Siemens RUGGEDCOM APE1808
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40890US | — | — | ||
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.
An authenticated low-privilege user… | ||||
| CVE-2025-40889US | — | — | ||
A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by… | ||||
| CVE-2025-40888US | medium6.5 | — | ||
A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute ar… | ||||
| CVE-2025-40887US | medium6.5 | — | ||
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute… | ||||
| CVE-2025-40886US | high8.8 | — | ||
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute… | ||||
| CVE-2025-40885US | medium6.5 | — | ||
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can… | ||||
| CVE-2025-3719US | —OT elevated | — | ||
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authe… | ||||
| CVE-2025-3718US | medium5.4 | — | ||
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limi… | ||||
| CVE-2025-1501US | —OT elevated | — | ||
An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly… | ||||
| CVE-2024-13090US | — | — | ||
A privilege escalation vulnerability may enable a service account to elevate its privileges.
The sudo rules configured for a local service account were excessively permissive, p… | ||||
| CVE-2024-13089US | — | — | ||
An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands.
Users with administ… | ||||
references
External citations — patches, advisories, analysis.
- SSA-978177: Vulnerability in Nozomi Guardian/CMC Before 25.4.0 on RUGGEDCOM APE1808 Devices - CSAF Versionself
- SSA-978177: Vulnerability in Nozomi Guardian/CMC Before 25.4.0 on RUGGEDCOM APE1808 Devices - HTML Versionself
- ICS Advisory ICSA-25-226-09 JSONself
- ICS Advisory ICSA-25-226-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (21)
- MitigationRUGGEDCOM APE1808
Apply care when opening untrusted links or visiting external websites while an authenticated session to the web management interface is established
- MitigationRUGGEDCOM APE1808
Only install update packages from trusted sources. Refer upstream advisory for further information.
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Refer upstream advisory for further information.
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- MitigationRUGGEDCOM APE1808
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
- FixedRUGGEDCOM APE1808
Upgrade Nozomi Guardian / CMC to V25.4.0. Using Web GUI might have errors and it is recommended to use the CLI for the upgrade. Contact customer support to receive patch and update information
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan