

Fetched: June 17, 2025, 9:12 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: d-link model: router
vendor: d-link model: dir-632
db: NVD ids: CVE-2025-5969, CVE-2025-5912

Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet | Trend Micro (SE)

Trust: 4.75

Fetched: June 17, 2025, 9:11 a.m., Published: June 17, 2025, midnight
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2025-3248

Double-Free Vulnerability in Linux Kernel's USB Gadget - CVE-2024-58055

Trust: 3.25

Fetched: June 17, 2025, 9:09 a.m., Published: June 11, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-58055

Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted - The Citizen Lab

Trust: 3.5

Fetched: June 17, 2025, 9:09 a.m., Published: June 12, 2025, 11:55 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: google model: android
db: NVD ids: CVE-2025-43200

Zyxel Devices Under Attack as Hackers Exploit UDP Port RCE Flaw

Related entries in the VARIoT vulnerabilities database: VAR-202304-2073

Trust: 5.75

Fetched: June 17, 2025, 9:08 a.m., Published: June 17, 2025, 5:13 a.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: zyxel model: zywall
db: NVD ids: CVE-2023-28771

Microsoft rolled out new firmware updates (June 12, 2025) for Surface Go 3

Trust: 4.0

Fetched: June 17, 2025, 9:08 a.m., Published: June 12, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-44074, CVE-2022-36392

Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet | Trend Micro (ES)

Trust: 4.75

Fetched: June 17, 2025, 9:08 a.m., Published: June 17, 2025, midnight
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2025-3248

8 Common Network Vulnerabilities & Fixes | IT Solutions

Trust: 3.5

Fetched: June 17, 2025, 9:07 a.m., Published: June 8, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2022-3075

Dell Latitude 7300 13.3" i7-8665U 16 GB 512 GB FHD Windows 11 Pro Klasa A- | Sprawdzony Sprzęt IT | Device Europe

Trust: 3.0

Fetched: June 17, 2025, 9:07 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: latitude

Oryginalna klawiatura podświetlana Lenovo CS13TBL do IBM, Lenovo | Sprawdzony Sprzęt IT | Device Europe

Trust: 3.0

Fetched: June 17, 2025, 9:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lenovo model: system