Sign-up

VARIoT news about IoT security

Chain of security weaknesses found in smart air compressor model - Help Net Security

Trust: 4.75

Fetched: Oct. 28, 2025, 9:23 a.m., Published: Oct. 28, 2025, 6:30 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: wireshark model: wireshark

Major Vulnerabilities Found in TP-Link VPN Routers - Infosecurity Magazine

Related entries in the VARIoT vulnerabilities database: VAR-202406-0858

Trust: 4.75

Fetched: Oct. 28, 2025, 9:23 a.m., Published: Oct. 23, 2025, 12:30 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: tp-link model: routers
db: NVD ids: CVE-2024-21827, CVE-2025-7850, CVE-2025-7851

HPESBNW04957 rev.1 - HPE Aruba Networking AOS-10 and AOS-8 Mobility Conductor, Controllers, and Gateways, Multiple Vulnerabilities

Trust: 3.5

Fetched: Oct. 28, 2025, 9:22 a.m., Published: -
 Vulnerabilities: command injection, code execution, denial of service...
Affected productsExternal IDs
db: NVD ids: CVE-2025-37137, CVE-2025-37143, CVE-2025-37134, CVE-2025-37140, CVE-2025-37141, CVE-2025-37145, CVE-2025-37135, CVE-2025-37133, CVE-2025-37132, CVE-2025-37139, CVE-2025-37144, CVE-2025-37138, CVE-2025-37142, CVE-2025-37136

81% Router Usres Have Not Changed Default Admin Passwords, Exposing Devices

Trust: 3.5

Fetched: Oct. 28, 2025, 9:21 a.m., Published: Oct. 28, 2025, 10:36 a.m.
 Vulnerabilities: default credentials, default password
Affected productsExternal IDs
vendor: wireshark model: wireshark

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Oct. 28, 2025, 9:21 a.m., Published: Oct. 28, 2025, midnight
 Vulnerabilities: configuration error
Affected productsExternal IDs

CVE-2025-62777 - MZK-DP300N Telnet Hard-Coded Credentials Vulnerability

Trust: 3.0

Fetched: Oct. 28, 2025, 9:20 a.m., Published: Oct. 28, 2025, 5:15 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-62777

Take Action: Out-of-band update to address a vulnerability in Windows Server Update Services (WSUS) - M365 Admin

Trust: 3.25

Fetched: Oct. 28, 2025, 9:20 a.m., Published: Oct. 24, 2025, 10:53 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-59287

CVE-2025-26452: Privilege Escalation Vulnerability in ResourcesImpl.java - Ameeba Exploit Tracker

Trust: 5.0

Fetched: Oct. 28, 2025, 9:18 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-26452

WhatsApp Hack Uncovers 2 Low-Risk Vulnerabilities, No Arbitrary Code Execution - CVE Vulnerability Alerts

Trust: 5.5

Fetched: Oct. 28, 2025, 9:17 a.m., Published: Oct. 28, 2025, 5:57 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2025-30401, CVE-2025-55177

Critical Apple Security Updates: Why You Need to Update Your Devices Now

Related entries in the VARIoT vulnerabilities database: VAR-202501-3666

Trust: 5.5

Fetched: Oct. 28, 2025, 9:17 a.m., Published: Oct. 27, 2025, midnight
 Vulnerabilities: memory corruption, code execution, privilege escalation
Affected productsExternal IDs
vendor: apple model: software update
vendor: apple model: ipad
vendor: apple model: macos
vendor: apple model: iphone
db: NVD ids: CVE-2025-24200, CVE-2025-43357, CVE-2025-24085, CVE-2025-24201, CVE-2025-43300, CVE-2025-43298, CVE-2025-43304, CVE-2025-43400, CVE-2025-48384

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Oct. 26, 2025, 9:52 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

Ngioweb Botnet Powers NSOCKS Residential Proxy Network by Targeting IoT Devices - Breach Spot

Trust: 5.0

Fetched: Oct. 26, 2025, 9:51 a.m., Published: Oct. 25, 2025, 1 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: check point model: check point

Update Canonical Ubuntu Desktop: USN-7831-1: Erlang vulnerabilities

Trust: 3.0

Fetched: Oct. 26, 2025, 9:50 a.m., Published: Jan. 26, 7831, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu

Update Canonical Ubuntu Desktop: USN-7828-1: Python LDAP vulnerabilities

Trust: 4.25

Fetched: Oct. 26, 2025, 9:49 a.m., Published: Jan. 26, 7828, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: canonical model: ubuntu
db: NVD ids: CVE-2025-61912, CVE-2025-61911

Android and Windows gamers worldwide potentially affected by bug in Unity game engine | The Record from Recorded Future News

Trust: 3.0

Fetched: Oct. 26, 2025, 9:48 a.m., Published: Oct. 6, 2025, midnight
 Vulnerabilities: information disclosure, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-59489

October 2025

Trust: 3.75

Fetched: Oct. 26, 2025, 9:46 a.m., Published: Oct. 25, 2025, midnight
 Vulnerabilities: integer overflow, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-20709, CVE-2025-20723, CVE-2025-20722, CVE-2025-20720, CVE-2025-20710, CVE-2025-20713, CVE-2025-20715, CVE-2025-20721, CVE-2025-20714, CVE-2025-20717, CVE-2025-20711, CVE-2025-20724, CVE-2025-20718, CVE-2025-20719, CVE-2025-20712, CVE-2025-20716

Pixel Update Bulletin-October 2025 | Android Open Source Project

Trust: 3.5

Fetched: Oct. 26, 2025, 9:45 a.m., Published: Oct. 26, 2025, midnight
 Vulnerabilities: denial of service, information disclosure, code execution
Affected productsExternal IDs
vendor: google model: pixel
vendor: google model: android

TP-Link patches critical Omada gateway vulnerabilities

Trust: 6.0

Fetched: Oct. 26, 2025, 9:45 a.m., Published: Oct. 22, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: tp-link model: routers
vendor: tp-link model: gateway
db: NVD ids: CVE-2025-7850, CVE-2025-6542, CVE-2025-6541, CVE-2025-7851

WatchGuard VPN Vulnerability Allows Remote Code Execution

Trust: 4.5

Fetched: Oct. 26, 2025, 9:44 a.m., Published: Oct. 17, 2025, 1:42 p.m.
 Vulnerabilities: buffer overflow, code execution
Affected productsExternal IDs
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

CISA Warns of Windows SMB Vulnerability Actively Exploited in Attacks

Trust: 4.75

Fetched: Oct. 26, 2025, 9:42 a.m., Published: Oct. 21, 2025, 2:42 a.m.
 Vulnerabilities: improper access control, access control flaw, privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-33073