VARIoT news about IoT security

Trust: 3.75

Fetched: July 22, 2025, 9:16 a.m., Published: July 15, 2025, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: nodejs model: node.js
vendor: node.js model: node.js
db: NVD ids: CVE-2025-23084

Trust: 4.5

Fetched: July 22, 2025, 9:16 a.m., Published: July 20, 2025, 8 p.m.
Vulnerabilities: service disruption, command injection, command execution
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Trust: 5.75

Fetched: July 22, 2025, 9:15 a.m., Published: July 21, 2025, 9:07 a.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: aruba model: aruba instant
vendor: aruba model: instant
db: NVD ids: CVE-2025-37102, CVE-2025-37103

Trust: 5.5

Fetched: July 22, 2025, 9:15 a.m., Published: July 18, 2025, midnight
Vulnerabilities: privilege escalation, directory traversal, path traversal
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2025-27210, CVE-2025-23084, CVE-2025-27209

Trust: 5.5

Fetched: July 22, 2025, 9:14 a.m., Published: July 21, 2025, 9:01 a.m.
Vulnerabilities: code execution, authentication bypass, restriction bypass
Affected productsExternal IDs
vendor: hewlett packard model: switches
vendor: hewlett packard enterprise model: switches
vendor: aruba model: instant access point
vendor: aruba model: instant
db: NVD ids: CVE-2025-37103

Trust: 5.75

Fetched: July 22, 2025, 9:09 a.m., Published: July 18, 2025, 12:42 p.m.
Vulnerabilities: command injection
Affected productsExternal IDs
vendor: ubiquiti model: unifi
db: NVD ids: CVE-2025-27212

Trust: 3.0

Fetched: July 22, 2025, 9:08 a.m., Published: July 10, 2025, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Trust: 3.25

Fetched: July 20, 2025, 10:18 a.m., Published: Oct. 7, 2020, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Trust: 3.0

Fetched: July 20, 2025, 10:04 a.m., Published: -
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Trust: 3.0

Fetched: July 20, 2025, 9:54 a.m., Published: July 8, 2025, 4:35 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipod touch
vendor: apple model: iphone
vendor: apple model: ipad

Trust: 3.5

Fetched: July 20, 2025, 9:54 a.m., Published: July 6, 2025, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: google model: chrome
vendor: google model: home
vendor: google model: google home

Trust: 3.0

Fetched: July 20, 2025, 9:53 a.m., Published: Jan. 6, 2025, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Trust: 3.5

Fetched: July 20, 2025, 9:07 a.m., Published: July 4, 2025, midnight
Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: installer
vendor: apple model: watch

Trust: 3.75

Fetched: July 18, 2025, 9:49 a.m., Published: Nov. 21, 2023, midnight
Vulnerabilities: cross-site scripting, buffer overflow, sql injection
Affected productsExternal IDs
vendor: huawei model: huawei

Trust: 4.25

Fetched: July 18, 2025, 9:48 a.m., Published: June 24, 2025, 10:52 a.m.
Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-3090

Trust: 3.25

Fetched: July 18, 2025, 9:45 a.m., Published: July 3, 2025, 11:34 a.m.
Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-27460

Trust: 4.5

Fetched: July 18, 2025, 9:44 a.m., Published: July 17, 2025, 5:55 p.m.
Vulnerabilities: code execution
Affected productsExternal IDs
vendor: sonicwall model: remote access
vendor: sonicwall model: sma 100
vendor: snort model: snort

Trust: 3.75

Fetched: July 18, 2025, 9:43 a.m., Published: June 25, 2025, midnight
Vulnerabilities: request forgery, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2024-51981, CVE-2024-51977, CVE-2024-51983, CVE-2024-51984, CVE-2024-51982, CVE-2024-51978, CVE-2024-51980, CVE-2024-51979
Related entries in the VARIoT vulnerabilities database: VAR-202505-1415, VAR-202109-0375, VAR-202112-0361, VAR-202112-0389

Trust: 3.5

Fetched: July 18, 2025, 9:43 a.m., Published: July 16, 2025, 5:52 p.m.
Vulnerabilities: -
Affected productsExternal IDs
vendor: sonicwall model: remote access
vendor: sonicwall model: secure mobile access
vendor: sonicwall model: ssl vpn
vendor: sonicwall model: sma 100
db: NVD ids: CVE-2025-32819, CVE-2021-20035, CVE-2024-38475, CVE-2021-20038, CVE-2021-20039

Trust: 4.25

Fetched: July 18, 2025, 9:42 a.m., Published: July 18, 2016, midnight
Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-49703