Summary
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products.
Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet's upstream security notifications.
Vulnerabilities 14
-
Medium 6.9
An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and belo…
-
Medium 6.7
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, Forti…
-
Medium 6.3
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through…
-
Medium 6.3
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 throu…
-
Medium 6.2
An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in Forti…
-
Medium 5.6
A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 thr…
-
Medium 5.2
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager…
-
Medium 5.0
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 …
-
Medium 4.7
An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through …
-
Medium 4.0
A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 th…
-
Low 3.6
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CW…
-
Low 3.4
A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 t…
-
Low 3.1
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, …
-
Low 1.7CVE-2024-21754 Public exploit
A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 a…
Revision history
-
#11
Added newly published upstream vulnerability CVE-2024-47570
-
#10
Added newly published upstream vulnerability CVE-2024-26008
-
#9
Added newly published upstream vulnerability CVE-2024-50568
-
#8
Added newly published upstream vulnerability CVE-2025-47295
-
#7
Removed CVE-2024-48886 and CVE-2024-50563 due to wrong fix information. These CVEs are advised in SSA-770770
-
#6
Added newly published upstream vulnerabilities CVE-2024-48886 and CVE-2024-50563
-
#5
Added newly published upstream vulnerabilities CVE-2024-33510, CVE-2023-50176, CVE-2024-26011
-
#4
Added fix for Fortinet NGFW as released from Siemens for RUGGEDCOM APE1808; added mitigations for CVE-2024-26006 and CVE-2024-26010
-
#3
Added newly published upstream vulnerability CVE-2024-36505
-
#2
Updated CVE-2024-23111 description and added newly published CVE-2024-26006 and CVE-2024-26015
-
#1
Publication Date
References
-
SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-698820.html