Sign-up

VARIoT news about IoT security

Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services | Trend Micro (US)

Trust: 4.25

Fetched: June 6, 2025, 9:45 a.m., Published: -
 Vulnerabilities: code execution, sql injection
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security

cisco-sa-vos-command-inject-65s2UCYy - Cisco Unified Communications Products Command Injection Vulnerability - SecAlerts

Trust: 5.0

Fetched: June 6, 2025, 9:44 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: unified communications

CVE-2025-20276 - Cisco Unified Contact Center Express Remote Code Execution Vulnerability - SecAlerts

Trust: 4.75

Fetched: June 6, 2025, 9:43 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco unified contact center express
vendor: cisco model: unified contact center express
db: NVD ids: CVE-2025-20276

CVE-2025-20277 - Cisco Unified Contact Center Express Path Traversal Vulnerability - SecAlerts

Trust: 4.75

Fetched: June 6, 2025, 9:43 a.m., Published: -
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: cisco model: cisco unified contact center express
vendor: cisco model: unified contact center express
db: NVD ids: CVE-2025-20277

Network Infrastructure VAPT: Step by Step Guide - [UPDATED: 2025]

Trust: 3.25

Fetched: June 6, 2025, 9:42 a.m., Published: June 3, 2025, 10:07 a.m.
 Vulnerabilities: privilege escalation, default credentials
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: series

Google Releases June Security Bulletin for Android Devices to Fix Vulnerabilities | Data Privacy + Cybersecurity Insider

Trust: 3.25

Fetched: June 6, 2025, 9:42 a.m., Published: June 5, 2025, 4:59 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Hackers Exploiting Edge Devices: How to Defend Your Organization - CompliancePoint

Trust: 3.75

Fetched: June 6, 2025, 9:42 a.m., Published: May 12, 2025, 7:53 p.m.
 Vulnerabilities: default password
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: guard

CISA Adds Qualcomm Vulnerabilities to KEV Catalog - TheCyberThrone

Related entries in the VARIoT vulnerabilities database: VAR-202312-0888

Trust: 5.5

Fetched: June 6, 2025, 9:41 a.m., Published: June 4, 2025, 5 p.m.
 Vulnerabilities: memory corruption, integer overflow, denial of service...
Affected productsExternal IDs
vendor: google model: android
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: mikrotik model: mikrotik
db: NVD ids: CVE-2024-43047, CVE-2022-22071, CVE-2023-33107, CVE-2023-33063, CVE-2023-33106, CVE-2025-27038, CVE-2025-21480, CVE-2025-21479

CVE-2025-31929 : Vulnerability in Siemens IEC 1Ph and 3Ph Products Leaves Devices Exposed

Related entries in the VARIoT vulnerabilities database: VAR-202505-1586

Trust: 4.25

Fetched: June 6, 2025, 9:41 a.m., Published: May 13, 2025, 9:38 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-31929

How Hackers Exploit IIoT Vulnerabilities in Smart Manufacturing

Trust: 3.75

Fetched: June 6, 2025, 9:40 a.m., Published: June 4, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

CVE-2025-20278 - Cisco Unified Communications Products Command Injection Vulnerability - SecAlerts

Trust: 6.0

Fetched: June 6, 2025, 9:40 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: unified communications
db: NVD ids: CVE-2025-20278

CVE-2025-27524 - Hitachi JP1/IT Desktop Management 2 - Smart Device Manager Weak Encryption Vulnerability

Trust: 6.0

Fetched: June 6, 2025, 9:39 a.m., Published: May 15, 2025, 7:15 a.m.
 Vulnerabilities: encryption vulnerability
Affected productsExternal IDs
vendor: hitachi model: jp1/it desktop management
vendor: hitachi model: device manager
db: NVD ids: CVE-2025-27524

CVE-2025-20163 - Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability - SecAlerts

Trust: 3.75

Fetched: June 6, 2025, 9:39 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: google model: nexus
db: NVD ids: CVE-2025-20163

Critical Cisco Nexus Dashboard Vulnerability Lets Attackers Impersonate Managed Devices

Trust: 3.75

Fetched: June 6, 2025, 9:39 a.m., Published: June 5, 2025, 8:56 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: cisco model: data center network manager
vendor: cisco model: cisco data center network manager
db: NVD ids: CVE-2025-20163

Networking Essentials: Course Final Exam Answers

Trust: 4.0

Fetched: June 6, 2025, 9:33 a.m., Published: June 2, 2025, 8:37 a.m.
 Vulnerabilities: buffer overflow, brute force attack, system crash...
Affected productsExternal IDs
vendor: mesh model: mesh
vendor: apple model: macos
vendor: google model: android
vendor: google model: home
vendor: trend model: data loss prevention
vendor: trend model: security
vendor: dram model: dram
vendor: cisco model: router
vendor: cisco model: cisco ios
vendor: cisco model: 1100
vendor: cisco model: eigrp
vendor: cisco model: routers
vendor: cisco model: device manager
vendor: cisco model: access points
vendor: cisco model: ios software
vendor: cisco model: intrusion prevention system
vendor: cisco model: ip phones
vendor: cisco model: wireless access point
vendor: cisco model: meeting
vendor: cisco model: cisco routers
vendor: hybrid model: cable modem

CVE-2025-20163 : SSH Implementation Vulnerability in Cisco Nexus Dashboard Fabric Controller

Trust: 4.0

Fetched: June 6, 2025, 9:33 a.m., Published: June 4, 2025, 4:17 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: cisco model: data center network manager
vendor: cisco model: cisco data center network manager
db: NVD ids: CVE-2025-20163

Qualcomm Fixes Zero-Day Security Vulnerabilities Used By Hackers, Cybercriminals | Technology News

Trust: 5.0

Fetched: June 6, 2025, 9:32 a.m., Published: June 4, 2025, 8:59 a.m.
 Vulnerabilities: use after free
Affected productsExternal IDs
vendor: google model: pixel
db: NVD ids: CVE-2025-27038, CVE-2025-21480, CVE-2025-21479

Google Releases June Security Bulletin for Android Devices to Fix Vulnerabilities | Robinson+Cole Data Privacy + Security Insider - JDSupra

Trust: 3.0

Fetched: June 6, 2025, 9:27 a.m., Published: June 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Critical 0-Day Vulnerabilities in Qualcomm Adreno GPU Drivers Actively Exploited - Intrucept

Trust: 5.5

Fetched: June 6, 2025, 9:26 a.m., Published: June 4, 2025, 10:24 a.m.
 Vulnerabilities: memory corruption, authorization vulnerability, command execution...
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: oneplus model: oneplus
vendor: google model: chrome
vendor: google model: android
db: NVD ids: CVE-2025-27038, CVE-2025-21480, CVE-2025-21479

Samsung Details June 2025 Security Patch with Key Vulnerability Fixes

Trust: 3.75

Fetched: June 6, 2025, 9:26 a.m., Published: June 5, 2025, 7:09 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: google model: android
vendor: samsung model: mobile
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile devices
vendor: samsung model: samsung
vendor: samsung model: galaxy