Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

Cisco fixes high-severity IOS XR flaws enabling image bypass and DoS

Trust: 4.75

Fetched: Sept. 16, 2025, 9:36 a.m., Published: Sept. 12, 2025, 2:17 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: ios xr software
db: NVD ids: CVE-2025-20159, CVE-2025-20340, CVE-2025-20248

Remediate vulnerabilities for CVE-2025-5777 | NetScaler Application Delivery Management 14.1

Related entries in the VARIoT vulnerabilities database: VAR-202108-0265, VAR-202106-0491, VAR-202112-0296, VAR-202108-0266

Trust: 3.0

Fetched: Sept. 16, 2025, 9:35 a.m., Published: Sept. 16, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-5777, CVE-2021-22920, CVE-2020-8300, CVE-2021-22956, CVE-2021-22927

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Sept. 16, 2025, 9:34 a.m., Published: Sept. 1, 2025, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

Cisco UCS Manager Software Command Injection Vulnerabilities

Trust: 5.0

Fetched: Sept. 16, 2025, 9:33 a.m., Published: Aug. 27, 2025, 3:57 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: ucs manager
vendor: cisco model: cisco ucs manager
vendor: cisco model: series

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access

Trust: 3.75

Fetched: Sept. 16, 2025, 9:33 a.m., Published: Sept. 7, 2010, 8:25 p.m.
 Vulnerabilities: improper access control, access control vulnerability
Affected productsExternal IDs

CVE-2022-50300 - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk - SecAlerts

Trust: 3.25

Fetched: Sept. 16, 2025, 9:30 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-50300

Cisco Identity Services Engine Arbitrary File Upload Vulnerability - Cisco

Trust: 5.0

Fetched: Sept. 16, 2025, 9:29 a.m., Published: Aug. 20, 2025, 11:59 a.m.
 Vulnerabilities: file upload vulnerability
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: cisco identity services engine

Cisco IOS XR ARP Storm DoS (CVE-2025-20340): Brief Summary and Technical Details - ZeroPath Blog | ZeroPath

Trust: 4.5

Fetched: Sept. 16, 2025, 9:28 a.m., Published: Sept. 10, 2025, midnight
 Vulnerabilities: denial of service, resource exhaustion, privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: routers
vendor: cisco model: ncs series
vendor: cisco model: ios xr
vendor: cisco model: ios xr software
vendor: cisco model: series
vendor: cisco model: cisco ios
vendor: cisco model: router
db: NVD ids: CVE-2025-20138, CVE-2025-20340, CVE-2025-20115, CVE-2025-20154

Cisco Patches High-Severity IOS XR Vulnerabilities - SecurityWeek

Trust: 3.25

Fetched: Sept. 16, 2025, 9:28 a.m., Published: Sept. 11, 2025, 2:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xr

CVE-2023-53256 - firmware: arm_ffa: Fix FFA device names for logical partitions - SecAlerts

Trust: 3.0

Fetched: Sept. 16, 2025, 9:25 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-53256

CVE-2022-50314 - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() - SecAlerts

Trust: 4.0

Fetched: Sept. 16, 2025, 9:25 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-50314

Samsung’s image library flaw opens a zero-click backdoor | CSO Online

Trust: 5.0

Fetched: Sept. 16, 2025, 9:24 a.m., Published: Sept. 15, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: gallery
vendor: samsung model: samsung
vendor: samsung model: knox
db: NVD ids: CVE-2025-21043

Get all vulnerabilities - Microsoft Defender for Endpoint | Microsoft Learn

Trust: 5.75

Fetched: Sept. 16, 2025, 9:24 a.m., Published: March 18, 2025, midnight
 Vulnerabilities: security bypass
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2024-7256

CVE-2023-53174 - scsi: core: Fix possible memory leak if device_add() fails - SecAlerts

Trust: 4.0

Fetched: Sept. 16, 2025, 9:24 a.m., Published: -
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2023-53174

Update Your Samsung Phone: Major New Security Fix Ready to Download

Trust: 3.75

Fetched: Sept. 16, 2025, 9:22 a.m., Published: Sept. 15, 2025, 9:57 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: iphone
vendor: samsung model: notes
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: samsung model: note
db: NVD ids: CVE-2025-21043

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Sept. 16, 2025, 9:22 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

Urgent warning to millions of Samsung mobile users over 'critical' issue that could secretly take control of phones | The Irish Sun

Trust: 3.75

Fetched: Sept. 16, 2025, 9:21 a.m., Published: Sept. 15, 2025, 10:19 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: iphone
vendor: apple model: software update
vendor: apple model: macos
vendor: samsung model: samsung mobile
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: galaxy
db: NVD ids: CVE-2025-43300

What's New in iOS 16.7.12: Security-Focused Update for Older Devices - thinglabs

Trust: 3.5

Fetched: Sept. 16, 2025, 9:20 a.m., Published: Sept. 16, 2025, 4:45 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: software update
db: NVD ids: CVE-2025-43300

Samsung Zero-Day Exploit CVE-2025-21043 Patched After Active Attacks on Android Devices

Trust: 4.75

Fetched: Sept. 16, 2025, 9:20 a.m., Published: Sept. 15, 2025, 7:57 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: samsung model: samsung mobile
vendor: samsung model: note
vendor: samsung model: samsung
vendor: samsung model: mobile
db: NVD ids: CVE-2025-38352, CVE-2025-48543, CVE-2025-21043

Samsung device users urged to update software due to critical security flaw | The Straits Times

Trust: 3.75

Fetched: Sept. 16, 2025, 9:12 a.m., Published: Sept. 16, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: software update
vendor: samsung model: galaxy
vendor: samsung model: samsung
db: NVD ids: CVE-2025-21043