VARIoT latest news about IoT security

Fortinet Addresses Multiple Vulnerabilities in Major Security Update Related entries in the VARIoT vulnerabilities database: VAR-202210-0198 Trust: 5.5 Fetched: Feb. 16, 2025, 9:20 a.m., Published: Feb. 11, 2025, 6:09 p.m.	Vulnerabilities: command injection, path traversal, authentication bypass...

Affected products

External IDs

vendor:	node.js	model:	node.js
vendor:	fortigate	model:	fortios

db:

NVD

ids:

CVE-2024-40585, CVE-2024-40591, CVE-2024-46666, CVE-2024-33504, CVE-2023-37936, CVE-2025-24472, CVE-2024-35279, CVE-2022-40684, CVE-2023-40721, CVE-2024-52966, CVE-2024-55591

Cybersecurity Snapshot: February 7, 2025 Trust: 4.5 Fetched: Feb. 16, 2025, 9:20 a.m., Published: Feb. 7, 2025, 3 p.m.	Vulnerabilities: code execution, denial of service

Affected products

External IDs

vendor:

trend

model:

security

db:

NVD

ids:

CVE-2025-0683, CVE-2025-0626

Privacy Roundup: Week 6 of Year 2025 \| Avoid the Hack (avoidthehack!) Trust: 4.25 Fetched: Feb. 16, 2025, 9:19 a.m., Published: Feb. 9, 2025, 9:14 p.m.	Vulnerabilities: command injection, privilege escalation, authentication bypass...

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	google	model:	wifi
vendor:	google	model:	google chrome
vendor:	google	model:	nexus
vendor:	google	model:	wi-fi router
vendor:	google	model:	pixel
vendor:	google	model:	android
vendor:	google	model:	wifi router
vendor:	cisco	model:	vpn client
vendor:	cisco	model:	nexus
vendor:	cisco	model:	routers
vendor:	cisco	model:	series
vendor:	cisco	model:	soho
vendor:	cisco	model:	router
vendor:	netgear	model:	router
vendor:	apple	model:	icloud
vendor:	apple	model:	installer
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2024-40891, CVE-2024-53104, CVE-2025-0890, CVE-2025-0445

Fix CVE-2025-1283: Dingtian DT-R0 Series Security Guide Trust: 4.0 Fetched: Feb. 16, 2025, 9:18 a.m., Published: Feb. 14, 2025, midnight	Vulnerabilities: authentication bypass

Affected products

External IDs

db:

NVD

ids:

CVE-2025-1283

Surface Pro 7 gets new (February 13, 2025) firmware updates - SurfaceTip Trust: 3.0 Fetched: Feb. 16, 2025, 9:18 a.m., Published: Feb. 13, 2025, 5 a.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2022-29871

Wireless Security Testing Fundamentals - PenTesting.Org Trust: 3.75 Fetched: Feb. 16, 2025, 9:17 a.m., Published: -	Vulnerabilities: default credentials

Affected products

External IDs

vendor:	wireshark	model:	wireshark
vendor:	aircrack-ng	model:	aircrack-ng

Salt Typhoon Strikes: Over 1,000 Cisco Devices Compromised - Clear Infosec Trust: 4.75 Fetched: Feb. 16, 2025, 9:16 a.m., Published: Feb. 14, 2025, 12:37 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	cisco	model:	cisco ios xe
vendor:	cisco	model:	ios xe
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	ios xe software
vendor:	cisco	model:	routers

db:

NVD

ids:

CVE-2023-20198, CVE-2023-20273

Salt Typhoon Exploits Cisco Devices in Telco Infrastructure Trust: 3.5 Fetched: Feb. 16, 2025, 9:10 a.m., Published: Dec. 16, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	cisco	model:	ios xe
vendor:	cisco	model:	routers

db:

NVD

ids:

CVE-2023-20198, CVE-2023-20273

Security considerations for edge devices (ITSM.80.101) - Canadian Centre for Cyber Security Related entries in the VARIoT vulnerabilities database: VAR-202212-1132 Trust: 5.25 Fetched: Feb. 16, 2025, 9:08 a.m., Published: Feb. 4, 2025, midnight	Vulnerabilities: privilege escalation, denial of service

Affected products

External IDs

vendor:	cisco	model:	routers
vendor:	cisco	model:	series
vendor:	cisco	model:	soho
vendor:	cisco	model:	router
vendor:	cisco	model:	cisco ios
vendor:	fortigate	model:	fortios

db:

NVD

ids:

CVE-2022-42475, CVE-2023-20198, CVE-2024-21762, CVE-2023-20273

Vulnerabilities Page Trust: 4.5 Fetched: Feb. 16, 2025, 9:07 a.m., Published: Feb. 11, 2025, 12:11 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	palo	model:	networks
vendor:	palo alto networks	model:	networks

Vulnerability Details Page Trust: 3.5 Fetched: Feb. 16, 2025, 9:06 a.m., Published: Feb. 11, 2025, 12:11 a.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	palo	model:	pan-os
vendor:	palo	model:	networks
vendor:	palo alto networks	model:	pan-os
vendor:	palo alto networks	model:	networks

Secure by Design Alert: Eliminating Buffer Overflow Vulnerabilities \| CISA Trust: 4.5 Fetched: Feb. 14, 2025, 9:46 a.m., Published: May 14, 2025, midnight	Vulnerabilities: buffer overflow, code execution

Affected products

External IDs

vendor:

google

model:

android

CISA Adds Microsoft Windows, Zyxel Device Dlaws to its Known Exploited Vulnerabilities Catalog - Cybersecurity News Everyday Trust: 5.0 Fetched: Feb. 14, 2025, 9:44 a.m., Published: Feb. 13, 2025, midnight	Vulnerabilities: arbitrary command execution, privilege escalation, command injection...

Affected products

External IDs

db:

NVD

ids:

CVE-2024-40891, CVE-2025-21391, CVE-2025-21418, CVE-2024-40890

Apple Urges Immediate iOS 18.3.1 Update to Fix Critical Security Vulnerability Trust: 3.5 Fetched: Feb. 14, 2025, 9:44 a.m., Published: Feb. 13, 2025, 8:10 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	apple	model:	macos

db:

NVD

ids:

CVE-2025-24200

FortiOS Vulnerabilities Expose VPN and Firewall Devices to Remote Code Execution and Denial-of-Service Attacks - UNDERCODE NEWS Trust: 4.5 Fetched: Feb. 14, 2025, 9:43 a.m., Published: Feb. 12, 2025, 10:14 a.m.	Vulnerabilities: memory corruption, code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2024-46666, CVE-2024-46668

Kandji Unveils Vulnerability Management To Enhance Enterprise Security For Apple Devices \| Digital Market News Trust: 3.0 Fetched: Feb. 14, 2025, 9:43 a.m., Published: Feb. 12, 2025, 6:15 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

SSA-770770 Related entries in the VARIoT vulnerabilities database: VAR-202501-2383, VAR-202501-1996 Trust: 4.75 Fetched: Feb. 14, 2025, 9:42 a.m., Published: Feb. 1, 2025, midnight	Vulnerabilities: integer overflow, denial of service, path traversal

Affected products

External IDs

db:

NVD

ids:

CVE-2024-46665, CVE-2024-46670, CVE-2024-36504, CVE-2024-52963, CVE-2024-48884, CVE-2024-46666, CVE-2024-54021, CVE-2024-48885, CVE-2024-46669, CVE-2024-46668

Re: OpenSSL vulnerability in icls driver version 1.71.99.0 - Intel Community Trust: 3.0 Fetched: Feb. 14, 2025, 9:41 a.m., Published: May 13, 2024, 5:53 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	dell	model:	bios
vendor:	dell	model:	optiplex

Cyble Warns: ICS Vulnerability Puts Patient Monitors At Risk Trust: 3.75 Fetched: Feb. 14, 2025, 9:34 a.m., Published: Feb. 12, 2025, 9:14 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2025-0626, CVE-2024-12248, CVE-2025-0683

Patch Tuesday - February 2025 \| Rapid7 Blog Trust: 5.5 Fetched: Feb. 14, 2025, 9:32 a.m., Published: Feb. 11, 2025, 9:30 p.m.	Vulnerabilities: feature bypass, code execution, denial of service...

Affected products

External IDs

vendor:

node.js

model:

node.js

db:

NVD

ids:

CVE-2025-21420, CVE-2025-21419, CVE-2025-21201, CVE-2025-21392, CVE-2025-0451, CVE-2025-21406, CVE-2025-21177, CVE-2025-21391, CVE-2025-21206, CVE-2024-38193, CVE-2025-24039, CVE-2025-21400, CVE-2025-21377, CVE-2025-21351, CVE-2025-21418, CVE-2025-21407, CVE-2025-21283, CVE-2025-21267, CVE-2025-21387, CVE-2025-21394, CVE-2025-21208, CVE-2025-21198, CVE-2025-21200, CVE-2025-21352, CVE-2025-21190, CVE-2025-21347, CVE-2025-21397, CVE-2025-21254, CVE-2025-21379, CVE-2025-21414, CVE-2025-21368, CVE-2025-21371, CVE-2025-21308, CVE-2025-21188, CVE-2025-21212, CVE-2025-21342, CVE-2025-21383, CVE-2025-21182, CVE-2025-21373, CVE-2025-21349, CVE-2025-21408, CVE-2025-24036, CVE-2025-21216, CVE-2025-21367, CVE-2025-24042, CVE-2025-21184, CVE-2025-21259, CVE-2025-21410, CVE-2025-21350, CVE-2025-21322, CVE-2025-21279, CVE-2025-21179, CVE-2025-21375, CVE-2025-21359, CVE-2025-21194, CVE-2025-21390, CVE-2025-21337, CVE-2025-21369, CVE-2025-0444, CVE-2025-21253, CVE-2025-21381, CVE-2025-21404, CVE-2023-32002, CVE-2025-21358, CVE-2025-21183, CVE-2025-21181, CVE-2025-21386, CVE-2025-21376, CVE-2025-0445

VARIoT news about IoT security