Sign-up

VARIoT news about IoT security

LG WebOS TV Vulnerability Let Attackers Bypass Authentication and Enable Full Device Takeover

Trust: 3.25

Fetched: Sept. 19, 2025, 9:54 a.m., Published: Sept. 16, 2025, 12:38 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs

Surface Laptop 5 September 2025 update is now available to install via Windows Update

Trust: 4.75

Fetched: Sept. 19, 2025, 9:52 a.m., Published: Sept. 16, 2025, 4 a.m.
 Vulnerabilities: denial of service, application crash, system crash...
Affected productsExternal IDs
db: NVD ids: CVE-2022-38102, CVE-2024-44074, CVE-2022-36392, CVE-2024-21864

Critical Vulnerabilities Discovered in Planet Technology Industrial Cellular Gateways

Trust: 6.0

Fetched: Sept. 19, 2025, 9:51 a.m., Published: Sept. 18, 2025, 12:26 a.m.
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-9971, CVE-2025-9972

A Critical Zero-Click WhatsApp Flaw, CVE-2025-55177, Was Exploited in Zero-Day Attacks

Trust: 5.0

Fetched: Sept. 19, 2025, 9:51 a.m., Published: Aug. 29, 2025, 5:58 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2025-55177, CVE-2025-43300

CVE-2022-50419 - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times - SecAlerts

Trust: 3.0

Fetched: Sept. 19, 2025, 9:51 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-50419

CVE-2023-53436 - scsi: snic: Fix possible memory leak if device_add() fails - SecAlerts

Trust: 4.25

Fetched: Sept. 19, 2025, 9:50 a.m., Published: -
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2023-53436

Samsung Patches Critical Zero-Day Vulnerability: Essential Security Update for Android Devices - Businesstechweekly.com

Trust: 3.0

Fetched: Sept. 19, 2025, 9:50 a.m., Published: Sept. 18, 2025, 3:02 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Cisco IOS XR ARP Broadcast Storm Denial of Service Vulnerability

Trust: 3.75

Fetched: Sept. 19, 2025, 9:49 a.m., Published: Sept. 10, 2025, 3:54 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xr
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios

Surface Go 3 September 2025 update is now rolling out

Trust: 3.75

Fetched: Sept. 19, 2025, 9:48 a.m., Published: Sept. 16, 2025, 4 a.m.
 Vulnerabilities: denial of service, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2024-44074, CVE-2022-36392

Issue 280: Solar device ATO attacks, Smart TVs & Dumb APIs, Password-reset & API bugs, 2025 Developer Survey - API Security News

Trust: 4.5

Fetched: Sept. 19, 2025, 9:47 a.m., Published: Sept. 18, 2025, 1:27 p.m.
 Vulnerabilities: directory traversal, authorization bug
Affected productsExternal IDs

Critical WatchGuard Vulnerability Allows Unauthenticated Attacker to Execute Arbitrary Code

Trust: 3.75

Fetched: Sept. 19, 2025, 9:46 a.m., Published: Sept. 17, 2025, 2 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: fireware
vendor: watchguard model: firebox
db: NVD ids: CVE-2025-9242

WeOS 5 ESP Vulnerability CVE-2025-46419 - Patch to 5.24.0 | Windows Forum

Trust: 4.5

Fetched: Sept. 19, 2025, 9:46 a.m., Published: Sept. 18, 2025, 5:12 p.m.
 Vulnerabilities: service disruption, improper validation
Affected productsExternal IDs
vendor: westermo model: weos
db: NVD ids: CVE-2025-46419

Dover Fueling Solutions ProGauge MagLink LX4 Devices | CISA

Trust: 4.0

Fetched: Sept. 19, 2025, 9:45 a.m., Published: Sept. 1, 2025, midnight
 Vulnerabilities: integer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-55068, CVE-2025-54807, CVE-2025-30519

CVE-2025-41690 : Bluetooth Device Vulnerability Exposing Maintenance User Passwords in Data Logging Systems

Trust: 3.0

Fetched: Sept. 19, 2025, 9:45 a.m., Published: Sept. 2, 2025, 8:12 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-41690

CVE-2025-9242: Critical WatchGuard Flaw Allows Remote Code Execution

Trust: 4.75

Fetched: Sept. 19, 2025, 9:43 a.m., Published: Sept. 17, 2025, 9:39 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: fireware
vendor: watchguard model: watchguard fireware
vendor: watchguard model: firebox
db: NVD ids: CVE-2025-9242

Critical WatchGuard Vulnerability Lets Unauthenticated Attackers Run Arbitrary Code

Trust: 4.75

Fetched: Sept. 19, 2025, 9:40 a.m., Published: Sept. 18, 2025, 7:43 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: fireware
vendor: watchguard model: firebox
db: NVD ids: CVE-2025-9242

Apple backports patch to older kit after 0-day exploitation • The Register

Trust: 4.5

Fetched: Sept. 17, 2025, 12:28 p.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: ipad
vendor: samsung model: samsung
db: NVD ids: CVE-2025-55177, CVE-2025-21043, CVE-2025-43300

LG WebOS TV Vulnerability Enables Full Device Takeover by Bypassing Authentication

Trust: 4.25

Fetched: Sept. 17, 2025, 12:25 p.m., Published: Sept. 16, 2025, 1:08 p.m.
 Vulnerabilities: path traversal
Affected productsExternal IDs

Are Cisco ASA Devices About To Be Attacked? - Eclypsium | Supply Chain Security for the Modern Enterprise

Related entries in the VARIoT vulnerabilities database: VAR-201403-0466, VAR-201806-1026, VAR-202110-1351, VAR-202007-1057

Trust: 5.25

Fetched: Sept. 17, 2025, 12:22 p.m., Published: Sept. 16, 2025, 4:45 p.m.
 Vulnerabilities: information disclosure, input validation flaw, denial of service...
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software
vendor: cisco model: technical support
vendor: cisco model: cisco adaptive security appliance
vendor: cisco model: firepower
vendor: cisco model: firepower threat defense
db: NVD ids: CVE-2023-20269, CVE-2014-2120, CVE-2022-20829, CVE-2024-20353, CVE-2018-0296, CVE-2024-20481, CVE-2021-40117, CVE-2020-3452

Access Blocked - SecNews.gr

Trust: 3.25

Fetched: Sept. 17, 2025, 12:20 p.m., Published: -
 Vulnerabilities: sql injection
Affected productsExternal IDs