Sign-up

VARIoT news about IoT security

CVE-2025-37977 : Linux Kernel UFS Vulnerability in Exynos Devices

Trust: 3.25

Fetched: June 15, 2025, 9:33 a.m., Published: May 20, 2025, 4:58 p.m.
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-37977

Critical Windows Vulnerability Exposes Nearly All Secure Boot-Enabled Devices to Bootkit Attacks - UNDERCODE NEWS

Trust: 3.75

Fetched: June 15, 2025, 9:32 a.m., Published: June 10, 2025, 8:38 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2025-4275, CVE-2025-3052

Spyphones - Crebs Park

Trust: 3.0

Fetched: June 15, 2025, 9:31 a.m., Published: June 9, 2025, 3:04 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone

Lexmark Printer RCE Vulnerability (CVE-2023-50735) - Vulnerability & Exploit Database

Trust: 3.75

Fetched: June 15, 2025, 9:29 a.m., Published: June 13, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lexmark model: lexmark
vendor: lexmark model: lexmark printer
vendor: lexmark model: printer
db: NVD ids: CVE-2023-50735

Third-party and personal devices driving cyber vulnerabilities

Trust: 3.0

Fetched: June 15, 2025, 9:29 a.m., Published: May 19, 2025, 12:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Microsoft Investigates Secure Boot Failures on Surface Hub v1 Devices After June 2025 Update - UNDERCODE NEWS

Trust: 3.5

Fetched: June 15, 2025, 9:28 a.m., Published: June 13, 2025, 2:17 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-33053, CVE-2025-33073

BADBOX 2.0 Infects Over a Million Android Devices, FBI Warns " TechWorm

Trust: 3.5

Fetched: June 15, 2025, 9:27 a.m., Published: June 6, 2025, 5:27 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend micro model: security
vendor: google model: android
vendor: google model: home
vendor: trend model: security

Securing IoT Devices in Industrial Automation Strategies | MoldStud

Trust: 3.5

Fetched: June 15, 2025, 9:25 a.m., Published: June 13, 2025, 5:58 p.m.
 Vulnerabilities: account lockout, weak password
Affected productsExternal IDs
vendor: cisco model: access points

DeviceTvmInfoGathering table in the advanced hunting schema - Microsoft Defender XDR | Microsoft Learn

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.0

Fetched: June 15, 2025, 9:24 a.m., Published: March 28, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2021-44228

Integral Security Pillars for Medical Devices: A Comprehensive Analysis

Trust: 3.5

Fetched: June 15, 2025, 9:22 a.m., Published: Jan. 15, 2025, midnight
 Vulnerabilities: denial of service, brute force attack
Affected productsExternal IDs

UEFI Secure Boot Bypass: Critical Flaw (CVE-2025-3052) Exposes Millions of Devices!

Trust: 3.25

Fetched: June 15, 2025, 9:21 a.m., Published: June 10, 2025, 10:37 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-3052

Ubiquiti Networks UniFi Console Missing Authentication For Critical Function Authentication Bypass Vulnerability (CVE-2025-23116)

Trust: 4.75

Fetched: June 15, 2025, 9:21 a.m., Published: June 13, 2025, 11:55 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: ubiquiti model: unifi
vendor: ubiquiti model: networks unifi
vendor: ubiquiti networks model: unifi
vendor: ubiquiti networks model: networks unifi
db: NVD ids: CVE-2025-23116

Critical 0-Day RCE Vulnerability in Fortinet Products (CVE-2025-32756) Actively Exploited - Intrucept

Related entries in the VARIoT vulnerabilities database: VAR-202505-1884

Trust: 3.75

Fetched: June 15, 2025, 9:20 a.m., Published: June 10, 2025, 8:37 a.m.
 Vulnerabilities: code execution, buffer overflow, improper bounds checking
Affected productsExternal IDs
db: NVD ids: CVE-2025-32756

SinoTrack GPS Receiver | CERT@VDE

Trust: 5.0

Fetched: June 15, 2025, 9:19 a.m., Published: June 10, 2025, 2 p.m.
 Vulnerabilities: default password
Affected productsExternal IDs
db: NVD ids: CVE-2025-5485, CVE-2025-5484

SinoTrack GPS Receiver - Cyber & Coffee

Trust: 5.0

Fetched: June 15, 2025, 9:19 a.m., Published: June 10, 2025, 4:23 p.m.
 Vulnerabilities: default password
Affected productsExternal IDs
db: NVD ids: CVE-2025-5485, CVE-2025-5484

SinoTrack GPS Receiver | CISA

Trust: 5.0

Fetched: June 15, 2025, 9:13 a.m., Published: June 1, 2025, midnight
 Vulnerabilities: default password
Affected productsExternal IDs
db: NVD ids: CVE-2025-5485, CVE-2025-5484

Scan files as PDFs with your mobile device - Android - Google Workspace Learning Center

Trust: 3.25

Fetched: June 15, 2025, 9:10 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Download photos or videos to your device - Computer - Google Photos Help

Trust: 3.0

Fetched: June 15, 2025, 9:10 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Update Canonical Ubuntu Server: USN-7517-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Trust: 3.0

Fetched: June 13, 2025, 9:40 a.m., Published: Jan. 13, 7517, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Improving the Adoption of Physical Authentication Devices Through Enhanced Usable Security Features | SpringerLink

Trust: 3.0

Fetched: June 13, 2025, 9:34 a.m., Published: June 13, 2025, midnight
 Vulnerabilities: -