Siemens RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40904US | medium5.4 | — | ||
A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privile… | ||||
| CVE-2025-40903US | medium4.8 | — | ||
A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with admi… | ||||
| CVE-2025-40902US | medium4.8 | — | ||
A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileg… | ||||
| CVE-2025-40901US | medium4.8 | — | ||
A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administr… | ||||
| CVE-2025-40900US | — | — | ||
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileg… | ||||
| CVE-2025-40899US | — | — | ||
A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter. An authenticated user with custom… | ||||
| CVE-2025-40897US | —OT erhöht | — | ||
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only pr… | ||||
| CVE-2025-40894US | medium5.4 | — | ||
A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter.
A malicious authenticated use… | ||||
| CVE-2025-40898US | — | — | ||
A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited priv… | ||||
| CVE-2025-40893US | — | — | ||
A Stored HTML Injection vulnerability was discovered in the Asset List functionality due to improper validation of network traffic data. An unauthenticated attacker can send specia… | ||||
| CVE-2025-40892US | high8.9 | — | ||
A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileg… | ||||
| CVE-2025-40891US | medium4.7 | — | ||
A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-827968: Vulnerability in Nozomi Guardian/CMC Before V26.2.0 on RUGGEDCOM APE1808 Devices - CSAF Versionself
- SSA-827968: Vulnerability in Nozomi Guardian/CMC Before V26.2.0 on RUGGEDCOM APE1808 Devices - HTML Versionself
- ICS Advisory ICSA-26-015-07 JSONself
- ICS Advisory ICSA-26-015-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (12)
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Upgrade Nozomi Guardian to v26.2.0. Contact customer support to receive patch and update information
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan