Detections
Analytics
Siemens APE1808 Improper Neutralization of Script in Attributes in a Web Page (CVE-2025-4615)
high Tenable OT Security Plugin ID 505302
Synopsis
The remote OT asset is affected by a vulnerability.Description
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://cert-portal.siemens.com/productcert/html/ssa-513708.html
Plugin Details
Severity: High
ID: 505302
File Name: tenable_ot_siemens_CVE-2025-4615.nasl
Version: 1.2
Type: remote
Family: Tenable.ot
Published: 3/23/2026
Updated: 3/24/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C
CVSS Score Source: CVE-2025-4615
CVSS v3
Risk Factor: High
Base Score: 7.2
Temporal Score: 6.3
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 7
Threat Score: 4.8
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/o:siemens:ruggedcom_ape1808_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 6/10/2025
Vulnerability Publication Date: 6/10/2025
Reference Information
CVE: CVE-2025-4615
CWE: 83