Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

Siemens Exposes 9.8-Rated Bootloader Flaw in SINAMICS S200 Devices | Cyware Alerts - Hacker News

Trust: 3.25

Fetched: March 26, 2025, 9:22 a.m., Published: March 9, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: sinamics

Vulnerabilities of Cisco Network Devices

Trust: 3.0

Fetched: March 26, 2025, 9:21 a.m., Published: March 23, 2025, 1:27 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: nx-os
vendor: cisco model: fxos
vendor: cisco model: firepower
vendor: cisco model: cisco nx-os
vendor: cisco model: nexus

Update Canonical Ubuntu Desktop: USN-7367-1: zvbi vulnerabilities

Trust: 3.0

Fetched: March 26, 2025, 9:21 a.m., Published: Jan. 26, 7367, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Server: USN-7359-1: Valkey vulnerabilities

Trust: 6.0

Fetched: March 26, 2025, 9:20 a.m., Published: Jan. 26, 7359, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-51741, CVE-2024-46981

Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

Trust: 4.5

Fetched: March 26, 2025, 9:19 a.m., Published: March 12, 2025, 3:54 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xr software
vendor: cisco model: ios xr
vendor: cisco model: cisco ios
vendor: cisco model: cisco ios xr

Critical Apache Tomcat RCE Vulnerability Exploited in Just 30hrs of Public Exploit

Trust: 4.0

Fetched: March 26, 2025, 9:19 a.m., Published: March 18, 2025, 4:51 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-24813

Update Canonical Ubuntu Server: USN-7362-1: go-gh vulnerability

Trust: 4.25

Fetched: March 26, 2025, 9:17 a.m., Published: Jan. 26, 7362, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-53859

Update Canonical Ubuntu Desktop: USN-7362-1: go-gh vulnerability

Trust: 4.25

Fetched: March 26, 2025, 9:17 a.m., Published: Jan. 26, 7362, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-53859

Update Canonical Ubuntu Desktop: USN-7361-1: Libxslt vulnerability

Trust: 4.25

Fetched: March 26, 2025, 9:17 a.m., Published: Jan. 26, 7361, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-7366-1: Rack vulnerabilities

Trust: 4.0

Fetched: March 26, 2025, 9:16 a.m., Published: Jan. 26, 7366, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-27111, CVE-2025-27610, CVE-2025-25184

New Ransomware Operator Exploits Fortinet Vulnerability Duo

Trust: 4.5

Fetched: March 26, 2025, 9:14 a.m., Published: March 13, 2025, 4:19 a.m.
 Vulnerabilities: command execution
Affected productsExternal IDs
vendor: fortigate model: fortios
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: citrix model: sd-wan
vendor: draytek model: routers
vendor: draytek model: draytek routers
vendor: cisco model: access points
vendor: cisco model: sd-wan
vendor: cisco model: routers
vendor: cisco model: series
vendor: palo model: networks
vendor: palo model: firewall
vendor: trend model: security
db: NVD ids: CVE-2024-55591, CVE-2025-24472

CVE-2025-1445 : IEC 61850 Client and Server Functionality Vulnerability in RTU500 Devices by Hitachi Energy | SecurityVulnerability.io

Trust: 3.25

Fetched: March 26, 2025, 9:13 a.m., Published: March 25, 2025, 12:38 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-1445

Microsoft Defender Vulnerability Management News and Insights | Microsoft Security Blog

Trust: 3.75

Fetched: March 26, 2025, 9:08 a.m., Published: March 2, 2025, midnight
 Vulnerabilities: memory corruption, privilege escalation, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-42793

IoT Devices in Healthcare: Tutorial, Examples & Vendors - SecuriThings

Related entries in the VARIoT vulnerabilities database: VAR-201903-0181, VAR-202108-1556, VAR-202108-1361

Trust: 5.25

Fetched: March 26, 2025, 9:06 a.m., Published: March 25, 2025, 12:23 p.m.
 Vulnerabilities: path traversal, sql injection, buffer overflow...
Affected productsExternal IDs
vendor: bosch model: ip cameras
vendor: axis model: ip cameras
vendor: axis model: axis
vendor: baxter model: wireless battery module
vendor: baxter model: spectrum infusion system
vendor: avigilon model: multiple
vendor: google model: home
vendor: google model: nexus
vendor: essential model: phone
db: NVD ids: CVE-2019-6538, CVE-2024-1629, CVE-2020-25179, CVE-2021-42744, CVE-2022-22765, CVE-2022-26392, CVE-2021-37166, CVE-2021-39375

Apple tells 1.4b iPhone users to update devices NOW... or risk being attacked | Daily Mail Online

Trust: 4.5

Fetched: March 25, 2025, 9:12 a.m., Published: March 12, 2025, 5:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: software update
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: safari
vendor: apple model: ipad air
vendor: apple model: webkit
db: NVD ids: CVE-2025-24201

Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability

Trust: 5.0

Fetched: March 25, 2025, 9:09 a.m., Published: Feb. 26, 2025, 3:52 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: series switches
vendor: cisco model: nexus 9000 series
vendor: cisco model: nexus 7000
vendor: cisco model: cisco nx-os
vendor: cisco model: nx-os
vendor: cisco model: nexus
vendor: cisco model: nx-os software
vendor: cisco model: nexus 9000
vendor: cisco model: series
vendor: cisco model: nexus 3000

Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability

Trust: 5.0

Fetched: March 25, 2025, 9:08 a.m., Published: Aug. 2, 2022, 1:07 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: cisco model: cisco cloud email security
vendor: cisco model: email security appliance
vendor: cisco model: cisco asyncos
vendor: cisco model: asyncos
vendor: cisco model: cloud email security
vendor: cisco model: cisco email security appliance
vendor: cisco model: asyncos software

Create device limit restrictions - Microsoft Intune | Microsoft Learn

Trust: 3.0

Fetched: March 23, 2025, 9:37 a.m., Published: Jan. 27, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos

ZDI-CAN-25373 Windows Shortcut Exploit Abused as Zero-Day in Widespread APT Campaigns | Trend Micro (US)

Trust: 3.5

Fetched: March 23, 2025, 9:36 a.m., Published: March 18, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: deep security
vendor: trend micro model: security
vendor: trend micro model: deep security
vendor: trendmicro model: security
vendor: trendmicro model: deep security

System BIOS w wersji R2 do komputerów Alienware m16 | Szczegóły sterownika | Dell Polska

Trust: 3.25

Fetched: March 23, 2025, 9:33 a.m., Published: March 11, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios