SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-4465US | medium5.0OT elevated | — | ||
An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges.
If a lo… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Restrict access to the affected components to trusted personnel.
- MitigationRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Restrict access to the affected components to trusted personnel.
- FixedRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Upgrade Nozomi Guardian / CMC to V24.3.1. Contact customer support to receive patch and update information.
- FixedRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Upgrade Nozomi Guardian / CMC to V24.3.1. Contact customer support to receive patch and update information.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan