PT-2024-4127

Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V5.5 Description The issue is related to weaknesses in the authorization procedure of the secure access management system. It allows an unauthenticated user to upload arbitrary files, which can be leveraged...

Siemens RUGGEDCOM CROSSBOW 访问控制错误漏洞

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. A security vulnerability exists in Siemens RUGGEDCOM CROSSBOW due to an affected system allowing any unauthenticated client to disconnect any active user from the server. An attacker could exploit this...

Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products including. Parasolid, Ruggedcom, SCALANCE, SIMATIC, SINEC and Telecontrol. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that could lead to the following categories of damage: Cross-Site Scripting...

Siemens RUGGEDCOM APE1808 with Fortigate NGFW Devices

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

The vulnerability of the web server of the microprogramming software platform for routing and switching solutions, RUGGEDCOM, allows a perpetrator to cause a service failure.

The vulnerability of the web server of the microprogramming software platform for routing and switching solutions, RUGGEDCOM, is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in various products such as. SIMATIC, WinCC, Parasolid, RUGGEDCOM, Simcenter, SCALANCE, SIDIS, Teknomatix, Unicam and Location Intelligence. The vulnerabilities potentially enable a malicious party to conduct attacks that could result in the following categories ...

Siemens SCALANCE and RUGGEDCOM M-800/S615 Family Improper Neutralization of Special Elements Used in an OS Command (CVE-2023-49692)

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM All versions V7.2.2, SCALANCE M804PB All versions V7.2.2, SCALANCE M812-1 ADSL-Router Annex A All versions V7.2.2, SCALANCE M812-1 ADSL- Router Annex B All versions V7.2.2, SCALANCE...

Siemens SCALANCE W700 Direct Request (CVE-2023-44320)

Affected devices do not properly validate the authentication when performing certain modifications in the web interface allowing an authenticated attacker to influence the user interface configured by an administrator. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE Family Products Unsynchronized Access to Shared Data in a Multithreaded Context (CVE-2023-44374)

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU, RUGGEDCOM RM1224 LTE4G NAM, SCALANCE M804PB, SCALANCE M812-1 ADSL- Router Annex A, SCALANCE M812-1 ADSL-Router Annex B, SCALANCE M816-1 ADSL-Router Annex A, SCALANCE M816-1 ADSL-Router Annex B, SCALANCE M826-2 SHDSL-Router, SCALANC...

PT-2023-9247 · Siemens · Ruggedcom Rs910L +59

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 RUGGEDCOM i800NC RUGGEDCOM i801 RUGGEDCOM i801NC RUGGEDCOM i802 RUGGEDCOM i802NC RUGGEDCOM i803 RUGGEDCOM i803NC RUGGEDCOM M2100 RUGGEDCOM M2100NC RUGGEDCOM M2200 RUGGEDCOM M2200NC RUGGEDCOM M969 RUGGEDCOM M969NC RUGGEDCOM RMC3...

PT-2023-9248 · Siemens · Ruggedcom Rst2228

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RST2228 versions prior to V5.9.0 RUGGEDCOM RST2228P versions prior to V5.9.0 Description: A vulnerability has been identified in the web server of the affected systems, which leaks the MACSEC key in clear text to a logged-in user...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11478)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. A remote attacker could cause a denial of service condition by sending specially crafted TCP Selective Acknowledgment SACK sequences to affected products. This plugin only works with Tenable.ot...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11479)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. An attacker with network access to affected products could cause a denial of service condition because of a vulnerability in the TCP retransmission queue implementation kernel when handling TCP...

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches lies in the insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of Siemens SCALANCE and RUGGEDCOM industrial switches lies in insufficient verification of the arguments passed in the commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-49692

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V7.2.2,...