Skip to content
OpenAdvisories
Medium SSA-665034 1 CVE

SSA-665034: Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices

Published Feb 13, 2024 · Updated May 14, 2024 · Revision 2

Vendor: Siemens Product: RUGGEDCOM APE1808

Summary

Nozomi Networks has published information on vulnerabilities in
Nozomi Guardian/CMC before 23.3.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.
Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Nozomi Network's upstream security notifications.

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-5253

    Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0

    A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with know…

    Nozomi Networks CMC Guardian

Revision history

  1. #2

    Added specific product version to remediations

  2. #1

    Publication Date

References