{
   document: {
      aggregate_severity: {
         text: "mittel",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.\r\nFortiProxy ist eine Web-Proxy Lösung.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein entfernter, anonymer Angreifer, oder ein Angreifer aus einem benachbarten Netzwerk kann mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsmaßnahmen zu umgehen.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- Sonstiges",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2024-1570 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1570.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2024-1570 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1570",
         },
         {
            category: "external",
            summary: "FortiGuard PSIRT Advisory FG-IR-23-446 vom 2024-07-09",
            url: "https://fortiguard.fortinet.com/psirt/FG-IR-23-446",
         },
         {
            category: "external",
            summary: "FortiGuard PSIRT Advisory FG-IR-23-485 vom 2024-07-09",
            url: "https://fortiguard.fortinet.com/psirt/FG-IR-23-485",
         },
      ],
      source_lang: "en-US",
      title: "Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen",
      tracking: {
         current_release_date: "2024-07-09T22:00:00.000+00:00",
         generator: {
            date: "2024-08-15T18:11:06.676+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.5",
            },
         },
         id: "WID-SEC-W-2024-1570",
         initial_release_date: "2024-07-09T22:00:00.000+00:00",
         revision_history: [
            {
               date: "2024-07-09T22:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<7.4.4",
                        product: {
                           name: "Fortinet FortiOS <7.4.4",
                           product_id: "T035955",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.0.14",
                        product: {
                           name: "Fortinet FortiOS <7.0.14",
                           product_id: "T035959",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "FortiOS",
               },
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<7.4.4",
                        product: {
                           name: "Fortinet FortiProxy <7.4.4",
                           product_id: "T035957",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.2.8",
                        product: {
                           name: "Fortinet FortiOS <7.2.8",
                           product_id: "T035958",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.2.10",
                        product: {
                           name: "Fortinet FortiProxy <7.2.10",
                           product_id: "T035960",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.0.17",
                        product: {
                           name: "Fortinet FortiProxy <7.0.17",
                           product_id: "T035961",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "FortiProxy",
               },
            ],
            category: "vendor",
            name: "Fortinet",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-26006",
         notes: [
            {
               category: "description",
               text: "In Fortinet FortiOS und Fortinet FortiProxy existiert eine Cross-Site Scripting Schwachstelle. HTML und Script-Eingaben werden in SSL VPN UI nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer Angreifer kann durch Ausnutzung dieser Schwachstelle beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.",
            },
         ],
         release_date: "2024-07-09T22:00:00.000+00:00",
         title: "CVE-2024-26006",
      },
      {
         cve: "CVE-2024-26015",
         notes: [
            {
               category: "description",
               text: "Es besteht eine Schwachstelle in Fortinet FortiOS und Fortinet FortiProxy. Diese Schwachstelle besteht in der IP-Adressvalidierungsfunktion aufgrund einer falschen Analyse von Zahlen mit unterschiedlichen Radizes. Ein Angreifer aus einem angrenzenden Netzwerk kann diese Schwachstelle ausnutzen, um die IP-Blockliste über manipulierte Anfragen zu umgehen.",
            },
         ],
         product_status: {
            known_affected: [
               "T035959",
               "T035958",
               "T035961",
               "T035960",
            ],
         },
         release_date: "2024-07-09T22:00:00.000+00:00",
         title: "CVE-2024-26015",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         text: "mittel",
      },
      category: "csaf_base",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "de-DE",
      notes: [
         {
            category: "legal_disclaimer",
            text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.",
         },
         {
            category: "description",
            text: "FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.\r\nFortiProxy ist eine Web-Proxy Lösung.",
            title: "Produktbeschreibung",
         },
         {
            category: "summary",
            text: "Ein entfernter, anonymer Angreifer, oder ein Angreifer aus einem benachbarten Netzwerk kann mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsmaßnahmen zu umgehen.",
            title: "Angriff",
         },
         {
            category: "general",
            text: "- Sonstiges",
            title: "Betroffene Betriebssysteme",
         },
      ],
      publisher: {
         category: "other",
         contact_details: "csaf-provider@cert-bund.de",
         name: "Bundesamt für Sicherheit in der Informationstechnik",
         namespace: "https://www.bsi.bund.de",
      },
      references: [
         {
            category: "self",
            summary: "WID-SEC-W-2024-1570 - CSAF Version",
            url: "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1570.json",
         },
         {
            category: "self",
            summary: "WID-SEC-2024-1570 - Portal Version",
            url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1570",
         },
         {
            category: "external",
            summary: "FortiGuard PSIRT Advisory FG-IR-23-446 vom 2024-07-09",
            url: "https://fortiguard.fortinet.com/psirt/FG-IR-23-446",
         },
         {
            category: "external",
            summary: "FortiGuard PSIRT Advisory FG-IR-23-485 vom 2024-07-09",
            url: "https://fortiguard.fortinet.com/psirt/FG-IR-23-485",
         },
      ],
      source_lang: "en-US",
      title: "Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen",
      tracking: {
         current_release_date: "2024-07-09T22:00:00.000+00:00",
         generator: {
            date: "2024-08-15T18:11:06.676+00:00",
            engine: {
               name: "BSI-WID",
               version: "1.3.5",
            },
         },
         id: "WID-SEC-W-2024-1570",
         initial_release_date: "2024-07-09T22:00:00.000+00:00",
         revision_history: [
            {
               date: "2024-07-09T22:00:00.000+00:00",
               number: "1",
               summary: "Initiale Fassung",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<7.4.4",
                        product: {
                           name: "Fortinet FortiOS <7.4.4",
                           product_id: "T035955",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.0.14",
                        product: {
                           name: "Fortinet FortiOS <7.0.14",
                           product_id: "T035959",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "FortiOS",
               },
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "<7.4.4",
                        product: {
                           name: "Fortinet FortiProxy <7.4.4",
                           product_id: "T035957",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.2.8",
                        product: {
                           name: "Fortinet FortiOS <7.2.8",
                           product_id: "T035958",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.2.10",
                        product: {
                           name: "Fortinet FortiProxy <7.2.10",
                           product_id: "T035960",
                        },
                     },
                     {
                        category: "product_version_range",
                        name: "<7.0.17",
                        product: {
                           name: "Fortinet FortiProxy <7.0.17",
                           product_id: "T035961",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "FortiProxy",
               },
            ],
            category: "vendor",
            name: "Fortinet",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-26006",
         notes: [
            {
               category: "description",
               text: "In Fortinet FortiOS und Fortinet FortiProxy existiert eine Cross-Site Scripting Schwachstelle. HTML und Script-Eingaben werden in SSL VPN UI nicht ordnungsgemäß überprüft, bevor sie an den Benutzer zurückgegeben werden. Ein entfernter, anonymer Angreifer kann durch Ausnutzung dieser Schwachstelle beliebigen HTML- und Script-Code durch den Browser des Benutzers im Kontext der betroffenen Seite ausführen. Zur erfolgreichen Ausnutzung ist eine Benutzeraktion erforderlich.",
            },
         ],
         release_date: "2024-07-09T22:00:00.000+00:00",
         title: "CVE-2024-26006",
      },
      {
         cve: "CVE-2024-26015",
         notes: [
            {
               category: "description",
               text: "Es besteht eine Schwachstelle in Fortinet FortiOS und Fortinet FortiProxy. Diese Schwachstelle besteht in der IP-Adressvalidierungsfunktion aufgrund einer falschen Analyse von Zahlen mit unterschiedlichen Radizes. Ein Angreifer aus einem angrenzenden Netzwerk kann diese Schwachstelle ausnutzen, um die IP-Blockliste über manipulierte Anfragen zu umgehen.",
            },
         ],
         product_status: {
            known_affected: [
               "T035959",
               "T035958",
               "T035961",
               "T035960",
            ],
         },
         release_date: "2024-07-09T22:00:00.000+00:00",
         title: "CVE-2024-26015",
      },
   ],
}

{
   affected: [],
   aliases: [
      "CVE-2024-26006",
   ],
   database_specific: {
      cwe_ids: [
         "CWE-79",
      ],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2025-03-14T10:15:14Z",
      severity: "HIGH",
   },
   details: "An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server.",
   id: "GHSA-4678-x95m-c2hf",
   modified: "2025-03-14T12:32:01Z",
   published: "2025-03-14T12:32:01Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-26006",
      },
      {
         type: "WEB",
         url: "https://fortiguard.fortinet.com/psirt/FG-IR-23-485",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
         type: "CVSS_V3",
      },
   ],
}

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
         tlp: {
            label: "WHITE",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products.\nSiemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet's upstream security notifications.",
            title: "Summary",
         },
         {
            category: "general",
            text: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
            title: "General Recommendations",
         },
         {
            category: "general",
            text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "productcert@siemens.com",
         name: "Siemens ProductCERT",
         namespace: "https://www.siemens.com",
      },
      references: [
         {
            category: "self",
            summary: "SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices - HTML Version",
            url: "https://cert-portal.siemens.com/productcert/html/ssa-698820.html",
         },
         {
            category: "self",
            summary: "SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices - CSAF Version",
            url: "https://cert-portal.siemens.com/productcert/csaf/ssa-698820.json",
         },
      ],
      title: "SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices",
      tracking: {
         current_release_date: "2024-10-08T00:00:00Z",
         generator: {
            engine: {
               name: "Siemens ProductCERT CSAF Generator",
               version: "1",
            },
         },
         id: "SSA-698820",
         initial_release_date: "2024-07-09T00:00:00Z",
         revision_history: [
            {
               date: "2024-07-09T00:00:00Z",
               legacy_version: "1.0",
               number: "1",
               summary: "Publication Date",
            },
            {
               date: "2024-08-13T00:00:00Z",
               legacy_version: "1.1",
               number: "2",
               summary: "Updated CVE-2024-23111 description and added newly published CVE-2024-26006 and CVE-2024-26015",
            },
            {
               date: "2024-09-10T00:00:00Z",
               legacy_version: "1.2",
               number: "3",
               summary: "Added newly published upstream vulnerability CVE-2024-36505",
            },
            {
               date: "2024-10-08T00:00:00Z",
               legacy_version: "1.3",
               number: "4",
               summary: "Added fix for Fortinet NGFW as released from Siemens for RUGGEDCOM APE1808; added mitigations for CVE-2024-26006 and CVE-2024-26010",
            },
         ],
         status: "final",
         version: "4",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "vers:all/*",
                        product: {
                           name: "RUGGEDCOM APE1808",
                           product_id: "1",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "RUGGEDCOM APE1808",
               },
            ],
            category: "vendor",
            name: "Siemens",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-46720",
         cwe: {
            id: "CWE-121",
            name: "Stack-based Buffer Overflow",
         },
         notes: [
            {
               category: "summary",
               text: "A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2023-46720",
      },
      {
         cve: "CVE-2024-21754",
         cwe: {
            id: "CWE-916",
            name: "Use of Password Hash With Insufficient Computational Effort",
         },
         notes: [
            {
               category: "summary",
               text: "A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged attacker with super-admin profile and CLI access to decrypting the backup file.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 1.8,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-21754",
      },
      {
         cve: "CVE-2024-23111",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "summary",
               text: "An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-23111",
      },
      {
         cve: "CVE-2024-26006",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "summary",
               text: "An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS and FortiProxy's web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via social engineering the targeted user into bookmarking a malicious samba server, then opening the bookmark.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "mitigation",
               details: "Disable SSL-VPN web-mode (see \nhttps://fortiguard.fortinet.com/psirt/FG-IR-23-485)",
               product_ids: [
                  "1",
               ],
            },
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-26006",
      },
      {
         cve: "CVE-2024-26010",
         cwe: {
            id: "CWE-121",
            name: "Stack-based Buffer Overflow",
         },
         notes: [
            {
               category: "summary",
               text: "A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "mitigation",
               details: "For each interface, remove the fgfm access (see \nhttps://www.fortiguard.com/psirt/FG-IR-24-036)",
               product_ids: [
                  "1",
               ],
            },
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-26010",
      },
      {
         cve: "CVE-2024-26015",
         cwe: {
            id: "CWE-1389",
            name: "Incorrect Parsing of Numbers with Different Radices",
         },
         notes: [
            {
               category: "summary",
               text: "An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.4,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:W/RC:R",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-26015",
      },
      {
         cve: "CVE-2024-36505",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "summary",
               text: "An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RC:R",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-36505",
      },
   ],
}

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
         tlp: {
            label: "WHITE",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products.\nSiemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet's upstream security notifications.",
            title: "Summary",
         },
         {
            category: "general",
            text: "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
            title: "General Recommendations",
         },
         {
            category: "general",
            text: "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
            title: "Additional Resources",
         },
         {
            category: "legal_disclaimer",
            text: "Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "productcert@siemens.com",
         name: "Siemens ProductCERT",
         namespace: "https://www.siemens.com",
      },
      references: [
         {
            category: "self",
            summary: "SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices - HTML Version",
            url: "https://cert-portal.siemens.com/productcert/html/ssa-698820.html",
         },
         {
            category: "self",
            summary: "SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices - CSAF Version",
            url: "https://cert-portal.siemens.com/productcert/csaf/ssa-698820.json",
         },
      ],
      title: "SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices",
      tracking: {
         current_release_date: "2024-10-08T00:00:00Z",
         generator: {
            engine: {
               name: "Siemens ProductCERT CSAF Generator",
               version: "1",
            },
         },
         id: "SSA-698820",
         initial_release_date: "2024-07-09T00:00:00Z",
         revision_history: [
            {
               date: "2024-07-09T00:00:00Z",
               legacy_version: "1.0",
               number: "1",
               summary: "Publication Date",
            },
            {
               date: "2024-08-13T00:00:00Z",
               legacy_version: "1.1",
               number: "2",
               summary: "Updated CVE-2024-23111 description and added newly published CVE-2024-26006 and CVE-2024-26015",
            },
            {
               date: "2024-09-10T00:00:00Z",
               legacy_version: "1.2",
               number: "3",
               summary: "Added newly published upstream vulnerability CVE-2024-36505",
            },
            {
               date: "2024-10-08T00:00:00Z",
               legacy_version: "1.3",
               number: "4",
               summary: "Added fix for Fortinet NGFW as released from Siemens for RUGGEDCOM APE1808; added mitigations for CVE-2024-26006 and CVE-2024-26010",
            },
         ],
         status: "final",
         version: "4",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version_range",
                        name: "vers:all/*",
                        product: {
                           name: "RUGGEDCOM APE1808",
                           product_id: "1",
                        },
                     },
                  ],
                  category: "product_name",
                  name: "RUGGEDCOM APE1808",
               },
            ],
            category: "vendor",
            name: "Siemens",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-46720",
         cwe: {
            id: "CWE-121",
            name: "Stack-based Buffer Overflow",
         },
         notes: [
            {
               category: "summary",
               text: "A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted CLI commands.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2023-46720",
      },
      {
         cve: "CVE-2024-21754",
         cwe: {
            id: "CWE-916",
            name: "Use of Password Hash With Insufficient Computational Effort",
         },
         notes: [
            {
               category: "summary",
               text: "A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions may allow a privileged attacker with super-admin profile and CLI access to decrypting the backup file.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 1.8,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-21754",
      },
      {
         cve: "CVE-2024-23111",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "summary",
               text: "An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 6.4 all versions and FortiProxy version 7.4.2 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions reboot page may allow a remote privileged attacker with super-admin access to execute JavaScript code via crafted HTTP GET requests.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-23111",
      },
      {
         cve: "CVE-2024-26006",
         cwe: {
            id: "CWE-79",
            name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
         },
         notes: [
            {
               category: "summary",
               text: "An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS and FortiProxy's web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via social engineering the targeted user into bookmarking a malicious samba server, then opening the bookmark.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "mitigation",
               details: "Disable SSL-VPN web-mode (see \nhttps://fortiguard.fortinet.com/psirt/FG-IR-23-485)",
               product_ids: [
                  "1",
               ],
            },
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-26006",
      },
      {
         cve: "CVE-2024-26010",
         cwe: {
            id: "CWE-121",
            name: "Stack-based Buffer Overflow",
         },
         notes: [
            {
               category: "summary",
               text: "A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through 7.0.3, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.15, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specially crafted packets.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "mitigation",
               details: "For each interface, remove the fgfm access (see \nhttps://www.fortiguard.com/psirt/FG-IR-24-036)",
               product_ids: [
                  "1",
               ],
            },
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-26010",
      },
      {
         cve: "CVE-2024-26015",
         cwe: {
            id: "CWE-1389",
            name: "Incorrect Parsing of Numbers with Different Radices",
         },
         notes: [
            {
               category: "summary",
               text: "An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.4,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:W/RC:R",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-26015",
      },
      {
         cve: "CVE-2024-36505",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "summary",
               text: "An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system (via another hypothetical exploit) to bypass the file integrity checking system.",
               title: "Summary",
            },
         ],
         product_status: {
            known_affected: [
               "1",
            ],
         },
         remediations: [
            {
               category: "vendor_fix",
               details: "Update Fortigate NGFW to V7.4.4. Contact customer support to receive patch and update information.",
               product_ids: [
                  "1",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RC:R",
                  version: "3.1",
               },
               products: [
                  "1",
               ],
            },
         ],
         title: "CVE-2024-36505",
      },
   ],
}

{
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below web SSL VPN UI may allow a remote unauthenticated attacker to perform a Cross-Site Scripting attack via a malicious samba server.",
      },
      {
         lang: "es",
         value: "Una vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web [CWE-79] en la interfaz de usuario web SSL VPN de FortiOS versión 7.4.3 y anteriores, versión 7.2.7 y anteriores, versión 7.0.13 y anteriores y FortiProxy versión 7.4.3 y anteriores, versión 7.2.9 y anteriores, versión 7.0.16 y anteriores puede permitir que un atacante remoto no autenticado realice un ataque de cross-site scripting a través de un servidor samba malicioso.",
      },
   ],
   id: "CVE-2024-26006",
   lastModified: "2025-03-14T10:15:14.520",
   metrics: {
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "HIGH",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 7.5,
               baseSeverity: "HIGH",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "REQUIRED",
               vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
               version: "3.1",
            },
            exploitabilityScore: 1.6,
            impactScore: 5.9,
            source: "psirt@fortinet.com",
            type: "Secondary",
         },
      ],
   },
   published: "2025-03-14T10:15:14.520",
   references: [
      {
         source: "psirt@fortinet.com",
         url: "https://fortiguard.fortinet.com/psirt/FG-IR-23-485",
      },
   ],
   sourceIdentifier: "psirt@fortinet.com",
   vulnStatus: "Awaiting Analysis",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-79",
            },
         ],
         source: "psirt@fortinet.com",
         type: "Primary",
      },
   ],
}

{
   gsd: {
      metadata: {
         exploitCode: "unknown",
         remediation: "unknown",
         reportConfidence: "confirmed",
         type: "vulnerability",
      },
      osvSchema: {
         aliases: [
            "CVE-2024-26006",
         ],
         id: "GSD-2024-26006",
         modified: "2024-02-15T06:02:25.120997Z",
         schema_version: "1.4.0",
      },
   },
   namespaces: {
      "cve.org": {
         CVE_data_meta: {
            ASSIGNER: "cve@mitre.org",
            ID: "CVE-2024-26006",
            STATE: "RESERVED",
         },
         data_format: "MITRE",
         data_type: "CVE",
         data_version: "4.0",
         description: {
            description_data: [
               {
                  lang: "eng",
                  value: "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
               },
            ],
         },
      },
   },
}