Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

Cisco ASA 0-Day RCE Vulnerability Actively Exploited in the Wild

Trust: 4.75

Fetched: Oct. 19, 2025, 9:44 a.m., Published: Sept. 26, 2025, 6:13 a.m.
 Vulnerabilities: buffer overflow, improper validation, code execution
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2025-20362, CVE-2025-20333

Critical Vulnerability Exposes Android Devices to Remote Attacks - General - Krybot Blog

Trust: 4.25

Fetched: Oct. 19, 2025, 9:43 a.m., Published: Sept. 20, 2025, 12:29 p.m.
 Vulnerabilities: integer overflow, service crash
Affected productsExternal IDs
vendor: trend micro model: trend micro security
vendor: trend micro model: security
vendor: google model: android
vendor: trend model: trend micro security
vendor: trend model: security
vendor: essential model: phone

Microsoft's Final Free Windows 10 Update Patches 172 Vulnerabilities

Trust: 3.0

Fetched: Oct. 19, 2025, 9:43 a.m., Published: Oct. 18, 2025, 5 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Cisco IOS and IOS XE Software TACACS+ Authentication Bypass Vulnerability

Trust: 3.75

Fetched: Oct. 19, 2025, 9:42 a.m., Published: Oct. 1, 2025, 4:39 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: nx-os software
vendor: cisco model: ios xr
vendor: cisco model: ios xe
vendor: cisco model: ios xr software
vendor: cisco model: nx-os
vendor: cisco model: ios xe software

Severe OpenWrt Vulnerability Leaves Devices Vulnerable to Malicious Firmware Injection - Breach Spot

Trust: 4.0

Fetched: Oct. 19, 2025, 9:40 a.m., Published: Oct. 17, 2025, 9:45 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-54143

Windows Rust-based Kernel GDI Vulnerability Leads to Crash and Blue Screen of Death Error

Trust: 4.0

Fetched: Oct. 19, 2025, 9:38 a.m., Published: Oct. 17, 2025, 11:58 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point

Windows GDI Vulnerability in Rust Kernel Module Enables Remote Attacks

Trust: 3.75

Fetched: Oct. 19, 2025, 9:36 a.m., Published: Oct. 17, 2025, 9:46 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: check point model: check point
vendor: google model: home

Surface Laptop Studio September 2025 update is now live

Trust: 4.75

Fetched: Oct. 19, 2025, 9:35 a.m., Published: Sept. 30, 2025, 4 a.m.
 Vulnerabilities: denial of service, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2022-38102, CVE-2022-36392

CVE-2023-53658 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 19, 2025, 9:33 a.m., Published: Oct. 7, 2025, 4:15 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-53658

CVE-2025-10961 | Armis Vulnerability Intelligence Database

Trust: 4.0

Fetched: Oct. 19, 2025, 9:33 a.m., Published: Sept. 25, 2025, 6:15 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-10961

CVE-2025-10653 | Armis Vulnerability Intelligence Database

Trust: 3.25

Fetched: Oct. 19, 2025, 9:33 a.m., Published: Oct. 2, 2025, 8:15 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-10653

WatchGuard Fireware OS Hit by Critical CVE-2025-9242 RCE Vulnerability

Trust: 4.75

Fetched: Oct. 19, 2025, 9:31 a.m., Published: Oct. 18, 2025, 5:25 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices

Trust: 4.0

Fetched: Oct. 19, 2025, 9:31 a.m., Published: Oct. 17, 2025, 8:30 a.m.
 Vulnerabilities: information leakage
Affected productsExternal IDs
db: NVD ids: CVE-2025-41703, CVE-2025-41705, CVE-2025-41707, CVE-2025-41704, CVE-2025-41706

CVE-2025-10964 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 19, 2025, 9:31 a.m., Published: Sept. 25, 2025, 8:15 p.m.
 Vulnerabilities: command injection, service disruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-10964

Hackers used Cisco zero-day to plant rootkits on network switches (CVE-2025-20352) - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-201703-0892

Trust: 5.5

Fetched: Oct. 19, 2025, 9:30 a.m., Published: Oct. 17, 2025, 12:29 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios xe software
vendor: cisco model: series
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2025-20352, CVE-2017-3881

CVE-2025-10959 | Armis Vulnerability Intelligence Database

Trust: 4.0

Fetched: Oct. 19, 2025, 9:30 a.m., Published: Sept. 25, 2025, 6:15 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-10959

CVE-2025-10960 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 19, 2025, 9:30 a.m., Published: Sept. 25, 2025, 6:15 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-10960

Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices

Trust: 5.5

Fetched: Oct. 19, 2025, 9:27 a.m., Published: Oct. 17, 2025, 9:25 a.m.
 Vulnerabilities: command injection, command execution, code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-36604, CVE-2025-3600, CVE-2025-9242

CVE-2025-6892, CVE-2025-6893, CVE-2025-6894, CVE-2025-6949, CVE-2025-6950: Multiple Vulnerabilities in Network Security Appliances and Routers

Trust: 3.75

Fetched: Oct. 19, 2025, 9:27 a.m., Published: -
 Vulnerabilities: authorization vulnerability, privilege escalation, authorization flaw
Affected productsExternal IDs
db: NVD ids: CVE-2025-6950, CVE-2025-6892, CVE-2025-6949, CVE-2025-6893, CVE-2025-6894

Rootkit on Cisco Devices: Operation Zero Disk Discovered

Related entries in the VARIoT vulnerabilities database: VAR-201703-0892

Trust: 5.5

Fetched: Oct. 17, 2025, 9:51 a.m., Published: Oct. 15, 2025, 7:53 p.m.
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: trend model: security
vendor: cisco model: ios xe software
vendor: cisco model: series
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: trend micro model: security
db: NVD ids: CVE-2017-3881, CVE-2025-20352