Sign-up

VARIoT news about IoT security

bluehack/readme.md at main · JakkuAzzo/bluehack · GitHub

Trust: 3.75

Fetched: April 8, 2025, 9:22 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: wireshark model: wireshark

Top 7 Mobile Security Threats and Prevention

Trust: 3.5

Fetched: April 8, 2025, 9:19 a.m., Published: July 18, 2018, 2:48 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: google model: android

Top 5 VPN Vulnerabilities in 2025

Related entries in the VARIoT vulnerabilities database: VAR-201906-0815, VAR-202210-0198, VAR-202407-0079

Trust: 4.25

Fetched: April 8, 2025, 9:17 a.m., Published: April 8, 2025, 1 a.m.
 Vulnerabilities: data injection, buffer overflow, code execution
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: sonicwall model: remote access
vendor: palo model: networks
vendor: trend model: security
vendor: trend model: antivirus
vendor: cisco model: vpn client
vendor: cisco model: adaptive security appliance
vendor: cisco model: nexus
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: meraki mx
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower
vendor: cisco model: series
db: NVD ids: CVE-2018-13379, CVE-2025-20212, CVE-2022-40684, CVE-2025-0282, CVE-2025-22457, CVE-2025-21208, CVE-2025-21401, CVE-2025-2704, CVE-2025-0283, CVE-2024-5594

MediaTek's April 2025 Security Bulletin: Critical WLAN Vulnerability Exposes Chipsets

Trust: 5.0

Fetched: April 8, 2025, 9:15 a.m., Published: April 7, 2025, 6:46 a.m.
 Vulnerabilities: code execution, information disclosure, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-20663, CVE-2025-20655, CVE-2025-20654, CVE-2025-20660, CVE-2025-20659, CVE-2025-20657, CVE-2025-20656, CVE-2025-20664, CVE-2025-20661, CVE-2025-20662, CVE-2025-20658

Critical Vulnerabilities in Sungrow iSolarCloud App and WiNet Firmware: Urgent Remediation Required | Windows Forum

Related entries in the VARIoT vulnerabilities database: VAR-202501-2580

Trust: 5.0

Fetched: April 8, 2025, 9:14 a.m., Published: May 8, 2025, midnight
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2024-50691, CVE-2024-50684, CVE-2024-50692

Cisco IOS XR Software CLI Privilege Escalation Vulnerability

Trust: 3.75

Fetched: April 8, 2025, 9:07 a.m., Published: March 12, 2025, 3:54 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: ios xr
vendor: cisco model: cisco ios xr
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios

Top 20+ Network Security Audit Tools in 2025

Trust: 3.75

Fetched: April 6, 2025, 9:08 a.m., Published: April 30, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: routers
vendor: zabbix model: zabbix
vendor: manageengine model: firewall analyzer
vendor: snort model: snort
vendor: wireshark model: wireshark

IoT Security Challenges: Device Vulnerability & Attack Stats | PatentPC

Trust: 4.0

Fetched: April 6, 2025, 9:06 a.m., Published: April 2, 2025, midnight
 Vulnerabilities: default password, default credentials
Affected productsExternal IDs
vendor: apple model: watch
vendor: apple model: apple tv
vendor: roku model: roku

Update Canonical Ubuntu Desktop: USN-7399-1: RabbitMQ Server vulnerability

Trust: 4.25

Fetched: April 6, 2025, 9:05 a.m., Published: Jan. 6, 7399, midnight
 Vulnerabilities: cross-site scripting
Affected productsExternal IDs
vendor: canonical model: ubuntu

Millions of IoT Medical Devices Impacted by Ripple20 Vulnerabilities | TechTarget

Trust: 3.5

Fetched: April 6, 2025, 9:04 a.m., Published: June 17, 2020, midnight
 Vulnerabilities: information leak, code execution
Affected productsExternal IDs

BrakTooth Bluetooth vulnerabilities, crash all the devices!

Trust: 5.0

Fetched: April 6, 2025, 9:03 a.m., Published: Sept. 1, 2021, 5 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2021-28139

Cisco Addresses High Severity Vulnerabilities in Enterprise Chat and Email, and Meraki MX/Z Series Devices

Trust: 5.0

Fetched: April 4, 2025, 9:20 a.m., Published: April 4, 2025, 12:05 a.m.
 Vulnerabilities: improper validation
Affected productsExternal IDs
vendor: cisco model: meraki mx
vendor: cisco model: series
db: NVD ids: CVE-2025-20139, CVE-2025-20212

CISA Advisory: Vulnerabilities in Hitachi Energy's RTU500 Series Exposed | Windows Forum

Trust: 4.5

Fetched: April 4, 2025, 9:19 a.m., Published: May 4, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hitachi model: web server
vendor: trend model: antivirus
vendor: trend model: security
db: NVD ids: CVE-2024-12169, CVE-2024-10037, CVE-2025-1445, CVE-2024-11499

Cisco Meraki MX and Z Series AnyConnect VPN Denial of Service Vulnerability

Trust: 5.0

Fetched: April 4, 2025, 9:19 a.m., Published: April 2, 2025, 3:57 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: meraki mx
vendor: cisco model: series
vendor: cisco model: meraki mx firmware

Shield Cloud Resources From Cryptojacking Threat Actors With AccuKnox

Related entries in the VARIoT vulnerabilities database: VAR-202206-0004

Trust: 4.75

Fetched: April 4, 2025, 9:18 a.m., Published: Sept. 13, 2022, 1:19 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2022-26134

CVE-2025-20212 : Denial of Service Vulnerability in Cisco AnyConnect on Meraki Devices | SecurityVulnerability.io

Trust: 4.25

Fetched: April 4, 2025, 9:17 a.m., Published: April 2, 2025, 4:15 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-20212

How To Secure IoT Devices From Hackers?

Trust: 3.5

Fetched: April 4, 2025, 9:16 a.m., Published: April 2, 2025, 11:07 a.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: essential model: phone
vendor: palo model: networks
vendor: palo model: firewall

The Ultimate Guide to Vulnerability Assessment: Strobes

Trust: 3.5

Fetched: April 4, 2025, 9:15 a.m., Published: April 4, 2025, 7:05 a.m.
 Vulnerabilities: cross-site scripting, default credentials, improper access control...
Affected productsExternal IDs

What are common vulnerabilities in endpoint devices? - Validato

Trust: 4.5

Fetched: April 4, 2025, 9:14 a.m., Published: March 31, 2025, 12:27 p.m.
 Vulnerabilities: privilege escalation, default credentials
Affected productsExternal IDs

Google quietly patches USB vulnerability, billions of Android devices narrowly escape! - TipsMake.com

Trust: 4.0

Fetched: April 4, 2025, 9:09 a.m., Published: April 10, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-53104