Sign-up

VARIoT news about IoT security

PHP RCE Vulnerability Actively Exploited in Wild to Attack Windows-based Systems

Trust: 4.0

Fetched: March 23, 2025, 9:23 a.m., Published: March 19, 2025, 12:06 p.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-4577

Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability

Trust: 4.0

Fetched: March 23, 2025, 9:22 a.m., Published: Feb. 26, 2025, 3:52 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: series switches
vendor: cisco model: nexus 9000
vendor: cisco model: nx-os
vendor: cisco model: series
vendor: cisco model: cisco nx-os
vendor: cisco model: nexus
vendor: cisco model: nx-os software
vendor: cisco model: nexus 7000
vendor: cisco model: nexus 3000
vendor: cisco model: nexus 9000 series

Update Canonical Ubuntu Server: USN-7353-1: PlantUML vulnerability

Trust: 4.25

Fetched: March 23, 2025, 9:22 a.m., Published: Jan. 23, 7353, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Protect Your Smart Devices from IoT Vulnerabilities

Trust: 3.0

Fetched: March 23, 2025, 9:21 a.m., Published: March 9, 2025, midnight
 Vulnerabilities: default password
Affected productsExternal IDs

Threat Actors Exploiting Chrome DLL Side-Loading Vulnerability to Execute Malware

Trust: 3.75

Fetched: March 23, 2025, 9:20 a.m., Published: March 19, 2025, 12:16 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome

PolarEdge: Unveiling an uncovered ORB network - Sekoia.io Blog

Related entries in the VARIoT vulnerabilities database: VAR-202304-1067

Trust: 4.25

Fetched: March 23, 2025, 9:18 a.m., Published: Feb. 25, 2025, 8:01 a.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
vendor: asus model: asus
vendor: asus model: rt-ax88u
vendor: asus model: rt-ac58u
vendor: asus model: routers
vendor: asus model: router
vendor: cisco model: rv082
vendor: cisco model: rv042g
vendor: cisco model: rv340
vendor: cisco model: rv016
vendor: cisco model: cisco small business
vendor: cisco model: rv320
vendor: cisco model: small business
vendor: cisco model: routers
vendor: cisco model: rv325
vendor: cisco model: rv345
vendor: cisco model: rv042
vendor: cisco model: router
vendor: cisco model: cisco routers
vendor: huawei model: huawei
db: NVD ids: CVE-2023-20118

Critical Vulnerabilities in Schneider Electric's Enerlin’X Devices Threaten Windows Networks | Windows Forum

Trust: 3.75

Fetched: March 23, 2025, 9:18 a.m., Published: May 23, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-0814, CVE-2025-0815, CVE-2025-0816

Multiple Vulnerabilities Discovered in a SCADA System

Trust: 4.25

Fetched: March 23, 2025, 9:17 a.m., Published: March 7, 2025, 3:34 p.m.
 Vulnerabilities: uncontrolled search path, code execution, path element vulnerability
Affected productsExternal IDs
vendor: iconics model: genesis32
vendor: iconics model: genesis64
db: NVD ids: CVE-2024-1182, CVE-2024-8300, CVE-2024-7587, CVE-2024-8299, CVE-2024-9852

A Survey on Programmable Logic Controller Vulnerabilities, Attacks, Detections, and Forensics

Trust: 4.25

Fetched: March 23, 2025, 9:13 a.m., Published: March 17, 2023, midnight
 Vulnerabilities: information leakage, memory corruption, denial of service...
Affected productsExternal IDs
vendor: rockwell model: rslogix 5000
vendor: rockwell model: rslogix
vendor: siemens model: tia portal
vendor: codesys model: control
vendor: codesys model: web server
vendor: codesys model: codesys
vendor: codesys model: runtime
vendor: general electric model: historian

Vulnerability in Philips management system allows hackers to gain control of device - Becker's Hospital Review | Healthcare News & Analysis

Trust: 3.25

Fetched: March 23, 2025, 9:06 a.m., Published: Oct. 25, 2019, 4:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: philips model: intellispace perinatal

CVE-2024-51138 - vulnerability database | Vulners.com

Related entries in the VARIoT vulnerabilities database: VAR-202502-2174

Trust: 3.0

Fetched: March 21, 2025, 10:07 a.m., Published: Feb. 27, 2025, 9:15 p.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2024-51138

Unveiling Security Weaknesses in Autonomous Driving Systems: An In-Depth Empirical Study

Trust: 3.75

Fetched: March 21, 2025, 10:05 a.m., Published: March 1, 2025, midnight
 Vulnerabilities: integer overflow
Affected productsExternal IDs

System BIOS dla komputera Dell Inspiron 3030 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: March 21, 2025, 10:05 a.m., Published: March 21, 3030, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios

Weekly Threat Landscape Digest - Week 11 - HawkEye

Related entries in the VARIoT vulnerabilities database: VAR-202503-1498, VAR-202502-3343, VAR-202502-3730, VAR-202502-3527, VAR-202502-2174, VAR-202502-2583, VAR-202502-2792

Trust: 5.25

Fetched: March 21, 2025, 10:03 a.m., Published: March 14, 2025, 4:48 p.m.
 Vulnerabilities: improper access control, information leakage, request forgery...
Affected productsExternal IDs
vendor: cisco model: routers
vendor: cisco model: ios xr
vendor: cisco model: series
vendor: cisco model: soho
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: router
vendor: cisco model: series routers
vendor: cisco model: cisco ios xr
vendor: cisco model: ios xe
vendor: qnap model: helpdesk
vendor: edimax model: plug
vendor: palo model: networks
vendor: apple model: macos
vendor: apple model: installer
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: webkit
vendor: trendmicro model: security
vendor: google model: chrome
vendor: google model: home
vendor: google model: google chrome
vendor: draytek model: routers
vendor: draytek model: vigor
vendor: palo alto networks model: networks
db: NVD ids: CVE-2025-20177, CVE-2024-56195, CVE-2024-52961, CVE-2025-20142, CVE-2024-55590, CVE-2025-24444, CVE-2024-41335, CVE-2025-20169, CVE-2025-20115, CVE-2025-24453, CVE-2025-24985, CVE-2025-24445, CVE-2025-2137, CVE-2025-27607, CVE-2025-27434, CVE-2021-26855, CVE-2025-24993, CVE-2025-25292, CVE-2025-27164, CVE-2025-27169, CVE-2025-27178, CVE-2025-24443, CVE-2025-24442, CVE-2025-20145, CVE-2025-25291, CVE-2025-27176, CVE-2025-27161, CVE-2025-26630, CVE-2025-1920, CVE-2023-40723, CVE-2025-27167, CVE-2024-38311, CVE-2023-3519, CVE-2025-24440, CVE-2025-20144, CVE-2025-24452, CVE-2024-41339, CVE-2024-41338, CVE-2025-24984, CVE-2025-20141, CVE-2024-54027, CVE-2025-2135, CVE-2024-51139, CVE-2025-27162, CVE-2025-24991, CVE-2025-26633, CVE-2025-27170, CVE-2025-24441, CVE-2025-26661, CVE-2025-20170, CVE-2025-27407, CVE-2024-3400, CVE-2025-24983, CVE-2024-38286, CVE-2023-37933, CVE-2025-22454, CVE-2025-20143, CVE-2025-20146, CVE-2024-45328, CVE-2024-51138, CVE-2025-27177, CVE-2025-27174, CVE-2024-50394, CVE-2021-26858, CVE-2025-24876, CVE-2025-27160, CVE-2025-2136, CVE-2025-27179, CVE-2021-27065, CVE-2024-41340, CVE-2025-27166, CVE-2025-23243, CVE-2024-39592, CVE-2025-27175, CVE-2025-27152, CVE-2025-20209, CVE-2024-45324, CVE-2025-27163, CVE-2025-20138, CVE-2024-41336, CVE-2021-26857, CVE-2024-56196, CVE-2025-27159, CVE-2025-23242, CVE-2025-24439, CVE-2025-24201, CVE-2025-24431, CVE-2025-27816, CVE-2025-0282, CVE-2023-48790, CVE-2025-27168, CVE-2025-27158, CVE-2024-56202, CVE-2024-41334, CVE-2025-27171, CVE-2025-1316

What is Mobile Security in Cyber Security? - GeeksforGeeks

Trust: 3.5

Fetched: March 21, 2025, 10:02 a.m., Published: April 2, 2024, 4:23 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: essential model: phone
vendor: google model: android
vendor: google model: wifi
vendor: apple model: software update

System BIOS dla komputerów Dell Precision 3540 i Latitude 5400/5500 | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: March 21, 2025, 9:59 a.m., Published: March 21, 3540, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
vendor: dell model: latitude

Android zero-day vulnerabilities actively abused - update as soon as you can - Cyber Security Review

Trust: 5.5

Fetched: March 21, 2025, 9:59 a.m., Published: March 5, 2025, 8:47 a.m.
 Vulnerabilities: sql injection, injection attack
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: google model: android
vendor: google model: home
db: NVD ids: CVE-2024-12356, CVE-2018-0802, CVE-2024-53677

System BIOS dla komputera Dell Embedded Box PC 3000 | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: March 21, 2025, 9:56 a.m., Published: March 21, 3000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
vendor: dell model: embedded box pc

Microsoft shutting down Skype, over 1.6m Android TV's infected worldwide, vulnerabilities for Microsoft, Adobe and Oracle...

Trust: 5.25

Fetched: March 21, 2025, 9:55 a.m., Published: March 1, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2023-34192, CVE-2024-49035, CVE-2017-3066, CVE-2024-20953

Dell Precision 7530 and 7730 System BIOS | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: March 21, 2025, 9:54 a.m., Published: March 21, 7530, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
vendor: dell model: precision 7530