Sign-up

VARIoT news about IoT security

CVE-2025-68236 - scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) - SecAlerts

Trust: 3.0

Fetched: Dec. 21, 2025, 9:32 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-68236

How To Check If Your Smart Home Devices Are Vulnerable To Hacking

Trust: 4.5

Fetched: Dec. 21, 2025, 9:32 a.m., Published: Dec. 10, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: home
vendor: wireshark model: wireshark

Access Denied

Trust: 3.0

Fetched: Dec. 21, 2025, 9:31 a.m., Published: Dec. 18, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: ipad

Russia's Sandworm Pivots: Why Misconfigured Edge Devices Are Now the Primary Target for Critical Infrastructure Attacks

Trust: 3.5

Fetched: Dec. 21, 2025, 9:30 a.m., Published: Dec. 19, 2025, 5:09 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: routers
vendor: sonicwall model: remote access
vendor: check point model: check point
db: NVD ids: CVE-2022-26318, CVE-2023-27532, CVE-2024-24919, CVE-2021-26084, CVE-2023-22518

Is Your Smart Home a Cyber Playground? North Korean Hackers Target IoT Devices

Trust: 3.75

Fetched: Dec. 21, 2025, 9:30 a.m., Published: Dec. 19, 2025, 5:48 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: home

CVE-2025-9315 - Unauthenticated Device Registration Vulnerability in MXsecurity Series - SecAlerts

Trust: 3.0

Fetched: Dec. 21, 2025, 9:29 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-9315

CVE-2025-9315: Unauthenticated Device Registration Vulnerability in MXsecurity Series | IT4Automation

Trust: 3.25

Fetched: Dec. 21, 2025, 9:28 a.m., Published: Dec. 10, 2025, 4:26 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-9315

Understanding and Mitigating CVE-2025-65855 in Netun Solutions HelpFlash IoT Devices

Trust: 4.0

Fetched: Dec. 21, 2025, 9:27 a.m., Published: Dec. 21, 2025, midnight
 Vulnerabilities: code execution, default credentials
Affected productsExternal IDs
db: NVD ids: CVE-2025-65855

Microsoft rolled out December 2025 firmware updates for Surface Laptop Studio 2

Trust: 4.5

Fetched: Dec. 21, 2025, 9:27 a.m., Published: Dec. 17, 2025, 5 a.m.
 Vulnerabilities: code execution, denial of service, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-23345, CVE-2025-23276, CVE-2024-0150, CVE-2024-0146, CVE-2024-21864, CVE-2025-23309, CVE-2025-23347, CVE-2024-44074, CVE-2025-23288, CVE-2025-23281, CVE-2025-23286

Amazon Patches Kindle Vulnerabilities Enabling Account Hijacks via Malicious Ebooks

Trust: 3.75

Fetched: Dec. 21, 2025, 9:26 a.m., Published: Dec. 16, 2025, 1:41 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point

CVE-2023-7209: Critical Vulnerability in Uniway Router Leading to Denial of Service - Ameeba Exploit Tracker

Trust: 5.25

Fetched: Dec. 21, 2025, 9:25 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2023-7209

Serial Port Privilege Escalation Vulnerabilities in Some Hikvision DVR Devices - Security Advisory - Hikvision Global

Trust: 5.0

Fetched: Dec. 21, 2025, 9:23 a.m., Published: Dec. 3, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: hikvision model: hikvision

100+ Cisco Secure Email Devices Exposed to Zero‑Day Exploited in the Wild

Trust: 3.0

Fetched: Dec. 21, 2025, 9:23 a.m., Published: Dec. 21, 2025, 3:40 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-20393

CVE-2023-4818: PAX A920 Device Bootloader Downgrade Vulnerability - Ameeba Exploit Tracker

Trust: 3.0

Fetched: Dec. 21, 2025, 9:22 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-4818

Critical WatchGuard Firebox VPN Vulnerability Actively Exploited in the Wild - Cybercory

Trust: 3.5

Fetched: Dec. 21, 2025, 9:22 a.m., Published: Dec. 19, 2025, 11:11 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: fireware
vendor: watchguard model: firebox
db: NVD ids: CVE-2025-14733

Understanding CVE-2025-12464: QEMU e1000 Network Device Vulnerability

Trust: 4.5

Fetched: Dec. 21, 2025, 9:14 a.m., Published: Dec. 21, 2058, midnight
 Vulnerabilities: denial of service, buffer overflow, buffer overrun
Affected productsExternal IDs
db: NVD ids: CVE-2025-12464

About the security content of macOS Tahoe 26.2 - Apple Support

Trust: 4.25

Fetched: Dec. 19, 2025, 9:49 a.m., Published: Dec. 26, 2025, midnight
 Vulnerabilities: integer overflow, session management issue, information disclosure...
Affected productsExternal IDs
vendor: apple model: macos
vendor: apple model: safari
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2025-43536, CVE-2025-46288, CVE-2025-43532, CVE-2025-43410, CVE-2025-46287, CVE-2025-43539, CVE-2025-43538, CVE-2025-46282, CVE-2025-43542, CVE-2025-43522, CVE-2025-43511, CVE-2025-43516, CVE-2024-7264, CVE-2025-43513, CVE-2025-43541, CVE-2025-43514, CVE-2025-46283, CVE-2025-43416, CVE-2025-43529, CVE-2025-43533, CVE-2025-43512, CVE-2025-43527, CVE-2025-43521, CVE-2025-43523, CVE-2025-43482, CVE-2025-43518, CVE-2025-14174, CVE-2025-43519, CVE-2025-43526, CVE-2025-46279, CVE-2024-8906, CVE-2025-43530, CVE-2025-46277, CVE-2025-46278, CVE-2025-43501, CVE-2025-46281, CVE-2025-46285, CVE-2025-43428, CVE-2025-46291, CVE-2025-9086, CVE-2025-43509, CVE-2025-43535, CVE-2025-43517, CVE-2025-46276, CVE-2025-46289, CVE-2025-5918, CVE-2025-43531

Google addresses 107 Android vulnerabilities, including two zero-days | CyberScoop

Trust: 6.0

Fetched: Dec. 19, 2025, 9:49 a.m., Published: Dec. 1, 2025, 10:17 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2025-48631, CVE-2025-48633, CVE-2025-48572

Seven-year-old vulnerability in Sierra Wireless routers exploited

Related entries in the VARIoT vulnerabilities database: VAR-201905-0853

Trust: 4.75

Fetched: Dec. 19, 2025, 9:48 a.m., Published: Dec. 15, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
vendor: sierra wireless model: aleos
vendor: sierra wireless model: es450
vendor: sierra model: aleos
vendor: sierra model: es450
db: NVD ids: CVE-2018-4063

Russian state hackers targeted Western critical infrastructure for years, Amazon says

Trust: 5.0

Fetched: Dec. 19, 2025, 9:48 a.m., Published: Dec. 17, 2025, 11:27 a.m.
 Vulnerabilities: traffic interception
Affected productsExternal IDs
vendor: watchguard model: firebox
db: NVD ids: CVE-2023-27532, CVE-2023-22518, CVE-2022-26318, CVE-2021-26084