Sign-up

VARIoT news about IoT security

Tenable Research in Verizon DBIR: Additional Research Analysis - CIO AXIS

Trust: 3.0

Fetched: May 13, 2025, 9:05 a.m., Published: April 24, 2025, 10:40 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: axis model: axis

Wormable Zero-Click RCE in Apple AirPlay Protocol Exposes Billions of Devices to Remote Attacks - Cyber Kendra

Trust: 5.5

Fetched: May 11, 2025, 9:16 a.m., Published: May 23, 2025, midnight
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2025-24271, CVE-2025-24137, CVE-2025-24132, CVE-2025-24252, CVE-2025-24206

Android's May 2025 Update Tackles CVE-2025-27363 & More - Langflow & MagicINFO Exploited, Kibana at Risk - SOCRadar® Cyber Intelligence Inc.

Related entries in the VARIoT vulnerabilities database: VAR-201805-0262

Trust: 5.25

Fetched: May 11, 2025, 9:15 a.m., Published: May 7, 2025, 12:54 p.m.
 Vulnerabilities: path traversal, code execution, command injection...
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: mobile
vendor: freetype model: freetype
vendor: google model: android
vendor: google model: wifi
db: NVD ids: CVE-2025-27363, CVE-2025-25014, CVE-2025-26426, CVE-2018-10561, CVE-2024-6047, CVE-2024-11120, CVE-2025-3248, CVE-2024-7399, CVE-2025-0087

Actively exploited FreeType flaw fixed in Android (CVE-2025-27363) - Help Net Security

Trust: 4.75

Fetched: May 11, 2025, 9:13 a.m., Published: May 7, 2025, 9:52 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: freetype model: freetype
vendor: google model: android
db: NVD ids: CVE-2025-27363

Update Canonical Ubuntu Desktop: USN-7504-1: LibreOffice vulnerability

Trust: 3.25

Fetched: May 11, 2025, 9:13 a.m., Published: Jan. 11, 7504, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

SonicWall customers confront resurgence of actively exploited vulnerabilities | CyberScoop

Related entries in the VARIoT vulnerabilities database: VAR-202109-0375, VAR-202505-1415, VAR-202505-1034, VAR-202505-1414, VAR-202312-2070

Trust: 5.5

Fetched: May 11, 2025, 9:12 a.m., Published: May 9, 2025, 9:33 p.m.
 Vulnerabilities: default administrator username, code execution, command injection
Affected productsExternal IDs
vendor: check point model: check point
vendor: citrix model: gateway
vendor: palo model: firewall
vendor: palo model: pan-os
vendor: palo model: networks
vendor: cisco model: router
vendor: cisco model: routers
vendor: cisco model: series
vendor: sonicwall model: sonicos
vendor: sonicwall model: secure mobile access
vendor: sonicwall model: sma 100
vendor: sonicwall model: sma100
vendor: palo alto networks model: firewall
vendor: palo alto networks model: pan-os
vendor: palo alto networks model: networks
vendor: barracuda model: barracuda
vendor: check point software technologies model: check point
db: NVD ids: CVE-2021-20035, CVE-2025-32819, CVE-2024-21887, CVE-2024-53704, CVE-2025-32821, CVE-2024-3400, CVE-2023-46805, CVE-2025-32820, CVE-2023-44221, CVE-2025-23006

Critical PyTorch Vulnerability Let Attackers Execute Remote Code

Trust: 4.75

Fetched: May 11, 2025, 9:10 a.m., Published: April 21, 2025, 9:02 a.m.
 Vulnerabilities: code execution, command execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-32434

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819) - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202505-1414, VAR-202505-1034, VAR-202505-1415

Trust: 5.75

Fetched: May 11, 2025, 9:10 a.m., Published: May 8, 2025, 12:27 p.m.
 Vulnerabilities: path traversal, code execution
Affected productsExternal IDs
vendor: sonicwall model: sma100
vendor: sonicwall model: web application firewall
vendor: sonicwall model: sma 100
vendor: sonicwall model: sma1000
db: NVD ids: CVE-2025-32820, CVE-2025-32821, CVE-2025-32819

Cisco IOS XE Wireless Controller Software Cisco Discovery Protocol Denial of Service Vulnerability

Trust: 4.0

Fetched: May 11, 2025, 9:10 a.m., Published: May 7, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: wireless controller

SonicWall SSLVPN Vulnerability Let Remote Attackers to Crash Firewall Appliances

Trust: 5.25

Fetched: May 11, 2025, 9:09 a.m., Published: April 24, 2025, 8:48 a.m.
 Vulnerabilities: pointer dereference vulnerability
Affected productsExternal IDs
vendor: sonicwall model: sonicos
db: NVD ids: CVE-2025-32818

CVE-2025-32470 : Remote IP Address Modification Vulnerability in SICK Device | SecurityVulnerability.io

Trust: 3.5

Fetched: May 11, 2025, 9:08 a.m., Published: April 28, 2025, 9:07 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-32470

Verizon 2025 DBIR: 10 Takeaways You Should Know - SOCRadar® Cyber Intelligence Inc.

Trust: 3.75

Fetched: May 11, 2025, 9:07 a.m., Published: April 29, 2025, 8:53 p.m.
 Vulnerabilities: session hijacking
Affected productsExternal IDs
vendor: trend model: security

Microsoft rolled out new firmware updates (April 21, 2025) for Surface Go 3

Trust: 3.0

Fetched: May 11, 2025, 9:06 a.m., Published: April 21, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2024-44074, CVE-2022-36392

Cybercriminals switch up their top initial access vectors of choice | CSO Online

Trust: 4.25

Fetched: May 11, 2025, 9:06 a.m., Published: April 25, 2025, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs

Code Wars: Rust vs. C in the Battle for Billion-Device Safety - The New Stack

Trust: 3.75

Fetched: May 11, 2025, 9:05 a.m., Published: May 2, 2025, 11 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: siemens model: nucleus

Urgent Apple Security Patch: Zero-Day Exploits Target iPhones

Trust: 5.75

Fetched: May 11, 2025, 9:05 a.m., Published: April 16, 2025, 10:39 p.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: tvos
vendor: apple model: iphone
vendor: apple model: macos
db: NVD ids: CVE-2025-31201, CVE-2025-31200

CVE-2025-22022 : USB Isochronous Device Vulnerability in Linux Kernel by NEC | SecurityVulnerability.io

Trust: 3.25

Fetched: May 11, 2025, 9:04 a.m., Published: April 16, 2025, 10:23 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-22022

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: May 11, 2025, 9:04 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120

Related entries in the VARIoT vulnerabilities database: VAR-201805-0262

Trust: 4.0

Fetched: May 9, 2025, 9:31 a.m., Published: May 7, 2025, 12:46 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-11120, CVE-2018-10561, CVE-2024-6047

Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability

Trust: 3.0

Fetched: May 9, 2025, 9:29 a.m., Published: May 7, 2025, 3:53 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ios xr
vendor: cisco model: ios xe
vendor: cisco model: nx-os
vendor: cisco model: ios xr software
vendor: cisco model: nx-os software
vendor: cisco model: cisco ios
vendor: cisco model: router
vendor: cisco model: ios xe software