Sign-up

VARIoT news about IoT security

API Attacks: 6 Common Attacks and How to Prevent Them

Trust: 3.5

Fetched: April 22, 2025, 9:29 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: command injection, cross-site scripting, injection attack...
Affected productsExternal IDs
vendor: cisco model: series

CVE-2025-32433: Erlang/OTP SSH Unauthenticated Remote Code Execution Vulnerability - Security Boulevard

Related entries in the VARIoT vulnerabilities database: VAR-202504-1178

Trust: 4.25

Fetched: April 22, 2025, 9:28 a.m., Published: April 18, 2025, 3:22 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-32433

Are Your Yokogawa Devices at Risk Due to Missing Authentication? | B2Bdaily.com

Trust: 3.75

Fetched: April 22, 2025, 9:27 a.m., Published: April 21, 2025, 7:49 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-1863

NULL Pointer Dereference in Linux Kernel's w1_uart_probe Function

Trust: 3.25

Fetched: April 22, 2025, 9:26 a.m., Published: April 13, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-22084

Researchers warn of critical flaw found in Erlang OTP SSH | Cybersecurity Dive

Related entries in the VARIoT vulnerabilities database: VAR-202504-1178

Trust: 3.0

Fetched: April 22, 2025, 9:26 a.m., Published: April 21, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-32433

Old Vulnerability in Sonicwall SMA100 Devices Exploited by Attackers

Trust: 3.0

Fetched: April 22, 2025, 9:24 a.m., Published: April 22, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: sma100

CVE-2025-30659 - Juniper Networks Junos OS Vulnerability - Rewterz

Trust: 3.25

Fetched: April 22, 2025, 9:23 a.m., Published: April 16, 2025, 6:21 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-30659

Frenos warns OT sector of critical Erlang vulnerability enabling remote code execution affecting millions of devices - Industrial Cyber

Related entries in the VARIoT vulnerabilities database: VAR-202504-1178

Trust: 4.75

Fetched: April 22, 2025, 9:22 a.m., Published: April 21, 2025, 1:38 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-32433

1.6.2 Cybersecurity Threats, Vulnerabilities, and Attacks Quiz

Trust: 3.5

Fetched: April 22, 2025, 9:21 a.m., Published: April 14, 2025, 10:48 p.m.
 Vulnerabilities: denial of service, buffer overflow, system crash...
Affected productsExternal IDs

IT Vulnerability Report: Fortinet Devices Vulnerable To Exploit

Related entries in the VARIoT vulnerabilities database: VAR-202504-1837, VAR-202212-1132

Trust: 5.75

Fetched: April 22, 2025, 9:18 a.m., Published: April 21, 2025, 12:33 p.m.
 Vulnerabilities: code execution, privilege escalation, buffer overflow...
Affected productsExternal IDs
vendor: alsa model: alsa
db: NVD ids: CVE-2024-48887, CVE-2025-24071, CVE-2025-31334, CVE-2023-27997, CVE-2025-3102, CVE-2024-53197, CVE-2025-23120, CVE-2025-22457, CVE-2024-21762, CVE-2025-30065, CVE-2022-42475, CVE-2025-2005

Network Security Testing: Techniques, Tools, and Processes

Trust: 3.75

Fetched: April 22, 2025, 9:13 a.m., Published: Nov. 6, 2024, 6:37 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: wireshark model: wireshark

Embedded Penetration Testing and IoT Device Security - Blue Goat Cyber

Trust: 3.5

Fetched: April 22, 2025, 9:12 a.m., Published: Sept. 8, 2023, 10:12 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs

Public exploits already available for a severity 10 Erlang SSH vulnerability; patch now | CSO Online

Trust: 3.0

Fetched: April 22, 2025, 9:12 a.m., Published: April 21, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: national instruments model: national

As firmware-level threats continue to gain popularity in the wild, security teams need to understand how these threats work and the real-world risks they pose to an organization’s security. Updated for 2021, this paper demystifies the most common types of firmware attacks used in the wild today.

Trust: 5.25

Fetched: April 22, 2025, 9:09 a.m., Published: April 16, 2025, 7:15 p.m.
 Vulnerabilities: code execution, privilege escalation, buffer overflow
Affected productsExternal IDs
vendor: cisco model: soho
vendor: cisco model: routers
vendor: cisco model: router
vendor: cisco model: cisco routers
vendor: cisco model: series
vendor: trend model: security
vendor: trend model: antivirus
vendor: dram model: dram
vendor: asus model: routers
vendor: asus model: asus
vendor: asus model: router
vendor: sophos model: mobile
vendor: huawei model: huawei
db: NVD ids: CVE-2024-0762, CVE-2022-21894

Apple's Find My exploit lets hackers track any Bluetooth device

Trust: 3.75

Fetched: April 22, 2025, 9:08 a.m., Published: Feb. 27, 2025, 2:10 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs

IoT Security Risks: Stats and Trends to Know in 2025

Trust: 4.5

Fetched: April 22, 2025, 9:06 a.m., Published: Jan. 10, 2025, 6:57 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: smarter model: coffee

Contec Health CMS8000 Patient Monitor (Update A) | CISA

Trust: 4.75

Fetched: April 22, 2025, 9:06 a.m., Published: Feb. 25, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-0683, CVE-2025-1024, CVE-2025-0626, CVE-2025-1204, CVE-2024-12248

Security Advisory 0116 - Arista

Trust: 5.0

Fetched: April 18, 2025, 9:34 a.m., Published: April 15, 2025, 3:05 p.m.
 Vulnerabilities: privilege management vulnerability
Affected productsExternal IDs
vendor: untangle model: ng firewall
db: NVD ids: CVE-2024-8100

All iPhone users urged to ‘immediately update their Apple devices’ today | Express.co.uk

Trust: 3.0

Fetched: April 18, 2025, 9:29 a.m., Published: April 17, 2025, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Your smart home may not be as secure as you think - Help Net Security

Trust: 3.25

Fetched: April 18, 2025, 9:28 a.m., Published: April 2, 2025, 3:30 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: home