VARIoT latest news about IoT security

Cisco IOS XR Software Vulnerability Allows Attackers to Execute Commands as Root Trust: 5.75 Fetched: March 14, 2025, 9:09 a.m., Published: March 13, 2025, 4:17 a.m.	Vulnerabilities: privilege escalation, command execution, code injection

Affected products

External IDs

vendor:	cisco	model:	ios xe
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	nx-os software
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	ios xr software
vendor:	cisco	model:	ios xr
vendor:	cisco	model:	cisco ios xr

db:

NVD

ids:

CVE-2025-20138

Bitdefender Warns of Multiple Vulnerabilities that Let Attackers Execute MITM Attack Trust: 4.75 Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 1:27 p.m.	Vulnerabilities: code execution, command injection

Affected products

External IDs

db:

NVD

ids:

CVE-2024-13871, CVE-2024-13872

Siemens SINAMICS S200 Bootloader Vulnerability Let Attackers Compromise the Device Trust: 3.75 Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 4:03 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

sinamics

db:

NVD

ids:

CVE-2024-56336

Multiple Zoom Client Vulnerabilities Exposes Sensitive data Trust: 5.5 Fetched: March 14, 2025, 9:08 a.m., Published: March 13, 2025, 1:57 a.m.	Vulnerabilities: buffer overflow, privilege escalation, memory corruption

Affected products

External IDs

vendor:	zoom	model:	client
vendor:	zoom	model:	zoom client

db:

NVD

ids:

CVE-2025-0150, CVE-2025-0151, CVE-2025-27439, CVE-2025-27440, CVE-2025-0149

CISA Warns of Apple WebKit Out-of-Bounds Write Vulnerability Exploited in Wild Trust: 4.75 Fetched: March 14, 2025, 9:07 a.m., Published: March 13, 2025, 4:21 p.m.	Vulnerabilities: code execution

Affected products

External IDs

vendor:	apple	model:	safari
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad
vendor:	apple	model:	webkit
vendor:	apple	model:	watch
vendor:	apple	model:	macos
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2025-24201

CVE-2024-44179 : Physical Access Vulnerability in Apple iOS and macOS Devices \| SecurityVulnerability.io Trust: 4.25 Fetched: March 12, 2025, 9:28 a.m., Published: March 10, 2025, 7:11 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

apple

model:

macos

db:

NVD

ids:

CVE-2024-44179

CVE-2024-58082 : Linux Kernel Vulnerability in Nuvoton Media Device Initialization \| SecurityVulnerability.io Trust: 3.25 Fetched: March 12, 2025, 9:28 a.m., Published: March 6, 2025, 4:13 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-58082

Undocumented code could leave several smart home gadgets exposed Trust: 5.0 Fetched: March 12, 2025, 9:26 a.m., Published: March 10, 2025, 1:55 p.m.	Vulnerabilities: device impersonation

Affected products

External IDs

db:

NVD

ids:

CVE-2025-27840

Apple Fixed Another Zero-day Security Vulnerability: Update Your Devices Now Related entries in the VARIoT vulnerabilities database: VAR-202501-3666 Trust: 3.75 Fetched: March 12, 2025, 9:25 a.m., Published: March 11, 2025, 9:07 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	safari
vendor:	apple	model:	webkit
vendor:	apple	model:	macos
vendor:	apple	model:	iphone
vendor:	apple	model:	ipad
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2025-24201, CVE-2025-24200, CVE-2025-24085

Cyble Sensors Detect Exploit Attempts On WordPress Plugins, Network Devices Trust: 5.5 Fetched: March 12, 2025, 9:24 a.m., Published: March 11, 2025, 7:42 a.m.	Vulnerabilities: information disclosure, command injection, path traversal...

Affected products

External IDs

vendor:	palo alto networks	model:	firewall
vendor:	palo alto networks	model:	networks
vendor:	palo alto networks	model:	pan-os
vendor:	korenix	model:	jetport
vendor:	korenix	model:	jetport 5601
vendor:	palo	model:	firewall
vendor:	palo	model:	networks
vendor:	palo	model:	pan-os
vendor:	check point	model:	check point
vendor:	check point	model:	express

db:

NVD

ids:

CVE-2024-33575, CVE-2024-2876, CVE-2024-11303, CVE-2024-24919, CVE-2024-9593, CVE-2024-11972, CVE-2024-7593, CVE-2024-3400

2025 March KB5053598 KB5053602 Windows 11 Patch 7 Zero-Day Vulnerabilities And 57 Flaws HTMD Blog Trust: 4.5 Fetched: March 12, 2025, 9:24 a.m., Published: March 11, 2025, 6:09 p.m.	Vulnerabilities: code execution, information disclosure, feature bypass...

Affected products

External IDs

db:

NVD

ids:

CVE-2025-24984, CVE-2025-24985, CVE-2025-26633, CVE-2025-24991, CVE-2025-24993, CVE-2025-26630, CVE-2025-24983

Security Researchers Warn of Vulnerabilities in Millions of IoT Devices - Softonic Trust: 3.0 Fetched: March 12, 2025, 9:23 a.m., Published: March 12, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-27840

Apple patches 0-day exploited in “extremely sophisticated attack” - Ars Technica Trust: 4.0 Fetched: March 12, 2025, 9:23 a.m., Published: March 11, 2025, 8:26 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	iphone
vendor:	apple	model:	webkit
vendor:	apple	model:	safari
vendor:	apple	model:	ipad
vendor:	apple	model:	ipad air

db:

NVD

ids:

CVE-2025-24201

Siemens RUGGEDCOM ROX Devices \| CISA Related entries in the VARIoT vulnerabilities database: VAR-202110-0522 Trust: 3.75 Fetched: March 12, 2025, 9:22 a.m., Published: Dec. 22, 2021, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	siemens	model:	ruggedcom rox rx5000
vendor:	siemens	model:	ruggedcom rox rx1510
vendor:	siemens	model:	ruggedcom rox rx1500
vendor:	siemens	model:	ruggedcom rox rx1524
vendor:	siemens	model:	ruggedcom rox rx1511
vendor:	siemens	model:	ruggedcom rox rx1512
vendor:	siemens	model:	ruggedcom rox rx1536
vendor:	siemens	model:	ruggedcom rox rx1400
vendor:	siemens	model:	ruggedcom rox rx1501
vendor:	siemens	model:	ruggedcom
vendor:	siemens	model:	ruggedcom rox mx5000

db:

NVD

ids:

CVE-2021-41546

Apple fixes security flaw allowing third-party access to locked devices \| The Record from Recorded Future News Trust: 3.75 Fetched: March 11, 2025, 9:30 a.m., Published: Feb. 11, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	ipad
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2025-24200

Critical DrayTek Router Vulnerabilities Expose Devices to RCE Attacks Trust: 4.5 Fetched: March 11, 2025, 9:30 a.m., Published: March 7, 2025, 1:26 p.m.	Vulnerabilities: code execution, integer overflow, buffer overflow...

Affected products

External IDs

vendor:	draytek	model:	routers
vendor:	draytek	model:	vigor
vendor:	draytek	model:	draytek routers

db:

NVD

ids:

CVE-2024-41340, CVE-2024-41336, CVE-2024-41338, CVE-2024-51139, CVE-2024-41339, CVE-2024-41335, CVE-2024-51138

Mobile Security with Device Integrity: Protecting Against Cyber Threats Trust: 3.75 Fetched: March 11, 2025, 9:26 a.m., Published: March 10, 2025, 1:57 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

quick heal

model:

quick heal

Hidden Commands in Bluetooth Chip Expose Over a Billion Devices • iPhone in Canada Blog Trust: 3.0 Fetched: March 11, 2025, 9:25 a.m., Published: March 10, 2025, 6:33 p.m.	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2025-27840

New Android RAT Dubbed “AndroRAT” Attacking to Steal Pattern, PIN & Passcodes Trust: 4.75 Fetched: March 11, 2025, 9:25 a.m., Published: March 4, 2025, 12:20 p.m.	Vulnerabilities: privilege escalation

Affected products

External IDs

vendor:	trend	model:	antivirus
vendor:	trend	model:	security
vendor:	google	model:	android

db:

NVD

ids:

CVE-2015-1805

Python JSON Logger Vulnerability Exposes Millions of Users Trust: 3.0 Fetched: March 11, 2025, 9:24 a.m., Published: March 11, 2025, 8:13 a.m.	Vulnerabilities: code execution

Affected products

External IDs

db:

NVD

ids:

CVE-2025-27607

VARIoT news about IoT security