Siemens RUGGEDCOM APE1808
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (30)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-40593US | medium4.4 | — | ||
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versio… | ||||
| CVE-2025-54822US | — | — | ||
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0… | ||||
| CVE-2023-46718US | high7.8 | — | ||
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and… | ||||
| CVE-2023-40721US | — | — | ||
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially cra… | ||||
| CVE-2022-23439US | medium6.1 | — | ||
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header… | ||||
| CVE-2023-46715US | medium4.3 | — | ||
An origin validation error [CWE-346] vulnerability in Fortinet FortiOS IPSec VPN version 7.4.0 through 7.4.1 and version 7.2.6 and below allows an authenticated IPSec VPN user wit… | ||||
| CVE-2023-42786US | medium6.5 | — | ||
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker… | ||||
| CVE-2023-42785US | medium6.5 | — | ||
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker… | ||||
| CVE-2024-26011US | critical9.8OT elevated | — | ||
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, Fort… | ||||
| CVE-2022-45862US | high8.8 | — | ||
An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versio… | ||||
| CVE-2024-23110US | high7.8 | — | ||
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all versio… | ||||
| CVE-2024-26007US | high7.5 | — | ||
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service… | ||||
| CVE-2023-46714US | high7.2 | — | ||
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administ… | ||||
| CVE-2023-45586US | medium5.0OT elevated | — | ||
An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and befor… | ||||
| CVE-2023-45583US | high7.2 | — | ||
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 a… | ||||
| CVE-2023-44247US | high7.2 | — | ||
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs reque… | ||||
| CVE-2023-36640US | medium6.7 | — | ||
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 a… | ||||
| CVE-2024-23662US | high7.5 | — | ||
An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15 and… | ||||
| CVE-2023-48784US | medium6.7 | — | ||
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line in… | ||||
| CVE-2023-41677US | high8.8 | — | ||
A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.1… | ||||
references
External citations — patches, advisories, analysis.
- SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices - CSAF Versionself
- SSA-832273: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices - HTML Versionself
- ICS Advisory ICSA-24-074-05 JSONself
- ICS Advisory ICSA-24-074-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (33)
- MitigationRUGGEDCOM APE1808
For each interface, remove the fgfm access (see https://www.fortiguard.com/psirt/FG-IR-24-029)
- MitigationRUGGEDCOM APE1808
Set a non form-based authentication scheme (see https://fortiguard.fortinet.com/psirt/FG-IR-23-328)
- MitigationRUGGEDCOM APE1808
Set a non form-based authentication scheme (see https://fortiguard.fortinet.com/psirt/FG-IR-23-328)
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.3. Contact customer support to receive patch and update information.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan