Skip to content
OpenAdvisories
Critical 1 exploited CVE SSA-750274 1 CVE

SSA-750274: Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW

Published Apr 19, 2024 · Updated Jul 9, 2024 · Revision 2

Vendor: Siemens Product: RUGGEDCOM APE1808

Summary

Palo Alto Networks has published [1] information on CVE-2024-3400 in PAN-OS. This advisory addresses Siemens Industrial products affected by this vulnerability.

Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications.

[1] https://security.paloaltonetworks.com/CVE-2024-3400

Vulnerabilities 1

  • Critical 10.0
    CVE-2024-3400 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

    A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Apr 12, 2024

Revision history

  1. #2

    Added fix for RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW

  2. #1

    Publication Date

References