Sign-up

VARIoT news about IoT security

Linux USB Audio Driver Vulnerability Exploited by Malicious USB Devices in the Wild - Boardor

Trust: 3.75

Fetched: Oct. 15, 2025, 9:23 a.m., Published: Oct. 15, 2025, 8:13 a.m.
 Vulnerabilities: system crash, code execution, privilege escalation
Affected productsExternal IDs

CVE-2025-39855 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 15, 2025, 9:22 a.m., Published: Sept. 19, 2025, 4:15 p.m.
 Vulnerabilities: privilege escalation, denial of service
Affected productsExternal IDs
db: NVD ids: CVE-2025-39855

Hackers Can Access 2FA Codes and Private Messages on Android Devices - Breach Spot

Trust: 3.75

Fetched: Oct. 15, 2025, 9:20 a.m., Published: Oct. 14, 2025, 4:30 p.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android

CVE-2017-20204 - DBLTek GoIP Telnet Admin Interface Undocumented Backdoor - SecAlerts

Trust: 4.75

Fetched: Oct. 15, 2025, 9:20 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: dbltek model: dbltek
db: NVD ids: CVE-2017-20204

CDPSvc Memory Corruption: Local Privilege Escalation and CVE Fragmentation (Mid 2025) | Windows Forum

Trust: 3.5

Fetched: Oct. 15, 2025, 9:19 a.m., Published: Oct. 14, 2025, 9:24 p.m.
 Vulnerabilities: code injection, privilege escalation, heap corruption...
Affected productsExternal IDs

Pixel-stealing “Pixnapping” attack targets Android devices | Malwarebytes

Trust: 3.75

Fetched: Oct. 15, 2025, 9:19 a.m., Published: Oct. 14, 2025, 12:21 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: samsung model: samsung galaxy
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: google model: pixel
vendor: google model: android
db: NVD ids: CVE-2025-48561

CVE-2025-55677: Windows Device Association Broker Local Privilege Escalation | Windows Forum

Trust: 4.5

Fetched: Oct. 15, 2025, 9:17 a.m., Published: Oct. 14, 2025, 8:52 p.m.
 Vulnerabilities: code execution, privilege escalation, memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-55677

CVE-2025-50174 Windows Device Association Broker EoP Explained | Windows Forum

Trust: 4.5

Fetched: Oct. 15, 2025, 9:13 a.m., Published: Oct. 14, 2025, 7:42 p.m.
 Vulnerabilities: privilege escalation, script execution, memory corruption...
Affected productsExternal IDs
db: NVD ids: CVE-2025-50174

Many OnePlus smartphones have a major SMS vulnerability, and a fix isn't coming before mid-October - GSMArena.com news

Trust: 5.75

Fetched: Oct. 14, 2025, 9:23 a.m., Published: Oct. 14, 2025, midnight
 Vulnerabilities: information disclosure
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184

Cisco Patches ASA, FTD, and IOS Vulnerabilities | Arctic Wolf

Trust: 4.75

Fetched: Oct. 14, 2025, 9:23 a.m., Published: Sept. 26, 2025, 4:03 p.m.
 Vulnerabilities: denial of service, code execution
Affected productsExternal IDs
vendor: cisco model: cisco ios xr
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xr software
vendor: cisco model: ios xr
vendor: cisco model: adaptive security appliance
vendor: cisco model: ios xe
db: NVD ids: CVE-2025-20363, CVE-2025-20333, CVE-2025-20352, CVE-2025-20362

Analyzing the Vulnerabilities and Security Risks Associated with IoT Devices and Networks | SpringerLink

Trust: 3.75

Fetched: Oct. 14, 2025, 9:22 a.m., Published: Oct. 14, 2026, midnight
 Vulnerabilities: -

Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Trust: 3.0

Fetched: Oct. 14, 2025, 9:21 a.m., Published: Oct. 1, 2025, 12:36 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-10725

WAGO Device Sphere and Solution Builder Vulnerability Expose Database and User Credentials - Advisories

Trust: 5.0

Fetched: Oct. 14, 2025, 9:21 a.m., Published: Oct. 9, 2025, midnight
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: wago model: wago
db: NVD ids: CVE-2025-41715, CVE-2025-41716

Canon Devices - Authentication Bypass in Catwalk Server (CVE-2021-38154) - Vulnerability & Exploit Database

Trust: 5.25

Fetched: Oct. 14, 2025, 9:20 a.m., Published: Oct. 7, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: canon model: ir-adv
db: NVD ids: CVE-2021-38154

OxygenOS 12+ devices affected by major SMS vulnerability

Trust: 4.5

Fetched: Oct. 14, 2025, 9:19 a.m., Published: Oct. 5, 2025, 2:57 a.m.
 Vulnerabilities: sql injection
Affected productsExternal IDs
vendor: google model: android
vendor: oneplus model: one
vendor: oneplus model: oneplus
vendor: oneplus model: oxygenos
db: NVD ids: CVE-2025-10184

TALOS-2025-2227 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Trust: 4.25

Fetched: Oct. 14, 2025, 9:19 a.m., Published: -
 Vulnerabilities: command injection, command execution, os command injection...
Affected productsExternal IDs
vendor: cisco model: router
vendor: cisco model: industrial router
db: NVD ids: CVE-2025-54403, CVE-2025-54404

Keysight Ixia Vision Product Family (Update A) | CISA

Trust: 3.75

Fetched: Oct. 14, 2025, 9:17 a.m., Published: Sept. 30, 2025, midnight
 Vulnerabilities: entity injection, path traversal, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-24525, CVE-2025-21095, CVE-2025-24494, CVE-2025-23416, CVE-2025-24521

Cisco IOS and IOS XE Software CLI Denial of Service Vulnerability

Trust: 4.0

Fetched: Oct. 14, 2025, 9:17 a.m., Published: Sept. 24, 2025, 4:06 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe software
vendor: cisco model: cisco ios
vendor: cisco model: ios xe

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

Trust: 4.0

Fetched: Oct. 14, 2025, 9:16 a.m., Published: Sept. 25, 2025, 4:10 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: device manager
vendor: cisco model: adaptive security appliance software
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software

CVE-2025-58301 - Cisco Device Management Module Buffer Overflow Vulnerability

Trust: 6.0

Fetched: Oct. 14, 2025, 9:16 a.m., Published: Oct. 11, 2025, 10:15 a.m.
 Vulnerabilities: buffer overflow
Affected productsExternal IDs
vendor: huawei model: huawei
db: NVD ids: CVE-2025-58301