Sign-up

VARIoT news about IoT security

Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks” | Malwarebytes

Trust: 3.75

Fetched: March 18, 2025, 9:06 a.m., Published: March 12, 2025, 5:07 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: ipad air
vendor: apple model: webkit
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: software update
vendor: apple model: iphone
vendor: apple model: safari
db: NVD ids: CVE-2025-24201

Siemens SINAMICS S200 Bootloader Vulnerability Allows Attackers to Compromise the Device - Rewterz

Trust: 3.75

Fetched: March 18, 2025, 9:04 a.m., Published: March 16, 2025, 11:10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siemens model: sinamics
db: NVD ids: CVE-2024-56336

Marco Ortisi - Vulnerability Research and Exploitation on Edge Devices | defcontrainings

Trust: 3.25

Fetched: March 18, 2025, 9:04 a.m., Published: March 18, 2025, midnight
 Vulnerabilities: command injection, sql injection
Affected productsExternal IDs
vendor: citrix model: netscaler
vendor: sophos model: mobile
vendor: sophos model: firewall

Weekly Threat Landscape Digest - Week 9 - HawkEye

Related entries in the VARIoT vulnerabilities database: VAR-202304-1067

Trust: 4.25

Fetched: March 16, 2025, 9:36 a.m., Published: Feb. 28, 2025, 6:59 p.m.
 Vulnerabilities: privilege escalation, improper access control, information disclosure...
Affected productsExternal IDs
vendor: synology model: drive
vendor: apple model: macos
vendor: apple model: watch
vendor: asus model: routers
vendor: asus model: asus
vendor: rockwell automation model: automation powerflex
vendor: moxa model: pt-7828 series
vendor: moxa model: pt-7728
vendor: google model: android
vendor: google model: nexus
vendor: cisco model: nexus 3000
vendor: cisco model: cisco small business
vendor: cisco model: series
vendor: cisco model: routers
vendor: cisco model: nx-os
vendor: cisco model: meeting
vendor: cisco model: meeting app
vendor: cisco model: nexus
vendor: cisco model: series switches
vendor: cisco model: small business
vendor: rockwell model: automation powerflex
vendor: huawei model: huawei
db: NVD ids: CVE-2024-9404, CVE-2024-51505, CVE-2023-20118, CVE-2025-25279, CVE-2025-20111, CVE-2024-12510, CVE-2024-39327, CVE-2024-39328, CVE-2025-24989, CVE-2025-24928, CVE-2024-0148, CVE-2025-1128, CVE-2025-27113, CVE-2025-27364, CVE-2025-24490, CVE-2024-4464, CVE-2024-12511, CVE-2024-56171, CVE-2025-0631, CVE-2025-20051

CVE-2025-27840: Vulnerability Exploitation in Espressif ESP32 Bluetooth Chips Can Lead to Unauthorized Access to Devices - Source: socprime.com - CISO2CISO.COM & CYBER SECURITY GROUP

Trust: 3.5

Fetched: March 16, 2025, 9:36 a.m., Published: March 12, 2025, 6:04 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: motorola model: droid
vendor: motorola model: motorola
vendor: motorola model: razr hd
db: NVD ids: CVE-2025-27840

A vulnerability in the SecureROM of some Apple devices... · CVE-2019-8900 · GitHub Advisory Database · GitHub

Trust: 3.0

Fetched: March 16, 2025, 9:35 a.m., Published: Feb. 22, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2019-8900

Update Canonical Ubuntu Desktop: USN-7345-1: .NET vulnerability

Trust: 3.25

Fetched: March 16, 2025, 9:34 a.m., Published: Jan. 16, 7345, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Critical Vulnerabilities in Keysight Ixia Vision: Essential Insights for Windows Admins | Windows Forum

Trust: 4.5

Fetched: March 16, 2025, 9:34 a.m., Published: May 16, 2025, midnight
 Vulnerabilities: privilege escalation, path traversal, buffer overflow...
Affected productsExternal IDs
db: NVD ids: CVE-2025-21095, CVE-2025-23416, CVE-2025-24521, CVE-2025-24494

CVE-2025-26312 : CAPTCHA Bypass Vulnerability in SendQuick Entera Devices | SecurityVulnerability.io

Trust: 3.25

Fetched: March 16, 2025, 9:33 a.m., Published: March 14, 2025, 6:15 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-26312

Edimax Camera RCE Vulnerability Exploited to Spread Mirai Malware

Related entries in the VARIoT vulnerabilities database: VAR-202407-2448

Trust: 4.75

Fetched: March 16, 2025, 9:33 a.m., Published: March 14, 2025, 12:35 p.m.
 Vulnerabilities: default credentials, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-7214, CVE-2025-1316

Tenda AC7 Routers Vulnerability Let Attackers Gain Root Shell With Malicious Payload

Trust: 4.25

Fetched: March 16, 2025, 9:33 a.m., Published: March 13, 2025, 10:24 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: tenda model: router

Apache Tomcat Vulnerability Exposes Servers to RCE Attacks

Trust: 4.0

Fetched: March 16, 2025, 9:32 a.m., Published: March 11, 2025, 9:18 a.m.
 Vulnerabilities: privilege escalation, path traversal, information disclosure...
Affected productsExternal IDs
db: NVD ids: CVE-2024-56337, CVE-2024-50379, CVE-2025-24813

Apache Pinot Vulnerability Let Attackers Bypass Authentication

Trust: 5.5

Fetched: March 16, 2025, 9:32 a.m., Published: March 12, 2025, 12:24 a.m.
 Vulnerabilities: privilege escalation, script execution, authentication bypass...
Affected productsExternal IDs
vendor: trend model: security
vendor: trend micro model: security
db: NVD ids: CVE-2024-56325, CVE-2024-48721, CVE-2024-35253

Microsoft March 2025 Patch Tuesday: Fixes for 57 Vulnerabilities

Trust: 3.0

Fetched: March 16, 2025, 9:31 a.m., Published: March 12, 2025, 9:31 a.m.
 Vulnerabilities: security feature bypass, information disclosure, feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2025-24055, CVE-2025-24988, CVE-2025-21180, CVE-2025-24076, CVE-2025-26645, CVE-2025-24081, CVE-2025-25008, CVE-2025-24072, CVE-2025-24048, CVE-2025-24991, CVE-2025-26633, CVE-2025-24044, CVE-2025-24064, CVE-2025-24054, CVE-2025-24993, CVE-2025-24984, CVE-2025-24045, CVE-2025-24992, CVE-2025-26631, CVE-2025-24057, CVE-2025-24056, CVE-2025-25003, CVE-2025-24995, CVE-2025-24043, CVE-2025-24986, CVE-2025-24035, CVE-2025-24078, CVE-2025-24049, CVE-2025-24080, CVE-2025-24050, CVE-2025-24996, CVE-2025-24075, CVE-2025-24997, CVE-2025-24983, CVE-2025-24077, CVE-2025-24079, CVE-2025-24067, CVE-2025-24082, CVE-2025-24046, CVE-2025-24994, CVE-2025-24059, CVE-2025-24985, CVE-2025-26627, CVE-2025-26630, CVE-2025-24998, CVE-2025-21199, CVE-2025-24070, CVE-2025-21247, CVE-2025-24083, CVE-2025-24051, CVE-2025-24084, CVE-2025-24987, CVE-2025-24066, CVE-2025-24061, CVE-2025-26629, CVE-2024-9157, CVE-2025-24071

Google Patches Two Actively Exploited Zero-Day Flaws in Android

Trust: 5.0

Fetched: March 16, 2025, 9:19 a.m., Published: March 4, 2025, 9:34 a.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-43093, CVE-2024-50302

Dell Hybrid Client - pakiet dodatkowy z poprawkami dotyczącymi luki w zabezpieczeniach narzędzia polkit | Szczegóły sterownika | Dell Polska

Trust: 3.0

Fetched: March 16, 2025, 9:17 a.m., Published: March 1, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: latitude

CVE-2021-3438: 16 Years In Hiding - Millions of Printers Worldwide Vulnerable - SentinelLabs

Trust: 3.5

Fetched: March 16, 2025, 9:15 a.m., Published: Aug. 10, 2024, 3:28 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: printers
vendor: samsung model: printer
vendor: samsung model: note
vendor: samsung model: samsung
db: NVD ids: CVE-2021-3438

Multiple Vulnerabilities in Fortinet Products Could Allow for Remote Code Execution

Trust: 3.0

Fetched: March 16, 2025, 9:07 a.m., Published: March 11, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs

03/05/25: Critical, 0-Day, and Other Vulnerabilities in Android Devices | UCSF IT

Trust: 5.25

Fetched: March 16, 2025, 9:07 a.m., Published: March 5, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android

BrakTooth Proof of Concept Tool Demonstrates Bluetooth Vulnerabilities | CISA

Trust: 3.25

Fetched: March 16, 2025, 9:06 a.m., Published: Aug. 16, 2021, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs