Sign-up

VARIoT news about IoT security

Moxa Industrial Ethernet Switches Vulnerability Let Attackers Gain Admin Access

Trust: 5.75

Fetched: March 11, 2025, 9:24 a.m., Published: March 10, 2025, 2:43 p.m.
 Vulnerabilities: authentication bypass, default credentials, traffic interception
Affected productsExternal IDs
vendor: moxa model: pt-7728
vendor: moxa model: pt-7528 series
db: NVD ids: CVE-2024-12297

PoC Exploit Released for Actively Exploited Linux Kernel Write Vulnerability

Trust: 6.0

Fetched: March 11, 2025, 9:24 a.m., Published: March 8, 2025, 11:01 a.m.
 Vulnerabilities: privilege escalation, code execution, memory corruption
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-53104

Critical Vulnerabilities in Hitachi Energy's PCU400: Implications for Windows Security | Windows Forum

Related entries in the VARIoT vulnerabilities database: VAR-202302-0482, VAR-202302-0195

Trust: 4.5

Fetched: March 11, 2025, 9:21 a.m., Published: May 11, 2025, midnight
 Vulnerabilities: buffer overrun, use after free, application crash
Affected productsExternal IDs
db: NVD ids: CVE-2023-0286, CVE-2022-4304, CVE-2023-0401, CVE-2022-4450, CVE-2022-4203, CVE-2023-0216, CVE-2023-0215, CVE-2023-0217

Common Wireless and Mobile Device Attacks - InfosecTrain

Trust: 3.75

Fetched: March 11, 2025, 9:21 a.m., Published: July 25, 2023, 5 a.m.
 Vulnerabilities: replay attack
Affected productsExternal IDs

Schneider Electric NMC cards and Embedded Devices | CISA

Trust: 4.5

Fetched: March 11, 2025, 9:16 a.m., Published: Nov. 9, 2021, midnight
 Vulnerabilities: cross-site scripting, script execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-22812, CVE-2021-22815, CVE-2021-22814, CVE-2021-22810, CVE-2021-22813, CVE-2021-22811

Dahua ASI7213X-T1 (Update A) | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202206-2212

Trust: 5.5

Fetched: March 11, 2025, 9:15 a.m., Published: July 19, 2022, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: dahua model: ipc-hdbw2xxx
vendor: dahua model: ipc-hx2xxx
vendor: dahua security model: ipc-hdbw2xxx
vendor: dahua security model: ipc-hx2xxx
vendor: dahua technology model: ipc-hdbw2xxx
vendor: dahua technology model: ipc-hx2xxx
db: NVD ids: CVE-2022-30560, CVE-2022-30563, CVE-2022-30561, CVE-2022-30562

Microsoft Windows: CVE-2021-1656: TPM Device Driver Information Disclosure Vulnerability

Trust: 4.25

Fetched: March 11, 2025, 9:15 a.m., Published: April 9, 2025, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2021-1656

What is Security Misconfiguration? Types & Prevention

Trust: 4.25

Fetched: March 11, 2025, 9:09 a.m., Published: March 5, 2025, 8:14 a.m.
 Vulnerabilities: cross-site scripting, default credentials
Affected productsExternal IDs
vendor: trend model: security
vendor: essential model: phone

Critical Vulnerabilities in Hitachi Energy ICS Devices: Patching and Mitigation Strategies | Windows Forum

Related entries in the VARIoT vulnerabilities database: VAR-202302-0482, VAR-202302-0195

Trust: 4.5

Fetched: March 11, 2025, 9:07 a.m., Published: May 11, 2025, midnight
 Vulnerabilities: signature verification issue, data processing vulnerability, memory corruption...
Affected productsExternal IDs
db: NVD ids: CVE-2023-0286, CVE-2022-4304, CVE-2023-0401, CVE-2022-4450, CVE-2022-4203, CVE-2023-0216, CVE-2023-0215, CVE-2023-0217

Cisco Secure Client for Windows Let Attackers Execute Arbitrary Code

Trust: 3.25

Fetched: March 9, 2025, 9:06 a.m., Published: March 7, 2025, 3:41 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-20206

Akira Ransomware: RDP Exploits and IoT Device Vulnerabilities | Windows Forum

Trust: 3.75

Fetched: March 9, 2025, 9:06 a.m., Published: May 9, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Telegram Evilvideo Vulnerability Exploited to Execute Malicious Code

Trust: 3.75

Fetched: March 9, 2025, 9:05 a.m., Published: March 5, 2025, 10:18 a.m.
 Vulnerabilities: improper validation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-7014

VAPT - 5 Reasons Why Your Business Needs It

Trust: 4.0

Fetched: March 7, 2025, 9:34 a.m., Published: March 6, 2025, 11:48 a.m.
 Vulnerabilities: service disruption
Affected productsExternal IDs

03/05/25: Critical, 0-Day, and Other Vulnerabilities in Android Devices | UCSF IT

Trust: 5.25

Fetched: March 7, 2025, 9:33 a.m., Published: March 5, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android

CanSSOC advisory: Active exploitation - VMware zero-day vulnerabilities - Information Security at University of Toronto

Trust: 3.25

Fetched: March 7, 2025, 9:32 a.m., Published: March 6, 2025, 4:40 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-22225, CVE-2025-22226, CVE-2025-22224

NUUO Devices OS Command Injection Vulnerability (Feb 2025) - Active Check (CVE-2025-1338) - Vulnerability & Exploit Database

Trust: 4.75

Fetched: March 7, 2025, 9:32 a.m., Published: Feb. 7, 2025, midnight
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-1338

System BIOS komputerów Dell Inspiron 14 7435 2 w 1 i 16 7635 2 w 1 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: March 7, 2025, 9:31 a.m., Published: March 1, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

System BIOS komputerów Dell OptiPlex 3070 | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: March 7, 2025, 9:31 a.m., Published: March 7, 3070, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: optiplex
vendor: dell model: bios

System BIOS komputerów Dell Inspiron 14 5435/16 5635 oraz Vostro 16 5635 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: March 7, 2025, 9:31 a.m., Published: March 5, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Understanding Common Vulnerabilities in Web Applications

Trust: 3.5

Fetched: March 7, 2025, 9:29 a.m., Published: March 10, 2025, midnight
 Vulnerabilities: code execution, request forgery, denial of service...
Affected productsExternal IDs