VARIoT latest news about IoT security

BOSCH-SA-640452 \| Bosch PSIRT Trust: 3.75 Fetched: April 27, 2025, 9:13 a.m., Published: April 3, 2025, midnight	Vulnerabilities: default password

Affected products

External IDs

db:

NVD

ids:

CVE-2025-24345, CVE-2025-24347, CVE-2025-24349, CVE-2025-24338, CVE-2025-24340, CVE-2025-24346, CVE-2025-24350, CVE-2025-27352, CVE-2025-24342, CVE-2025-24351, CVE-2025-24344, CVE-2025-24339, CVE-2025-24343, CVE-2025-24341, CVE-2025-27532, CVE-2025-24348

Fatal Vulnerabilities Compromising DJI Control Devices \| DARKNAVY Trust: 4.75 Fetched: April 27, 2025, 9:12 a.m., Published: April 27, 2025, 2:01 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:

google

model:

android

db:

NVD

ids:

CVE-2023-20963

The TechCrunch Cyber Glossary \| TechCrunch Trust: 4.5 Fetched: April 27, 2025, 9:10 a.m., Published: April 25, 2025, 6:35 p.m.	Vulnerabilities: code execution, denial of service

Affected products

External IDs

vendor:

sony

model:

camera

Microsoft rolled out new firmware updates (April 23, 2025) for Surface Laptop Studio 2 Trust: 3.0 Fetched: April 27, 2025, 9:09 a.m., Published: April 23, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-21864, CVE-2024-44074

Over 16,000 Fortinet Devices Compromised with Stealth Symlink Backdoor \| Black Hat Ethical Hacking Trust: 3.0 Fetched: April 27, 2025, 9:08 a.m., Published: April 17, 2025, 9:27 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

fortigate

model:

fortios

Multiple Vulnerabilities in Barco ClickShare \| WithSecure™ Labs Trust: 3.25 Fetched: April 27, 2025, 9:08 a.m., Published: Oct. 9, 2019, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

barco

model:

clickshare

IoT Security Statistics (2022): What You Should Know - Intersog Trust: 3.75 Fetched: April 27, 2025, 9:06 a.m., Published: Dec. 1, 2021, 10:58 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

trend

model:

security

Critical Cybersecurity Vulnerabilities in Smart Home Devices Uncovered in New Research - CEPRO Trust: 3.25 Fetched: April 27, 2025, 9:06 a.m., Published: June 28, 2024, 1:52 p.m.	Vulnerabilities: memory corruption, denial of service, privilege escalation...

Affected products	External IDs

Critical Siemens Edge Device Vulnerability Poses Major Industrial Cybersecurity Risks \| Windows Forum Trust: 5.25 Fetched: April 27, 2025, 9:05 a.m., Published: May 27, 2025, midnight	Vulnerabilities: authentication bypass, privilege escalation

Affected products

External IDs

vendor:	canary	model:	canary
vendor:	siemens	model:	simatic ipc427e
vendor:	siemens	model:	simatic
vendor:	siemens	model:	simatic ipc127e
vendor:	siemens	model:	scalance
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2024-54092

Attackers hit security device defects hard in 2024 \| CyberScoop Related entries in the VARIoT vulnerabilities database: VAR-202403-2416 Trust: 5.5 Fetched: April 25, 2025, 9:03 a.m., Published: April 23, 2025, 8:59 p.m.	Vulnerabilities: command execution, command injection, default credentials...

Affected products

External IDs

vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	pan-os
vendor:	palo	model:	networks
vendor:	palo	model:	pan-os

db:

NVD

ids:

CVE-2023-46805, CVE-2024-21887, CVE-2024-3400, CVE-2023-48788, CVE-2024-21893

ERROR: The request could not be satisfied Trust: 3.25 Fetched: April 25, 2025, 9:02 a.m., Published: -	Vulnerabilities: configuration error

Affected products	External IDs

119 Impressive Cybersecurity Statistics: 2024 Data & Market Analysis - Financesonline.com Trust: 3.5 Fetched: April 23, 2025, 9:11 a.m., Published: Aug. 13, 2019, 10:02 a.m.	Vulnerabilities: cross-site scripting

Affected products

External IDs

vendor:	checkpoint	model:	endpoint security
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	firewall
vendor:	essential	model:	phone
vendor:	google	model:	chrome
vendor:	trend	model:	internet security
vendor:	trend	model:	security
vendor:	trend	model:	antivirus
vendor:	symantec	model:	norton security
vendor:	symantec	model:	norton
vendor:	symantec	model:	antivirus
vendor:	avira	model:	antivirus
vendor:	palo	model:	networks
vendor:	palo	model:	firewall
vendor:	sophos	model:	firewall
vendor:	sophos	model:	mobile
vendor:	cisco	model:	small business
vendor:	cisco	model:	h
vendor:	rising	model:	antivirus
vendor:	trend micro	model:	internet security
vendor:	trend micro	model:	security
vendor:	trend micro	model:	antivirus

Cybercriminals Exploit Network Edge Devices to Infiltrate SMBs Trust: 3.75 Fetched: April 23, 2025, 9:08 a.m., Published: April 22, 2025, 2:21 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	sophos	model:	endpoint protection
vendor:	trend	model:	security
vendor:	citrix	model:	netscaler

db:

NVD

ids:

CVE-2024-40711

Researchers warn of critical flaw found in Erlang OTP SSH \| Cybersecurity Dive Related entries in the VARIoT vulnerabilities database: VAR-202504-1178 Trust: 3.0 Fetched: April 23, 2025, 9:07 a.m., Published: April 21, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-32433

API Attacks: 6 Common Attacks and How to Prevent Them Trust: 3.5 Fetched: April 22, 2025, 9:29 a.m., Published: April 6, 2025, midnight	Vulnerabilities: command injection, cross-site scripting, injection attack...

Affected products

External IDs

vendor:

cisco

model:

series

CVE-2025-32433: Erlang/OTP SSH Unauthenticated Remote Code Execution Vulnerability - Security Boulevard Related entries in the VARIoT vulnerabilities database: VAR-202504-1178 Trust: 4.25 Fetched: April 22, 2025, 9:28 a.m., Published: April 18, 2025, 3:22 p.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2025-32433

Are Your Yokogawa Devices at Risk Due to Missing Authentication? \| B2Bdaily.com Trust: 3.75 Fetched: April 22, 2025, 9:27 a.m., Published: April 21, 2025, 7:49 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-1863

NULL Pointer Dereference in Linux Kernel's w1_uart_probe Function Trust: 3.25 Fetched: April 22, 2025, 9:26 a.m., Published: April 13, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-22084

Researchers warn of critical flaw found in Erlang OTP SSH \| Cybersecurity Dive Related entries in the VARIoT vulnerabilities database: VAR-202504-1178 Trust: 3.0 Fetched: April 22, 2025, 9:26 a.m., Published: April 21, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-32433

Old Vulnerability in Sonicwall SMA100 Devices Exploited by Attackers Trust: 3.0 Fetched: April 22, 2025, 9:24 a.m., Published: April 22, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

sonicwall

model:

sma100

VARIoT news about IoT security