Siemens RUGGEDCOM APE1808
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.4.1. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Nozomi Network's upstream security notifications.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-0218US | — | — | ||
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allo… | ||||
| CVE-2023-6916US | — | — | ||
Audit records for OpenAPI requests may include sensitive information.
This could lead to unauthorized accesses and privilege escalation. | ||||
references
External citations — patches, advisories, analysis.
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - CSAF Versionself
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - HTML Versionself
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - PDF Versionself
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - TXT Versionself
- ICS Advisory ICSA-24-137-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-137-11 - Web Versionself
- Recommended Practicesexternal
remediations (6)
- MitigationRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Create specific users for OpenAPI usage, with minimal permissions. Limit API keys to allowed IP addresses. Regenerate existing API keys periodically and to review sign-ins via API keys in the audit records
- MitigationRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Create specific users for OpenAPI usage, with minimal permissions. Limit API keys to allowed IP addresses. Regenerate existing API keys periodically and to review sign-ins via API keys in the audit records
- FixedRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan