VARIoT latest news about IoT security

Multiple vulnerabilities found in ICONICS industrial SCADA software \| CyberScoop Trust: 4.5 Fetched: March 18, 2025, 9:19 a.m., Published: March 10, 2025, 8:13 p.m.	Vulnerabilities: privilege escalation, denial of service

Affected products

External IDs

vendor:	iconics	model:	genesis64
vendor:	palo	model:	networks
vendor:	palo alto networks	model:	networks

db:

NVD

ids:

CVE-2024-1182, CVE-2024-7587

Update Your iPhone Now to Fix Safari Security Flaw Trust: 3.75 Fetched: March 18, 2025, 9:18 a.m., Published: March 14, 2025, 10:07 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	google	model:	chrome
vendor:	apple	model:	safari
vendor:	apple	model:	ipad air
vendor:	apple	model:	webkit
vendor:	apple	model:	ipad
vendor:	apple	model:	macos
vendor:	apple	model:	software update
vendor:	apple	model:	iphone

db:

NVD

ids:

CVE-2025-24201

SSA-787280 Trust: 3.0 Fetched: March 18, 2025, 9:17 a.m., Published: March 1, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2024-56336

CVE-2025-27595 - Cisco Device Weak Password Hash Vulnerability Trust: 5.0 Fetched: March 18, 2025, 9:17 a.m., Published: March 14, 2025, 1:15 p.m.	Vulnerabilities: weak password

Affected products

External IDs

db:

NVD

ids:

CVE-2025-27595

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability Trust: 4.75 Fetched: March 18, 2025, 9:16 a.m., Published: March 12, 2025, 3:54 p.m.	Vulnerabilities: denial of service

Affected products

External IDs

vendor:	cisco	model:	ios xr software
vendor:	cisco	model:	ios xr
vendor:	cisco	model:	series routers
vendor:	cisco	model:	cisco ios
vendor:	cisco	model:	series
vendor:	cisco	model:	cisco ios xr
vendor:	cisco	model:	routers

Hackers Exploiting TP-Link Vulnerability to Gain Root Access Trust: 4.5 Fetched: March 18, 2025, 9:16 a.m., Published: March 17, 2025, 6:29 a.m.	Vulnerabilities: authentication bypass, brute force attack

Affected products

External IDs

vendor:	tp-link	model:	wr840n
vendor:	tp-link	model:	tl-wr841n
vendor:	tp-link	model:	wr841n
vendor:	tp-link	model:	routers
vendor:	tp-link	model:	tl-wr840n

db:

NVD

ids:

CVE-2024-57040

CISA KEV Catalog Update: Five High-Risk Vulnerabilities to Watch \| Windows Forum Related entries in the VARIoT vulnerabilities database: VAR-202304-1067 Trust: 4.5 Fetched: March 18, 2025, 9:15 a.m., Published: May 18, 2025, midnight	Vulnerabilities: arbitrary command execution, command injection, privilege escalation...

Affected products

External IDs

vendor:	hitachi vantara	model:	pentaho
vendor:	hitachi vantara	model:	pentaho business analytics
vendor:	cisco	model:	small business rv
vendor:	cisco	model:	series routers
vendor:	cisco	model:	rv016
vendor:	cisco	model:	rv042
vendor:	cisco	model:	rv320
vendor:	cisco	model:	router
vendor:	cisco	model:	small business
vendor:	cisco	model:	cisco routers
vendor:	cisco	model:	small business rv series routers
vendor:	cisco	model:	series
vendor:	cisco	model:	rv082
vendor:	cisco	model:	rv042g
vendor:	cisco	model:	routers
vendor:	cisco	model:	rv325
vendor:	cisco	model:	cisco small business
vendor:	hitachi	model:	vantara pentaho

db:

NVD

ids:

CVE-2022-43939, CVE-2023-20118, CVE-2018-8639, CVE-2024-4885, CVE-2022-43769

CVE-2025-2369 : Stack-Based Buffer Overflow Vulnerability in TOTOLINK EX1800T Devices \| SecurityVulnerability.io Trust: 4.25 Fetched: March 18, 2025, 9:15 a.m., Published: March 17, 2025, 9:15 a.m.	Vulnerabilities: buffer overflow

Affected products

External IDs

db:

NVD

ids:

CVE-2025-2369

CVE-2024-53032 - VMware ESXi Keyboard Virtual Device Memory Corruption Vulnerability Trust: 3.0 Fetched: March 18, 2025, 9:14 a.m., Published: March 3, 2025, 11:15 a.m.	Vulnerabilities: memory corruption

Affected products

External IDs

db:

NVD

ids:

CVE-2024-53032

If you're using an Apple device, update it right now to avoid a zero-day vulnerability - MSPoweruser Trust: 4.0 Fetched: March 18, 2025, 9:14 a.m., Published: March 12, 2025, 11:51 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	macos
vendor:	apple	model:	ipad air
vendor:	apple	model:	iphone
vendor:	apple	model:	webkit
vendor:	apple	model:	ipad
vendor:	apple	model:	safari

db:

NVD

ids:

CVE-2025-24201

How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932 - Microsoft Support Trust: 4.5 Fetched: March 18, 2025, 9:11 a.m., Published: May 9, 2023, midnight	Vulnerabilities: security feature bypass, feature bypass

Affected products

External IDs

vendor:

apple

model:

macos

db:

NVD

ids:

CVE-2023-24932

Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution Trust: 5.0 Fetched: March 18, 2025, 9:08 a.m., Published: March 12, 2025, midnight	Vulnerabilities: code execution

Affected products

External IDs

vendor:

google

model:

android

Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks” \| Malwarebytes Trust: 3.75 Fetched: March 18, 2025, 9:06 a.m., Published: March 12, 2025, 5:07 p.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	apple	model:	ipad air
vendor:	apple	model:	webkit
vendor:	apple	model:	ipad
vendor:	apple	model:	macos
vendor:	apple	model:	software update
vendor:	apple	model:	iphone
vendor:	apple	model:	safari

db:

NVD

ids:

CVE-2025-24201

Siemens SINAMICS S200 Bootloader Vulnerability Allows Attackers to Compromise the Device - Rewterz Trust: 3.75 Fetched: March 18, 2025, 9:04 a.m., Published: March 16, 2025, 11:10 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:

siemens

model:

sinamics

db:

NVD

ids:

CVE-2024-56336

Marco Ortisi - Vulnerability Research and Exploitation on Edge Devices \| defcontrainings Trust: 3.25 Fetched: March 18, 2025, 9:04 a.m., Published: March 18, 2025, midnight	Vulnerabilities: command injection, sql injection

Affected products

External IDs

vendor:	citrix	model:	netscaler
vendor:	sophos	model:	mobile
vendor:	sophos	model:	firewall

Weekly Threat Landscape Digest - Week 9 - HawkEye Related entries in the VARIoT vulnerabilities database: VAR-202304-1067 Trust: 4.25 Fetched: March 16, 2025, 9:36 a.m., Published: Feb. 28, 2025, 6:59 p.m.	Vulnerabilities: privilege escalation, improper access control, information disclosure...

Affected products

External IDs

vendor:	synology	model:	drive
vendor:	apple	model:	macos
vendor:	apple	model:	watch
vendor:	asus	model:	routers
vendor:	asus	model:	asus
vendor:	rockwell automation	model:	automation powerflex
vendor:	moxa	model:	pt-7828 series
vendor:	moxa	model:	pt-7728
vendor:	google	model:	android
vendor:	google	model:	nexus
vendor:	cisco	model:	nexus 3000
vendor:	cisco	model:	cisco small business
vendor:	cisco	model:	series
vendor:	cisco	model:	routers
vendor:	cisco	model:	nx-os
vendor:	cisco	model:	meeting
vendor:	cisco	model:	meeting app
vendor:	cisco	model:	nexus
vendor:	cisco	model:	series switches
vendor:	cisco	model:	small business
vendor:	rockwell	model:	automation powerflex
vendor:	huawei	model:	huawei

db:

NVD

ids:

CVE-2024-9404, CVE-2024-51505, CVE-2023-20118, CVE-2025-25279, CVE-2025-20111, CVE-2024-12510, CVE-2024-39327, CVE-2024-39328, CVE-2025-24989, CVE-2025-24928, CVE-2024-0148, CVE-2025-1128, CVE-2025-27113, CVE-2025-27364, CVE-2025-24490, CVE-2024-4464, CVE-2024-12511, CVE-2024-56171, CVE-2025-0631, CVE-2025-20051

CVE-2025-27840: Vulnerability Exploitation in Espressif ESP32 Bluetooth Chips Can Lead to Unauthorized Access to Devices - Source: socprime.com - CISO2CISO.COM & CYBER SECURITY GROUP Trust: 3.5 Fetched: March 16, 2025, 9:36 a.m., Published: March 12, 2025, 6:04 a.m.	Vulnerabilities: -

Affected products

External IDs

vendor:	motorola	model:	droid
vendor:	motorola	model:	motorola
vendor:	motorola	model:	razr hd

db:

NVD

ids:

CVE-2025-27840

A vulnerability in the SecureROM of some Apple devices... · CVE-2019-8900 · GitHub Advisory Database · GitHub Trust: 3.0 Fetched: March 16, 2025, 9:35 a.m., Published: Feb. 22, 2025, midnight	Vulnerabilities: -

Affected products

External IDs

db:

NVD

ids:

CVE-2019-8900

Update Canonical Ubuntu Desktop: USN-7345-1: .NET vulnerability Trust: 3.25 Fetched: March 16, 2025, 9:34 a.m., Published: Jan. 16, 7345, midnight	Vulnerabilities: -

Affected products

External IDs

vendor:

canonical

model:

ubuntu

Critical Vulnerabilities in Keysight Ixia Vision: Essential Insights for Windows Admins \| Windows Forum Trust: 4.5 Fetched: March 16, 2025, 9:34 a.m., Published: May 16, 2025, midnight	Vulnerabilities: privilege escalation, path traversal, buffer overflow...

Affected products

External IDs

db:

NVD

ids:

CVE-2025-21095, CVE-2025-23416, CVE-2025-24521, CVE-2025-24494

VARIoT news about IoT security