Sign-up

VARIoT news about IoT security

Trend Micro Apex One (On-Prem) Zero-day Vulnerabilities Exploited in the Wild (CVE-2025-54948 & CVE-2025-54987) - Qualys ThreatPROTECT

Trust: 5.5

Fetched: Aug. 17, 2025, 11:09 a.m., Published: -
 Vulnerabilities: code execution, command injection
Affected productsExternal IDs
vendor: trend micro model: security
vendor: trend micro model: trend micro security
vendor: trendmicro model: security
vendor: trendmicro model: trend micro security
vendor: trend model: security
vendor: trend model: trend micro security
db: NVD ids: CVE-2025-54948, CVE-2025-54987

Third of Exploited Flaws Weaponized Within a Day of Disclosure - Infosecurity Magazine

Trust: 3.0

Fetched: Aug. 17, 2025, 11:08 a.m., Published: July 30, 2025, 12:45 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: ip phones

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities

Trust: 5.0

Fetched: Aug. 17, 2025, 11:08 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: command injection
Affected productsExternal IDs
vendor: cisco model: asa software
vendor: cisco model: adaptive security appliance

LG Innotek Camera Model LNV5110R | CISA

Trust: 4.0

Fetched: Aug. 17, 2025, 11:08 a.m., Published: Aug. 1, 2025, midnight
 Vulnerabilities: code execution, authentication bypass, authentication vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-7742

Rockwell Automation Studio 5000 Logix Designer | CISA

Trust: 3.5

Fetched: Aug. 17, 2025, 11:07 a.m., Published: Aug. 17, 5000, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: rockwell automation model: studio 5000
vendor: rockwell automation model: studio 5000 logix designer
vendor: rockwell model: studio 5000
vendor: rockwell model: studio 5000 logix designer
db: NVD ids: CVE-2025-7971

CVE-2025-20265 - Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability - SecAlerts

Trust: 4.0

Fetched: Aug. 17, 2025, 11:07 a.m., Published: -
 Vulnerabilities: code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-20265

CVE-2025-20218 - Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability - SecAlerts

Trust: 3.75

Fetched: Aug. 17, 2025, 11:06 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: firepower management center
db: NVD ids: CVE-2025-20218

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities

Trust: 3.75

Fetched: Aug. 17, 2025, 11:05 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: adaptive security appliance
vendor: cisco model: asa software

cisco-sa-fp2k-IPsec-dos-tjwgdZCO - Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 2100 Series IPv6 over IPsec Denial of Service Vulnerability - SecAlerts

Trust: 4.5

Fetched: Aug. 17, 2025, 11:04 a.m., Published: -
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: firepower
vendor: cisco model: adaptive security appliance
vendor: cisco model: series
vendor: cisco model: firepower 2100

CVE-2025-8817: Critical Stack-Based Buffer Overflow Vulnerability in Linksys Devices - Cybersecurity Exploit Tracker by Ameeba

Related entries in the VARIoT vulnerabilities database: VAR-202508-0381

Trust: 5.5

Fetched: Aug. 17, 2025, 11:04 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: code execution, buffer overflow
Affected productsExternal IDs
vendor: linksys model: re6500
vendor: linksys model: re6300
db: NVD ids: CVE-2025-8817

CVE-2025-38532 - net: libwx: properly reset Rx ring descriptor - SecAlerts

Trust: 3.75

Fetched: Aug. 17, 2025, 11:03 a.m., Published: -
 Vulnerabilities: -
Affected productsExternal IDs
vendor: google model: wifi
db: NVD ids: CVE-2025-38532

Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities

Trust: 4.75

Fetched: Aug. 17, 2025, 11:03 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs
vendor: cisco model: ios xe
vendor: cisco model: adaptive security appliance
vendor: cisco model: router
vendor: cisco model: nx-os
vendor: cisco model: ios software
vendor: cisco model: ios xr software
vendor: cisco model: cisco ios xe
vendor: cisco model: ios xr
vendor: cisco model: cisco ios
vendor: cisco model: asa software
vendor: cisco model: nx-os software
vendor: cisco model: ios xe software
db: NVD ids: CVE-2025-20252, CVE-2025-20239, CVE-2025-20224, CVE-2025-20225, CVE-2025-20254, CVE-2025-20253

CVE-2025-8826: Critical Buffer Overflow Vulnerability in Linksys Wireless Range Extenders - Cybersecurity Exploit Tracker by Ameeba

Related entries in the VARIoT vulnerabilities database: VAR-202508-0363

Trust: 5.5

Fetched: Aug. 17, 2025, 11:02 a.m., Published: Nov. 30, 0001, midnight
 Vulnerabilities: memory corruption, buffer overflow
Affected productsExternal IDs
vendor: linksys model: re6500
vendor: linksys model: re6300
db: NVD ids: CVE-2025-8826

Maximum severity Cisco ISE vulnerabilities exploited by attackers - Help Net Security

Trust: 3.75

Fetched: Aug. 17, 2025, 11:02 a.m., Published: July 23, 2025, 11:37 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: cisco identity services engine
vendor: cisco model: identity services engine
db: NVD ids: CVE-2025-20281, CVE-2025-20337, CVE-2025-20282

WinRAR vulnerability exploited by two different groups | Malwarebytes

Trust: 3.75

Fetched: Aug. 17, 2025, 11:02 a.m., Published: Aug. 12, 2025, 4:28 p.m.
 Vulnerabilities: directory traversal, path traversal
Affected productsExternal IDs
db: NVD ids: CVE-2025-8088

Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability

Trust: 3.25

Fetched: Aug. 17, 2025, 11:01 a.m., Published: Aug. 14, 2025, 3:53 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: cisco model: asa software

CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

Trust: 3.75

Fetched: Aug. 17, 2025, 11:01 a.m., Published: July 28, 2025, 9:30 p.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: palo alto networks model: palo alto networks globalprotect
vendor: palo alto networks model: networks
vendor: palo alto networks model: networks globalprotect
vendor: palo alto networks model: pan-os
vendor: palo_alto_networks model: palo alto networks globalprotect
vendor: palo_alto_networks model: networks
vendor: palo_alto_networks model: networks globalprotect
vendor: palo_alto_networks model: pan-os
vendor: palo model: palo alto networks globalprotect
vendor: palo model: networks
vendor: palo model: networks globalprotect
vendor: palo model: pan-os
db: NVD ids: CVE-2025-2179

Your Webcam Can Be a Hacker's Weapon: New 'BadCam' Attack Hijacks Lenovo Devices

Trust: 3.25

Fetched: Aug. 17, 2025, 11 a.m., Published: Aug. 11, 2025, 8:41 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
vendor: lenovo model: system

Ivanti Under Siege: Investigating the Ivanti Endpoint Manager Mobile Vulnerabilities (CVE-2025-4427 & CVE-2025-4428)

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.75

Fetched: Aug. 17, 2025, 11 a.m., Published: Aug. 15, 2025, 1:28 p.m.
 Vulnerabilities: code execution, memory corruption, privilege escalation...
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2025-4428, CVE-2022-42475, CVE-2024-21762, CVE-2025-4427, CVE-2023-27997

CVE-2025-38531 : Linux Kernel Vulnerability in ST Sensors: Use of Uninitialized Device Structures

Trust: 3.25

Fetched: Aug. 17, 2025, 10:59 a.m., Published: Aug. 16, 2025, 11:12 a.m.
 Vulnerabilities: kernel panic
Affected productsExternal IDs
db: NVD ids: CVE-2025-38531