Sign-up

VARIoT news about IoT security

Multiple critical vulnerabilities affecting Cisco products | CVE-2025-20333, CVE-2025-20362, CVE-2025-20363

Trust: 5.5

Fetched: Sept. 30, 2025, 11:40 a.m., Published: Sept. 25, 2025, midnight
 Vulnerabilities: code execution, buffer overflow, authorization vulnerability
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xr
vendor: cisco model: cisco ios
vendor: cisco model: asr 9001
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios xr
vendor: cisco model: adaptive security appliance
vendor: cisco systems model: ios xe
vendor: cisco systems model: ios xr
vendor: cisco systems model: cisco ios
vendor: cisco systems model: asr 9001
vendor: cisco systems model: cisco ios xe
vendor: cisco systems model: cisco ios xr
vendor: cisco systems model: adaptive security appliance
db: NVD ids: CVE-2025-20363, CVE-2025-20362, CVE-2025-20333

Critical Western Digital My Cloud NAS Vulnerability Allows Remote Code Execution

Trust: 6.25

Fetched: Sept. 30, 2025, 11:40 a.m., Published: Sept. 30, 2025, 6:18 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-30247

Cisco IOS and IOS XE Software Vulnerability Exploited in the Wild (CVE-2025-20352) - Qualys ThreatPROTECT

Trust: 6.0

Fetched: Sept. 30, 2025, 11:39 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios command-line interface
vendor: cisco model: cisco ios xe
vendor: cisco model: catalyst
vendor: cisco model: ios software
vendor: cisco model: series
vendor: cisco model: series switches
db: NVD ids: CVE-2025-20352

CVE-2025-20333, CVE-2025-20362: Cisco Zero-Days Exploited | Tenable®

Trust: 5.75

Fetched: Sept. 30, 2025, 11:36 a.m., Published: Sept. 25, 2025, 9:47 p.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
vendor: cisco model: firepower
vendor: cisco model: ios xr
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: firepower threat defense
vendor: cisco model: asa software
vendor: cisco model: ios software
vendor: cisco model: ios xr software
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2025-20363, CVE-2025-20362, CVE-2025-20333

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Related entries in the VARIoT vulnerabilities database: VAR-202008-0768

Trust: 3.75

Fetched: Sept. 28, 2025, 11:42 a.m., Published: Sept. 3, 2025, 5:09 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
vendor: tp-link model: tl-wa855re
db: NVD ids: CVE-2025-55177, CVE-2025-43300, CVE-2020-24363

AutomationDirect CLICK PLUS | CISA

Trust: 3.5

Fetched: Sept. 28, 2025, 11:42 a.m., Published: Sept. 1, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: automationdirect model: click
vendor: automationdirect model: click programming software
db: NVD ids: CVE-2025-59484, CVE-2025-55069, CVE-2025-58069, CVE-2025-55038, CVE-2025-57882, CVE-2025-58473, CVE-2025-54855

Google Project Zero Details ASLR Bypass on Apple Devices Using NSDictionary Serialization - Cyber Security News - Breaking News USA

Trust: 3.25

Fetched: Sept. 28, 2025, 11:41 a.m., Published: Sept. 28, 2025, 4:05 a.m.
 Vulnerabilities: memory corruption, buffer overflow
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: macos
vendor: apple model: webkit

High-Severity Chrome Vulnerabilities Expose Data, Cause Crashes

Trust: 4.5

Fetched: Sept. 28, 2025, 11:41 a.m., Published: Sept. 25, 2025, noon
 Vulnerabilities: integer overflow, code execution, information leakage
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2025-10892, CVE-2025-10891, CVE-2025-10890

ESPHome Web Server Vulnerability Lets Hackers Bypass Authentication to Hijack Home Devices

Trust: 6.0

Fetched: Sept. 28, 2025, 11:40 a.m., Published: Sept. 2, 2025, 3:38 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: google model: home

Cisco SNMP Zero-Day Vulnerability: Critical Patch and Mitigations

Trust: 5.5

Fetched: Sept. 28, 2025, 11:27 a.m., Published: Sept. 29, 2025, midnight
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: nx-os software
vendor: cisco model: ios xr software
vendor: cisco model: nx-os
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: catalyst
vendor: cisco model: ios software
vendor: cisco model: ios xe
vendor: cisco model: series switches
vendor: cisco model: cisco ios
vendor: cisco model: series
vendor: cisco model: router
vendor: cisco model: ios xr
db: NVD ids: CVE-2025-20352

Cisco ASA customers urged to take immediate action as NCSC, CISA issue critical vulnerability warnings | IT Pro

Trust: 3.75

Fetched: Sept. 28, 2025, 11:26 a.m., Published: Sept. 26, 2025, 10:29 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: asa 5500
vendor: cisco model: series
vendor: cisco model: asa software
db: NVD ids: CVE-2025-20333, CVE-2025-20362

Critical Zero-Day Exploits Threaten Cisco ASA Devices

Trust: 5.75

Fetched: Sept. 28, 2025, 11:25 a.m., Published: Sept. 26, 2025, 1:27 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: ios xr software
vendor: cisco model: ios xe software
vendor: cisco model: ios xe
vendor: cisco model: asr 9001
vendor: cisco model: routers
vendor: cisco model: asa software
vendor: cisco model: ios xr
db: NVD ids: CVE-2025-20333, CVE-2025-20362, CVE-2025-20363

cisco-sa-snmp-x4LPhte - Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability - SecAlerts

Trust: 3.5

Fetched: Sept. 28, 2025, 11:22 a.m., Published: -
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: ios software
vendor: cisco model: ios xe
vendor: cisco model: cisco ios

Cisco IOS and IOS XE Software CLI Denial of Service Vulnerability - Cisco

Trust: 4.0

Fetched: Sept. 28, 2025, 11:22 a.m., Published: Sept. 26, 2025, 11:54 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: ios xe
vendor: cisco model: cisco ios

Cisco fixes IOS/IOS XE zero-day exploited by attackers (CVE-2025-20352) - Help Net Security

Trust: 4.0

Fetched: Sept. 28, 2025, 11:19 a.m., Published: Sept. 25, 2025, 10:41 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: catalyst
vendor: cisco model: ios xe
vendor: cisco model: ios software
vendor: cisco model: series switches
vendor: cisco model: cisco ios
vendor: cisco model: series
vendor: cisco model: routers
vendor: cisco model: integrated services routers
vendor: cisco model: catalyst switches
db: NVD ids: CVE-2025-20352

Cisco IOS XE Software for Catalyst 9800 Series Wireless Controller for Cloud Unauthenticated Access to Certificate Enrollment Service Vulnerability

Trust: 3.0

Fetched: Sept. 28, 2025, 11:19 a.m., Published: Sept. 24, 2025, 4:06 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: catalyst
vendor: cisco model: ios xe
vendor: cisco model: catalyst 9800
vendor: cisco model: cisco ios
vendor: cisco model: series
vendor: cisco model: series wireless controller
vendor: cisco model: wireless controller

What is Hardware Security? | Definition from TechTarget

Trust: 4.25

Fetched: Sept. 28, 2025, 11:17 a.m., Published: Sept. 28, 2024, midnight
 Vulnerabilities: timing attack, default password
Affected productsExternal IDs
vendor: cisco model: catalyst
vendor: dram model: dram

Active Exploitation of Cisco IOS 0-Day RCE Vulnerability Reported

Trust: 4.75

Fetched: Sept. 28, 2025, 11:14 a.m., Published: Sept. 26, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: catalyst
vendor: cisco model: ios xe
vendor: cisco model: series switches
vendor: cisco model: cisco ios
vendor: cisco model: series
db: NVD ids: CVE-2025-20352

OnePlus phone flaw could let devices send out unwanted text messages - so take care who you ping | TechRadar

Trust: 3.75

Fetched: Sept. 28, 2025, 11:11 a.m., Published: Sept. 25, 2025, 6:29 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
vendor: google model: android
db: NVD ids: CVE-2025-10184

OnePlus exploit lets apps access your texts, but a fix is on the way

Trust: 3.5

Fetched: Sept. 28, 2025, 11:10 a.m., Published: Sept. 25, 2025, 6:55 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184