ICSA-24-102-03

Siemens RUGGEDCOM APE1808

view advisory published 2024-04-09

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/?version=10.2.2&product=PAN-OS

describes (8)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-5917US	medium4.9	0.47% (40th)	—	2024-11-14
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables…
CVE-2024-5911US	medium4.9	0.58% (47th)	—	2024-07-10
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system…
CVE-2023-6791US	medium4.9	0.62% (49th)	—	2023-12-13
A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external…
CVE-2023-6790US	medium6.1	0.66% (51st)	—	2023-12-13
A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administra…
CVE-2023-38046US	medium4.9	0.46% (39th)	—	2023-07-12
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read l…
CVE-2023-0008US	medium4.4	0.54% (45th)	—	2023-05-10
A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from…
CVE-2023-0005US	medium4.9OT elevated	0.26% (17th)	—	2023-04-12
A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the device configuration and encryp…
CVE-2022-0028US	high8.6OT critical	2.54% (85th)	KEV	2022-08-10
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would ap…

references

External citations — patches, advisories, analysis.

remediations (8)

FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.
FixedRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.0.1. Contact Siemens customer support to receive patch and update information.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan