Sign-up

VARIoT news about IoT security

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

Related entries in the VARIoT vulnerabilities database: VAR-202203-0233

Trust: 4.75

Fetched: Oct. 31, 2025, 9:15 a.m., Published: Oct. 29, 2025, 3:38 p.m.
 Vulnerabilities: command injection, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2024-3721, CVE-2021-3129, CVE-2022-22947, CVE-2017-9841, CVE-2022-47945

2025 Report Exposes Widespread Device Security Risks - Palo Alto Networks Blog

Trust: 3.5

Fetched: Oct. 31, 2025, 9:15 a.m., Published: Oct. 28, 2025, 1:50 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks

Apple fixes critical font processing bug. Update now! | Malwarebytes

Trust: 5.25

Fetched: Oct. 28, 2025, 9:35 a.m., Published: Sept. 30, 2025, 11:01 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: software update
vendor: apple model: ipad
vendor: apple model: apple tv
vendor: apple model: ipad air
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2025-43400

Windows message center | Microsoft Learn

Trust: 3.75

Fetched: Oct. 28, 2025, 9:32 a.m., Published: Oct. 24, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2022-34691, CVE-2025-26647, CVE-2025-59287

Using Group Policy to Enable Remote Desktops

Trust: 3.75

Fetched: Oct. 28, 2025, 9:31 a.m., Published: Dec. 30, 2024, 1:48 p.m.
 Vulnerabilities: resource exhaustion
Affected productsExternal IDs
vendor: apple model: macos

Mirai Botnet Exploiting TVT DVRs - Security Spotlight

Trust: 3.0

Fetched: Oct. 28, 2025, 9:31 a.m., Published: April 9, 2025, 3:39 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs

Update Canonical Ubuntu Desktop: USN-7830-1: FFmpeg vulnerabilities

Trust: 6.0

Fetched: Oct. 28, 2025, 9:30 a.m., Published: Jan. 28, 7830, midnight
 Vulnerabilities: buffer overflow, denial of service, request forgery
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-6605, CVE-2025-7700, CVE-2023-6603, CVE-2025-10256, CVE-2025-9951

Linux Distros Unpatched Vulnerability : CVE-2022-50538 | Tenable®

Trust: 4.0

Fetched: Oct. 28, 2025, 9:29 a.m., Published: Oct. 10, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu_linux
db: NVD ids: CVE-2022-50538

Statement on OS command injection vulnerabilities on Omada gateways (CVE-2025-6541 and CVE-2025-6542) | Omada Network Support

Trust: 4.75

Fetched: Oct. 28, 2025, 9:28 a.m., Published: Oct. 7, 2025, midnight
 Vulnerabilities: command injection, os command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-6541, CVE-2025-6542

OvrC Platform Weaknesses Leave IoT Devices Vulnerable to Remote Attacks and Code Execution - Breach Spot

Trust: 5.75

Fetched: Oct. 28, 2025, 9:27 a.m., Published: Oct. 27, 2025, 9:15 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: home
db: NVD ids: CVE-2023-28386, CVE-2024-50381, CVE-2023-28649, CVE-2023-31241

Veeder-Root TLS4B Automatic Tank Gauge System | CISA

Trust: 4.5

Fetched: Oct. 28, 2025, 9:24 a.m., Published: Oct. 1, 2025, midnight
 Vulnerabilities: command injection, integer overflow, denial of service...
Affected productsExternal IDs
db: NVD ids: CVE-2025-58428, CVE-2025-55067

Rockwell Automation 1783-NATR | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202510-1230, VAR-202510-1054, VAR-202510-0712

Trust: 4.5

Fetched: Oct. 28, 2025, 9:23 a.m., Published: -
 Vulnerabilities: cross-site scripting, request forgery, cross-site request forgery
Affected productsExternal IDs
db: NVD ids: CVE-2025-7330, CVE-2025-7328, CVE-2025-7329

Chain of security weaknesses found in smart air compressor model - Help Net Security

Trust: 4.75

Fetched: Oct. 28, 2025, 9:23 a.m., Published: Oct. 28, 2025, 6:30 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: wireshark model: wireshark

Major Vulnerabilities Found in TP-Link VPN Routers - Infosecurity Magazine

Related entries in the VARIoT vulnerabilities database: VAR-202406-0858

Trust: 4.75

Fetched: Oct. 28, 2025, 9:23 a.m., Published: Oct. 23, 2025, 12:30 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: tp-link model: routers
db: NVD ids: CVE-2024-21827, CVE-2025-7850, CVE-2025-7851

HPESBNW04957 rev.1 - HPE Aruba Networking AOS-10 and AOS-8 Mobility Conductor, Controllers, and Gateways, Multiple Vulnerabilities

Trust: 3.5

Fetched: Oct. 28, 2025, 9:22 a.m., Published: -
 Vulnerabilities: command injection, code execution, denial of service...
Affected productsExternal IDs
db: NVD ids: CVE-2025-37137, CVE-2025-37143, CVE-2025-37134, CVE-2025-37140, CVE-2025-37141, CVE-2025-37145, CVE-2025-37135, CVE-2025-37133, CVE-2025-37132, CVE-2025-37139, CVE-2025-37144, CVE-2025-37138, CVE-2025-37142, CVE-2025-37136

81% Router Usres Have Not Changed Default Admin Passwords, Exposing Devices

Trust: 3.5

Fetched: Oct. 28, 2025, 9:21 a.m., Published: Oct. 28, 2025, 10:36 a.m.
 Vulnerabilities: default credentials, default password
Affected productsExternal IDs
vendor: wireshark model: wireshark

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Oct. 28, 2025, 9:21 a.m., Published: Oct. 28, 2025, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

CVE-2025-62777 - MZK-DP300N Telnet Hard-Coded Credentials Vulnerability

Trust: 3.0

Fetched: Oct. 28, 2025, 9:20 a.m., Published: Oct. 28, 2025, 5:15 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-62777

Take Action: Out-of-band update to address a vulnerability in Windows Server Update Services (WSUS) - M365 Admin

Trust: 3.25

Fetched: Oct. 28, 2025, 9:20 a.m., Published: Oct. 24, 2025, 10:53 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-59287

CVE-2025-26452: Privilege Escalation Vulnerability in ResourcesImpl.java - Ameeba Exploit Tracker

Trust: 5.0

Fetched: Oct. 28, 2025, 9:18 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-26452