Sign-up

VARIoT news about IoT security

Third of Exploited Flaws Weaponized Within a Day of Disclosure - Infosecurity Magazine

Trust: 3.0

Fetched: Aug. 17, 2025, 11:08 a.m., Published: July 30, 2025, 12:45 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phones

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities

Trust: 5.0

Fetched: Aug. 17, 2025, 11:08 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance

LG Innotek Camera Model LNV5110R | CISA

Trust: 4.0

Fetched: Aug. 17, 2025, 11:08 a.m., Published: Aug. 1, 2025, midnight
 Vulnerabilities: code execution, authentication bypass, authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-7742

Rockwell Automation Studio 5000 Logix Designer | CISA

Trust: 3.5

Fetched: Aug. 17, 2025, 11:07 a.m., Published: Aug. 17, 5000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: rockwell automation model: studio 5000
vendor: rockwell automation model: studio 5000 logix designer
vendor: rockwell model: studio 5000
vendor: rockwell model: studio 5000 logix designer
db: NVD ids: CVE-2025-7971

CVE-2025-20265 - Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability - SecAlerts

Trust: 4.0

Fetched: Aug. 17, 2025, 11:07 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-20265

CVE-2025-20218 - Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability - SecAlerts

Trust: 3.75

Fetched: Aug. 17, 2025, 11:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower management center
db: NVD ids: CVE-2025-20218

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Trust: 3.75

Fetched: Aug. 17, 2025, 11:05 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software

cisco-sa-fp2k-IPsec-dos-tjwgdZCO - Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 2100 Series IPv6 over IPsec Denial of Service Vulnerability - SecAlerts

Trust: 4.5

Fetched: Aug. 17, 2025, 11:04 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: adaptive security appliance
vendor: cisco model: series
vendor: cisco model: firepower 2100

CVE-2025-8817: Critical Stack-Based Buffer Overflow Vulnerability in Linksys Devices - Cybersecurity Exploit Tracker by Ameeba

Related entries in the VARIoT vulnerabilities database: VAR-202508-0381

Trust: 5.5

Fetched: Aug. 17, 2025, 11:04 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: linksys model: re6500
vendor: linksys model: re6300
db: NVD ids: CVE-2025-8817

CVE-2025-38532 - net: libwx: properly reset Rx ring descriptor - SecAlerts

Trust: 3.75

Fetched: Aug. 17, 2025, 11:03 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: wifi
db: NVD ids: CVE-2025-38532

Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities

Trust: 4.75

Fetched: Aug. 17, 2025, 11:03 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: adaptive security appliance
vendor: cisco model: router
vendor: cisco model: nx-os
vendor: cisco model: ios software
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xr
vendor: cisco model: cisco ios
vendor: cisco model: asa software
vendor: cisco model: nx-os software
vendor: cisco model: ios xe software
db: NVD ids: CVE-2025-20252, CVE-2025-20239, CVE-2025-20224, CVE-2025-20225, CVE-2025-20254, CVE-2025-20253

CVE-2025-8826: Critical Buffer Overflow Vulnerability in Linksys Wireless Range Extenders - Cybersecurity Exploit Tracker by Ameeba

Related entries in the VARIoT vulnerabilities database: VAR-202508-0363

Trust: 5.5

Fetched: Aug. 17, 2025, 11:02 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: memory corruption, buffer overflow
Affected productsExternal IDs
vendor: linksys model: re6500
vendor: linksys model: re6300
db: NVD ids: CVE-2025-8826

Maximum severity Cisco ISE vulnerabilities exploited by attackers - Help Net Security

Trust: 3.75

Fetched: Aug. 17, 2025, 11:02 a.m., Published: July 23, 2025, 11:37 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine
db: NVD ids: CVE-2025-20281, CVE-2025-20337, CVE-2025-20282

WinRAR vulnerability exploited by two different groups | Malwarebytes

Trust: 3.75

Fetched: Aug. 17, 2025, 11:02 a.m., Published: Aug. 12, 2025, 4:28 p.m.
 Vulnerabilities: directory traversal, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2025-8088

Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability

Trust: 3.25

Fetched: Aug. 17, 2025, 11:01 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: asa software

CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Trust: 3.75

Fetched: Aug. 17, 2025, 11:01 a.m., Published: July 28, 2025, 9:30 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: palo alto networks globalprotect
vendor: palo alto networks model: networks
vendor: palo alto networks model: networks globalprotect
vendor: palo alto networks model: pan-os
vendor: palo_alto_networks model: palo alto networks globalprotect
vendor: palo_alto_networks model: networks
vendor: palo_alto_networks model: networks globalprotect
vendor: palo_alto_networks model: pan-os
vendor: palo model: palo alto networks globalprotect
vendor: palo model: networks
vendor: palo model: networks globalprotect
vendor: palo model: pan-os
db: NVD ids: CVE-2025-2179

Your Webcam Can Be a Hacker's Weapon: New 'BadCam' Attack Hijacks Lenovo Devices

Trust: 3.25

Fetched: Aug. 17, 2025, 11 a.m., Published: Aug. 11, 2025, 8:41 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lenovo model: system

Ivanti Under Siege: Investigating the Ivanti Endpoint Manager Mobile Vulnerabilities (CVE-2025-4427 & CVE-2025-4428)

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.75

Fetched: Aug. 17, 2025, 11 a.m., Published: Aug. 15, 2025, 1:28 p.m.
 Vulnerabilities: code execution, memory corruption, privilege escalation...
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2025-4428, CVE-2022-42475, CVE-2024-21762, CVE-2025-4427, CVE-2023-27997

CVE-2025-38531 : Linux Kernel Vulnerability in ST Sensors: Use of Uninitialized Device Structures

Trust: 3.25

Fetched: Aug. 17, 2025, 10:59 a.m., Published: Aug. 16, 2025, 11:12 a.m.
 Vulnerabilities: kernel panic
Affected productsExternal IDs
db: NVD ids: CVE-2025-38531

Cyble Vulnerability Intelligence: Weekly Threat Insights

Related entries in the VARIoT vulnerabilities database: VAR-202404-3442, VAR-201805-0263, VAR-201805-0262

Trust: 5.5

Fetched: Aug. 17, 2025, 10:54 a.m., Published: Aug. 11, 2025, 11:48 a.m.
 Vulnerabilities: command injection, authentication bypass, cross-site scripting...
Affected productsExternal IDs
vendor: infoblox model: netmri
vendor: apple model: webkit
vendor: google model: chrome
vendor: google model: google chrome
vendor: dell model: kace k1000 systems management appliance
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: adaptive security appliance
vendor: cisco model: series
vendor: cisco model: linksys
vendor: cisco model: management appliance
vendor: cisco model: routers
vendor: qnap model: qnap qts
vendor: sonicwall model: sma 100
vendor: trend model: security
vendor: trend micro model: security
vendor: dasan model: gpon routers
db: NVD ids: CVE-2025-40599, CVE-2025-54987, CVE-2025-34031, CVE-2024-29269, CVE-2025-32814, CVE-2025-53770, CVE-2018-10562, CVE-2025-6558, CVE-2025-49132, CVE-2025-31161, CVE-2014-125113, CVE-2024-36401, CVE-2025-54948, CVE-2025-23266, CVE-2018-10561, CVE-2025-54253