Siemens RUGGEDCOM APE1808
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
beschreibt (30)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-68686US | —OT kritisch | KEV | ||
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.… | ||||
| CVE-2025-58325US | medium6.7 | — | ||
An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may al… | ||||
| CVE-2025-25252US | medium6.5 | — | ||
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions… | ||||
| CVE-2025-22258US | high7.2 | — | ||
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.… | ||||
| CVE-2024-50571US | — | — | ||
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0… | ||||
| CVE-2024-47569US | — | — | ||
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager… | ||||
| CVE-2024-52965US | — | — | ||
A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.10, and before 7.0.16 & Fo… | ||||
| CVE-2025-22254US | high7.2 | — | ||
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7… | ||||
| CVE-2025-22251US | medium5.3 | — | ||
An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all ve… | ||||
| CVE-2025-22252US | high7.2OT erhöht | — | ||
A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and v… | ||||
| CVE-2024-50565US | high7.5 | — | ||
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.… | ||||
| CVE-2024-26013US | — | — | ||
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.… | ||||
| CVE-2024-45324US | — | — | ||
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.… | ||||
| CVE-2024-40591US | high7.2 | — | ||
An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admi… | ||||
| CVE-2024-35279US | — | — | ||
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to ex… | ||||
| CVE-2024-50563US | critical9.8 | — | ||
A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManage… | ||||
| CVE-2024-48885US | critical9.1 | — | ||
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, For… | ||||
| CVE-2024-54021US | medium5.8 | — | ||
An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through 7… | ||||
| CVE-2024-48886US | critical9.8 | — | ||
A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.… | ||||
| CVE-2024-48884US | critical9.1 | — | ||
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, Forti… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices - CSAF Versionself
- SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices - HTML Versionself
- ICS Advisory ICSA-25-044-06 JSONself
- ICS Advisory ICSA-25-044-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (41)
- MitigationRUGGEDCOM APE1808
For each interface, remove the fabric service or block CAPWAP-CONTROL access to port 5246 through a local-in policy (see https://fortiguard.fortinet.com/psirt/FG-IR-24-160)
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Refer to Fortinet Blog for mitigation measures https://www.fortinet.com/blog/psirt-blogs/analysis-of-threat-actor-activity
- MitigationRUGGEDCOM APE1808
Use RADIUS over TLS (aka RADSEC) (https://fortiguard.fortinet.com/psirt/FG-IR-24-255)
- MitigationRUGGEDCOM APE1808
Use alternate authentication mechanism such as PAP, MSCHAP, and CHAP configurations other than ASCII authentication (see https://www.fortiguard.com/psirt/FG-IR-24-472)
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.7. Contact customer support to receive patch and update information
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan