Sign-up

VARIoT news about IoT security

CVE-2025-24076 - Windows Cross Device Service Privilege Escalation Vulnerability

Trust: 5.0

Fetched: March 21, 2025, 9:19 a.m., Published: March 11, 2025, 5:16 p.m.
 Vulnerabilities: privilege escalation, improper access control
Affected productsExternal IDs
db: NVD ids: CVE-2025-24076

Microsoft WinDbg RCE Vulnerability Let Attackers Execute Arbitrary Code Remotely

Trust: 4.25

Fetched: March 21, 2025, 9:19 a.m., Published: March 10, 2025, 7:17 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-24043

Update Canonical Ubuntu Desktop: USN-7353-1: PlantUML vulnerability

Trust: 4.25

Fetched: March 21, 2025, 9:18 a.m., Published: Jan. 21, 7353, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Server: USN-7275-2: Libtasn1 vulnerability

Trust: 4.25

Fetched: March 21, 2025, 9:17 a.m., Published: Feb. 21, 7275, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Can hackers hack your iPhone? - Mad Penguin

Trust: 4.25

Fetched: March 21, 2025, 9:17 a.m., Published: March 15, 2025, 7:18 p.m.
 Vulnerabilities: sql injection, cross-site scripting, buffer overflow
Affected productsExternal IDs
vendor: essential model: phone
vendor: apple model: safari
vendor: apple model: watch
vendor: apple model: iphone

Microsoft's Latest Update Patches 57 Security Vulnerabilities | Lifehacker

Trust: 5.5

Fetched: March 21, 2025, 9:16 a.m., Published: March 12, 2025, 1 p.m.
 Vulnerabilities: feature bypass, code execution, information disclosure...
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2025-24984, CVE-2025-24991, CVE-2025-26630, CVE-2025-26633, CVE-2025-24985, CVE-2025-24983, CVE-2025-24993

Critical Veeam Backup & Replication Vulnerability Allows Malicious Remote Code Execution

Trust: 5.75

Fetched: March 21, 2025, 9:16 a.m., Published: March 20, 2025, 8:22 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: mitel model: micollab
db: NVD ids: CVE-2025-23120

VPN Vulnerabilities Become a Primary Weapon for Threat Actors Targeting Organizations

Related entries in the VARIoT vulnerabilities database: VAR-202210-0198, VAR-201906-0815

Trust: 4.75

Fetched: March 21, 2025, 9:15 a.m., Published: March 19, 2025, 3:21 p.m.
 Vulnerabilities: path traversal, authentication bypass
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-40684, CVE-2018-13379

CISA Adds Critical Vulnerabilities: What Windows Administrators Must Know | Windows Forum

Related entries in the VARIoT vulnerabilities database: VAR-201708-0889

Trust: 5.5

Fetched: March 21, 2025, 9:14 a.m., Published: May 21, 2025, midnight
 Vulnerabilities: command injection, path traversal, directory traversal...
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2017-12637, CVE-2025-1316, CVE-2024-48248

Apache Camel Vulnerability Let Attackers Inject Arbitrary Headers - PoC Exploit

Trust: 4.0

Fetched: March 21, 2025, 9:14 a.m., Published: March 12, 2025, 6:49 a.m.
 Vulnerabilities: arbitrary command execution, code execution, header injection...
Affected productsExternal IDs
db: NVD ids: CVE-2025-27636

Windows File Explorer Vulnerability Let Attackers Perform Network Spoofing - PoC Released

Trust: 4.0

Fetched: March 21, 2025, 9:14 a.m., Published: March 19, 2025, 8:56 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: wireshark model: wireshark
db: NVD ids: CVE-2025-24071

CISA Warns of Fortinet FortiOS Authentication Bypass Vulnerability

Trust: 4.75

Fetched: March 21, 2025, 9:12 a.m., Published: March 19, 2025, 6:31 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-24472

What Is a Configuration Vulnerability? | Datto

Trust: 4.0

Fetched: March 21, 2025, 9:09 a.m., Published: June 20, 2019, 10:09 a.m.
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs

CVE-2024-57040 (CVSS 9.8): TP-Link TL-WR845N Router Vulnerability Grants Hackers Easy Access

Trust: 3.0

Fetched: March 21, 2025, 9:07 a.m., Published: March 17, 2025, 1:55 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-57040

Windows Remote Desktop Services Vulnerability Allows Code Execution

Trust: 4.0

Fetched: March 19, 2025, 9:21 a.m., Published: March 12, 2025, 12:02 p.m.
 Vulnerabilities: code execution, path traversal, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-26645, CVE-2025-24045, CVE-2025-24084, CVE-2025-24057, CVE-2025-24035, CVE-2025-24064

CISA Warns of Juniper Junos OS Improper Isolation Vulnerability Exploited in Wild

Trust: 4.0

Fetched: March 19, 2025, 9:20 a.m., Published: March 13, 2025, 4:30 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-21590

CVE-2025-24076 : Privilege Elevation Vulnerability in Windows Cross Device Service by Microsoft | SecurityVulnerability.io

Trust: 3.25

Fetched: March 19, 2025, 9:18 a.m., Published: March 11, 2025, 4:59 p.m.
 Vulnerabilities: privilege elevation
Affected productsExternal IDs
db: NVD ids: CVE-2025-24076

A Survey on IoT Vulnerability Discovery | SpringerLink

Trust: 3.5

Fetched: March 19, 2025, 9:17 a.m., Published: March 19, 2022, midnight
 Vulnerabilities: -

Chrome Security Update - Patch for Multiple High-Severity Vulnerabilities

Trust: 4.75

Fetched: March 19, 2025, 9:16 a.m., Published: March 11, 2025, 7:32 a.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: google model: chrome
db: NVD ids: CVE-2025-2137, CVE-2025-2135, CVE-2025-1920, CVE-2025-2136

Find All The Vulnerabilities Hiding in IoT Devices - Finite State

Related entries in the VARIoT vulnerabilities database: VAR-201404-0592

Trust: 3.5

Fetched: March 19, 2025, 9:15 a.m., Published: March 5, 2025, midnight
 Vulnerabilities: sql injection, privilege escalation, buffer overflow...
Affected productsExternal IDs
db: NVD ids: CVE-2014-0160