VARIoT latest news about IoT security

Send email from a printer, scanner, or app - Google Workspace Admin Help Trust: 3.75 Fetched: June 18, 2025, 9:14 a.m., Published: May 1, 2025, midnight	Vulnerabilities: authentication error

Affected products

External IDs

vendor:

epson

model:

connect

Back up or restore data on your Android device - Android Help Trust: 3.75 Fetched: June 18, 2025, 9:13 a.m., Published: June 9, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

Download apps & digital content - Google Play Help Trust: 3.0 Fetched: June 18, 2025, 9:12 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

Darknet drug marketplace closed for business. Trust: 3.5 Fetched: June 17, 2025, 9:17 a.m., Published: June 1, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2025-3052, CVE-2025-36633, CVE-2025-36632, CVE-2025-36631

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721 - Cyber Security Review Trust: 4.75 Fetched: June 17, 2025, 9:15 a.m., Published: June 6, 2025, 7:10 a.m.	Vulnerabilities: code execution, path traversal, certificate validation vulnerability

Affected products

External IDs

vendor:

mitel

model:

micollab

db:

NVD

ids:

CVE-2024-3721, CVE-2024-41713, CVE-2024-55550, CVE-2024-48865, CVE-2024-11667

Disrupting Ring Cameras: A Comprehensive Guide - BlinksAndButtons Trust: 4.5 Fetched: June 17, 2025, 9:14 a.m., Published: June 16, 2025, midnight	Vulnerabilities: weak password

Affected products	External IDs

D-Link Technical Support Related entries in the VARIoT vulnerabilities database: VAR-202506-0630, VAR-202506-0539 Trust: 3.5 Fetched: June 17, 2025, 9:12 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:	d-link	model:	router
vendor:	d-link	model:	dir-632

db:

NVD

ids:

CVE-2025-5969, CVE-2025-5912

Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet \| Trend Micro (SE) Trust: 4.75 Fetched: June 17, 2025, 9:11 a.m., Published: June 17, 2025, midnight	Vulnerabilities: code injection

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2025-3248

Double-Free Vulnerability in Linux Kernel's USB Gadget - CVE-2024-58055 Trust: 3.25 Fetched: June 17, 2025, 9:09 a.m., Published: June 11, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-58055

Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted - The Citizen Lab Trust: 3.5 Fetched: June 17, 2025, 9:09 a.m., Published: June 12, 2025, 11:55 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	google	model:	android

db:

NVD

ids:

CVE-2025-43200

Zyxel Devices Under Attack as Hackers Exploit UDP Port RCE Flaw Related entries in the VARIoT vulnerabilities database: VAR-202304-2073 Trust: 5.75 Fetched: June 17, 2025, 9:08 a.m., Published: June 17, 2025, 5:13 a.m.	Vulnerabilities: code execution, command injection

Affected products

External IDs

vendor:

zyxel

model:

zywall

db:

NVD

ids:

CVE-2023-28771

Microsoft rolled out new firmware updates (June 12, 2025) for Surface Go 3 Trust: 4.0 Fetched: June 17, 2025, 9:08 a.m., Published: June 12, 2025, midnight	Vulnerabilities: denial of service

Affected products

External IDs

db:

NVD

ids:

CVE-2024-44074, CVE-2022-36392

Critical Langflow Vulnerability (CVE-2025-3248) Actively Exploited to Deliver Flodrix Botnet \| Trend Micro (ES) Trust: 4.75 Fetched: June 17, 2025, 9:08 a.m., Published: June 17, 2025, midnight	Vulnerabilities: code injection

Affected products

External IDs

vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2025-3248

8 Common Network Vulnerabilities & Fixes \| IT Solutions Trust: 3.5 Fetched: June 17, 2025, 9:07 a.m., Published: June 8, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	google chrome
vendor:	google	model:	chrome

db:

NVD

ids:

CVE-2022-3075

Dell Latitude 7300 13.3" i7-8665U 16 GB 512 GB FHD Windows 11 Pro Klasa A- \| Sprawdzony Sprzęt IT \| Device Europe Trust: 3.0 Fetched: June 17, 2025, 9:07 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

dell

model:

latitude

Oryginalna klawiatura podświetlana Lenovo CS13TBL do IBM, Lenovo \| Sprawdzony Sprzęt IT \| Device Europe Trust: 3.0 Fetched: June 17, 2025, 9:06 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

lenovo

model:

system

CVE-2025-37977 : Linux Kernel UFS Vulnerability in Exynos Devices Trust: 3.25 Fetched: June 15, 2025, 9:33 a.m., Published: May 20, 2025, 4:58 p.m.	Vulnerabilities: configuration vulnerability

Affected products

External IDs

db:

NVD

ids:

CVE-2025-37977

Critical Windows Vulnerability Exposes Nearly All Secure Boot-Enabled Devices to Bootkit Attacks - UNDERCODE NEWS Trust: 3.75 Fetched: June 15, 2025, 9:32 a.m., Published: June 10, 2025, 8:38 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

trend

model:

security

db:

NVD

ids:

CVE-2025-4275, CVE-2025-3052

Spyphones - Crebs Park Trust: 3.0 Fetched: June 15, 2025, 9:31 a.m., Published: June 9, 2025, 3:04 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

essential

model:

phone

Lexmark Printer RCE Vulnerability (CVE-2023-50735) - Vulnerability & Exploit Database Trust: 3.75 Fetched: June 15, 2025, 9:29 a.m., Published: June 13, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	lexmark	model:	lexmark
vendor:	lexmark	model:	lexmark printer
vendor:	lexmark	model:	printer

db:

NVD

ids:

CVE-2023-50735

VARIoT news about IoT security