Siemens RUGGEDCOM APE1808 Devices

Risk Summary

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/

CVEs (1)

Remediations

• Disable Response Pages in the Interface Management Profile attached to every L3 interface in any zone where untrusted/internet traffic can ingress. Keep Response Pages enabled only on interfaces in trust/internal zones where legitimate users' browsers ingress
• Disable User-ID™ Authentication Portal if not required
• Restrict access to the User-ID Authentication Portal to trusted internal IP addresses only
• Contact customer support to receive patch and update information

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing