VARIoT latest news about IoT security

About the security content of iOS 18.5 and iPadOS 18.5 - Apple Support Trust: 4.25 Fetched: June 8, 2025, 9:20 a.m., Published: June 18, 2025, midnight	Vulnerabilities: memory corruption, integer overflow, code execution...

Affected products

External IDs

vendor:	apple	model:	icloud
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad air
vendor:	google	model:	chrome
vendor:	google	model:	google chrome
vendor:	trend	model:	security
vendor:	trend micro	model:	security

db:

NVD

ids:

CVE-2025-31219, CVE-2025-31228, CVE-2025-31223, CVE-2025-31215, CVE-2025-31221, CVE-2025-24223, CVE-2025-31239, CVE-2025-31209, CVE-2025-31204, CVE-2025-31245, CVE-2025-31208, CVE-2025-31251, CVE-2025-31257, CVE-2025-31234, CVE-2025-31205, CVE-2025-31233, CVE-2025-24225, CVE-2025-31238, CVE-2025-30448, CVE-2025-31212, CVE-2024-8176, CVE-2025-31227, CVE-2025-24213, CVE-2025-31214, CVE-2025-31222, CVE-2025-31217, CVE-2025-31241, CVE-2025-31225, CVE-2025-31226, CVE-2025-31206, CVE-2025-31253, CVE-2025-31210, CVE-2025-31207

Google Android Security Update For June 2025 Addresses 34 Vulnerabilities Trust: 3.25 Fetched: June 8, 2025, 9:07 a.m., Published: June 4, 2025, 8:32 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

Cisco Identity Services Engine Arbitrary File Upload Vulnerability Trust: 5.0 Fetched: June 8, 2025, 9:07 a.m., Published: June 4, 2025, 3:54 p.m.	Vulnerabilities: file upload vulnerability

Affected products

External IDs

vendor:	cisco	model:	identity services engine
vendor:	cisco	model:	cisco identity services engine

Is your Asus router part of a botnet? How to check - and what you can do \| ZDNET Related entries in the VARIoT vulnerabilities database: VAR-202309-0729 Trust: 3.5 Fetched: June 8, 2025, 9:07 a.m., Published: June 2, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	home
vendor:	asus	model:	routers
vendor:	asus	model:	asus
vendor:	asus	model:	router

db:

NVD

ids:

CVE-2023-41348, CVE-2023-39780, CVE-2023-41346, CVE-2023-41345, CVE-2023-41347

Cisco Unified Communications Products Command Injection Vulnerability Trust: 5.25 Fetched: June 8, 2025, 9:06 a.m., Published: June 4, 2025, 3:54 p.m.	Vulnerabilities: command injection

Affected products

External IDs

vendor:

cisco

model:

unified communications

IoT Scanner: Check DoS Vulnerability of Your Devices Trust: 3.75 Fetched: June 8, 2025, 9:06 a.m., Published: June 8, 2025, 5:04 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

home

Top 10 Types of Cybersecurity Vulnerabilities \| Accountable Trust: 4.25 Fetched: June 8, 2025, 9:03 a.m., Published: June 10, 2025, midnight	Vulnerabilities: session hijacking, denial of service, service disruption...

Affected products

External IDs

vendor:

essential

model:

phone

Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services \| Trend Micro (GB) Trust: 4.25 Fetched: June 6, 2025, 9:45 a.m., Published: -	Vulnerabilities: code execution, sql injection

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security

Unveiling AI Agent Vulnerabilities Part V: Securing LLM Services \| Trend Micro (US) Trust: 4.25 Fetched: June 6, 2025, 9:45 a.m., Published: -	Vulnerabilities: code execution, sql injection

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security

cisco-sa-vos-command-inject-65s2UCYy - Cisco Unified Communications Products Command Injection Vulnerability - SecAlerts Trust: 5.0 Fetched: June 6, 2025, 9:44 a.m., Published: -	Vulnerabilities: command injection

Affected products

External IDs

vendor:

cisco

model:

unified communications

CVE-2025-20276 - Cisco Unified Contact Center Express Remote Code Execution Vulnerability - SecAlerts Trust: 4.75 Fetched: June 6, 2025, 9:43 a.m., Published: -	Vulnerabilities: code execution

Affected products

External IDs

vendor:	cisco	model:	cisco unified contact center express
vendor:	cisco	model:	unified contact center express

db:

NVD

ids:

CVE-2025-20276

CVE-2025-20277 - Cisco Unified Contact Center Express Path Traversal Vulnerability - SecAlerts Trust: 4.75 Fetched: June 6, 2025, 9:43 a.m., Published: -	Vulnerabilities: path traversal

Affected products

External IDs

vendor:	cisco	model:	cisco unified contact center express
vendor:	cisco	model:	unified contact center express

db:

NVD

ids:

CVE-2025-20277

Network Infrastructure VAPT: Step by Step Guide - [UPDATED: 2025] Trust: 3.25 Fetched: June 6, 2025, 9:42 a.m., Published: June 3, 2025, 10:07 a.m.	Vulnerabilities: privilege escalation, default credentials

Affected products

External IDs

vendor:	cisco	model:	routers
vendor:	cisco	model:	series

Google Releases June Security Bulletin for Android Devices to Fix Vulnerabilities \| Data Privacy + Cybersecurity Insider Trust: 3.25 Fetched: June 6, 2025, 9:42 a.m., Published: June 5, 2025, 4:59 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

android

Hackers Exploiting Edge Devices: How to Defend Your Organization - CompliancePoint Trust: 3.75 Fetched: June 6, 2025, 9:42 a.m., Published: May 12, 2025, 7:53 p.m.	Vulnerabilities: default password

Affected products

External IDs

vendor:	cisco	model:	routers
vendor:	cisco	model:	guard

CISA Adds Qualcomm Vulnerabilities to KEV Catalog - TheCyberThrone Related entries in the VARIoT vulnerabilities database: VAR-202312-0888 Trust: 5.5 Fetched: June 6, 2025, 9:41 a.m., Published: June 4, 2025, 5 p.m.	Vulnerabilities: memory corruption, integer overflow, denial of service...

Affected products

External IDs

vendor:	google	model:	android
vendor:	samsung	model:	mobile
vendor:	samsung	model:	samsung
vendor:	mikrotik	model:	mikrotik

db:

NVD

ids:

CVE-2024-43047, CVE-2022-22071, CVE-2023-33107, CVE-2023-33063, CVE-2023-33106, CVE-2025-27038, CVE-2025-21480, CVE-2025-21479

CVE-2025-31929 : Vulnerability in Siemens IEC 1Ph and 3Ph Products Leaves Devices Exposed Related entries in the VARIoT vulnerabilities database: VAR-202505-1586 Trust: 4.25 Fetched: June 6, 2025, 9:41 a.m., Published: May 13, 2025, 9:38 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2025-31929

How Hackers Exploit IIoT Vulnerabilities in Smart Manufacturing Trust: 3.75 Fetched: June 6, 2025, 9:40 a.m., Published: June 4, 2025, midnight	Vulnerabilities: default credentials

Affected products	External IDs

CVE-2025-20278 - Cisco Unified Communications Products Command Injection Vulnerability - SecAlerts Trust: 6.0 Fetched: June 6, 2025, 9:40 a.m., Published: -	Vulnerabilities: command injection

Affected products

External IDs

vendor:

cisco

model:

unified communications

db:

NVD

ids:

CVE-2025-20278

CVE-2025-27524 - Hitachi JP1/IT Desktop Management 2 - Smart Device Manager Weak Encryption Vulnerability Trust: 6.0 Fetched: June 6, 2025, 9:39 a.m., Published: May 15, 2025, 7:15 a.m.	Vulnerabilities: encryption vulnerability

Affected products

External IDs

vendor:	hitachi	model:	jp1/it desktop management
vendor:	hitachi	model:	device manager

db:

NVD

ids:

CVE-2025-27524

VARIoT news about IoT security