PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-4614 Siemens CVE debrief

CVE-2025-4614 is a low-severity information disclosure issue published by CISA on 2025-06-10 and later updated through 2026-03-12. In the supplied advisory corpus, an authenticated administrator can view session tokens for users authenticated to the firewall web UI, which may enable impersonation if those tokens are reused.

Vendor
Siemens
Product
RUGGEDCOM APE1808
CVSS
LOW 3.4
CISA KEV
Not listed in stored evidence
Original CVE published
2025-06-10
Original CVE updated
2026-03-12
Advisory published
2025-06-10
Advisory updated
2026-03-12

Who should care

Security administrators, OT operators, and support teams responsible for the affected advisory target, especially environments that allow broad administrator access to the web UI or rely on session-based access control.

Technical summary

The supplied advisory data rates this issue CVSS 3.1 3.4 (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N). The vulnerability is an information disclosure condition: a high-privilege authenticated administrator can see session tokens associated with other users authenticated to the web UI. If those tokens remain valid, they could be used to impersonate the affected users. No integrity or availability impact is indicated in the vector.

Defensive priority

Low

Recommended defensive actions

  • Restrict CLI and administrative access to a limited set of trusted administrators.
  • Contact the vendor/customer support channel referenced in the advisory to obtain patch and update guidance.
  • Review whether web UI session handling and administrator privileges are tightly scoped in the affected deployment.
  • Monitor for unauthorized access to privileged administrative functions and review session/token management practices.

Evidence notes

The supplied source item is CISA advisory ICSA-25-162-02, published 2025-06-10 and modified/republished through 2026-03-12. The advisory metadata maps CVE-2025-4614 to Siemens RUGGEDCOM APE1808 and includes remediation guidance to restrict CLI access and contact customer support for patch/update information. The descriptive text in the corpus states that an authenticated administrator may view session tokens of users authenticated to the web UI, enabling impersonation. The corpus also contains a product/description mismatch, because the description text names Palo Alto Networks PAN-OS while the product tree names Siemens RUGGEDCOM APE1808; downstream users should verify against the linked official advisory pages.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-4614 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-4614

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-4614 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-4614

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-162-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-513708.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-513708.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.