Description
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/or affecting its availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nozomi Networks | Guardian | < 25.2.0 | 25.2.0 |
| Nozomi Networks | CMC | < 25.2.0 | 25.2.0 |
Advisories 2
- ICSA-25-226-09 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Jan 14, 2026
- SSA-978177 SSA-978177: Vulnerability in Nozomi Guardian/CMC Before 25.4.0 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Jan 13, 2026