Sign-up

VARIoT news about IoT security

Latest news

The news are found with our scripts for filtering search results.
Additional information about vulnerabilities, affected products and external identifiers are obtained with NLP and custom filters from found news.

ICS Vulnerability Report: Energy, Manufacturing Fixes Urged

Trust: 3.5

Fetched: April 16, 2025, 9:30 a.m., Published: April 10, 2025, 5:20 a.m.
 Vulnerabilities: weak password, path traversal, code execution
Affected productsExternal IDs
db: NVD ids: CVE-2025-25211, CVE-2024-4872, CVE-2025-23120, CVE-2024-3980, CVE-2025-26689

Vulnerability Trends - Vulmon

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 5.5

Fetched: April 16, 2025, 9:30 a.m., Published: April 29, 2025, midnight
 Vulnerabilities: session management vulnerability, directory traversal, buffer overflow...
Affected productsExternal IDs
vendor: google model: chrome
vendor: google model: google chrome
db: NVD ids: CVE-2025-32428, CVE-2025-32103, CVE-2025-22457, CVE-2024-7971, CVE-2025-30406, CVE-2024-0132, CVE-2025-0282, CVE-2024-56406, CVE-2025-27840, CVE-2024-26170, CVE-2025-32102, CVE-2025-24859, CVE-2024-50264, CVE-2025-21204, CVE-2025-31137, CVE-2024-4577, CVE-2022-42475, CVE-2023-27997, CVE-2025-29927, CVE-2025-29824

APT group ToddyCat exploits a vulnerability in ESET for DLL proxying | Securelist

Related entries in the VARIoT vulnerabilities database: VAR-202108-1843

Trust: 3.75

Fetched: April 16, 2025, 9:28 a.m., Published: Jan. 16, 2050, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: dell model: bios
db: NVD ids: CVE-2021-36276, CVE-2024-11859

Zero-day vulnerabilities: the real threat behind Netflix’s “Zero Day”

Trust: 3.0

Fetched: April 16, 2025, 9:28 a.m., Published: March 19, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
vendor: avast model: antivirus

CVE-2025-30512 : Remote Configuration Vulnerability in Devices Affected by Vendor Products | SecurityVulnerability.io

Trust: 3.25

Fetched: April 16, 2025, 9:27 a.m., Published: April 15, 2025, 9:45 p.m.
 Vulnerabilities: configuration vulnerability
Affected productsExternal IDs
db: NVD ids: CVE-2025-30512

CVE-2025-30514 : Information Disclosure Vulnerability in Smart Device Management Software by a Major Vendor | SecurityVulnerability.io

Trust: 3.25

Fetched: April 16, 2025, 9:26 a.m., Published: April 15, 2025, 9:05 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-30514

CVE-2025-31654 : Information Disclosure Vulnerability in Smart Home Device Management | SecurityVulnerability.io

Trust: 4.25

Fetched: April 16, 2025, 9:25 a.m., Published: April 15, 2025, 9:07 p.m.
 Vulnerabilities: information disclosure
Affected productsExternal IDs
db: NVD ids: CVE-2025-31654

DSA-2025-151: Security Update for Dell Trusted Device for Multiple Vulnerabilities | Dell US

Trust: 3.0

Fetched: April 16, 2025, 9:24 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2025-29984, CVE-2025-29983

CVE-2025-29223 Command Injection Vulnerability in Linksys E560...

Trust: 4.5

Fetched: April 16, 2025, 9:24 a.m., Published: April 6, 2025, midnight
 Vulnerabilities: command injection
Affected productsExternal IDs
db: NVD ids: CVE-2025-29223

Siemens Industrial Edge Device Kit Vulnerability: Critical Security Risks, Impact, and Mitigation St | Windows Forum

Trust: 3.75

Fetched: April 16, 2025, 9:23 a.m., Published: May 16, 2025, midnight
 Vulnerabilities: authentication flaw
Affected productsExternal IDs
vendor: trend model: security

Microsoft just patched 134 Windows security flaws including a zero-day used by hackers - update your PC right now | Tom's Guide

Trust: 3.0

Fetched: April 16, 2025, 9:23 a.m., Published: April 8, 2025, 9:44 p.m.
 Vulnerabilities: information disclosure, denial of service, security feature bypass...
Affected productsExternal IDs
db: NVD ids: CVE-2025-29824

Hackers exploit old FortiGate vulnerabilities, use symlink trick to retain limited access to patched devices - Help Net Security

Related entries in the VARIoT vulnerabilities database: VAR-202212-1132

Trust: 4.5

Fetched: April 15, 2025, 9:36 a.m., Published: April 11, 2025, 5:46 p.m.
 Vulnerabilities: code execution, authentication bypass
Affected productsExternal IDs
vendor: fortigate model: fortios
db: NVD ids: CVE-2022-42475, CVE-2024-21762, CVE-2023-27997

Critical Vulnerability in Siemens Industrial Edge Devices: CVE-2024-54092

Trust: 3.75

Fetched: April 15, 2025, 9:34 a.m., Published: April 10, 2025, midnight
 Vulnerabilities: authentication bypass
Affected productsExternal IDs
db: NVD ids: CVE-2024-54092

Threats to Information Security | GeeksforGeeks

Trust: 3.0

Fetched: April 15, 2025, 9:31 a.m., Published: June 19, 2018, 11:45 a.m.
 Vulnerabilities: denial of service
Affected productsExternal IDs

3 Zero-Day Vulnerabilities backported & fixed in Apple Devices - Intrucept

Trust: 5.75

Fetched: April 15, 2025, 9:27 a.m., Published: April 2, 2025, 12:42 p.m.
 Vulnerabilities: code execution, security bypass, authorization vulnerability...
Affected productsExternal IDs
vendor: apple model: iphone
vendor: apple model: tvos
vendor: apple model: ipad
vendor: apple model: watch
vendor: apple model: safari
vendor: apple model: webkit
vendor: apple model: apple tv
vendor: apple model: macos
vendor: apple model: watchos
db: NVD ids: CVE-2025-24085, CVE-2025-24200, CVE-2025-24201

Protecting Your Network: How To Secure Perimeter Devices From Ransomware

Trust: 4.75

Fetched: April 15, 2025, 9:26 a.m., Published: April 12, 2025, 2:30 a.m.
 Vulnerabilities: code execution, default credentials
Affected productsExternal IDs
vendor: sonicwall model: remote access
db: NVD ids: CVE-2024-21887

Security Vulnerability Detection and Defense of Smart Home Systems Based on the Internet of Things | SpringerLink

Trust: 4.0

Fetched: April 15, 2025, 9:23 a.m., Published: April 15, 2025, midnight
 Vulnerabilities: -

FortiSwitch vulnerability may give attackers control over vulnerable devices (CVE-2024-48887) - Help Net Security

Trust: 3.25

Fetched: April 15, 2025, 9:22 a.m., Published: April 10, 2025, 10:09 a.m.
 Vulnerabilities: -
Affected productsExternal IDs
db: NVD ids: CVE-2024-48887

Galaxy S24 Vulnerability Poses Risk of Unauthorized File Access

Trust: 4.75

Fetched: April 15, 2025, 9:20 a.m., Published: April 15, 2025, 5:31 a.m.
 Vulnerabilities: directory traversal
Affected productsExternal IDs
vendor: samsung model: mobile
vendor: samsung model: samsung
vendor: samsung model: galaxy
vendor: samsung model: samsung galaxy
db: NVD ids: CVE-2024-49421

Siemens SENTRON 7KT PAC1260 Vulnerabilities: Steps for Mitigation and Security | Windows Forum

Trust: 3.5

Fetched: April 15, 2025, 9:15 a.m., Published: April 7, 2025, midnight
 Vulnerabilities: cross-site request forgery, code execution, request forgery...
Affected productsExternal IDs
db: NVD ids: CVE-2024-41788, CVE-2024-41793, CVE-2024-41792, CVE-2024-41795, CVE-2024-41796, CVE-2024-41794, CVE-2024-41790, CVE-2024-41791, CVE-2024-41789