Sign-up

VARIoT news about IoT security

Cybersecurity in the IoT Era - Recru

Trust: 3.75

Fetched: Aug. 29, 2025, 10:01 a.m., Published: Aug. 26, 2025, 4:23 p.m.
 Vulnerabilities: default credentials
Affected productsExternal IDs

Security Bulletin: NVIDIA GPU Display Drivers - July 2025 | NVIDIA

Trust: 4.5

Fetched: Aug. 29, 2025, 10:01 a.m., Published: July 29, 2025, midnight
 Vulnerabilities: buffer overflow, denial of service, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2025-23278, CVE-2025-23290, CVE-2025-23281, CVE-2025-23288, CVE-2025-23277, CVE-2025-23279, CVE-2025-23276, CVE-2025-23283, CVE-2025-23284, CVE-2025-23286, CVE-2025-23287, CVE-2025-23285

Microsoft just fixed over 107 flaws including one serious zero-day - update your PC right now | Tom's Guide

Trust: 4.75

Fetched: Aug. 29, 2025, 10 a.m., Published: Aug. 13, 2025, 4:08 p.m.
 Vulnerabilities: denial of service, code execution, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-53779

The Doom of Device Drivers: Your Android Device (Most Likely) has N-Day Kernel Vulnerabilities - Graz University of Technology

Trust: 3.0

Fetched: Aug. 29, 2025, 9:58 a.m., Published: July 28, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: trend model: security

Critical Zero-Day Vulnerability CVE-2025-43300 In Apple Devices: Emergency Security Updates Released

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 5.5

Fetched: Aug. 29, 2025, 9:57 a.m., Published: Aug. 25, 2025, 7:36 a.m.
 Vulnerabilities: code execution, memory corruption
Affected productsExternal IDs
vendor: trend model: security
vendor: apple model: macos
db: NVD ids: CVE-2025-24201, CVE-2025-31200, CVE-2025-43300, CVE-2025-31201, CVE-2025-24085, CVE-2025-24200

What Is Internet of Medical Things (IoMT) Security? Overview - Palo Alto Networks

Trust: 4.5

Fetched: Aug. 29, 2025, 9:55 a.m., Published: Aug. 5, 2025, midnight
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: palo alto networks model: networks
vendor: palo model: networks

CVE-2025-20148: Arbitrary HTML Injection Vulnerability in Cisco Secure Firewall Management Center - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.75

Fetched: Aug. 29, 2025, 9:54 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: request forgery, improper validation
Affected productsExternal IDs
vendor: cisco model: series
db: NVD ids: CVE-2025-20148

CVE-2025-52970: Fortinet FortiWeb’s Critical Parameter Handling Vulnerability - Cybersecurity Exploit Tracker by Ameeba

Trust: 3.0

Fetched: Aug. 29, 2025, 9:54 a.m., Published: Aug. 25, 2025, 4:20 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-52970

Securing Smart Healthcare Devices Against Cyber Attacks - Simple Science

Trust: 4.75

Fetched: Aug. 29, 2025, 9:54 a.m., Published: Aug. 15, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: access points

CVE-2025-7775 : Memory Overflow Vulnerability Affecting NetScaler ADC and NetScaler Gateway by Citrix

Trust: 5.5

Fetched: Aug. 29, 2025, 9:53 a.m., Published: Aug. 26, 2025, 12:56 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler gateway
vendor: citrix model: netscaler
db: NVD ids: CVE-2025-7775

Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability

Trust: 4.75

Fetched: Aug. 29, 2025, 9:53 a.m., Published: Aug. 27, 2025, 3:57 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: mds 9000
vendor: cisco model: nexus 9000 series
vendor: cisco model: nexus 7000
vendor: cisco model: firepower 9300
vendor: cisco model: firepower
vendor: cisco model: series switches
vendor: cisco model: mds 9000 series
vendor: cisco model: nexus 3000
vendor: cisco model: cisco nexus 9000 series
vendor: cisco model: firepower 2100
vendor: cisco model: nx-os
vendor: cisco model: series
vendor: cisco model: nexus 9000
vendor: cisco model: nexus

IoT Device Vulnerabilities: Why Your Smart Home Might Be Hackers Favorite Target - The Tech Core

Trust: 5.25

Fetched: Aug. 29, 2025, 9:52 a.m., Published: Aug. 23, 2025, 1:50 a.m.
 Vulnerabilities: buffer overflow, denial of service, default password
Affected productsExternal IDs
vendor: hikvision model: ip cameras
vendor: hikvision model: hikvision
vendor: roku model: roku
vendor: tp-link model: routers

Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability - Cisco

Trust: 5.0

Fetched: Aug. 29, 2025, 9:51 a.m., Published: Aug. 28, 2025, 7:45 a.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: cisco model: nexus 9000 series
vendor: cisco model: nexus 7000
vendor: cisco model: nx-os software
vendor: cisco model: series switches
vendor: cisco model: nexus 3000
vendor: cisco model: nx-os
vendor: cisco model: series
vendor: cisco model: nexus 9000
vendor: cisco model: cisco nx-os
vendor: cisco model: nexus

Critical SSH vulnerabilities expose enterprise network infrastructure as patching lags | Network World

Trust: 5.0

Fetched: Aug. 29, 2025, 9:51 a.m., Published: Aug. 12, 2025, midnight
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-6387, CVE-2024-5806

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability

Trust: 3.75

Fetched: Aug. 29, 2025, 9:51 a.m., Published: Aug. 19, 2025, 9:40 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software

Vulnerabilities and Security Challenges on the Internet of Things Devices | SpringerLink

Trust: 3.5

Fetched: Aug. 29, 2025, 9:50 a.m., Published: Aug. 29, 2025, midnight
 Vulnerabilities: -

HikPwn : Simple Scanner For Hikvision Devices With Basic Vulnerability

Trust: 4.0

Fetched: Aug. 29, 2025, 9:49 a.m., Published: Aug. 19, 2025, 5:06 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: hikvision model: hikvision
db: NVD ids: CVE-2021-36260

CVE-2025-20295 - Cisco UCS Manager Software Command Injection Vulnerability - SecAlerts

Trust: 5.5

Fetched: Aug. 29, 2025, 9:48 a.m., Published: -
 Vulnerabilities: file overwriting, command injection
Affected productsExternal IDs
vendor: cisco model: cisco ucs manager
vendor: cisco model: ucs manager
db: NVD ids: CVE-2025-20295

CVE-2025-20990 - Western Digital External Hard Drive Device Node Access Control Vulnerability

Trust: 4.5

Fetched: Aug. 29, 2025, 9:47 a.m., Published: Aug. 6, 2025, 5:15 a.m.
 Vulnerabilities: improper access control, access control vulnerability
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: samsung model: samsung mobile
db: NVD ids: CVE-2025-20990

CVE-2025-20292 - Cisco NXOS Software Command Injection Vulnerability - SecAlerts

Trust: 4.0

Fetched: Aug. 29, 2025, 9:46 a.m., Published: -
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-20292