Sign-up

VARIoT news about IoT security

#StopRansomware: Interlock | CISA

Trust: 3.5

Fetched: Aug. 17, 2025, 10:48 a.m., Published: June 17, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: cisco model: series
vendor: cisco model: meeting
vendor: cisco model: webex
vendor: winscp model: winscp
vendor: putty model: putty

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Trust: 3.75

Fetched: Aug. 17, 2025, 10:48 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series TLS 1.3 Cipher Denial of Service Vulnerability

Trust: 3.75

Fetched: Aug. 17, 2025, 10:47 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: series
vendor: cisco model: firepower
vendor: cisco model: asa software

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability

Trust: 3.75

Fetched: Aug. 17, 2025, 10:47 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance

Cisco Secure Firewall Management Center Software HTML Injection Vulnerability

Trust: 3.0

Fetched: Aug. 17, 2025, 10:46 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: asa software

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software DHCP Denial of Service Vulnerability

Trust: 3.75

Fetched: Aug. 17, 2025, 10:46 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance
vendor: cisco model: device manager

CVE-2025-20217 - Vulnerability Details - OpenCVE

Trust: 4.5

Fetched: Aug. 17, 2025, 10:46 a.m., Published: Aug. 3, 2025, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: snort model: snort
vendor: cisco model: cisco firepower threat defense software
vendor: cisco model: firepower threat defense
vendor: cisco model: firepower threat defense software
vendor: cisco model: firepower
db: NVD ids: CVE-2025-20217

CISA Warns of Actively Exploited D-Link Vulnerabilities in the Wild - Cyber Security News

Related entries in the VARIoT vulnerabilities database: VAR-202009-0782, VAR-202211-1888, VAR-202009-0783

Trust: 4.75

Fetched: Aug. 17, 2025, 10:45 a.m., Published: Aug. 6, 2025, 7 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: d-link model: dnr-322l
vendor: d-link model: dcs-2670l
vendor: d-link model: dcs-2530l
db: NVD ids: CVE-2020-25078, CVE-2022-40799, CVE-2020-25079

Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability

Trust: 4.0

Fetched: Aug. 17, 2025, 10:33 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: asa software

ReVault! When your SoC turns against you…

Trust: 4.5

Fetched: Aug. 17, 2025, 10:32 a.m., Published: Aug. 5, 2025, 1 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: dell model: bios
vendor: dell model: latitude
vendor: cisco model: series
vendor: cisco model: device manager
db: NVD ids: CVE-2025-24919, CVE-2025-24311, CVE-2025-24922, CVE-2025-25215, CVE-2025-25050

Millions of Dell laptops hit by 'critical' security vulnerability | PCWorld

Trust: 3.75

Fetched: Aug. 17, 2025, 10:32 a.m., Published: Aug. 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: latitude
vendor: lenovo model: updates
db: NVD ids: CVE-2025-24919, CVE-2025-24311, CVE-2025-24922, CVE-2025-25215, CVE-2025-25050

下载移动版 YouTube 应用 - Android - YouTube帮助

Trust: 3.25

Fetched: Aug. 17, 2025, 9:17 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Download the YouTube mobile app - Android - YouTube Help

Trust: 3.25

Fetched: Aug. 17, 2025, 9:16 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

Download the YouTube mobile app - Android - YouTube Help

Trust: 3.25

Fetched: Aug. 17, 2025, 9:15 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android

SNDS - FAQ

Trust: 3.75

Fetched: Aug. 17, 2025, 9:09 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: delegate model: delegate

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Trust: 3.75

Fetched: Aug. 15, 2025, 9:37 a.m., Published: July 30, 2025, 1:02 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
vendor: apple model: safari
vendor: apple model: watch
vendor: apple model: iphone
vendor: apple model: tvos
vendor: apple model: ipad
vendor: apple model: watchos
vendor: apple model: apple tv
vendor: apple model: webkit
vendor: apple model: ipad air
vendor: apple model: macos
db: NVD ids: CVE-2025-6558

Update Canonical Ubuntu Desktop: USN-7674-1: OpenJDK 11 vulnerabilities

Trust: 6.0

Fetched: Aug. 15, 2025, 9:37 a.m., Published: Jan. 15, 7674, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-50059, CVE-2025-50106, CVE-2025-30749, CVE-2025-30761, CVE-2025-30754

Update Canonical Ubuntu Desktop: USN-7675-1: poppler vulnerability

Trust: 3.25

Fetched: Aug. 15, 2025, 9:36 a.m., Published: Jan. 15, 7675, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Over 3,000 NetScaler Devices Remain Unpatched Against CitrixBleed 2 Vulnerability - Red-Team News

Trust: 4.75

Fetched: Aug. 15, 2025, 9:36 a.m., Published: Aug. 12, 2025, 2:50 p.m.
 Vulnerabilities: session hijacking
Affected productsExternal IDs
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler
vendor: citrix systems model: gateway
vendor: citrix systems model: netscaler adc
vendor: citrix systems model: netscaler
db: NVD ids: CVE-2025-5777

CVE-2025-8731: Default Credentials Vulnerability in TRENDnet Devices - Cybersecurity Exploit Tracker by Ameeba

Trust: 5.0

Fetched: Aug. 15, 2025, 9:35 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: default credentials
Affected productsExternal IDs
db: NVD ids: CVE-2025-8731