ICSA-24-193-11

Siemens RUGGEDCOM APE 1808

Advisory ansehen veröffentlicht 2024-07-09

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/

beschreibt (9)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-4619US	—	0.59% (47th)	—	2025-11-13
A denial-of-service (DoS) vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to reboot a firewall by sending a specially crafted packet through…
CVE-2025-4231US	high7.2	0.97% (61st)	—	2025-06-13
A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network ac…
CVE-2025-0114US	high7.5	0.41% (35th)	—	2025-03-12
A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by…
CVE-2024-5920US	medium4.8	0.34% (26th)	—	2024-11-14
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuratio…
CVE-2024-9471US	medium4.7	0.29% (21st)	—	2024-10-09
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a com…
CVE-2024-9468US	high7.5	0.41% (34th)	—	2024-10-09
A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting…
CVE-2024-5913US	medium6.8	0.23% (13th)	—	2024-07-10
An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.
CVE-2024-3596US	critical9.0OT hoch	14.9% (97th)	Exploit	2024-07-09
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any ot…
CVE-2023-48795US	medium5.9OT hoch	93.5% (100th)	Exploit	2023-12-18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packet…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (18)

MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
MitigationRUGGEDCOM APE1808
Conﬁgure the RADIUS server to require the presence of a Message-Authenticator attribute in all Access-Request packets from RADIUS client devices that support it
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information
BehobenRUGGEDCOM APE1808
Upgrade Palo Alto Networks Virtual NGFW V11.1.4-h1. Contact customer support to receive patch and update information

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan