Skip to content
OpenAdvisories
High SSA-978177 11 CVEs

SSA-978177: Vulnerability in Nozomi Guardian/CMC Before 25.4.0 on RUGGEDCOM APE1808 Devices

Published Aug 12, 2025 · Updated Jan 13, 2026 · Revision 4

Vendor: Siemens Product: RUGGEDCOM APE1808

Summary

Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.

Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.

Vulnerabilities 11

  • High 8.1
    CVE-2025-3719

    Incorrect authorization for CLI in Guardian/CMC before 25.2.0

    An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, al…

    Nozomi Networks CMC Guardian
  • High 8.1
    CVE-2025-40889

    Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0

    A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure an…

    Nozomi Networks CMC Guardian
  • High 7.9
    CVE-2025-3718

    Client-side path traversal in Guardian/CMC before 25.2.0

    A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated …

    Nozomi Networks CMC Guardian
  • High 7.9
    CVE-2025-40890

    Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0

    A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with …

    Nozomi Networks CMC Guardian
  • High 7.5
    CVE-2025-40886

    Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0

    A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially e…

    Nozomi Networks CMC Guardian
  • High 7.2
    CVE-2024-13089

    Authenticated RCE in update functionality in Guardian/CMC before 24.6.0

    An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands. Users with administrative privileges may upload update packages to upgrade the versions of Nozomi Net…

    Nozomi Networks CMC Guardian
  • High 7.0
    CVE-2024-13090

    Privilege escalation in Guardian/CMC before 24.6.0

    A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbit…

    Nozomi Networks CMC Guardian
  • Medium 5.3
    CVE-2025-40885

    Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0

    A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application…

    Nozomi Networks CMC Guardian
  • Medium 5.3
    CVE-2025-40887

    Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0

    A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potent…

    Nozomi Networks CMC Guardian
  • Medium 5.3
    CVE-2025-40888

    Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0

    A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentia…

    Nozomi Networks CMC Guardian
  • Medium 4.3
    CVE-2025-1501

    Incorrect authorization for traces request/download in CMC before 25.1.0

    An access control vulnerability was discovered in the Request Trace and Download Trace functionalities of CMC before 25.1.0 due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited …

    Nozomi Networks CMC

Revision history

  1. #4

    Added CVE-2025-40890

  2. #3

    Added remediation for RUGGEDCOM APE1808

  3. #2

    Added CVE-2025-1501, CVE-2025-40888, CVE-2025-3718, CVE-2025-3719, CVE-2025-40885, CVE-2025-40886, CVE-2025-40887 and CVE-2025-40889

  4. #1

    Publication Date

References