Sign-up

VARIoT news about IoT security

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access Vulnerability

Trust: 3.0

Fetched: Oct. 15, 2025, 9:29 a.m., Published: Sept. 26, 2025, 4:35 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance software
vendor: cisco model: device manager
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance

VU#887923 - Kiwire Captive Portal contains 3 web vulnerabilities

Trust: 4.0

Fetched: Oct. 15, 2025, 9:28 a.m., Published: Oct. 3, 2025, midnight
 Vulnerabilities: sql injection, open redirection issue, cross-site scripting
Affected productsExternal IDs
db: NVD ids: CVE-2025-11190, CVE-2025-11189, CVE-2025-11188

UEFI Shell Vulnerabilities Could Allow Hackers to Bypass Secure Boot on

Trust: 3.0

Fetched: Oct. 15, 2025, 9:28 a.m., Published: Oct. 15, 2025, 11 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2023-40238, CVE-2023-40239

PoC Exploit Unveiled for Lenovo Code Execution Vulnerability Enabling Privilege Escalation

Trust: 5.5

Fetched: Oct. 15, 2025, 9:27 a.m., Published: Oct. 13, 2025, 3:25 p.m.
 Vulnerabilities: code execution, privilege escalation
Affected productsExternal IDs
vendor: lenovo model: updates
vendor: lenovo model: system
db: NVD ids: CVE-2025-8061

CVE-2023-7311 - BYTEVALUE Intelligent Flow Control Router Command Injection - SecAlerts

Trust: 4.25

Fetched: Oct. 15, 2025, 9:24 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2023-7311

Linux USB Audio Driver Vulnerability Exploited by Malicious USB Devices in the Wild - Boardor

Trust: 3.75

Fetched: Oct. 15, 2025, 9:23 a.m., Published: Oct. 15, 2025, 8:13 a.m.
 Vulnerabilities: system crash, code execution, privilege escalation
Affected productsExternal IDs

CVE-2025-39855 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 15, 2025, 9:22 a.m., Published: Sept. 19, 2025, 4:15 p.m.
 Vulnerabilities: privilege escalation, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-39855

Hackers Can Access 2FA Codes and Private Messages on Android Devices - Breach Spot

Trust: 3.75

Fetched: Oct. 15, 2025, 9:20 a.m., Published: Oct. 14, 2025, 4:30 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android

CVE-2017-20204 - DBLTek GoIP Telnet Admin Interface Undocumented Backdoor - SecAlerts

Trust: 4.75

Fetched: Oct. 15, 2025, 9:20 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: dbltek model: dbltek
db: NVD ids: CVE-2017-20204

CDPSvc Memory Corruption: Local Privilege Escalation and CVE Fragmentation (Mid 2025) | Windows Forum

Trust: 3.5

Fetched: Oct. 15, 2025, 9:19 a.m., Published: Oct. 14, 2025, 9:24 p.m.
 Vulnerabilities: code injection, privilege escalation, heap corruption...
Affected productsExternal IDs

Pixel-stealing “Pixnapping” attack targets Android devices | Malwarebytes

Trust: 3.75

Fetched: Oct. 15, 2025, 9:19 a.m., Published: Oct. 14, 2025, 12:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2025-48561

CVE-2025-55677: Windows Device Association Broker Local Privilege Escalation | Windows Forum

Trust: 4.5

Fetched: Oct. 15, 2025, 9:17 a.m., Published: Oct. 14, 2025, 8:52 p.m.
 Vulnerabilities: code execution, privilege escalation, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-55677

CVE-2025-50174 Windows Device Association Broker EoP Explained | Windows Forum

Trust: 4.5

Fetched: Oct. 15, 2025, 9:13 a.m., Published: Oct. 14, 2025, 7:42 p.m.
 Vulnerabilities: privilege escalation, script execution, memory corruption...
Affected productsExternal IDs
db: NVD ids: CVE-2025-50174

Many OnePlus smartphones have a major SMS vulnerability, and a fix isn't coming before mid-October - GSMArena.com news

Trust: 5.75

Fetched: Oct. 14, 2025, 9:23 a.m., Published: Oct. 14, 2025, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184

Cisco Patches ASA, FTD, and IOS Vulnerabilities | Arctic Wolf

Trust: 4.75

Fetched: Oct. 14, 2025, 9:23 a.m., Published: Sept. 26, 2025, 4:03 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: ios xr
vendor: cisco model: adaptive security appliance
vendor: cisco model: ios xe
db: NVD ids: CVE-2025-20363, CVE-2025-20333, CVE-2025-20352, CVE-2025-20362

Analyzing the Vulnerabilities and Security Risks Associated with IoT Devices and Networks | SpringerLink

Trust: 3.75

Fetched: Oct. 14, 2025, 9:22 a.m., Published: Oct. 14, 2026, midnight
 Vulnerabilities: -

Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Trust: 3.0

Fetched: Oct. 14, 2025, 9:21 a.m., Published: Oct. 1, 2025, 12:36 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-10725

WAGO Device Sphere and Solution Builder Vulnerability Expose Database and User Credentials - Advisories

Trust: 5.0

Fetched: Oct. 14, 2025, 9:21 a.m., Published: Oct. 9, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: wago model: wago
db: NVD ids: CVE-2025-41715, CVE-2025-41716

Canon Devices - Authentication Bypass in Catwalk Server (CVE-2021-38154) - Vulnerability & Exploit Database

Trust: 5.25

Fetched: Oct. 14, 2025, 9:20 a.m., Published: Oct. 7, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: canon model: ir-adv
db: NVD ids: CVE-2021-38154

OxygenOS 12+ devices affected by major SMS vulnerability

Trust: 4.5

Fetched: Oct. 14, 2025, 9:19 a.m., Published: Oct. 5, 2025, 2:57 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: google model: android
vendor: oneplus model: one
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184