Sign-up

VARIoT news about IoT security

Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability - Cisco

Trust: 4.0

Fetched: May 6, 2025, 9:12 a.m., Published: April 22, 2025, 12:18 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: cisco model: cisco ios xe
vendor: cisco model: cisco ios
vendor: cisco model: ios xe software
vendor: cisco model: ios xe
vendor: cisco model: catalyst

Update Canonical Ubuntu Server: USN-7161-3: Docker vulnerability

Trust: 4.0

Fetched: May 6, 2025, 9:12 a.m., Published: March 6, 7161, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-29018, CVE-2024-41110

Android Security Bulletin May 2025: Multi Vulnerabilities Including Actively Exploited CVE-2025-27363

Trust: 5.75

Fetched: May 6, 2025, 9:11 a.m., Published: May 5, 2025, 10:57 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: google model: android
vendor: google model: wifi
vendor: freetype model: freetype
db: NVD ids: CVE-2025-27363

IoT Device Hacking

Trust: 4.25

Fetched: May 6, 2025, 9:08 a.m., Published: May 6, 2000, midnight
 Vulnerabilities: default credentials, buffer overflow
Affected productsExternal IDs
vendor: wireshark model: wireshark

Critical Erlang/OTP SSH Vulnerability Allows Unauthenticated Remote Code Execution

Related entries in the VARIoT vulnerabilities database: VAR-202504-1178

Trust: 4.5

Fetched: May 6, 2025, 9:08 a.m., Published: April 17, 2025, 11:49 a.m.
 Vulnerabilities: code execution, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-32433

SSH Vulnerabilities And How To Protect Against Them

Related entries in the VARIoT vulnerabilities database: VAR-201808-0455, VAR-202103-1030, VAR-201601-0029

Trust: 4.5

Fetched: May 6, 2025, 9:06 a.m., Published: Jan. 27, 2025, 3:56 p.m.
 Vulnerabilities: account lockout, denial of service, command execution
Affected productsExternal IDs
db: NVD ids: CVE-2018-15473, CVE-2021-28041, CVE-2021-28039, CVE-2016-0777

Top five most common network vulnerabilities - Advania

Trust: 3.5

Fetched: May 6, 2025, 9:05 a.m., Published: April 16, 2025, 2:49 p.m.
 Vulnerabilities: default credentials, weak password
Affected productsExternal IDs

Airborne: Wormable Zero-Click RCE in Apple AirPlay Puts Billions of Devices at Risk | Oligo Security | Oligo Security

Trust: 6.25

Fetched: May 6, 2025, 9:04 a.m., Published: April 29, 2025, midnight
 Vulnerabilities: information disclosure, process crash, buffer overflow...
Affected productsExternal IDs
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: apple tv
vendor: apple model: macos
db: NVD ids: CVE-2025-24206, CVE-2025-24271, CVE-2025-24129, CVE-2025-24252, CVE-2025-24132, CVE-2025-24137

Airplay-enabled devices open to attack via "AirBorne" vulnerabilities - Help Net Security

Trust: 3.0

Fetched: May 4, 2025, 9:32 a.m., Published: April 30, 2025, 1:23 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: tvos
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: watchos

Update Canonical Ubuntu Server: USN-7472-1: Micropython vulnerabilities

Trust: 6.0

Fetched: May 4, 2025, 9:31 a.m., Published: Jan. 4, 7472, midnight
 Vulnerabilities: denial of service, buffer overflow
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2024-8947, CVE-2021-42553, CVE-2024-8946

Critical Vulnerabilities in Planet Technology Network Devices: What You Need to Know | Windows Forum

Trust: 3.25

Fetched: May 4, 2025, 9:30 a.m., Published: May 4, 2025, midnight
 Vulnerabilities: command injection, os command injection, default credentials
Affected productsExternal IDs
vendor: google model: wifi
vendor: trend model: security

Apple patches security vulnerabilities in iOS and iPadOS. Update now! | Malwarebytes

Trust: 5.5

Fetched: May 4, 2025, 9:29 a.m., Published: April 17, 2025, 3:59 p.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: ipad air
vendor: apple model: ipad
vendor: apple model: iphone
vendor: apple model: software update
db: NVD ids: CVE-2025-31200, CVE-2025-31201

Critical Siemens Solid Edge Vulnerability: What You Need to Know | Windows Forum

Trust: 4.5

Fetched: May 4, 2025, 9:20 a.m., Published: May 4, 2025, midnight
 Vulnerabilities: memory corruption, buffer overflow, code execution
Affected productsExternal IDs
vendor: siemens model: solid edge
db: NVD ids: CVE-2024-54091

Kubernetes Vulnerability Scanning: Best Practices and Tools

Trust: 3.5

Fetched: May 4, 2025, 9:13 a.m., Published: April 18, 2025, 6:56 p.m.
 Vulnerabilities: denial of service, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2019-1002101

Top 14 Network Security Risks Impacting Businesses Today

Trust: 3.5

Fetched: May 4, 2025, 9:12 a.m., Published: April 10, 2025, 7:50 a.m.
 Vulnerabilities: cross-site scripting, sql injection, account lockout...
Affected productsExternal IDs

Seven Years Old Cisco Vulnerability Exposes Cisco Devices to Remote Code Execution Attacks

Related entries in the VARIoT vulnerabilities database: VAR-201803-1387

Trust: 4.75

Fetched: May 4, 2025, 9:11 a.m., Published: April 12, 2025, 3:39 p.m.
 Vulnerabilities: code execution, command execution
Affected productsExternal IDs
db: NVD ids: CVE-2018-0171

Update Canonical Ubuntu Desktop: USN-7473-1: Ghostscript vulnerability

Trust: 3.75

Fetched: May 4, 2025, 9:09 a.m., Published: Jan. 4, 7473, midnight
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: ghostscript model: ghostscript
vendor: canonical model: ubuntu

Google fixes two actively exploited zero-day vulnerabilities in Android | Malwarebytes

Trust: 5.75

Fetched: May 4, 2025, 9:07 a.m., Published: April 8, 2025, 11:34 a.m.
 Vulnerabilities: privilege escalation, information disclosure
Affected productsExternal IDs
vendor: google model: android
db: NVD ids: CVE-2024-50302, CVE-2024-53104, CVE-2024-53150, CVE-2024-53197

Single Line of Code iPhone Exploit: Critical Vulnerability Could Brick Devices - CinchOps, Inc.

Trust: 4.5

Fetched: May 4, 2025, 9:06 a.m., Published: April 29, 2025, 8 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: apple model: icloud
vendor: apple model: iphone
db: NVD ids: CVE-2025-24091

Critical "AirBorne" Vulnerabilities in Apple AirPlay - Billions of Devices at Risk

Trust: 6.75

Fetched: May 4, 2025, 9:06 a.m., Published: May 3, 2025, 11:10 a.m.
 Vulnerabilities: denial of service, information disclosure, code execution
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2025-24252, CVE-2025-24132