Sign-up

VARIoT news about IoT security

CVE-2025-24994: Analyzing Windows Cross Device Service Vulnerability | Windows Forum

Trust: 5.5

Fetched: March 14, 2025, 9:11 a.m., Published: May 14, 2025, midnight
 Vulnerabilities: improper access control, privilege escalation
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2025-24994

CVE-2025-2189: Risk Identified In Tinxy Smart Devices

Trust: 4.75

Fetched: March 14, 2025, 9:11 a.m., Published: March 12, 2025, 11:24 a.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-2189

CVE-2025-24076: Critical Windows Cross Device Service Vulnerability | Windows Forum

Trust: 5.5

Fetched: March 14, 2025, 9:09 a.m., Published: May 14, 2025, midnight
 Vulnerabilities: improper access control, security bypass, privilege escalation
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2025-24076

Cisco IOS XR Software Vulnerability Allows Attackers to Execute Commands as Root

Trust: 5.75

Fetched: March 14, 2025, 9:09 a.m., Published: March 13, 2025, 4:17 a.m.
 Vulnerabilities: privilege escalation, command execution, code injection
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: nx-os
vendor: cisco model: nx-os software
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: ios xr
vendor: cisco model: cisco ios xr
db: NVD ids: CVE-2025-20138

Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack

Related entries in the VARIoT vulnerabilities database: VAR-202503-2100, VAR-202503-1168

Trust: 4.75

Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 1:27 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-13871, CVE-2024-13872

Siemens SINAMICS S200 Bootloader Vulnerability Let Attackers Compromise the Device

Trust: 3.75

Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 4:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: sinamics
db: NVD ids: CVE-2024-56336

Multiple Zoom Client Vulnerabilities Exposes Sensitive data

Trust: 5.5

Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 1:57 a.m.
 Vulnerabilities: buffer overflow, privilege escalation, memory corruption
Affected productsExternal IDs
vendor: zoom model: client
vendor: zoom model: zoom client
db: NVD ids: CVE-2025-0150, CVE-2025-0151, CVE-2025-27439, CVE-2025-27440, CVE-2025-0149

CISA Warns of Apple WebKit Out-of-Bounds Write Vulnerability Exploited in Wild

Trust: 4.75

Fetched: March 14, 2025, 9:07 a.m., Published: March 13, 2025, 4:21 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: ipad air
db: NVD ids: CVE-2025-24201

CVE-2024-44179 : Physical Access Vulnerability in Apple iOS and macOS Devices | SecurityVulnerability.io

Trust: 4.25

Fetched: March 12, 2025, 9:28 a.m., Published: March 10, 2025, 7:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2024-44179

CVE-2024-58082 : Linux Kernel Vulnerability in Nuvoton Media Device Initialization | SecurityVulnerability.io

Trust: 3.25

Fetched: March 12, 2025, 9:28 a.m., Published: March 6, 2025, 4:13 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-58082

Undocumented code could leave several smart home gadgets exposed

Trust: 5.0

Fetched: March 12, 2025, 9:26 a.m., Published: March 10, 2025, 1:55 p.m.
 Vulnerabilities: device impersonation
Affected productsExternal IDs
db: NVD ids: CVE-2025-27840

Apple Fixed Another Zero-day Security Vulnerability: Update Your Devices Now

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 3.75

Fetched: March 12, 2025, 9:25 a.m., Published: March 11, 2025, 9:07 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: ipad air
db: NVD ids: CVE-2025-24201, CVE-2025-24200, CVE-2025-24085

Cyble Sensors Detect Exploit Attempts On WordPress Plugins, Network Devices

Trust: 5.5

Fetched: March 12, 2025, 9:24 a.m., Published: March 11, 2025, 7:42 a.m.
 Vulnerabilities: information disclosure, command injection, path traversal...
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
vendor: korenix model: jetport
vendor: korenix model: jetport 5601
vendor: palo model: firewall
vendor: palo model: networks
vendor: palo model: pan-os
vendor: check point model: check point
vendor: check point model: express
db: NVD ids: CVE-2024-33575, CVE-2024-2876, CVE-2024-11303, CVE-2024-24919, CVE-2024-9593, CVE-2024-11972, CVE-2024-7593, CVE-2024-3400

2025 March KB5053598 KB5053602 Windows 11 Patch 7 Zero-Day Vulnerabilities And 57 Flaws HTMD Blog

Trust: 4.5

Fetched: March 12, 2025, 9:24 a.m., Published: March 11, 2025, 6:09 p.m.
 Vulnerabilities: code execution, information disclosure, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2025-24984, CVE-2025-24985, CVE-2025-26633, CVE-2025-24991, CVE-2025-24993, CVE-2025-26630, CVE-2025-24983

Security Researchers Warn of Vulnerabilities in Millions of IoT Devices - Softonic

Trust: 3.0

Fetched: March 12, 2025, 9:23 a.m., Published: March 12, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-27840

Apple patches 0-day exploited in “extremely sophisticated attack” - Ars Technica

Trust: 4.0

Fetched: March 12, 2025, 9:23 a.m., Published: March 11, 2025, 8:26 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: ipad air
db: NVD ids: CVE-2025-24201

Siemens RUGGEDCOM ROX Devices | CISA

Related entries in the VARIoT vulnerabilities database: VAR-202110-0522

Trust: 3.75

Fetched: March 12, 2025, 9:22 a.m., Published: Dec. 22, 2021, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: ruggedcom rox rx5000
vendor: siemens model: ruggedcom rox rx1510
vendor: siemens model: ruggedcom rox rx1500
vendor: siemens model: ruggedcom rox rx1524
vendor: siemens model: ruggedcom rox rx1511
vendor: siemens model: ruggedcom rox rx1512
vendor: siemens model: ruggedcom rox rx1536
vendor: siemens model: ruggedcom rox rx1400
vendor: siemens model: ruggedcom rox rx1501
vendor: siemens model: ruggedcom
vendor: siemens model: ruggedcom rox mx5000
db: NVD ids: CVE-2021-41546

Apple fixes security flaw allowing third-party access to locked devices | The Record from Recorded Future News

Trust: 3.75

Fetched: March 11, 2025, 9:30 a.m., Published: Feb. 11, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: ipad air
vendor: apple model: iphone
db: NVD ids: CVE-2025-24200

Critical DrayTek Router Vulnerabilities Expose Devices to RCE Attacks

Related entries in the VARIoT vulnerabilities database: VAR-202502-2583, VAR-202502-3730, VAR-202502-3527, VAR-202502-3343, VAR-202502-2174

Trust: 4.5

Fetched: March 11, 2025, 9:30 a.m., Published: March 7, 2025, 1:26 p.m.
 Vulnerabilities: code execution, integer overflow, buffer overflow...
Affected productsExternal IDs
vendor: draytek model: routers
vendor: draytek model: vigor
vendor: draytek model: draytek routers
db: NVD ids: CVE-2024-41340, CVE-2024-41336, CVE-2024-41338, CVE-2024-51139, CVE-2024-41339, CVE-2024-41335, CVE-2024-51138

Mobile Security with Device Integrity: Protecting Against Cyber Threats

Trust: 3.75

Fetched: March 11, 2025, 9:26 a.m., Published: March 10, 2025, 1:57 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: quick heal model: quick heal