Sign-up

VARIoT news about IoT security

Contec Health CMS8000 Patient Monitor (Update A) | CISA

Trust: 4.75

Fetched: April 22, 2025, 9:06 a.m., Published: Feb. 25, 2025, midnight
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-0683, CVE-2025-1024, CVE-2025-0626, CVE-2025-1204, CVE-2024-12248

Security Advisory 0116 - Arista

Trust: 5.0

Fetched: April 18, 2025, 9:34 a.m., Published: April 15, 2025, 3:05 p.m.
 Vulnerabilities: privilege management vulnerability
Affected productsExternal IDs
vendor: untangle model: ng firewall
db: NVD ids: CVE-2024-8100

All iPhone users urged to ‘immediately update their Apple devices’ today | Express.co.uk

Trust: 3.0

Fetched: April 18, 2025, 9:29 a.m., Published: April 17, 2025, 10 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: iphone

Your smart home may not be as secure as you think - Help Net Security

Trust: 3.25

Fetched: April 18, 2025, 9:28 a.m., Published: April 2, 2025, 3:30 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: google home
vendor: google model: home

Fortinet Uncovers Threat Actor Persistence via Symbolic Link Exploit in FortiGate Devices

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.0

Fetched: April 18, 2025, 9:27 a.m., Published: April 14, 2025, 4:42 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2024-21762, CVE-2023-27997, CVE-2022-42475

iOS 18.4.1 - update your iPhone right now to apply emergency security fix | Tom's Guide

Trust: 3.5

Fetched: April 18, 2025, 9:25 a.m., Published: April 17, 2025, 11:30 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: android
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: macos
vendor: apple model: ipad
db: NVD ids: CVE-2025-31200, CVE-2025-31201

Cybersecurity Analysis of Wearable Devices: Smartwatches Passive Attack - PMC

Trust: 4.25

Fetched: April 18, 2025, 9:21 a.m., Published: June 8, 2023, midnight
 Vulnerabilities: denial of service, default credentials
Affected productsExternal IDs
vendor: apple model: watch
vendor: wireshark model: wireshark
vendor: samsung model: galaxy
vendor: samsung model: note
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: samsung galaxy
vendor: essential model: phone
vendor: huawei model: huawei

ICS Vulnerability Report: Energy, Manufacturing Fixes Urged

Trust: 3.5

Fetched: April 16, 2025, 9:30 a.m., Published: April 10, 2025, 5:20 a.m.
 Vulnerabilities: weak password, path traversal, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-25211, CVE-2024-4872, CVE-2025-23120, CVE-2024-3980, CVE-2025-26689

Vulnerability Trends - Vulmon

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 5.5

Fetched: April 16, 2025, 9:30 a.m., Published: April 29, 2025, midnight
 Vulnerabilities: session management vulnerability, directory traversal, buffer overflow...
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2025-32428, CVE-2025-32103, CVE-2025-22457, CVE-2024-7971, CVE-2025-30406, CVE-2024-0132, CVE-2025-0282, CVE-2024-56406, CVE-2025-27840, CVE-2024-26170, CVE-2025-32102, CVE-2025-24859, CVE-2024-50264, CVE-2025-21204, CVE-2025-31137, CVE-2024-4577, CVE-2022-42475, CVE-2023-27997, CVE-2025-29927, CVE-2025-29824

APT group ToddyCat exploits a vulnerability in ESET for DLL proxying | Securelist

Related entries in the VARIoT vulnerabilities database: VAR-202108-1843

Trust: 3.75

Fetched: April 16, 2025, 9:28 a.m., Published: Jan. 16, 2050, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
db: NVD ids: CVE-2021-36276, CVE-2024-11859

Zero-day vulnerabilities: the real threat behind Netflix’s “Zero Day”

Trust: 3.0

Fetched: April 16, 2025, 9:28 a.m., Published: March 19, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: avast model: antivirus

CVE-2025-30512 : Remote Configuration Vulnerability in Devices Affected by Vendor Products | SecurityVulnerability.io

Trust: 3.25

Fetched: April 16, 2025, 9:27 a.m., Published: April 15, 2025, 9:45 p.m.
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-30512

CVE-2025-30514 : Information Disclosure Vulnerability in Smart Device Management Software by a Major Vendor | SecurityVulnerability.io

Trust: 3.25

Fetched: April 16, 2025, 9:26 a.m., Published: April 15, 2025, 9:05 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-30514

CVE-2025-31654 : Information Disclosure Vulnerability in Smart Home Device Management | SecurityVulnerability.io

Trust: 4.25

Fetched: April 16, 2025, 9:25 a.m., Published: April 15, 2025, 9:07 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-31654

DSA-2025-151: Security Update for Dell Trusted Device for Multiple Vulnerabilities | Dell US

Trust: 3.0

Fetched: April 16, 2025, 9:24 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-29984, CVE-2025-29983

CVE-2025-29223 Command Injection Vulnerability in Linksys E560...

Trust: 4.5

Fetched: April 16, 2025, 9:24 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-29223

Siemens Industrial Edge Device Kit Vulnerability: Critical Security Risks, Impact, and Mitigation St | Windows Forum

Trust: 3.75

Fetched: April 16, 2025, 9:23 a.m., Published: May 16, 2025, midnight
 Vulnerabilities: authentication flaw
Affected productsExternal IDs
vendor: trend model: security

Microsoft just patched 134 Windows security flaws including a zero-day used by hackers - update your PC right now | Tom's Guide

Trust: 3.0

Fetched: April 16, 2025, 9:23 a.m., Published: April 8, 2025, 9:44 p.m.
 Vulnerabilities: information disclosure, denial of service, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2025-29824

Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devices - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.5

Fetched: April 15, 2025, 9:36 a.m., Published: April 11, 2025, 5:46 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-42475, CVE-2024-21762, CVE-2023-27997

Critical Vulnerability in Siemens Industrial Edge Devices: CVE-2024-54092

Trust: 3.75

Fetched: April 15, 2025, 9:34 a.m., Published: April 10, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-54092