SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.4.1. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Nozomi Network's upstream security notifications.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-0218US | — | — | ||
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allo… | ||||
| CVE-2023-6916US | — | — | ||
Audit records for OpenAPI requests may include sensitive information.
This could lead to unauthorized accesses and privilege escalation. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - CSAF Versionself
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - HTML Versionself
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - PDF Versionself
- SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices - TXT Versionself
Behebungen (6)
- MitigationRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Create specific users for OpenAPI usage, with minimal permissions. Limit API keys to allowed IP addresses. Regenerate existing API keys periodically and to review sign-ins via API keys in the audit records
- MitigationRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Create specific users for OpenAPI usage, with minimal permissions. Limit API keys to allowed IP addresses. Regenerate existing API keys periodically and to review sign-ins via API keys in the audit records
- BehobenRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
- BehobenRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
- BehobenRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
- BehobenRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)
Upgrade Nozomi Guardian / CMC to V23.4.1. Contact customer support to receive patch and update information.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan