Sign-up

VARIoT news about IoT security

Canadian telecom hacked by suspected China state group - Ars Technica

Trust: 3.75

Fetched: June 25, 2025, 9:15 a.m., Published: June 23, 2025, 7:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: router
vendor: cisco model: ios xe
vendor: cisco model: wireless lan controller
db: NVD ids: CVE-2023-20198

How Bastille Protects IoT in Government Systems

Related entries in the VARIoT vulnerabilities database: VAR-202112-0566, VAR-201404-0592

Trust: 5.25

Fetched: June 25, 2025, 9:14 a.m., Published: June 24, 2025, 8:41 p.m.
 Vulnerabilities: code execution, command injection, default credentials
Affected productsExternal IDs
vendor: hikvision model: hikvision
vendor: hikvision model: ip cameras
db: NVD ids: CVE-2021-44228, CVE-2017-9841, CVE-2014-0160, CVE-2018-20062, CVE-2021-36260, CVE-2024-4577

Download and install Google Chrome - Computer - Google Chrome Help

Trust: 3.0

Fetched: June 25, 2025, 9:08 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome

Download the YouTube app - Android - YouTube Help

Trust: 3.5

Fetched: June 25, 2025, 9:07 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: apple tv

Download apps & digital content - Google Play Help

Trust: 3.0

Fetched: June 25, 2025, 9:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Connected Communities Initiative IoT Device Risk and Mitigation Infographic | CISA

Trust: 3.0

Fetched: June 24, 2025, 9:55 a.m., Published: June 4, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs

F5 Networks Security Vulnerabilities in 2025

Related entries in the VARIoT vulnerabilities database: VAR-202505-3510, VAR-202103-0654, VAR-202505-3508, VAR-202504-1178, VAR-202007-1393, VAR-202103-0965, VAR-202205-0394

Trust: 5.5

Fetched: June 24, 2025, 9:53 a.m., Published: June 24, 2025, midnight
 Vulnerabilities: authentication bypass, cross-site scripting, command execution...
Affected productsExternal IDs
vendor: node.js model: node.js
db: NVD ids: CVE-2023-46747, CVE-2024-11235, CVE-2025-31335, CVE-2025-21575, CVE-2025-0678, CVE-2025-20004, CVE-2025-21588, CVE-2025-46265, CVE-2025-41414, CVE-2025-30687, CVE-2025-21585, CVE-2025-1098, CVE-2025-35995, CVE-2025-30689, CVE-2021-22986, CVE-2025-30706, CVE-2025-24514, CVE-2025-1217, CVE-2023-46748, CVE-2024-25260, CVE-2025-30691, CVE-2025-30688, CVE-2025-30699, CVE-2024-6345, CVE-2025-4575, CVE-2025-20100, CVE-2018-16855, CVE-2025-21583, CVE-2025-27820, CVE-2025-23085, CVE-2025-30696, CVE-2025-32433, CVE-2025-30695, CVE-2025-21579, CVE-2025-20083, CVE-2025-36546, CVE-2025-30721, CVE-2025-31498, CVE-2020-5902, CVE-2025-21577, CVE-2025-41431, CVE-2025-21574, CVE-2021-22991, CVE-2022-1388, CVE-2025-2946, CVE-2025-43878, CVE-2025-21584, CVE-2025-30681, CVE-2025-36504, CVE-2025-41433, CVE-2024-47220, CVE-2025-32434, CVE-2024-8176, CVE-2024-45310, CVE-2025-30698, CVE-2025-21580, CVE-2025-30705, CVE-2025-31492, CVE-2025-21581, CVE-2025-3277, CVE-2025-36525, CVE-2024-1874, CVE-2025-30704, CVE-2025-31644, CVE-2025-23083, CVE-2025-2945

Citrix NetScaler ADC & Gateway vulnerabilities: Find impacted systems

Related entries in the VARIoT vulnerabilities database: VAR-202401-1629, VAR-202401-2573

Trust: 4.25

Fetched: June 24, 2025, 9:51 a.m., Published: June 18, 2025, 9 p.m.
 Vulnerabilities: cross-site scripting, input validation vulnerability, code execution...
Affected productsExternal IDs
vendor: citrix model: netscaler gateway
vendor: citrix model: netscaler adc
vendor: citrix model: gateway
vendor: citrix model: netscaler
db: NVD ids: CVE-2023-3466, CVE-2025-5777, CVE-2023-3467, CVE-2023-6549, CVE-2023-3519, CVE-2025-5349, CVE-2023-6548, CVE-2024-12284, CVE-2023-4966

Vulnerability Assessment & Penetration Testing (VAPT) in India - Cyberintelsys

Trust: 3.75

Fetched: June 24, 2025, 9:49 a.m., Published: Oct. 3, 2024, 4:31 a.m.
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: google model: android

CVE-2025-34033 | Tenable®

Trust: 4.0

Fetched: June 24, 2025, 9:48 a.m., Published: June 24, 2025, midnight
 Vulnerabilities: command execution, arbitrary command execution, command injection...
Affected productsExternal IDs
db: NVD ids: CVE-2025-34033

CVE-2025-41652: Critical Authentication Bypass Vulnerability in Multiple Devices - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.0

Fetched: June 24, 2025, 9:48 a.m., Published: June 2, 2025, 8:51 a.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-41652

CVE-2025-34022 | Tenable®

Trust: 4.0

Fetched: June 24, 2025, 9:46 a.m., Published: -
 Vulnerabilities: path traversal, authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-34022

Microsoft Excel Security Vulnerabilities in 2025

Trust: 3.75

Fetched: June 24, 2025, 9:44 a.m., Published: June 24, 2025, midnight
 Vulnerabilities: buffer overflow, feature bypass, use after free...
Affected productsExternal IDs
db: NVD ids: CVE-2024-49030, CVE-2022-41104, CVE-2025-30379, CVE-2024-49069, CVE-2021-42292, CVE-2024-20673, CVE-2024-49026, CVE-2021-40474, CVE-2025-21362, CVE-2024-43504, CVE-2025-21390, CVE-2024-49029, CVE-2016-7262, CVE-2023-33133, CVE-2025-21383, CVE-2025-29979, CVE-2025-30383, CVE-2023-23398, CVE-2025-30375, CVE-2019-1297, CVE-2023-23399, CVE-2021-40485, CVE-2025-30393, CVE-2022-30173, CVE-2021-43256, CVE-2024-49028, CVE-2024-43465, CVE-2023-36037, CVE-2021-40442, CVE-2022-41106, CVE-2022-21840, CVE-2025-30381, CVE-2025-30376, CVE-2025-21386, CVE-2024-49027, CVE-2024-30042, CVE-2022-26901, CVE-2025-47165, CVE-2025-21381, CVE-2022-41063, CVE-2023-32029, CVE-2022-33631, CVE-2022-22716, CVE-2025-47174, CVE-2025-32704, CVE-2025-21394, CVE-2025-29977, CVE-2023-36041, CVE-2022-26903, CVE-2025-30377, CVE-2024-43106, CVE-2025-21387, CVE-2023-36766, CVE-2023-24953, CVE-2022-29110, CVE-2009-3129

Just in Time Bulletin: CVE-2025-33073 Reflective Kerberos Relay Attack - NopSec

Trust: 4.0

Fetched: June 24, 2025, 9:43 a.m., Published: June 22, 2025, midnight
 Vulnerabilities: code execution, improper access control, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-33073

Severe Meshtastic Flaw Exposes Encrypted Messages to Attackers

Trust: 4.0

Fetched: June 24, 2025, 9:43 a.m., Published: June 23, 2025, 6:17 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-52464

IoT Security: Definition, Threats and Protection Strategies

Trust: 4.5

Fetched: June 24, 2025, 9:41 a.m., Published: March 12, 2025, 6:35 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs

What Are Pi Worms? Protect Your Raspberry Pi - Biology Insights

Trust: 3.5

Fetched: June 24, 2025, 9:39 a.m., Published: June 23, 2025, 7:14 a.m.
 Vulnerabilities: default password, command execution, default credentials
Affected productsExternal IDs

CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices

Trust: 5.0

Fetched: June 24, 2025, 9:38 a.m., Published: June 7, 2025, 12:11 a.m.
 Vulnerabilities: path traversal, sql injection, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2025-30183, CVE-2025-30184, CVE-2025-30515, CVE-2025-30507, CVE-2025-26468

Exposed and Exploited: The Growing Danger of Edge Device Attacks in India’s Critical Systems

Trust: 3.75

Fetched: June 24, 2025, 9:36 a.m., Published: May 27, 2025, 5:11 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: asus model: asus
vendor: asus model: routers
vendor: trend model: security
vendor: cisco model: routers
vendor: check point model: check point
vendor: check point software technologies model: check point
vendor: mikrotik model: mikrotik routers
vendor: mikrotik model: mikrotik
vendor: mikrotik model: routers

DVR Security Device Under Attack - ISSSource

Trust: 5.0

Fetched: June 24, 2025, 9:33 a.m., Published: June 23, 2025, 2:03 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-3721