Sign-up

VARIoT news about IoT security

Bluetooth vulnerabilities expose devices to remote hacking risks - Tech Digest

Trust: 3.75

Fetched: March 14, 2025, 9:14 a.m., Published: March 12, 2025, 9:40 a.m.
 Vulnerabilities: device impersonation
Affected productsExternal IDs

Cisco IOS XR Software for ASR 9000 Series Routers Layer 3 Multicast Denial of Service Vulnerability

Trust: 3.75

Fetched: March 14, 2025, 9:14 a.m., Published: March 12, 2025, 3:54 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xr software
vendor: cisco model: series routers
vendor: cisco model: routers
vendor: cisco model: cisco ios
vendor: cisco model: ios xr
vendor: cisco model: series
vendor: cisco model: cisco ios xr

Silk Typhoon Targets IT Supply Chain and Network Devices - Eclypsium | Supply Chain Security for the Modern Enterprise

Trust: 3.75

Fetched: March 14, 2025, 9:13 a.m., Published: March 13, 2025, 5 p.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-0282

CVE-2025-0117 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Trust: 4.75

Fetched: March 14, 2025, 9:12 a.m., Published: March 12, 2025, 4 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: palo model: networks
vendor: paloaltonetworks model: networks
vendor: palo alto networks model: networks
db: NVD ids: CVE-2025-0117

CVE-2025-24994: Analyzing Windows Cross Device Service Vulnerability | Windows Forum

Trust: 5.5

Fetched: March 14, 2025, 9:11 a.m., Published: May 14, 2025, midnight
 Vulnerabilities: improper access control, privilege escalation
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2025-24994

CVE-2025-2189: Risk Identified In Tinxy Smart Devices

Trust: 4.75

Fetched: March 14, 2025, 9:11 a.m., Published: March 12, 2025, 11:24 a.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-2189

CVE-2025-24076: Critical Windows Cross Device Service Vulnerability | Windows Forum

Trust: 5.5

Fetched: March 14, 2025, 9:09 a.m., Published: May 14, 2025, midnight
 Vulnerabilities: improper access control, security bypass, privilege escalation
Affected productsExternal IDs
vendor: trend model: security
db: NVD ids: CVE-2025-24076

Cisco IOS XR Software Vulnerability Allows Attackers to Execute Commands as Root

Trust: 5.75

Fetched: March 14, 2025, 9:09 a.m., Published: March 13, 2025, 4:17 a.m.
 Vulnerabilities: privilege escalation, command execution, code injection
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: nx-os
vendor: cisco model: nx-os software
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: ios xr
vendor: cisco model: cisco ios xr
db: NVD ids: CVE-2025-20138

Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack

Related entries in the VARIoT vulnerabilities database: VAR-202503-2100, VAR-202503-1168

Trust: 4.75

Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 1:27 p.m.
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-13871, CVE-2024-13872

Siemens SINAMICS S200 Bootloader Vulnerability Let Attackers Compromise the Device

Trust: 3.75

Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 4:03 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: sinamics
db: NVD ids: CVE-2024-56336

Multiple Zoom Client Vulnerabilities Exposes Sensitive data

Trust: 5.5

Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 1:57 a.m.
 Vulnerabilities: buffer overflow, privilege escalation, memory corruption
Affected productsExternal IDs
vendor: zoom model: client
vendor: zoom model: zoom client
db: NVD ids: CVE-2025-0150, CVE-2025-0151, CVE-2025-27439, CVE-2025-27440, CVE-2025-0149

CISA Warns of Apple WebKit Out-of-Bounds Write Vulnerability Exploited in Wild

Trust: 4.75

Fetched: March 14, 2025, 9:07 a.m., Published: March 13, 2025, 4:21 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: webkit
vendor: apple model: watch
vendor: apple model: macos
vendor: apple model: ipad air
db: NVD ids: CVE-2025-24201

CVE-2024-44179 : Physical Access Vulnerability in Apple iOS and macOS Devices | SecurityVulnerability.io

Trust: 4.25

Fetched: March 12, 2025, 9:28 a.m., Published: March 10, 2025, 7:11 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2024-44179

CVE-2024-58082 : Linux Kernel Vulnerability in Nuvoton Media Device Initialization | SecurityVulnerability.io

Trust: 3.25

Fetched: March 12, 2025, 9:28 a.m., Published: March 6, 2025, 4:13 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-58082

Undocumented code could leave several smart home gadgets exposed

Trust: 5.0

Fetched: March 12, 2025, 9:26 a.m., Published: March 10, 2025, 1:55 p.m.
 Vulnerabilities: device impersonation
Affected productsExternal IDs
db: NVD ids: CVE-2025-27840

Apple Fixed Another Zero-day Security Vulnerability: Update Your Devices Now

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 3.75

Fetched: March 12, 2025, 9:25 a.m., Published: March 11, 2025, 9:07 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: macos
vendor: apple model: iphone
vendor: apple model: ipad
vendor: apple model: ipad air
db: NVD ids: CVE-2025-24201, CVE-2025-24200, CVE-2025-24085

Cyble Sensors Detect Exploit Attempts On WordPress Plugins, Network Devices

Trust: 5.5

Fetched: March 12, 2025, 9:24 a.m., Published: March 11, 2025, 7:42 a.m.
 Vulnerabilities: information disclosure, command injection, path traversal...
Affected productsExternal IDs
vendor: palo alto networks model: firewall
vendor: palo alto networks model: networks
vendor: palo alto networks model: pan-os
vendor: korenix model: jetport
vendor: korenix model: jetport 5601
vendor: palo model: firewall
vendor: palo model: networks
vendor: palo model: pan-os
vendor: check point model: check point
vendor: check point model: express
db: NVD ids: CVE-2024-33575, CVE-2024-2876, CVE-2024-11303, CVE-2024-24919, CVE-2024-9593, CVE-2024-11972, CVE-2024-7593, CVE-2024-3400

2025 March KB5053598 KB5053602 Windows 11 Patch 7 Zero-Day Vulnerabilities And 57 Flaws HTMD Blog

Trust: 4.5

Fetched: March 12, 2025, 9:24 a.m., Published: March 11, 2025, 6:09 p.m.
 Vulnerabilities: code execution, information disclosure, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2025-24984, CVE-2025-24985, CVE-2025-26633, CVE-2025-24991, CVE-2025-24993, CVE-2025-26630, CVE-2025-24983

Security Researchers Warn of Vulnerabilities in Millions of IoT Devices - Softonic

Trust: 3.0

Fetched: March 12, 2025, 9:23 a.m., Published: March 12, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-27840

Apple patches 0-day exploited in “extremely sophisticated attack” - Ars Technica

Trust: 4.0

Fetched: March 12, 2025, 9:23 a.m., Published: March 11, 2025, 8:26 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: webkit
vendor: apple model: safari
vendor: apple model: ipad
vendor: apple model: ipad air
db: NVD ids: CVE-2025-24201