VARIoT latest news about IoT security

Spyphones - Crebs Park Trust: 3.0 Fetched: June 15, 2025, 9:31 a.m., Published: June 9, 2025, 3:04 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

essential

model:

phone

Lexmark Printer RCE Vulnerability (CVE-2023-50735) - Vulnerability & Exploit Database Trust: 3.75 Fetched: June 15, 2025, 9:29 a.m., Published: June 13, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	lexmark	model:	lexmark
vendor:	lexmark	model:	lexmark printer
vendor:	lexmark	model:	printer

db:

NVD

ids:

CVE-2023-50735

Third-party and personal devices driving cyber vulnerabilities Trust: 3.0 Fetched: June 15, 2025, 9:29 a.m., Published: May 19, 2025, 12:11 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

trend

model:

security

Microsoft Investigates Secure Boot Failures on Surface Hub v1 Devices After June 2025 Update - UNDERCODE NEWS Trust: 3.5 Fetched: June 15, 2025, 9:28 a.m., Published: June 13, 2025, 2:17 p.m.	Vulnerabilities: code execution, privilege escalation

Affected products

External IDs

db:

NVD

ids:

CVE-2025-33053, CVE-2025-33073

BADBOX 2.0 Infects Over a Million Android Devices, FBI Warns " TechWorm Trust: 3.5 Fetched: June 15, 2025, 9:27 a.m., Published: June 6, 2025, 5:27 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	google	model:	android
vendor:	google	model:	home
vendor:	trend	model:	security

Securing IoT Devices in Industrial Automation Strategies \| MoldStud Trust: 3.5 Fetched: June 15, 2025, 9:25 a.m., Published: June 13, 2025, 5:58 p.m.	Vulnerabilities: account lockout, weak password

Affected products

External IDs

vendor:

cisco

model:

access points

DeviceTvmInfoGathering table in the advanced hunting schema - Microsoft Defender XDR \| Microsoft Learn Related entries in the VARIoT vulnerabilities database: VAR-202112-0566 Trust: 3.0 Fetched: June 15, 2025, 9:24 a.m., Published: March 28, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2021-44228

Integral Security Pillars for Medical Devices: A Comprehensive Analysis Trust: 3.5 Fetched: June 15, 2025, 9:22 a.m., Published: Jan. 15, 2025, midnight	Vulnerabilities: denial of service, brute force attack

Affected products	External IDs

UEFI Secure Boot Bypass: Critical Flaw (CVE-2025-3052) Exposes Millions of Devices! Trust: 3.25 Fetched: June 15, 2025, 9:21 a.m., Published: June 10, 2025, 10:37 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-3052

Ubiquiti Networks UniFi Console Missing Authentication For Critical Function Authentication Bypass Vulnerability (CVE-2025-23116) Trust: 4.75 Fetched: June 15, 2025, 9:21 a.m., Published: June 13, 2025, 11:55 a.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

vendor:	ubiquiti	model:	unifi
vendor:	ubiquiti	model:	networks unifi
vendor:	ubiquiti networks	model:	unifi
vendor:	ubiquiti networks	model:	networks unifi

db:

NVD

ids:

CVE-2025-23116

Critical 0-Day RCE Vulnerability in Fortinet Products (CVE-2025-32756) Actively Exploited - Intrucept Related entries in the VARIoT vulnerabilities database: VAR-202505-1884 Trust: 3.75 Fetched: June 15, 2025, 9:20 a.m., Published: June 10, 2025, 8:37 a.m.	Vulnerabilities: code execution, buffer overflow, improper bounds checking

Affected products

External IDs

db:

NVD

ids:

CVE-2025-32756

SinoTrack GPS Receiver \| CERT@VDE Trust: 5.0 Fetched: June 15, 2025, 9:19 a.m., Published: June 10, 2025, 2 p.m.	Vulnerabilities: default password

Affected products

External IDs

db:

NVD

ids:

CVE-2025-5485, CVE-2025-5484

SinoTrack GPS Receiver - Cyber & Coffee Trust: 5.0 Fetched: June 15, 2025, 9:19 a.m., Published: June 10, 2025, 4:23 p.m.	Vulnerabilities: default password

Affected products

External IDs

db:

NVD

ids:

CVE-2025-5485, CVE-2025-5484

SinoTrack GPS Receiver \| CISA Trust: 5.0 Fetched: June 15, 2025, 9:13 a.m., Published: June 1, 2025, midnight	Vulnerabilities: default password

Affected products

External IDs

db:

NVD

ids:

CVE-2025-5485, CVE-2025-5484

Scan files as PDFs with your mobile device - Android - Google Workspace Learning Center Trust: 3.25 Fetched: June 15, 2025, 9:10 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

Download photos or videos to your device - Computer - Google Photos Help Trust: 3.0 Fetched: June 15, 2025, 9:10 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

chrome

Update Canonical Ubuntu Server: USN-7517-1: Linux kernel (Xilinx ZynqMP) vulnerabilities Trust: 3.0 Fetched: June 13, 2025, 9:40 a.m., Published: Jan. 13, 7517, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

canonical

model:

ubuntu

Improving the Adoption of Physical Authentication Devices Through Enhanced Usable Security Features \| SpringerLink Trust: 3.0 Fetched: June 13, 2025, 9:34 a.m., Published: June 13, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

wifi

Understanding OWASP Top 10 - Mitigating Web Application Vulnerabilities Trust: 3.5 Fetched: June 13, 2025, 9:33 a.m., Published: June 11, 2025, 10:12 a.m.	Vulnerabilities: injection attack, cross-site scripting, request forgery...

Affected products	External IDs

Indian govt issues high-severity warning for MediaTek-powered devices: Here’s how to be safe Trust: 4.0 Fetched: June 13, 2025, 9:32 a.m., Published: June 12, 2025, 1:35 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

oneplus

model:

oneplus

db:

NVD

ids:

CVE-2025-20673, CVE-2025-20672

VARIoT news about IoT security