Sign-up

VARIoT news about IoT security

Ctrl+Panic: Rapid7 warns of serious vulnerabilities in hundreds of Brother printer models - Cyber Daily

Trust: 4.75

Fetched: July 22, 2025, 9:50 a.m., Published: June 25, 2025, 8 a.m.
 Vulnerabilities: default administrator password, authentication bypass, default password...
Affected productsExternal IDs
db: NVD ids: CVE-2024-51978, CVE-2024-51982, CVE-2024-51981, CVE-2024-51983, CVE-2024-51980, CVE-2024-51984, CVE-2024-51977, CVE-2024-51979

CISA warns hackers are actively exploiting critical CitrixBleed 2 | TechRadar

Trust: 5.75

Fetched: July 22, 2025, 9:50 a.m., Published: July 14, 2025, 2:31 p.m.
 Vulnerabilities: input validation vulnerability
Affected productsExternal IDs
vendor: citrix model: netscaler
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler gateway
vendor: citrix model: gateway
db: NVD ids: CVE-2025-5777

What is the Lenovo Protection Driver Vulnerability CVE-2025-4657 and How Can You Fix It? - Web Asha Technologies

Trust: 5.5

Fetched: July 22, 2025, 9:50 a.m., Published: July 3, 2025, midnight
 Vulnerabilities: code execution, privilege escalation, buffer overflow
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
vendor: lenovo model: thinkpad
db: NVD ids: CVE-2025-4657

Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities

Trust: 5.75

Fetched: July 22, 2025, 9:49 a.m., Published: July 21, 2025, 6:03 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine
db: NVD ids: CVE-2025-20337

IoT Security Guide: Safeguarding Devices from Cyber Threats | Telecom Curated

Trust: 3.75

Fetched: July 22, 2025, 9:49 a.m., Published: July 18, 2025, 9:46 a.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs

Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerabilities

Trust: 4.75

Fetched: July 22, 2025, 9:48 a.m., Published: July 16, 2025, 3:57 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine
db: NVD ids: CVE-2025-20284, CVE-2025-20283, CVE-2025-20285

New “Daemon Ex Plist” Vulnerability Gives Attackers Root Access on

Related entries in the VARIoT vulnerabilities database: VAR-202205-1364

Trust: 4.5

Fetched: July 22, 2025, 9:43 a.m., Published: July 20, 2025, 5:26 p.m.
 Vulnerabilities: code execution, privilege escalation, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2022-26694

CISA Warns of Fortinet FortiWeb SQL Injection Vulnerability Exploited in Attacks

Trust: 5.0

Fetched: July 22, 2025, 9:42 a.m., Published: July 19, 2025, 3:19 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-25257

What Are the Latest Sophos Intercept X for Windows Vulnerabilities and How Do They Enable Arbitrary Code Execution? - Web Asha Technologies

Trust: 4.5

Fetched: July 22, 2025, 9:42 a.m., Published: July 17, 2025, midnight
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: sophos model: intercept x endpoint
db: NVD ids: CVE-2025-7433, CVE-2024-13972, CVE-2025-7472

Hackers Exploit Zero-Day Vulnerability in Microsoft SharePoint to Access Corporate Files | All Tech Nerd

Trust: 3.25

Fetched: July 22, 2025, 9:40 a.m., Published: July 21, 2025, 6:45 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Google Chrome Update: New Features and Critical Bug Fixed

Trust: 4.5

Fetched: July 22, 2025, 9:40 a.m., Published: July 21, 2025, 8:26 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
vendor: google model: android
vendor: apple model: macos
db: NVD ids: CVE-2025-6558, CVE-2025-6554, CVE-2025-6556, CVE-2025-6555, CVE-2025-6559

Ubiquiti UniFi Devices Vulnerability Allows Attackers to Inject Malicious Commands

Trust: 5.0

Fetched: July 22, 2025, 9:38 a.m., Published: July 18, 2025, 12:42 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Android Security Bulletin-July 2025 | Android Open Source Project

Trust: 3.5

Fetched: July 22, 2025, 9:38 a.m., Published: July 22, 2025, midnight
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
vendor: motorola model: motorola
vendor: motorola model: android
vendor: huawei model: huawei
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: notes
vendor: google model: pixel
vendor: google model: android

Hackers exploit recently discovered vulnerability on Microsoft SharePoint servers | AP News

Trust: 3.5

Fetched: July 22, 2025, 9:37 a.m., Published: July 21, 2025, 1:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks
db: NVD ids: CVE-2025-49706

Cisco Identity Services Engine Authenticated Remote Code Execution and Authorization Bypass Vulnerabilities

Trust: 4.75

Fetched: July 22, 2025, 9:37 a.m., Published: July 16, 2025, 3:57 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine
db: NVD ids: CVE-2025-20284, CVE-2025-20283, CVE-2025-20285

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access

Trust: 4.5

Fetched: July 22, 2025, 9:36 a.m., Published: July 21, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: hewlett-packard model: integrity
vendor: hewlett-packard enterprise model: integrity
db: NVD ids: CVE-2025-37103

Ubiquiti UniFi Vulnerability Lets Hackers Inject Malicious Commands

Trust: 5.25

Fetched: July 22, 2025, 9:35 a.m., Published: July 18, 2025, 12:18 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability

Trust: 3.75

Fetched: July 22, 2025, 9:35 a.m., Published: July 16, 2025, 3:57 p.m.
 Vulnerabilities: file upload vulnerability
Affected productsExternal IDs
vendor: cisco model: unified intelligence center
vendor: cisco model: cisco unified intelligence center

How Do I Conduct a Security Audit of My Home Office Devices? - Improve Workspace

Trust: 3.5

Fetched: July 22, 2025, 9:34 a.m., Published: July 20, 2025, 7:47 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: wireshark model: wireshark

Ubiquiti UniFi Devices Vulnerability Allows Attackers to Inject Malicious Commands - HEAL Security Inc. - Cyber Threat Intelligence for the Healthcare Sector

Trust: 4.75

Fetched: July 22, 2025, 9:17 a.m., Published: July 18, 2025, 12:42 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212