Sign-up

VARIoT news about IoT security

How to Pentest Your Home Network: Step-by-Step Security Guide [2025] - FROMDEV

Trust: 4.75

Fetched: Jan. 28, 2025, 9:15 a.m., Published: Jan. 18, 2025, 6:25 p.m.
 Vulnerabilities: default credentials, default password
Affected productsExternal IDs
vendor: wireshark model: wireshark

Update Canonical Ubuntu Desktop: USN-7220-1: Vim vulnerability

Trust: 4.25

Fetched: Jan. 28, 2025, 9:14 a.m., Published: Jan. 28, 7220, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Cisco Meeting Management REST API Privilege Escalation Vulnerability

Trust: 3.75

Fetched: Jan. 28, 2025, 9:12 a.m., Published: Jan. 22, 2025, 3:55 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco meeting
vendor: cisco model: meeting management
vendor: cisco model: meeting

SonicWall says hackers are exploiting a new zero-day bug to breach customer networks | TechCrunch

Trust: 3.75

Fetched: Jan. 28, 2025, 9:12 a.m., Published: Jan. 27, 2025, 11:25 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: barracuda model: barracuda
vendor: palo alto networks model: networks
vendor: palo model: networks
vendor: sonicwall model: remote access
vendor: sonicwall model: sma1000
vendor: check point model: check point
db: NVD ids: CVE-2025-23006

Apple iOS < 18.3 Multiple Vulnerabilities (122066) | Tenable®

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 3.0

Fetched: Jan. 28, 2025, 9:11 a.m., Published: Jan. 18, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-24161, CVE-2025-24141, CVE-2025-24117, CVE-2025-24124, CVE-2025-24126, CVE-2025-24107, CVE-2025-24104, CVE-2025-24137, CVE-2025-24128, CVE-2025-24160, CVE-2025-24127, CVE-2025-24085, CVE-2025-24113, CVE-2025-24143, CVE-2024-9956, CVE-2025-24177, CVE-2025-24158, CVE-2025-24166, CVE-2025-24154, CVE-2025-24086, CVE-2025-24129, CVE-2025-24123, CVE-2025-24150, CVE-2025-24131, CVE-2025-24145, CVE-2025-24149, CVE-2025-24159, CVE-2025-24162, CVE-2025-24163

Alienware m18 R2 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: Jan. 26, 2025, 9:35 a.m., Published: Jan. 14, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

System BIOS komputera Dell XPS 8940 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: Jan. 26, 2025, 9:34 a.m., Published: Jan. 26, 8940, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Alienware m16 R1/m18 R1 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: Jan. 26, 2025, 9:33 a.m., Published: Jan. 13, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Top CVEs & Vulnerabilities of December 2024 - Strobes Security

Trust: 4.5

Fetched: Jan. 26, 2025, 9:31 a.m., Published: Dec. 31, 2024, 6:03 a.m.
 Vulnerabilities: path traversal, system crash, denial of service...
Affected productsExternal IDs
db: NVD ids: CVE-2024-49112, CVE-2024-49117, CVE-2024-43602, CVE-2024-11667, CVE-2024-49118

U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog

Related entries in the VARIoT vulnerabilities database: VAR-202004-2199

Trust: 6.0

Fetched: Jan. 26, 2025, 9:29 a.m., Published: Jan. 23, 2025, 11:06 p.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: jquery model: jquery
db: NVD ids: CVE-2020-11023

WARNING: CRITICAL AUTHENTICATION BYPASS VULNERABILITY IN MOXA EDS-508A SERIES, PATCH IMMEDIATELY! | Cert

Trust: 4.25

Fetched: Jan. 26, 2025, 9:29 a.m., Published: Jan. 20, 2025, 3:04 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs

Update Canonical Ubuntu Server: USN-7224-1: Cyrus IMAP Server vulnerabilities

Trust: 4.75

Fetched: Jan. 26, 2025, 9:28 a.m., Published: Jan. 26, 7224, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cyrus model: cyrus imap server
vendor: cyrus model: imap server
vendor: canonical model: ubuntu
db: NVD ids: CVE-2021-33582, CVE-2024-34055, CVE-2019-18928

AXESS Auto Configuration Server - Denial of Service (CVE-2024-56316) - Y-Security GmbH

Trust: 3.0

Fetched: Jan. 26, 2025, 9:27 a.m., Published: Jan. 17, 2025, 5:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-56316

CVE-2024-43770: Bluetooth HID Device Vulnerability - DEC Solutions Group

Trust: 5.25

Fetched: Jan. 26, 2025, 9:27 a.m., Published: Jan. 22, 2025, 6:35 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-43770

New Mirai Malware Variant Targets AVTECH Cameras, Huawei Routers - Infosecurity Magazine

Related entries in the VARIoT vulnerabilities database: VAR-201803-1048

Trust: 3.75

Fetched: Jan. 26, 2025, 9:24 a.m., Published: Jan. 21, 2025, 5 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: huawei model: huawei
vendor: huawei model: hg532
db: NVD ids: CVE-2017-17215, CVE-2024-7029

AXESS Auto Configuration Server - Denial of Service (CVE-2024-56316) - Y-Security GmbH

Trust: 3.0

Fetched: Jan. 26, 2025, 9:24 a.m., Published: Jan. 17, 2025, 5:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-56316

Apache CXF Vulnerability Let Attackers Push Systems to DoS Condition

Trust: 3.75

Fetched: Jan. 26, 2025, 9:23 a.m., Published: Jan. 21, 2025, 1:37 p.m.
 Vulnerabilities: resource exhaustion, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-23184

CVE-2025-23006: SonicWall Secure Mobile Access (SMA) 1000 Zero-Day Reportedly Exploited - Security Boulevard

Trust: 4.25

Fetched: Jan. 26, 2025, 9:23 a.m., Published: Jan. 23, 2025, 5:54 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: secure mobile access
db: NVD ids: CVE-2025-23006

Cisco Meeting Management REST API Privilege Escalation Vulnerability

Trust: 3.75

Fetched: Jan. 26, 2025, 9:23 a.m., Published: Jan. 22, 2025, 3:55 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: meeting
vendor: cisco model: meeting management
vendor: cisco model: cisco meeting

CVE-2024-49732 : Local Privilege Escalation Vulnerability in Android Companion Device Manager | SecurityVulnerability.io

Trust: 3.25

Fetched: Jan. 26, 2025, 9:22 a.m., Published: Jan. 21, 2025, 11:15 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2024-49732