ICSA-25-162-02

icsaUScisa_csaf_ot

Siemens RUGGEDCOM APE1808

view advisory published 2025-06-10

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2026-0229US——
A denial-of-service (DoS) vulnerability in the Advanced DNS Security (ADNS) feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system re…
CVE-2026-0228US——
An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configu…
CVE-2026-0227UShigh7.5—
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issu…
CVE-2025-4615UShigh7.2Exploit
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system re…
CVE-2025-4614USlow2.7—
An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall…
CVE-2025-4229US——
An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall th…
CVE-2025-4230US——
A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root u…
CVE-2025-0133US—Exploit
A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScr…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationRUGGEDCOM APE1808

    Disable Clientless VPN. For additional mitigation measures, refer to Palo Alto Networks' Security Advisory

  • MitigationRUGGEDCOM APE1808

    Restrict CLI access to a limited group of administrators

  • MitigationRUGGEDCOM APE1808

    Restrict CLI access to a limited group of administrators

  • MitigationRUGGEDCOM APE1808

    Restrict CLI access to a limited group of administrators

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

  • FixedRUGGEDCOM APE1808

    Contact customer support to receive patch and update information

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan