Skip to content
OpenAdvisories
Medium SSA-254396 1 CVE

SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices

Published Oct 8, 2024 · Updated Oct 8, 2024

Vendor: Siemens Product: RUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0) Product: RUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1)

Summary

Nozomi Networks has published information on vulnerabilities in
Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.
Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

  • Medium 6.0
    CVE-2024-4465

    Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0

    An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with reporting privileges learns how to create a specific application…

    Nozomi Networks CMC Guardian

Revision history

  1. #1

    Publication Date

References