Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

PoC Exploit Unveiled for Lenovo Code Execution Vulnerability Enabling Privilege Escalation

Trust: 5.5

Fetched: Oct. 15, 2025, 9:27 a.m., Published: Oct. 13, 2025, 3:25 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
db: NVD ids: CVE-2025-8061

CVE-2023-7311 - BYTEVALUE Intelligent Flow Control Router Command Injection - SecAlerts

Trust: 4.25

Fetched: Oct. 15, 2025, 9:24 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-7311

Cisco IOS Software Industrial Ethernet Switch Device Manager Denial of Service Vulnerability

Trust: 4.75

Fetched: Oct. 15, 2025, 9:24 a.m., Published: Sept. 24, 2025, 4:12 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ie 4000
vendor: cisco model: series
vendor: cisco model: ios xe software
vendor: cisco model: ios xr
vendor: cisco model: router
vendor: cisco model: industrial ethernet
vendor: cisco model: ios xe
vendor: cisco model: nx-os
vendor: cisco model: ios xr software
vendor: cisco model: series switches
vendor: cisco model: nx-os software
vendor: cisco model: cisco ios
vendor: cisco model: ios software
vendor: cisco model: device manager

Linux USB Audio Driver Vulnerability Exploited by Malicious USB Devices in the Wild - Boardor

Trust: 3.75

Fetched: Oct. 15, 2025, 9:23 a.m., Published: Oct. 15, 2025, 8:13 a.m.
 Vulnerabilities: system crash, code execution, privilege escalation
Affected productsExternal IDs

CVE-2025-39855 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 15, 2025, 9:22 a.m., Published: Sept. 19, 2025, 4:15 p.m.
 Vulnerabilities: privilege escalation, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-39855

Hackers Can Access 2FA Codes and Private Messages on Android Devices - Breach Spot

Trust: 3.75

Fetched: Oct. 15, 2025, 9:20 a.m., Published: Oct. 14, 2025, 4:30 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android

CVE-2017-20204 - DBLTek GoIP Telnet Admin Interface Undocumented Backdoor - SecAlerts

Trust: 4.75

Fetched: Oct. 15, 2025, 9:20 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: dbltek model: dbltek
db: NVD ids: CVE-2017-20204

CDPSvc Memory Corruption: Local Privilege Escalation and CVE Fragmentation (Mid 2025) | Windows Forum

Trust: 3.5

Fetched: Oct. 15, 2025, 9:19 a.m., Published: Oct. 14, 2025, 9:24 p.m.
 Vulnerabilities: code injection, privilege escalation, heap corruption...
Affected productsExternal IDs

Pixel-stealing “Pixnapping” attack targets Android devices | Malwarebytes

Trust: 3.75

Fetched: Oct. 15, 2025, 9:19 a.m., Published: Oct. 14, 2025, 12:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2025-48561

CVE-2025-55677: Windows Device Association Broker Local Privilege Escalation | Windows Forum

Trust: 4.5

Fetched: Oct. 15, 2025, 9:17 a.m., Published: Oct. 14, 2025, 8:52 p.m.
 Vulnerabilities: code execution, privilege escalation, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-55677

CVE-2025-50174 Windows Device Association Broker EoP Explained | Windows Forum

Trust: 4.5

Fetched: Oct. 15, 2025, 9:13 a.m., Published: Oct. 14, 2025, 7:42 p.m.
 Vulnerabilities: privilege escalation, script execution, memory corruption...
Affected productsExternal IDs
db: NVD ids: CVE-2025-50174

Many OnePlus smartphones have a major SMS vulnerability, and a fix isn't coming before mid-October - GSMArena.com news

Trust: 5.75

Fetched: Oct. 14, 2025, 9:23 a.m., Published: Oct. 14, 2025, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184

Cisco Patches ASA, FTD, and IOS Vulnerabilities | Arctic Wolf

Trust: 4.75

Fetched: Oct. 14, 2025, 9:23 a.m., Published: Sept. 26, 2025, 4:03 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: ios xr
vendor: cisco model: adaptive security appliance
vendor: cisco model: ios xe
db: NVD ids: CVE-2025-20363, CVE-2025-20333, CVE-2025-20352, CVE-2025-20362

Analyzing the Vulnerabilities and Security Risks Associated with IoT Devices and Networks | SpringerLink

Trust: 3.75

Fetched: Oct. 14, 2025, 9:22 a.m., Published: Oct. 14, 2026, midnight
 Vulnerabilities: -

Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Trust: 3.0

Fetched: Oct. 14, 2025, 9:21 a.m., Published: Oct. 1, 2025, 12:36 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-10725

WAGO Device Sphere and Solution Builder Vulnerability Expose Database and User Credentials - Advisories

Trust: 5.0

Fetched: Oct. 14, 2025, 9:21 a.m., Published: Oct. 9, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: wago model: wago
db: NVD ids: CVE-2025-41715, CVE-2025-41716

Canon Devices - Authentication Bypass in Catwalk Server (CVE-2021-38154) - Vulnerability & Exploit Database

Trust: 5.25

Fetched: Oct. 14, 2025, 9:20 a.m., Published: Oct. 7, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: canon model: ir-adv
db: NVD ids: CVE-2021-38154

OxygenOS 12+ devices affected by major SMS vulnerability

Trust: 4.5

Fetched: Oct. 14, 2025, 9:19 a.m., Published: Oct. 5, 2025, 2:57 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: google model: android
vendor: oneplus model: one
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184

TALOS-2025-2227 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Trust: 4.25

Fetched: Oct. 14, 2025, 9:19 a.m., Published: -
 Vulnerabilities: command injection, command execution, os command injection...
Affected productsExternal IDs
vendor: cisco model: router
vendor: cisco model: industrial router
db: NVD ids: CVE-2025-54403, CVE-2025-54404

Keysight Ixia Vision Product Family (Update A) | CISA

Trust: 3.75

Fetched: Oct. 14, 2025, 9:17 a.m., Published: Sept. 30, 2025, midnight
 Vulnerabilities: entity injection, path traversal, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-24525, CVE-2025-21095, CVE-2025-24494, CVE-2025-23416, CVE-2025-24521