SSA-366067

SSA-366067: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.1 on RUGGEDCOM APE1808 Devices

Advisory ansehen veröffentlicht 2024-03-12

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

beschreibt (43)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-62631US	—	0.30% (22nd)	—	2025-12-09
An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions all…
CVE-2024-26009US	high8.1OT erhöht	0.73% (54th)	—	2025-08-12
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions…
CVE-2023-45584US	high7.2	0.59% (47th)	—	2025-08-12
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all…
CVE-2023-29184US	low2.3	0.21% (11th)	—	2025-06-10
An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to…
CVE-2025-47294US	medium5.3	0.84% (57th)	—	2025-05-28
A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemo…
CVE-2023-37930US	high8.8	0.64% (50th)	—	2025-04-08
Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt me…
CVE-2023-25610US	—	18.3% (97th)	Exploit	2025-03-24
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 t…
CVE-2023-29181US	high8.8	0.72% (54th)	—	2024-02-22
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 throug…
CVE-2023-29180US	high7.5	2.61% (85th)	—	2024-02-22
A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS…
CVE-2023-29179US	medium6.5	2.45% (84th)	—	2024-02-22
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, Fortiproxy version 7.2.0 through 7.2.4, 7.0.0 through 7.0.10…
CVE-2023-36639US	high8.8	1.06% (64th)	—	2023-12-13
A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7…
CVE-2023-36641US	medium6.5	1.27% (70th)	—	2023-11-14
A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, F…
CVE-2023-28002US	medium6.7	0.17% (6th)	—	2023-11-14
An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all versions, 6.0 all versions a…
CVE-2023-41841US	high8.8	1.07% (65th)	—	2023-10-10
An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions.
CVE-2023-41675US	medium5.3	1.43% (73rd)	—	2023-10-10
A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 throug…
CVE-2023-40718US	high7.5	0.53% (44th)	—	2023-10-10
A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets.
CVE-2023-37935US	high7.5	1.12% (66th)	—	2023-10-10
A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords of…
CVE-2023-36555US	medium5.4	0.45% (38th)	—	2023-10-10
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via t…
CVE-2023-33301US	medium4.3	0.56% (46th)	—	2023-10-10
An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource from a non trusted host.
CVE-2023-29183US	medium5.4	1.31% (70th)	—	2023-09-13
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7…

20 von 43 angezeigt

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (45)

MitigationRUGGEDCOM APE1808
Disable HTTP/2 support on SSL inspection profiles used by proxy policies or firewall policies with proxy mode (see https://www.fortiguard.com/psirt/FG-IR-23-183)
MitigationRUGGEDCOM APE1808
Disable HTTP/HTTPS administrative interface OR Limit IP addresses that can reach the administrative interface (see https://www.fortiguard.com/psirt/FG-IR-23-001)
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.
BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.1. Contact customer support to receive patch and update information.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan