VARIoT latest news about IoT security

Citrix NetScaler ADC/Gateway Vulnerability Exploited in the Wild (CVE-2025-6543) - Intrucept Trust: 5.0 Fetched: June 27, 2025, 10:53 a.m., Published: June 26, 2025, 8:48 a.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	citrix	model:	netscaler gateway
vendor:	citrix	model:	netscaler adc
vendor:	citrix	model:	netscaler
vendor:	citrix	model:	gateway

db:

NVD

ids:

CVE-2025-6543, CVE-2025-5777

Zero-day: Bluetooth gap turns millions of headphones into listening stations \| heise online Trust: 3.75 Fetched: June 27, 2025, 10:51 a.m., Published: June 26, 2025, 10:15 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

xiaomi

model:

redmi

db:

NVD

ids:

CVE-2025-20700, CVE-2025-20702, CVE-2025-20701

Decrement by one to rule them all: AsIO3.sys driver exploitation Trust: 4.25 Fetched: June 27, 2025, 10:51 a.m., Published: June 26, 2025, 10 a.m.	Vulnerabilities: buffer overflow, memory leak, privilege escalation

Affected products

External IDs

vendor:	asustek computer inc.	model:	asus
vendor:	asus	model:	asus
vendor:	asustek	model:	asus

db:

NVD

ids:

CVE-2025-1533

Cisco Catalyst Center User Guide, Release 2.3.7.x - Identify Network Security Advisories [Cisco Catalyst Center] - Cisco Trust: 3.25 Fetched: June 27, 2025, 10:50 a.m., Published: June 24, 2025, 4:23 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

cisco

model:

catalyst

Privacy and Cybersecurity in Smart Devices: Challenges and Opportunity Trust: 4.0 Fetched: June 27, 2025, 10:49 a.m., Published: June 22, 2025, midnight	Vulnerabilities: sql injection, buffer overflow, cross-site scripting

Affected products

External IDs

vendor:	google	model:	home
vendor:	schneider	model:	monitor

Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability Trust: 5.0 Fetched: June 27, 2025, 10:49 a.m., Published: June 18, 2025, 3:56 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	series
vendor:	cisco	model:	anyconnect vpn client
vendor:	cisco	model:	vpn client
vendor:	cisco	model:	meraki mx
vendor:	cisco	model:	meraki mx firmware

Security Advisory: Airoha-based Bluetooth Headphones and Earbuds - Insinuator.net Trust: 3.75 Fetched: June 27, 2025, 10:48 a.m., Published: June 27, 2025, midnight	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2025-20700, CVE-2025-20702, CVE-2025-20701

Latest Citrix vulnerability could be every bit as bad as Citrix Bleed \| Computer Weekly Trust: 4.5 Fetched: June 27, 2025, 10:47 a.m., Published: June 25, 2025, midnight	Vulnerabilities: information disclosure

Affected products

External IDs

vendor:	citrix	model:	netscaler gateway
vendor:	citrix	model:	application delivery controller
vendor:	citrix	model:	netscaler application delivery controller
vendor:	citrix	model:	netscaler adc
vendor:	citrix	model:	netscaler
vendor:	citrix	model:	gateway

db:

NVD

ids:

CVE-2025-5777, CVE-2025-5349, CVE-2025-577, CVE-2023-4966

Cisco Identity Services Engine Authorization Bypass Vulnerability Trust: 3.0 Fetched: June 27, 2025, 10:47 a.m., Published: June 25, 2025, 3:58 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	cisco identity services engine
vendor:	cisco	model:	identity services engine

Multiple Brother Device Vulnerabilities Allow Attackers to Execute Arbitrary HTTP Requests Trust: 4.75 Fetched: June 27, 2025, 10:46 a.m., Published: June 25, 2025, 6:59 p.m.	Vulnerabilities: default administrator password, code execution, buffer overflow...

Affected products

External IDs

db:

NVD

ids:

CVE-2024-51978, CVE-2024-51979, CVE-2024-51981, CVE-2024-51977, CVE-2024-51984, CVE-2024-51982, CVE-2024-51983

Brother device vulnerabilities: How to find affected assets Trust: 4.75 Fetched: June 27, 2025, 10:45 a.m., Published: June 26, 2025, 10:35 p.m.	Vulnerabilities: buffer overflow, default administrator password, request forgery

Affected products

External IDs

db:

NVD

ids:

CVE-2024-51978, CVE-2024-51979, CVE-2024-51981, CVE-2024-51977, CVE-2024-51984, CVE-2024-51982, CVE-2024-51980, CVE-2024-51983

Notice on Vulnerabilities in FUJIFILM Multifunction Devices and Printers : FUJIFILM Business Innovation Corp. Trust: 4.75 Fetched: June 27, 2025, 10:45 a.m., Published: June 25, 2025, midnight	Vulnerabilities: service disruption, request forgery

Affected products

External IDs

db:

NVD

ids:

CVE-2024-51979, CVE-2024-51981, CVE-2024-51977, CVE-2017-9765, CVE-2024-51984, CVE-2024-51982, CVE-2024-51980, CVE-2024-2169, CVE-2024-51983

Google Docs에서 문서 만들어 보기 - Google Workspace 학습 센터 Trust: 3.25 Fetched: June 27, 2025, 10:08 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

chrome

Cómo usar Documentos de Google - Computadora - Ayuda de Editores de Documentos de Google Trust: 3.25 Fetched: June 27, 2025, 10:08 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

pixel

How to use Google Slides - Computer - Google Docs Editors Help Trust: 3.0 Fetched: June 27, 2025, 10:07 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

home

Create your first document in Google Docs - Google Workspace Learning Center Trust: 3.0 Fetched: June 27, 2025, 10:07 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

chrome

Edding Porzellanpinselstift 4200, 1 - 4mm, sortiert \| rossmann.de Trust: 3.0 Fetched: June 27, 2025, 10:04 a.m., Published: -	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

pixel

Firefox - Wikipedia Trust: 3.25 Fetched: June 27, 2025, 9:46 a.m., Published: -	Vulnerabilities: memory leak, cross-site scripting

Affected products

External IDs

vendor:	apple	model:	ipod touch
vendor:	apple	model:	webkit
vendor:	apple	model:	macos
vendor:	apple	model:	installer
vendor:	apple	model:	mac os
vendor:	apple	model:	watch
vendor:	apple	model:	iphone
vendor:	apple	model:	safari
vendor:	apple	model:	java
vendor:	apple	model:	mac os x
vendor:	netscape	model:	navigator
vendor:	google	model:	chrome
vendor:	google	model:	google chrome
vendor:	google	model:	android
vendor:	google	model:	home
vendor:	netbsd	model:	beta
vendor:	netbsd	model:	current
vendor:	nokia	model:	series
vendor:	nokia	model:	impact
vendor:	amazon	model:	fire tv

1und1 Webmailer: Einfach einrichten \| Einzelauskunft.de Trust: 3.0 Fetched: June 27, 2025, 9:24 a.m., Published: July 27, 2023, 11:12 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

google

model:

chrome

CVE-2023-20198: Salt Typhoon Hits Canadian Telcos with Cisco Weakness Trust: 3.5 Fetched: June 25, 2025, 9:16 a.m., Published: June 24, 2025, 6:30 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	routers
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	router
vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	ios xe
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2023-20198

VARIoT news about IoT security