Sign-up

VARIoT news about IoT security

Siemens SIMATIC S7-1200 CPU V1/V2 Devices - ASSURANT™

Related entries in the VARIoT vulnerabilities database: VAR-201402-0435, VAR-201105-0788

Trust: 5.5

Fetched: Oct. 22, 2025, 9:49 a.m., Published: Oct. 21, 2025, noon
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: siemens model: simatic s7-1200 cpu
vendor: siemens model: simatic
vendor: siemens model: simatic s7-1200
vendor: siemens model: s7-1200 cpu
db: NVD ids: CVE-2011-20001, CVE-2011-20002

Hackers Exploited 34 Zero-Day Vulnerabilities And Earned $522,500 In Pwn2Own Ireland 2025

Trust: 5.5

Fetched: Oct. 22, 2025, 9:48 a.m., Published: Oct. 22, 2025, 6:28 a.m.
 Vulnerabilities: buffer overflow, format string bug, authentication bypass...
Affected productsExternal IDs
vendor: philips hue model: hue bridge
vendor: google model: home
vendor: samsung model: samsung galaxy
vendor: samsung model: printers
vendor: samsung model: printer
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: sonos model: sonos
vendor: home assistant model: home assistant
vendor: synology model: assistant
vendor: synology model: diskstation
vendor: philips model: hue bridge

Over 75,000 WatchGuard devices remain vulnerable to critical RCE vulnerability - HackYourMom

Trust: 3.75

Fetched: Oct. 22, 2025, 9:48 a.m., Published: Oct. 21, 2025, 9:19 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download

Trust: 4.25

Fetched: Oct. 22, 2025, 9:44 a.m., Published: Oct. 22, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
db: NVD ids: CVE-2025-9133

Siemens SIMATIC S7-1200 CPU V1/V2 Devices | CISA

Related entries in the VARIoT vulnerabilities database: VAR-201402-0435, VAR-201105-0788

Trust: 5.5

Fetched: Oct. 22, 2025, 9:43 a.m., Published: -
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: siemens model: simatic s7-1200 cpu
vendor: siemens model: simatic
vendor: siemens model: simatic s7-1200
vendor: siemens model: s7-1200 cpu
db: NVD ids: CVE-2011-20001, CVE-2011-20002

Cisco ASA and IOS Vulnerabilities Expose Critical Systems, Making Edge Automation Essential for Rapid Remediation | Puppet

Trust: 4.5

Fetched: Oct. 21, 2025, 9:34 a.m., Published: Sept. 26, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: trend model: security
vendor: cisco model: ios xe
vendor: cisco model: ios xe software
db: NVD ids: CVE-2025-20352, CVE-2025-20362, CVE-2025-20333

Windows 11, version 25H2 known issues and notifications | Microsoft Learn

Trust: 3.5

Fetched: Oct. 21, 2025, 9:33 a.m., Published: Oct. 21, 2025, midnight
 Vulnerabilities: feature bypass, security feature bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-30098

Over 71,000 WatchGuard Devices Exposed to Remote Code Execution Vulnerabilities

Trust: 5.75

Fetched: Oct. 21, 2025, 9:33 a.m., Published: Oct. 21, 2025, 6:55 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Dolby Digital Plus 0-Click Vulnerability Enables RCE Attack via Malicious Audio on Android - Cyber Security News

Trust: 3.75

Fetched: Oct. 21, 2025, 9:31 a.m., Published: Oct. 20, 2025, 1:48 p.m.
 Vulnerabilities: integer overflow, code execution
Affected productsExternal IDs
vendor: google model: android

F5 BIG-IP Vulnerability: 266,000 Devices at Risk Worldwide! 2,500 in Italy

Related entries in the VARIoT vulnerabilities database: VAR-202205-0394

Trust: 4.75

Fetched: Oct. 21, 2025, 9:30 a.m., Published: Oct. 20, 2025, 12:44 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: snort model: snort
db: NVD ids: CVE-2022-1388

WatchGuard Firebox Fiasco: 76,000 Devices Awaiting Cyber Doom! - The Nimble Nerd

Trust: 3.25

Fetched: Oct. 21, 2025, 9:30 a.m., Published: Oct. 20, 2025, 5:46 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: firebox

Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in 'Zero Disco' Attacks

Related entries in the VARIoT vulnerabilities database: VAR-201703-0892

Trust: 5.75

Fetched: Oct. 21, 2025, 9:29 a.m., Published: Oct. 16, 2025, 11:38 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: ios software
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: series
vendor: cisco model: ios xe software
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2025-20352, CVE-2017-3881

Critical vulnerability in WatchGuard VPN allowed attackers to take complete control of devices - HackYourMom

Trust: 4.5

Fetched: Oct. 21, 2025, 9:29 a.m., Published: Oct. 20, 2025, 9:22 a.m.
 Vulnerabilities: command injection, buffer overflow, code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Worrying WatchGuard VPN bug could let hackers hijack your devices - here’s how to stay safe | ITSC

Trust: 5.75

Fetched: Oct. 21, 2025, 9:20 a.m., Published: Oct. 20, 2025, 9:10 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration

Trust: 4.0

Fetched: Oct. 21, 2025, 9:20 a.m., Published: Oct. 21, 2025, 7:49 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-8078, CVE-2025-9133

71,000+ WatchGuard Devices Vulnerable to Remote Code Execution Attacks

Trust: 5.5

Fetched: Oct. 21, 2025, 9:18 a.m., Published: Oct. 21, 2025, 2:22 a.m.
 Vulnerabilities: memory corruption, improper bounds checking, code execution
Affected productsExternal IDs
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Worrying WatchGuard VPN bug could let hackers hijack your devices - here's how to stay safe | TechRadar

Trust: 4.75

Fetched: Oct. 21, 2025, 9:17 a.m., Published: Oct. 20, 2025, 1:10 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Cisco ASA 0-Day RCE Vulnerability Actively Exploited in the Wild

Trust: 4.75

Fetched: Oct. 19, 2025, 9:44 a.m., Published: Sept. 26, 2025, 6:13 a.m.
 Vulnerabilities: buffer overflow, improper validation, code execution
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2025-20362, CVE-2025-20333

Critical Vulnerability Exposes Android Devices to Remote Attacks - General - Krybot Blog

Trust: 4.25

Fetched: Oct. 19, 2025, 9:43 a.m., Published: Sept. 20, 2025, 12:29 p.m.
 Vulnerabilities: integer overflow, service crash
Affected productsExternal IDs
vendor: trend micro model: trend micro security
vendor: trend micro model: security
vendor: google model: android
vendor: trend model: trend micro security
vendor: trend model: security
vendor: essential model: phone

Microsoft's Final Free Windows 10 Update Patches 172 Vulnerabilities

Trust: 3.0

Fetched: Oct. 19, 2025, 9:43 a.m., Published: Oct. 18, 2025, 5 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs