Sign-up

VARIoT news about IoT security

Samsung device users urged to update software due to critical security flaw | HardwareZone Forums

Trust: 4.0

Fetched: Sept. 17, 2025, 12:18 p.m., Published: May 17, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: galaxy
db: NVD ids: CVE-2025-21043

LG WebOS TV Path Traversal, Authentication Bypass and Full Device Takeover - SSD Secure Disclosure

Trust: 3.5

Fetched: Sept. 17, 2025, 12:17 p.m., Published: Sept. 16, 2025, 9:22 a.m.
 Vulnerabilities: authentication bypass, path traversal
Affected productsExternal IDs

Samsung Patches Zero-Day Exploited Against Android Users - SecurityWeek

Trust: 3.25

Fetched: Sept. 17, 2025, 12:13 p.m., Published: Sept. 15, 2025, 2:27 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung

Google Confirms Android Attacks-No Fix For 1 Billion Phones

Trust: 4.75

Fetched: Sept. 17, 2025, 12:13 p.m., Published: Sept. 6, 2025, 4:01 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: chrome
vendor: google model: android
db: NVD ids: CVE-2025-21483, CVE-2025-48543, CVE-2025-48539, CVE-2025-21450, CVE-2025-27034, CVE-2025-38352

Tradurre immagini - Android - Guida di Google Translate

Trust: 3.0

Fetched: Sept. 17, 2025, 10:04 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Traduzione vocale - Computer - Guida di Google Translate

Trust: 3.25

Fetched: Sept. 17, 2025, 10:03 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome

Wszystko o Google: usługi, technologia i informacje o firmie - About Google

Trust: 3.0

Fetched: Sept. 17, 2025, 9:19 a.m., Published: Sept. 10, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel

Cisco fixes high-severity IOS XR flaws enabling image bypass and DoS

Trust: 4.75

Fetched: Sept. 16, 2025, 9:36 a.m., Published: Sept. 12, 2025, 2:17 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: ios xr software
db: NVD ids: CVE-2025-20159, CVE-2025-20340, CVE-2025-20248

Remediate vulnerabilities for CVE-2025-5777 | NetScaler Application Delivery Management 14.1

Related entries in the VARIoT vulnerabilities database: VAR-202108-0265, VAR-202106-0491, VAR-202112-0296, VAR-202108-0266

Trust: 3.0

Fetched: Sept. 16, 2025, 9:35 a.m., Published: Sept. 16, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-5777, CVE-2021-22920, CVE-2020-8300, CVE-2021-22956, CVE-2021-22927

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Sept. 16, 2025, 9:34 a.m., Published: Sept. 1, 2025, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access

Trust: 3.75

Fetched: Sept. 16, 2025, 9:33 a.m., Published: Sept. 7, 2010, 8:25 p.m.
 Vulnerabilities: improper access control, access control vulnerability
Affected productsExternal IDs

CVE-2022-50300 - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk - SecAlerts

Trust: 3.25

Fetched: Sept. 16, 2025, 9:30 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2022-50300

Cisco Identity Services Engine Arbitrary File Upload Vulnerability - Cisco

Trust: 5.0

Fetched: Sept. 16, 2025, 9:29 a.m., Published: Aug. 20, 2025, 11:59 a.m.
 Vulnerabilities: file upload vulnerability
Affected productsExternal IDs
vendor: cisco model: identity services engine
vendor: cisco model: cisco identity services engine

Cisco IOS XR ARP Storm DoS (CVE-2025-20340): Brief Summary and Technical Details - ZeroPath Blog | ZeroPath

Trust: 4.5

Fetched: Sept. 16, 2025, 9:28 a.m., Published: Sept. 10, 2025, midnight
 Vulnerabilities: denial of service, resource exhaustion, privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: routers
vendor: cisco model: ncs series
vendor: cisco model: ios xr
vendor: cisco model: ios xr software
vendor: cisco model: series
vendor: cisco model: cisco ios
vendor: cisco model: router
db: NVD ids: CVE-2025-20138, CVE-2025-20340, CVE-2025-20115, CVE-2025-20154

Cisco Patches High-Severity IOS XR Vulnerabilities - SecurityWeek

Trust: 3.25

Fetched: Sept. 16, 2025, 9:28 a.m., Published: Sept. 11, 2025, 2:31 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xr

CVE-2023-53256 - firmware: arm_ffa: Fix FFA device names for logical partitions - SecAlerts

Trust: 3.0

Fetched: Sept. 16, 2025, 9:25 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-53256

CVE-2022-50314 - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() - SecAlerts

Trust: 4.0

Fetched: Sept. 16, 2025, 9:25 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2022-50314

Samsung’s image library flaw opens a zero-click backdoor | CSO Online

Trust: 5.0

Fetched: Sept. 16, 2025, 9:24 a.m., Published: Sept. 15, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: samsung model: gallery
vendor: samsung model: samsung
vendor: samsung model: knox
db: NVD ids: CVE-2025-21043

Get all vulnerabilities - Microsoft Defender for Endpoint | Microsoft Learn

Trust: 5.75

Fetched: Sept. 16, 2025, 9:24 a.m., Published: March 18, 2025, midnight
 Vulnerabilities: security bypass
Affected productsExternal IDs
vendor: google model: google chrome
vendor: google model: chrome
db: NVD ids: CVE-2024-7256

CVE-2023-53174 - scsi: core: Fix possible memory leak if device_add() fails - SecAlerts

Trust: 4.0

Fetched: Sept. 16, 2025, 9:24 a.m., Published: -
 Vulnerabilities: memory leak
Affected productsExternal IDs
db: NVD ids: CVE-2023-53174