Sign-up

VARIoT news about IoT security

Frostbyte10 bugs put grocery refrigeration devices at risk • The Register

Trust: 3.75

Fetched: Sept. 23, 2025, 9:54 a.m., Published: -
 Vulnerabilities: privilege escalation, authentication flaw, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2025-52548, CVE-2025-52547, CVE-2025-52549, CVE-2025-52543, CVE-2025-52546, CVE-2025-52550, CVE-2025-52545, CVE-2025-6519, CVE-2025-52544, CVE-2025-52551

Windows Local Privilege Escalation through the bitpixie Vulnerability | SySS Tech Blog

Trust: 4.75

Fetched: Sept. 23, 2025, 9:52 a.m., Published: Sept. 15, 2025, 6 a.m.
 Vulnerabilities: privilege escalation
Affected productsExternal IDs
vendor: dnsmasq model: dnsmasq
db: NVD ids: CVE-2024-38058, CVE-2024-1086

CVE-2025-50110: Sensitive Information Exposure in AVTECH EagleEyes Lite 2.0.0 - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.0

Fetched: Sept. 23, 2025, 9:52 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: information exposure
Affected productsExternal IDs
db: NVD ids: CVE-2025-50110

Apple Fixes 0-Day Vulnerabilities in Older version of iPhones and iPad

Trust: 4.5

Fetched: Sept. 23, 2025, 9:51 a.m., Published: Sept. 17, 2025, 12:53 p.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: software update
vendor: apple model: ipad
vendor: apple model: iphone
db: NVD ids: CVE-2025-43300

Apple issues security updates for iPhone, iPad, Mac

Trust: 4.25

Fetched: Sept. 23, 2025, 9:50 a.m., Published: Sept. 22, 2025, 6:46 p.m.
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend model: security
vendor: apple model: iphone
vendor: apple model: mac os
vendor: apple model: safari
vendor: apple model: software update
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: watchos
db: NVD ids: CVE-2025-432543298, CVE-2025-43300, CVE-2025-43304

Cognex In-Sight Explorer and In-Sight Camera Firmware | CISA

Trust: 4.5

Fetched: Sept. 23, 2025, 9:50 a.m., Published: Sept. 1, 2025, midnight
 Vulnerabilities: replay attack, authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-53947, CVE-2025-52873, CVE-2025-54754, CVE-2025-54860, CVE-2025-54497, CVE-2025-54818, CVE-2025-53969, CVE-2025-47698, CVE-2025-54810

Microsoft Visual Studio Code Security Vulnerabilities in 2025

Trust: 4.75

Fetched: Sept. 23, 2025, 9:49 a.m., Published: Sept. 23, 2025, midnight
 Vulnerabilities: privilege escalation, improper access control, code execution...
Affected productsExternal IDs
db: NVD ids: CVE-2022-24526, CVE-2021-43891, CVE-2024-49049, CVE-2025-20570, CVE-2021-34528, CVE-2025-55319, CVE-2021-28475, CVE-2023-29338, CVE-2021-31214, CVE-2020-17148, CVE-2021-27084, CVE-2024-49050, CVE-2025-21264, CVE-2023-36742, CVE-2023-21779, CVE-2021-34529, CVE-2020-17104, CVE-2022-38020, CVE-2025-32726, CVE-2022-30129, CVE-2022-26921, CVE-2020-17023, CVE-2025-49714, CVE-2022-41034, CVE-2021-34479, CVE-2020-16881, CVE-2025-24039, CVE-2025-26631, CVE-2021-42322, CVE-2022-41042, CVE-2020-17159, CVE-2021-27060, CVE-2021-28457, CVE-2023-24893, CVE-2025-24042, CVE-2021-28469, CVE-2021-26437, CVE-2021-28473, CVE-2021-28967, CVE-2023-33144, CVE-2024-26165, CVE-2022-21991, CVE-2021-28477, CVE-2021-1639, CVE-2020-17150, CVE-2024-43601, CVE-2021-43908, CVE-2020-16977, CVE-2024-43488, CVE-2021-31211, CVE-2021-28471

CVE-2025-9242 Vulnerability In WatchGuard Firebox VPN

Trust: 4.5

Fetched: Sept. 23, 2025, 9:48 a.m., Published: Sept. 19, 2025, 10:41 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Mitigating IoT Threats Using Secure System Architecture and Device Integrity Checks[v1] | Preprints.org

Trust: 4.0

Fetched: Sept. 23, 2025, 9:45 a.m., Published: Sept. 3, 2025, midnight
 Vulnerabilities: authentication issue, default credentials, default password...
Affected productsExternal IDs
vendor: trendmicro model: security
vendor: schneider model: monitor
vendor: trend model: security
vendor: huawei model: huawei
vendor: essential model: phone
vendor: trend micro model: security
vendor: cisco model: series
vendor: cisco model: technical support
vendor: cisco model: h

Update your Apple devices to fix dozens of vulnerabilities | Malwarebytes

Trust: 3.75

Fetched: Sept. 23, 2025, 9:43 a.m., Published: Sept. 16, 2025, 7:48 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: software update
vendor: apple model: macos
vendor: apple model: ipad
vendor: apple model: watchos
vendor: apple model: watch
vendor: apple model: apple tv
vendor: apple model: ipod touch
vendor: apple model: iphone
vendor: apple model: ipad air
vendor: apple model: macbook
vendor: apple model: imac
vendor: apple model: safari
vendor: apple model: macbook air
vendor: apple model: macbook pro
db: NVD ids: CVE-2025-43357, CVE-2025-43327

Sophos AP6 Authentication Bypass Vulnerability Enables Remote Device Compromise - Advisories

Trust: 5.25

Fetched: Sept. 23, 2025, 9:42 a.m., Published: Sept. 3, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-10159

Westermo Network Technologies WeOS 5 | CISA

Trust: 5.0

Fetched: Sept. 23, 2025, 9:41 a.m., Published: Sept. 5, 2025, midnight
 Vulnerabilities: improper validation
Affected productsExternal IDs
vendor: westermo model: weos
db: NVD ids: CVE-2025-46419

Phoenix (CVE-2025-6202): A New Rowhammer Attack Bypasses DDR5 Protections

Trust: 5.5

Fetched: Sept. 23, 2025, 9:38 a.m., Published: Sept. 18, 2025, 12:06 a.m.
 Vulnerabilities: privilege escalation, memory corruption
Affected productsExternal IDs
vendor: dram model: dram
db: NVD ids: CVE-2025-6202

CVE-2025-57578: Critical Vulnerability in H3C Magic M Device Allows Remote Code Execution - Cybersecurity Exploit Tracker by Ameeba

Trust: 5.0

Fetched: Sept. 23, 2025, 9:38 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: default password, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-57578

CVE-2025-50777: Incorrect Access Control Vulnerability in AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.25

Fetched: Sept. 23, 2025, 9:37 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: access control vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-50777

CVE-2025-39871 - dmaengine: idxd: Remove improper idxd_free - SecAlerts

Trust: 4.0

Fetched: Sept. 23, 2025, 9:37 a.m., Published: -
 Vulnerabilities: memory corruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-39871

Is Your Business Network Exposed by the WatchGuard Firebox Flaw (CVE-2025-9242)? - PUPUWEB

Trust: 5.5

Fetched: Sept. 23, 2025, 9:36 a.m., Published: Sept. 21, 2025, 3:34 a.m.
 Vulnerabilities: code execution, system crash
Affected productsExternal IDs
vendor: watchguard model: fireware
vendor: watchguard model: firebox
db: NVD ids: CVE-2025-9242

Samsung Security Update Fixes CVE-2025-21043 Zero-Day

Trust: 5.25

Fetched: Sept. 23, 2025, 9:36 a.m., Published: Sept. 16, 2025, 3:27 p.m.
 Vulnerabilities: privilege escalation, code execution
Affected productsExternal IDs
vendor: samsung model: samsung
vendor: samsung model: samsung galaxy
vendor: samsung model: galaxy
vendor: samsung model: mobile devices
vendor: samsung model: mobile
vendor: google model: android
db: NVD ids: CVE-2025-48543, CVE-2025-21043, CVE-2025-38352

CVE-2025-57174: Persistent Vulnerability in Siklu Communications Etherhaul Devices Due to Hardcoded AES Encryption Keys - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.0

Fetched: Sept. 23, 2025, 9:35 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: siklu model: etherhaul
db: NVD ids: CVE-2025-57174

CVE-2025-57577: Remote Code Execution Vulnerability in H3C Device R365V300R004 - Cybersecurity Exploit Tracker by Ameeba

Trust: 4.75

Fetched: Sept. 23, 2025, 9:34 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: default credentials, default password, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-57577