Sign-up

VARIoT news about IoT security

Home

Trust: 3.0

Fetched: June 22, 2025, 9:13 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

Update Asus' Armoury Crate Now to Patch a Major Vulnerability | Lifehacker

Trust: 5.0

Fetched: June 20, 2025, 10:25 a.m., Published: June 18, 2025, 3:30 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: asus model: asus
db: NVD ids: CVE-2025-3464

Cisco ArcaneDoor Vulnerabilities: How to Defend Against CVE-2024-20353, CVE-2024-20359 | Tufin

Trust: 4.5

Fetched: June 20, 2025, 10:23 a.m., Published: Jan. 1, 2024, 2:49 p.m.
 Vulnerabilities: improper validation, code execution
Affected productsExternal IDs
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2024-20353, CVE-2024-20359, CVE-2024-20358

Why Smart Home Devices Are Safe For Privacy

Trust: 3.25

Fetched: June 20, 2025, 10:23 a.m., Published: June 14, 2025, 4:32 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: wifi
vendor: google model: pixel
vendor: google model: home
vendor: google model: google home
vendor: apple model: watch
vendor: apple model: iphone
vendor: essential model: phone
vendor: ring model: video doorbells

What is Remote Access Trojans (RATs): How It Works & How to Stay Safe - AstrillVPN Blog

Trust: 3.5

Fetched: June 20, 2025, 10:22 a.m., Published: May 29, 2025, 4:49 p.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: google model: android
vendor: wireshark model: wireshark

Is Your Active Directory Vulnerable to BadSuccessor? | Security Curated

Trust: 3.75

Fetched: June 20, 2025, 10:21 a.m., Published: June 18, 2025, 5:37 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: trend model: security

CVE-2025-41652 : Authentication Bypass Vulnerability in Network Devices by CertVDE

Trust: 3.25

Fetched: June 20, 2025, 10:21 a.m., Published: May 27, 2025, 8:38 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-41652

Active Exploitation of CVE-2024-3721 in TBK DVRs Enables Botnet-Driven DDoS Attacks

Trust: 5.25

Fetched: June 20, 2025, 10:21 a.m., Published: June 19, 2025, 1:28 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-3721

Privilege Escalation: Preventing Mobile Apps from Taking Over on Android

Trust: 3.5

Fetched: June 20, 2025, 10:20 a.m., Published: June 4, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: android
vendor: essential model: phone

How hackers are trying to attack AI data centers using wireless devices | SC Media

Trust: 3.25

Fetched: June 20, 2025, 10:20 a.m., Published: June 18, 2025, 6:10 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

CVE-2025-38016 | Tenable®

Trust: 3.0

Fetched: June 20, 2025, 10:18 a.m., Published: May 20, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-38016

Vulnerability in Cyber Security - Patch My PC Blog

Trust: 3.5

Fetched: June 20, 2025, 10:17 a.m., Published: Feb. 10, 2023, 3:07 a.m.
 Vulnerabilities: header injection, sql injection, code execution
Affected productsExternal IDs

Tesla Wall Connector Charger Hacked | Through Charging Port in 18-Minute Attack - Web Asha Technologies

Trust: 4.5

Fetched: June 20, 2025, 10:17 a.m., Published: June 18, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

CVE-2025-4338 - Lantronix Device Installer XXE Injection Vulnerability

Trust: 3.25

Fetched: June 20, 2025, 10:16 a.m., Published: May 22, 2025, 11:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-4338

Critical Zyxel vulnerability under active exploitation after long period of quiet | Cybersecurity Dive

Related entries in the VARIoT vulnerabilities database: VAR-202304-2073

Trust: 3.75

Fetched: June 20, 2025, 10:09 a.m., Published: June 17, 2025, midnight
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-28771, CVE-2024-40891

Shodan MCP Server | MCP Servers · LobeHub

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566

Trust: 3.75

Fetched: June 20, 2025, 10:08 a.m., Published: June 4, 2025, 4:38 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2021-44228

C-Based Programming Enhancing Smart Home IoT Security | MoldStud

Trust: 3.25

Fetched: June 20, 2025, 10:06 a.m., Published: June 20, 2025, 4:40 a.m.
 Vulnerabilities: memory leak, buffer overflow, code execution...
Affected productsExternal IDs

CVE-2025-20271 | Tenable®

Trust: 6.0

Fetched: June 20, 2025, 10:06 a.m., Published: June 18, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: meraki mx
vendor: cisco model: series
db: NVD ids: CVE-2025-20271

CVE-2025-20260 | Tenable®

Trust: 6.0

Fetched: June 20, 2025, 10:06 a.m., Published: -
 Vulnerabilities: buffer overflow, denial of service
Affected productsExternal IDs
vendor: clamav model: clamav
db: NVD ids: CVE-2025-20260

ClamAV UDF File Parsing Out-of-Bounds Read Information Disclosure Vulnerability

Trust: 4.75

Fetched: June 20, 2025, 10:05 a.m., Published: June 18, 2025, 3:56 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: clamav
vendor: clamav model: clamav