Skip to content
OpenAdvisories
High ICSA-23-047-08 6 CVEs

Siemens RUGGEDCOM APE1808

Published Feb 14, 2023 · Updated Sep 12, 2023 · Revision 2

Vendor: Siemens Product: RUGGEDCOM APE1808 ADM (6GK6015-0AL20-0GL0) Product: RUGGEDCOM APE1808 ADM CC (6GK6015-0AL20-0GL1) Product: RUGGEDCOM APE1808 CKP (6GK6015-0AL20-0GK0) Product: RUGGEDCOM APE1808 CKP CC (6GK6015-0AL20-0GK1) Product: RUGGEDCOM APE1808 CLOUDCONNECT (6GK6015-0AL20-0GM0) Product: RUGGEDCOM APE1808 CLOUDCONNECT CC (6GK6015-0AL20-0GM1) Product: RUGGEDCOM APE1808 ELAN (6GK6015-0AL20-0GP0) Product: RUGGEDCOM APE1808 ELAN CC (6GK6015-0AL20-0GP1) Product: RUGGEDCOM APE1808 SAM-L (6GK6015-0AL20-0GN0) Product: RUGGEDCOM APE1808 SAM-L CC (6GK6015-0AL20-0GN1) Product: RUGGEDCOM APE1808CLA-P (6GK6015-0AL20-1AA0) Product: RUGGEDCOM APE1808CLA-P CC (6GK6015-0AL20-1AA1) Product: RUGGEDCOM APE1808CLA-S1 (6GK6015-0AL20-1AB0) Product: RUGGEDCOM APE1808CLA-S1 CC (6GK6015-0AL20-1AB1) Product: RUGGEDCOM APE1808CLA-S3 (6GK6015-0AL20-1AD0) Product: RUGGEDCOM APE1808CLA-S3 CC (6GK6015-0AL20-1AD1) Product: RUGGEDCOM APE1808CLA-S5 (6GK6015-0AL20-1AF0) Product: RUGGEDCOM APE1808CLA-S5 CC (6GK6015-0AL20-1AF1) Product: RUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0) Product: RUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1) Product: RUGGEDCOM APE1808W10 (6GK6015-0AL20-0GJ0) Product: RUGGEDCOM APE1808W10 CC (6GK6015-0AL20-0GJ1)

Summary

Insyde has published information on vulnerabilities in Insyde BIOS on
November 8th 2022. These vulnerabilities also affect the RUGGEDCOM APE1808 product family.
Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 6

  • High 7.0
    CVE-2022-33908

    DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM c…

  • High 7.0
    CVE-2022-33984

    DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM co…

  • Medium 6.4
    CVE-2022-30774

    DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have bee…

  • Medium 6.4
    CVE-2022-31243

    Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler use…

  • Medium 6.4
    CVE-2022-33906

    DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SM…

  • Medium 6.4
    CVE-2022-33982

    DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on t…

Revision history

  1. #2

    Added remediation for affected products and removed CVE-2022-33907 as the products are not affected

  2. #1

    Publication Date

References