Sign-up

VARIoT news about IoT security

Zero-day vulnerabilities: the real threat behind Netflix’s “Zero Day”

Trust: 3.0

Fetched: April 16, 2025, 9:28 a.m., Published: March 19, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: avast model: antivirus

CVE-2025-30512 : Remote Configuration Vulnerability in Devices Affected by Vendor Products | SecurityVulnerability.io

Related entries in the VARIoT vulnerabilities database: VAR-202504-0985

Trust: 3.25

Fetched: April 16, 2025, 9:27 a.m., Published: April 15, 2025, 9:45 p.m.
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-30512

CVE-2025-30514 : Information Disclosure Vulnerability in Smart Device Management Software by a Major Vendor | SecurityVulnerability.io

Trust: 3.25

Fetched: April 16, 2025, 9:26 a.m., Published: April 15, 2025, 9:05 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-30514

CVE-2025-31654 : Information Disclosure Vulnerability in Smart Home Device Management | SecurityVulnerability.io

Trust: 4.25

Fetched: April 16, 2025, 9:25 a.m., Published: April 15, 2025, 9:07 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-31654

DSA-2025-151: Security Update for Dell Trusted Device for Multiple Vulnerabilities | Dell US

Trust: 3.0

Fetched: April 16, 2025, 9:24 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-29984, CVE-2025-29983

CVE-2025-29223 Command Injection Vulnerability in Linksys E560...

Trust: 4.5

Fetched: April 16, 2025, 9:24 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-29223

Siemens Industrial Edge Device Kit Vulnerability: Critical Security Risks, Impact, and Mitigation St | Windows Forum

Trust: 3.75

Fetched: April 16, 2025, 9:23 a.m., Published: May 16, 2025, midnight
 Vulnerabilities: authentication flaw
Affected productsExternal IDs
vendor: trend model: security

Microsoft just patched 134 Windows security flaws including a zero-day used by hackers - update your PC right now | Tom's Guide

Trust: 3.0

Fetched: April 16, 2025, 9:23 a.m., Published: April 8, 2025, 9:44 p.m.
 Vulnerabilities: information disclosure, denial of service, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2025-29824

Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devices - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.5

Fetched: April 15, 2025, 9:36 a.m., Published: April 11, 2025, 5:46 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-42475, CVE-2024-21762, CVE-2023-27997

Critical Vulnerability in Siemens Industrial Edge Devices: CVE-2024-54092

Trust: 3.75

Fetched: April 15, 2025, 9:34 a.m., Published: April 10, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-54092

Threats to Information Security | GeeksforGeeks

Trust: 3.0

Fetched: April 15, 2025, 9:31 a.m., Published: June 19, 2018, 11:45 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

3 Zero-Day Vulnerabilities backported & fixed in Apple Devices - Intrucept

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 5.75

Fetched: April 15, 2025, 9:27 a.m., Published: April 2, 2025, 12:42 p.m.
 Vulnerabilities: code execution, security bypass, authorization vulnerability...
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: tvos
vendor: apple model: ipad
vendor: apple model: watch
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: apple tv
vendor: apple model: macos
vendor: apple model: watchos
db: NVD ids: CVE-2025-24085, CVE-2025-24200, CVE-2025-24201

Protecting Your Network: How To Secure Perimeter Devices From Ransomware

Trust: 4.75

Fetched: April 15, 2025, 9:26 a.m., Published: April 12, 2025, 2:30 a.m.
 Vulnerabilities: code execution, default credentials
Affected productsExternal IDs
vendor: sonicwall model: remote access
db: NVD ids: CVE-2024-21887

Security Vulnerability Detection and Defense of Smart Home Systems Based on the Internet of Things | SpringerLink

Trust: 4.0

Fetched: April 15, 2025, 9:23 a.m., Published: April 15, 2025, midnight
 Vulnerabilities: -

FortiSwitch vulnerability may give attackers control over vulnerable devices (CVE-2024-48887) - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202504-1837

Trust: 3.25

Fetched: April 15, 2025, 9:22 a.m., Published: April 10, 2025, 10:09 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-48887

Galaxy S24 Vulnerability Poses Risk of Unauthorized File Access

Trust: 4.75

Fetched: April 15, 2025, 9:20 a.m., Published: April 15, 2025, 5:31 a.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
db: NVD ids: CVE-2024-49421

Siemens SENTRON 7KT PAC1260 Vulnerabilities: Steps for Mitigation and Security | Windows Forum

Related entries in the VARIoT vulnerabilities database: VAR-202504-0724, VAR-202504-0721, VAR-202504-0722, VAR-202504-0725, VAR-202504-0719, VAR-202504-0723, VAR-202504-0717, VAR-202504-0720, VAR-202504-0718

Trust: 3.5

Fetched: April 15, 2025, 9:15 a.m., Published: April 7, 2025, midnight
 Vulnerabilities: cross-site request forgery, code execution, request forgery...
Affected productsExternal IDs
db: NVD ids: CVE-2024-41788, CVE-2024-41793, CVE-2024-41792, CVE-2024-41795, CVE-2024-41796, CVE-2024-41794, CVE-2024-41790, CVE-2024-41791, CVE-2024-41789

April 2025 Android Update: Actively Exploited Kernel Bugs and Remote Privilege Escalation Threat - SOCRadar® Cyber Intelligence Inc.

Trust: 5.5

Fetched: April 15, 2025, 9:14 a.m., Published: April 8, 2025, 11:45 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2025-26416, CVE-2024-53104, CVE-2024-53197, CVE-2024-53150, CVE-2024-50302

Critical FortiSwitch Vulnerability Let Attackers Remotely Change Admin Passwords | Black Hat Ethical Hacking

Related entries in the VARIoT vulnerabilities database: VAR-202504-1837

Trust: 3.25

Fetched: April 15, 2025, 9:14 a.m., Published: April 10, 2025, 8:54 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-48887

Is Ivanti the problem or a symptom of a systemic issue with network devices? | CyberScoop

Trust: 3.5

Fetched: April 15, 2025, 9:12 a.m., Published: April 14, 2025, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: nexus
vendor: palo model: networks
vendor: palo model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: firewall
vendor: cisco model: nexus
vendor: cisco model: router
vendor: cisco model: routers
vendor: citrix model: gateway
db: NVD ids: CVE-2025-22457