SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-61624US | medium6.5OT kritisch | KEV | ||
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, Forti… | ||||
| CVE-2025-53847US | high8.8OT erhöht | — | ||
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 throu… | ||||
| CVE-2025-64157US | high7.2 | — | ||
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versi… | ||||
| CVE-2025-62439US | — | — | ||
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.… | ||||
| CVE-2025-55018US | — | — | ||
An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7… | ||||
| CVE-2026-24858US | —OT kritisch | KEV | ||
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9,… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.10 or later version with FSSO TS Agent version 5.0 build 0324 or later version. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.10 or later version. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.10 or later version. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.10 or later version. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.11 or later version. Contact customer support to receive patch and update information
- BehobenRUGGEDCOM APE1808
Update Fortigate NGFW to V7.4.9 or later version. Contact customer support to receive patch and update information
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan