SSA-254396

csafDEsiemens_psirt

SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices

Advisory ansehen veröffentlicht 2024-10-08

Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-4465USmedium5.0OT erhöht—
An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a lo…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)

    Restrict access to the affected components to trusted personnel.

  • MitigationRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)

    Restrict access to the affected components to trusted personnel.

  • BehobenRUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0)

    Upgrade Nozomi Guardian / CMC to V24.3.1. Contact customer support to receive patch and update information.

  • BehobenRUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)

    Upgrade Nozomi Guardian / CMC to V24.3.1. Contact customer support to receive patch and update information.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan