Sign-up

VARIoT news about IoT security

WatchGuard Firebox Fiasco: 76,000 Devices Awaiting Cyber Doom! - The Nimble Nerd

Trust: 3.25

Fetched: Oct. 21, 2025, 9:30 a.m., Published: Oct. 20, 2025, 5:46 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: watchguard model: firebox

Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in 'Zero Disco' Attacks

Related entries in the VARIoT vulnerabilities database: VAR-201703-0892

Trust: 5.75

Fetched: Oct. 21, 2025, 9:29 a.m., Published: Oct. 16, 2025, 11:38 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: cisco model: ios software
vendor: cisco model: ios xe
vendor: cisco model: cisco ios
vendor: cisco model: series
vendor: cisco model: ios xe software
vendor: trend micro model: security
vendor: trend model: security
db: NVD ids: CVE-2025-20352, CVE-2017-3881

Critical vulnerability in WatchGuard VPN allowed attackers to take complete control of devices - HackYourMom

Trust: 4.5

Fetched: Oct. 21, 2025, 9:29 a.m., Published: Oct. 20, 2025, 9:22 a.m.
 Vulnerabilities: command injection, buffer overflow, code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Worrying WatchGuard VPN bug could let hackers hijack your devices - here’s how to stay safe | ITSC

Trust: 5.75

Fetched: Oct. 21, 2025, 9:20 a.m., Published: Oct. 20, 2025, 9:10 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration

Trust: 4.0

Fetched: Oct. 21, 2025, 9:20 a.m., Published: Oct. 21, 2025, 7:49 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-8078, CVE-2025-9133

71,000+ WatchGuard Devices Vulnerable to Remote Code Execution Attacks

Trust: 5.5

Fetched: Oct. 21, 2025, 9:18 a.m., Published: Oct. 21, 2025, 2:22 a.m.
 Vulnerabilities: memory corruption, improper bounds checking, code execution
Affected productsExternal IDs
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Worrying WatchGuard VPN bug could let hackers hijack your devices - here's how to stay safe | TechRadar

Trust: 4.75

Fetched: Oct. 21, 2025, 9:17 a.m., Published: Oct. 20, 2025, 1:10 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Cisco ASA 0-Day RCE Vulnerability Actively Exploited in the Wild

Trust: 4.75

Fetched: Oct. 19, 2025, 9:44 a.m., Published: Sept. 26, 2025, 6:13 a.m.
 Vulnerabilities: buffer overflow, improper validation, code execution
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
db: NVD ids: CVE-2025-20362, CVE-2025-20333

Critical Vulnerability Exposes Android Devices to Remote Attacks - General - Krybot Blog

Trust: 4.25

Fetched: Oct. 19, 2025, 9:43 a.m., Published: Sept. 20, 2025, 12:29 p.m.
 Vulnerabilities: integer overflow, service crash
Affected productsExternal IDs
vendor: trend micro model: trend micro security
vendor: trend micro model: security
vendor: google model: android
vendor: trend model: trend micro security
vendor: trend model: security
vendor: essential model: phone

Microsoft's Final Free Windows 10 Update Patches 172 Vulnerabilities

Trust: 3.0

Fetched: Oct. 19, 2025, 9:43 a.m., Published: Oct. 18, 2025, 5 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs

Severe OpenWrt Vulnerability Leaves Devices Vulnerable to Malicious Firmware Injection - Breach Spot

Trust: 4.0

Fetched: Oct. 19, 2025, 9:40 a.m., Published: Oct. 17, 2025, 9:45 a.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2024-54143

Windows Rust-based Kernel GDI Vulnerability Leads to Crash and Blue Screen of Death Error

Trust: 4.0

Fetched: Oct. 19, 2025, 9:38 a.m., Published: Oct. 17, 2025, 11:58 a.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: check point model: check point

Windows GDI Vulnerability in Rust Kernel Module Enables Remote Attacks

Trust: 3.75

Fetched: Oct. 19, 2025, 9:36 a.m., Published: Oct. 17, 2025, 9:46 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: check point model: check point
vendor: google model: home

Surface Laptop Studio September 2025 update is now live

Trust: 4.75

Fetched: Oct. 19, 2025, 9:35 a.m., Published: Sept. 30, 2025, 4 a.m.
 Vulnerabilities: denial of service, information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2022-38102, CVE-2022-36392

CVE-2023-53658 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 19, 2025, 9:33 a.m., Published: Oct. 7, 2025, 4:15 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2023-53658

CVE-2025-10961 | Armis Vulnerability Intelligence Database

Trust: 4.0

Fetched: Oct. 19, 2025, 9:33 a.m., Published: Sept. 25, 2025, 6:15 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-10961

CVE-2025-10653 | Armis Vulnerability Intelligence Database

Trust: 3.25

Fetched: Oct. 19, 2025, 9:33 a.m., Published: Oct. 2, 2025, 8:15 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2025-10653

WatchGuard Fireware OS Hit by Critical CVE-2025-9242 RCE Vulnerability

Trust: 4.75

Fetched: Oct. 19, 2025, 9:31 a.m., Published: Oct. 18, 2025, 5:25 p.m.
 Vulnerabilities: code injection
Affected productsExternal IDs
vendor: watchguard model: watchguard fireware
vendor: watchguard model: firebox
vendor: watchguard model: fireware
db: NVD ids: CVE-2025-9242

Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices

Trust: 4.0

Fetched: Oct. 19, 2025, 9:31 a.m., Published: Oct. 17, 2025, 8:30 a.m.
 Vulnerabilities: information leakage
Affected productsExternal IDs
db: NVD ids: CVE-2025-41703, CVE-2025-41705, CVE-2025-41707, CVE-2025-41704, CVE-2025-41706

CVE-2025-10964 | Armis Vulnerability Intelligence Database

Trust: 3.0

Fetched: Oct. 19, 2025, 9:31 a.m., Published: Sept. 25, 2025, 8:15 p.m.
 Vulnerabilities: command injection, service disruption
Affected productsExternal IDs
db: NVD ids: CVE-2025-10964