VARIoT latest news about IoT security

No access to DeviceTvmSoftwareVulnerabilities table in Sentinel? - Microsoft Q&A Trust: 5.25 Fetched: Feb. 16, 2025, 9:33 a.m., Published: Feb. 12, 2025, 12:25 p.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

db:

NVD

ids:

CVE-2023-4863

Jooki - Taking Control of a Forgotten Device Trust: 3.5 Fetched: Feb. 16, 2025, 9:31 a.m., Published: Feb. 9, 2025, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:	orange	model:	web server
vendor:	dropbear	model:	ssh server
vendor:	dropbear	model:	dropbear ssh

Privacy Roundup: Week 5 of Year 2025 \| Avoid the Hack (avoidthehack!) Related entries in the VARIoT vulnerabilities database: VAR-202501-3666 Trust: 3.5 Fetched: Feb. 16, 2025, 9:30 a.m., Published: Feb. 2, 2025, 5:59 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	router
vendor:	google	model:	chrome
vendor:	apple	model:	icloud

db:

NVD

ids:

CVE-2025-24085

CISA Publishes 20 Advisories on ICS Security Flaws and Exploits Trust: 3.75 Fetched: Feb. 16, 2025, 9:29 a.m., Published: Feb. 14, 2025, 8:53 a.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	myscada	model:	mypro
vendor:	siemens	model:	simatic pcs
vendor:	siemens	model:	ruggedcom
vendor:	siemens	model:	simatic s7-1200
vendor:	siemens	model:	talon tc
vendor:	siemens	model:	siemens simatic pcs
vendor:	siemens	model:	pcs neo
vendor:	siemens	model:	scalance
vendor:	siemens	model:	simatic
vendor:	siemens	model:	simatic pcs neo
vendor:	siemens	model:	siprotec
vendor:	siemens	model:	apogee pxc
vendor:	siemens	model:	siprotec 5
vendor:	siemens	model:	s7-1200 cpu
vendor:	siemens	model:	simatic s7-1200 cpu
vendor:	siemens	model:	teamcenter
vendor:	qardio	model:	qardioarm

RedNote App Security Flaw Exposes User Files on iOS and Android Devices Trust: 3.5 Fetched: Feb. 16, 2025, 9:28 a.m., Published: Feb. 13, 2025, 10:56 a.m.	Vulnerabilities: file reading issue

Affected products

External IDs

vendor:	google	model:	android
vendor:	wireshark	model:	wireshark

Apple's Emergency iOS Update: Zero-Day Vulnerability CVE-2025-24200 Actively Exploited Trust: 4.25 Fetched: Feb. 16, 2025, 9:27 a.m., Published: Feb. 14, 2025, midnight	Vulnerabilities: memory corruption, code execution

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	apple	model:	ipad
vendor:	apple	model:	software update

db:

NVD

ids:

CVE-2025-24200

Murdoc Botnet Exploits AVTECH Cameras and Huawei Routers \| SecureReading Trust: 3.75 Fetched: Feb. 16, 2025, 9:22 a.m., Published: Jan. 22, 2025, 12:59 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	trend micro	model:	security
vendor:	trend	model:	security
vendor:	huawei	model:	hg532
vendor:	huawei	model:	huawei
vendor:	four-faith	model:	four-faith

db:

NVD

ids:

CVE-2024-7029

Salt Typhoon Hackers Exploited 1000+ Cisco Devices to Gain Admin Access Trust: 4.75 Fetched: Feb. 16, 2025, 9:21 a.m., Published: Feb. 14, 2025, 8:21 a.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	ios xe software
vendor:	trend	model:	security

db:

NVD

ids:

CVE-2023-20198, CVE-2023-20273

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CVE-2025-0108) - Security Boulevard Trust: 4.75 Fetched: Feb. 16, 2025, 9:21 a.m., Published: Feb. 14, 2025, 3:30 a.m.	Vulnerabilities: authentication bypass

Affected products

External IDs

vendor:	palo	model:	networks
vendor:	palo	model:	pan-os
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	pan-os

db:

NVD

ids:

CVE-2025-0108

Fortinet Addresses Multiple Vulnerabilities in Major Security Update Related entries in the VARIoT vulnerabilities database: VAR-202210-0198 Trust: 5.5 Fetched: Feb. 16, 2025, 9:20 a.m., Published: Feb. 11, 2025, 6:09 p.m.	Vulnerabilities: command injection, path traversal, authentication bypass...

Affected products

External IDs

vendor:	node.js	model:	node.js
vendor:	fortigate	model:	fortios

db:

NVD

ids:

CVE-2024-40585, CVE-2024-40591, CVE-2024-46666, CVE-2024-33504, CVE-2023-37936, CVE-2025-24472, CVE-2024-35279, CVE-2022-40684, CVE-2023-40721, CVE-2024-52966, CVE-2024-55591

Cybersecurity Snapshot: February 7, 2025 Trust: 4.5 Fetched: Feb. 16, 2025, 9:20 a.m., Published: Feb. 7, 2025, 3 p.m.	Vulnerabilities: code execution, denial of service

Affected products

External IDs

vendor:

trend

model:

security

db:

NVD

ids:

CVE-2025-0683, CVE-2025-0626

Privacy Roundup: Week 6 of Year 2025 \| Avoid the Hack (avoidthehack!) Trust: 4.25 Fetched: Feb. 16, 2025, 9:19 a.m., Published: Feb. 9, 2025, 9:14 p.m.	Vulnerabilities: command injection, privilege escalation, authentication bypass...

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	wifi
vendor:	google	model:	google chrome
vendor:	google	model:	nexus
vendor:	google	model:	wi-fi router
vendor:	google	model:	pixel
vendor:	google	model:	android
vendor:	google	model:	wifi router
vendor:	cisco	model:	vpn client
vendor:	cisco	model:	nexus
vendor:	cisco	model:	routers
vendor:	cisco	model:	series
vendor:	cisco	model:	soho
vendor:	cisco	model:	router
vendor:	netgear	model:	router
vendor:	apple	model:	icloud
vendor:	apple	model:	installer
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2024-40891, CVE-2024-53104, CVE-2025-0890, CVE-2025-0445

Fix CVE-2025-1283: Dingtian DT-R0 Series Security Guide Trust: 4.0 Fetched: Feb. 16, 2025, 9:18 a.m., Published: Feb. 14, 2025, midnight	Vulnerabilities: authentication bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2025-1283

Surface Pro 7 gets new (February 13, 2025) firmware updates - SurfaceTip Trust: 3.0 Fetched: Feb. 16, 2025, 9:18 a.m., Published: Feb. 13, 2025, 5 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2022-29871

Wireless Security Testing Fundamentals - PenTesting.Org Trust: 3.75 Fetched: Feb. 16, 2025, 9:17 a.m., Published: -	Vulnerabilities: default credentials

Affected products

External IDs

vendor:	wireshark	model:	wireshark
vendor:	aircrack-ng	model:	aircrack-ng

Salt Typhoon Strikes: Over 1,000 Cisco Devices Compromised - Clear Infosec Trust: 4.75 Fetched: Feb. 16, 2025, 9:16 a.m., Published: Feb. 14, 2025, 12:37 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	ios xe software
vendor:	cisco	model:	routers

db:

NVD

ids:

CVE-2023-20198, CVE-2023-20273

Salt Typhoon Exploits Cisco Devices in Telco Infrastructure Trust: 3.5 Fetched: Feb. 16, 2025, 9:10 a.m., Published: Dec. 16, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	ios xe
vendor:	cisco	model:	routers

db:

NVD

ids:

CVE-2023-20198, CVE-2023-20273

Security considerations for edge devices (ITSM.80.101) - Canadian Centre for Cyber Security Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 5.25 Fetched: Feb. 16, 2025, 9:08 a.m., Published: Feb. 4, 2025, midnight	Vulnerabilities: privilege escalation, denial of service

Affected products

External IDs

vendor:	cisco	model:	routers
vendor:	cisco	model:	series
vendor:	cisco	model:	soho
vendor:	cisco	model:	router
vendor:	cisco	model:	cisco ios
vendor:	fortigate	model:	fortios

db:

NVD

ids:

CVE-2022-42475, CVE-2023-20198, CVE-2024-21762, CVE-2023-20273

Vulnerabilities Page Trust: 4.5 Fetched: Feb. 16, 2025, 9:07 a.m., Published: Feb. 11, 2025, 12:11 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	palo	model:	networks
vendor:	palo alto networks	model:	networks

Vulnerability Details Page Trust: 3.5 Fetched: Feb. 16, 2025, 9:06 a.m., Published: Feb. 11, 2025, 12:11 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	palo	model:	pan-os
vendor:	palo	model:	networks
vendor:	palo alto networks	model:	pan-os
vendor:	palo alto networks	model:	networks

VARIoT news about IoT security