Sign-up

VARIoT news about IoT security

Can't locate Pixel Buds Pro 2 in Find My Device - Google Pixel Buds Community

Trust: 3.0

Fetched: Sept. 3, 2025, 9:07 a.m., Published: Sept. 2, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: pixel

Quarterly Security Notification (August 2025)

Trust: 3.25

Fetched: Aug. 31, 2025, 11:32 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-545005

Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 | CISA

Trust: 5.5

Fetched: Aug. 31, 2025, 11:31 a.m., Published: Aug. 1, 2025, midnight
 Vulnerabilities: os command injection, command injection, default credentials
Affected productsExternal IDs
vendor: tyco model: istar ultra
db: NVD ids: CVE-2025-53695, CVE-2025-53696, CVE-2025-53700, CVE-2025-53698, CVE-2025-53697, CVE-2025-53699

zero day vulnerability

Trust: 5.25

Fetched: Aug. 31, 2025, 11:28 a.m., Published: Aug. 25, 2025, 3:29 a.m.
 Vulnerabilities: memory corruption, code execution
Affected productsExternal IDs
vendor: apple model: macos
vendor: trend model: security
db: NVD ids: CVE-2025-43300

ERROR: The request could not be satisfied

Trust: 3.25

Fetched: Aug. 31, 2025, 11:28 a.m., Published: -
 Vulnerabilities: configuration error
Affected productsExternal IDs

WhatsApp Fixes Bug That Secretly Hacked Data from Apple Devices

Trust: 4.75

Fetched: Aug. 31, 2025, 11:28 a.m., Published: Aug. 30, 2025, 11:02 a.m.
 Vulnerabilities: memory corruption
Affected productsExternal IDs
vendor: apple model: iphone
db: NVD ids: CVE-2025-55177, CVE-2025-43300

Siemens RUGGEDCOM ROX II | CISA

Trust: 4.5

Fetched: Aug. 31, 2025, 11:22 a.m., Published: Jan. 10, 2023, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: siemens model: ruggedcom rox rx1500
vendor: siemens model: ruggedcom
vendor: siemens model: rox ii
vendor: siemens model: ruggedcom rox rx1510
vendor: siemens model: ruggedcom rox rx1536
vendor: siemens model: ruggedcom rox rx1511
vendor: siemens model: ruggedcom rox mx5000
vendor: siemens model: ruggedcom rox rx1512
vendor: siemens model: ruggedcom rox rx1501
vendor: siemens model: ruggedcom rox rx1400
vendor: siemens model: ruggedcom rox rx5000
vendor: siemens model: ruggedcom rox rx1524
db: NVD ids: CVE-2025-40761

Embedded Security: Protecting Your Device from Tampering and Exploits - Developers Heaven

Trust: 3.25

Fetched: Aug. 31, 2025, 11:21 a.m., Published: Aug. 12, 2025, 12:29 p.m.
 Vulnerabilities: code execution, cross-site scripting, sql injection
Affected productsExternal IDs

What Are the Different Types of Vulnerability Scans?

Trust: 3.5

Fetched: Aug. 31, 2025, 11:20 a.m., Published: Aug. 14, 2025, midnight
 Vulnerabilities: cross-site scripting, sql injection
Affected productsExternal IDs

Microsoft Patch Tuesday August 2025: 107 Vulnerabilities Patched, Including 35 RCE Flaws

Trust: 5.25

Fetched: Aug. 31, 2025, 11:19 a.m., Published: Aug. 12, 2025, 5:53 p.m.
 Vulnerabilities: path traversal, denial of service, information disclosure...
Affected productsExternal IDs
vendor: google model: home
vendor: google model: android
db: NVD ids: CVE-2025-50169, CVE-2025-50161, CVE-2025-53134, CVE-2025-53779, CVE-2025-53789, CVE-2025-53138, CVE-2025-50164, CVE-2025-53737, CVE-2025-53728, CVE-2025-49736, CVE-2025-53149, CVE-2025-53154, CVE-2025-49759, CVE-2025-53142, CVE-2025-50153, CVE-2025-53772, CVE-2025-25005, CVE-2025-53736, CVE-2025-53735, CVE-2025-50176, CVE-2025-48807, CVE-2025-53723, CVE-2025-53148, CVE-2025-53759, CVE-2025-53783, CVE-2025-53730, CVE-2025-50172, CVE-2025-49745, CVE-2025-53155, CVE-2025-53720, CVE-2025-49762, CVE-2025-53740, CVE-2025-50155, CVE-2025-50156, CVE-2025-53766, CVE-2025-53725, CVE-2025-53786, CVE-2025-53143, CVE-2025-53769, CVE-2025-53727, CVE-2025-33051, CVE-2025-49751, CVE-2025-53734, CVE-2025-53153, CVE-2025-53738, CVE-2025-53773, CVE-2025-50158, CVE-2025-53137, CVE-2025-53788, CVE-2025-53781, CVE-2025-49755, CVE-2025-53133, CVE-2025-50173, CVE-2025-49707, CVE-2025-50166, CVE-2025-53724, CVE-2025-53778, CVE-2025-50160, CVE-2025-50165, CVE-2025-24999, CVE-2025-25006, CVE-2025-53716, CVE-2025-53718, CVE-2025-49712, CVE-2025-49743, CVE-2025-53141, CVE-2025-47954, CVE-2025-50168, CVE-2025-50157, CVE-2025-53732, CVE-2025-25007, CVE-2025-53147, CVE-2025-53729, CVE-2025-53741, CVE-2025-50170, CVE-2025-53131, CVE-2025-53719, CVE-2025-50163, CVE-2025-50167, CVE-2025-53760, CVE-2025-49758, CVE-2025-49761, CVE-2025-53793, CVE-2025-53140, CVE-2025-50154, CVE-2025-53733, CVE-2025-53136, CVE-2025-53765, CVE-2025-53135, CVE-2025-53761, CVE-2025-53156, CVE-2025-53722, CVE-2025-49757, CVE-2025-50171, CVE-2025-53151, CVE-2025-53721, CVE-2025-53726, CVE-2025-53145, CVE-2025-53144, CVE-2025-50159, CVE-2025-53784, CVE-2025-50177, CVE-2025-53739, CVE-2025-53731, CVE-2025-53132, CVE-2025-53152, CVE-2025-50162

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

Trust: 3.75

Fetched: Aug. 31, 2025, 11:18 a.m., Published: Aug. 13, 2025, 11:37 a.m.
 Vulnerabilities: os command injection, command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-25256

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

Trust: 3.75

Fetched: Aug. 31, 2025, 11:18 a.m., Published: Aug. 26, 2025, 5:23 p.m.
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
vendor: oneplus model: oneplus
vendor: google model: pixel
vendor: samsung model: galaxy
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: samsung galaxy
vendor: huawei model: huawei

CVE-2025-20241 - Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol Denial of Service Vulnerability - SecAlerts

Trust: 5.75

Fetched: Aug. 31, 2025, 11:17 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: nx-os
vendor: cisco model: cisco nexus 9000 series
vendor: cisco model: nexus
vendor: cisco model: nexus 9000 series
vendor: cisco model: cisco nx-os
vendor: cisco model: nexus 9000
vendor: cisco model: nx-os software
vendor: cisco model: series switches
vendor: cisco model: series
vendor: cisco model: nexus 3000
vendor: google model: nexus
db: NVD ids: CVE-2025-20241

NetScaler ADC/Gateway zero-day exploited by attackers (CVE-2025-7775) - updated! - Help Net Security

Trust: 4.25

Fetched: Aug. 31, 2025, 11:17 a.m., Published: Aug. 26, 2025, 1:34 p.m.
 Vulnerabilities: memory corruption, improper access control, denial of service...
Affected productsExternal IDs
vendor: citrix model: netscaler
vendor: citrix model: netscaler gateway
vendor: citrix model: application delivery controller
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler application delivery controller
db: NVD ids: CVE-2025-7776, CVE-2025-7775, CVE-2025-8424

Microsoft patches some very important vulnerabilities in August's patch Tuesday | Malwarebytes

Trust: 5.0

Fetched: Aug. 31, 2025, 11:17 a.m., Published: Aug. 13, 2025, 3:49 p.m.
 Vulnerabilities: information disclosure, code execution, buffer overflow
Affected productsExternal IDs
db: NVD ids: CVE-2025-50165, CVE-2025-53766

CVE-2025-20344 - Cisco Nexus Dashboard Path Traversal Vulnerability - SecAlerts

Trust: 4.75

Fetched: Aug. 31, 2025, 11:15 a.m., Published: -
 Vulnerabilities: path traversal
Affected productsExternal IDs
vendor: cisco model: nexus
vendor: google model: nexus
db: NVD ids: CVE-2025-20344

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Trust: 3.0

Fetched: Aug. 31, 2025, 11:15 a.m., Published: Aug. 12, 2025, 5:05 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: fortigate model: fortios

Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775

Trust: 5.5

Fetched: Aug. 31, 2025, 11:14 a.m., Published: Aug. 26, 2025, 5:29 p.m.
 Vulnerabilities: improper access control, code execution
Affected productsExternal IDs
vendor: citrix model: netscaler gateway
vendor: citrix model: gateway
vendor: citrix model: netscaler adc
vendor: citrix model: netscaler
db: NVD ids: CVE-2025-5777, CVE-2025-6543, CVE-2024-8069, CVE-2025-7776, CVE-2025-8424, CVE-2024-8068, CVE-2025-7775

WhatsApp patches vulnerability exploited in zero-day attacks - PRSOL:CC

Trust: 3.75

Fetched: Aug. 31, 2025, 11:14 a.m., Published: Aug. 31, 2025, 5:22 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: apple model: macos
db: NVD ids: CVE-2025-55177, CVE-2025-43300

Citrix Netscaler 0-day RCE Vulnerability Patched - Vulnerable Instances Reduced from 28.2K to 12.4K

Trust: 5.75

Fetched: Aug. 31, 2025, 11:13 a.m., Published: Aug. 29, 2025, 3:47 p.m.
 Vulnerabilities: code execution
Affected productsExternal IDs
vendor: trend model: security
vendor: trend model: internet security
vendor: citrix model: netscaler
db: NVD ids: CVE-2025-7775