As cited
Copy frozen at (site build).
vulnerabilities
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
Palo Alto Networks published security advisories for multiple vulnerabilities in PAN-OS software affecting Siemens RUGGEDCOM APE1808 devices with embedded Virtual NGFW across all versions. The three disclosed vulnerabilities include a cross-site scripting (XSS) flaw, a privilege escalation issue for authenticated administrators with CLI access, and a command injection vulnerability allowing arbitrary root-level commands. Siemens customers are directed to implement workarounds from Palo Alto Networks upstream advisories and contact support for patching.
Why it matters: Operators of critical manufacturing infrastructure worldwide running Siemens RUGGEDCOM APE1808 with Palo Alto Virtual NGFW must evaluate these three vulnerabilities immediately: authenticated administrators can execute arbitrary commands as root and bypass system restrictions, creating insider risk that requires access controls and CLI restrictions to mitigate until patches are deployed.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
Palo Alto Networks published security advisories for multiple vulnerabilities in PAN-OS software affecting Siemens RUGGEDCOM APE1808 devices with embedded Virtual NGFW across all versions. The three disclosed vulnerabilities include a cross-site scripting (XSS) flaw, a privilege escalation issue for authenticated administrators with CLI access, and a command injection vulnerability allowing arbitrary root-level commands. Siemens customers are directed to implement workarounds from Palo Alto Networks upstream advisories and contact support for patching.
Why it matters: Operators of critical manufacturing infrastructure worldwide running Siemens RUGGEDCOM APE1808 with Palo Alto Virtual NGFW must evaluate these three vulnerabilities immediately: authenticated administrators can execute arbitrary commands as root and bypass system restrictions, creating insider risk that requires access controls and CLI restrictions to mitigate until patches are deployed.
- Source published
- First seen by Cybersecurity Tracker