High ICSA-24-193-02 14 CVEs

Siemens RUGGEDCOM APE 1808

Published Jul 9, 2024 · Updated Jan 14, 2026 · Revision 12

Vendor: Siemens Product: RUGGEDCOM APE1808

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products.

Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet's upstream security notifications.

Vulnerabilities 14

Medium 6.9

CVE-2024-26006

An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and belo…

Fortinet FortiOS FortiProxy Network devices

Mar 14, 2025
Medium 6.7

CVE-2024-26010

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, Forti…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jun 11, 2024
Medium 6.3

CVE-2023-46720

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through…

Fortinet FortiOS Network devices

Jun 11, 2024
Medium 6.3

CVE-2024-47570

An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 throu…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Dec 9, 2025
Medium 6.2

CVE-2024-23111

An improper neutralization of input during web page Generation ('Cross-site Scripting') vulnerability [CWE-79] in Forti…

Fortinet FortiOS FortiProxy Network devices

Jun 11, 2024
Medium 5.6

CVE-2024-50568

A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 thr…

Fortinet FortiOS FortiProxy Network devices

Jun 10, 2025
Medium 5.2

CVE-2024-26011

A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager…

Fortinet FortiOS FortiManager FortiProxy Network devices

Nov 12, 2024
Medium 5.0

CVE-2024-26008

An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 …

Fortinet FortiOS FortiProxy FortiPAM Network devices

Oct 14, 2025
Medium 4.7

CVE-2024-36505

An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through …

Fortinet FortiOS Network devices

Aug 13, 2024
Medium 4.0

CVE-2023-50176

A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 th…

Fortinet FortiOS Network devices

Nov 12, 2024
Low 3.6

CVE-2024-33510

An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CW…

Fortinet FortiOS FortiProxy Network devices

Nov 12, 2024
Low 3.4

CVE-2025-47295

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 t…

Fortinet FortiOS Network devices

May 28, 2025
Low 3.1

CVE-2024-26015

An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, …

Fortinet FortiOS FortiProxy Network devices

Jul 9, 2024
Low 1.7

CVE-2024-21754 Public exploit

A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3 a…

Fortinet FortiOS FortiProxy Network devices

Jun 11, 2024

Revision history

2026-01-14 #12
Initial Republication of Siemens ProductCERT SSA-698820 advisory
2026-01-13 #11
Added newly published upstream vulnerability CVE-2024-47570
2025-11-11 #10
Added newly published upstream vulnerability CVE-2024-26008
2025-07-08 #9
Added newly published upstream vulnerability CVE-2024-50568
2025-06-10 #8
Added newly published upstream vulnerability CVE-2025-47295
2025-04-08 #7
Removed CVE-2024-48886 and CVE-2024-50563 due to wrong fix information. These CVEs are advised in SSA-770770
2025-02-11 #6
Added newly published upstream vulnerabilities CVE-2024-48886 and CVE-2024-50563
2024-12-10 #5
Added newly published upstream vulnerabilities CVE-2024-33510, CVE-2023-50176, CVE-2024-26011
2024-10-08 #4
Added fix for Fortinet NGFW as released from Siemens for RUGGEDCOM APE1808; added mitigations for CVE-2024-26006 and CVE-2024-26010
2024-09-10 #3
Added newly published upstream vulnerability CVE-2024-36505
2024-08-13 #2
Updated CVE-2024-23111 description and added newly published CVE-2024-26006 and CVE-2024-26015
2024-07-09 #1
Publication Date

References

SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-698820.html
ICS Advisory ICSA-24-193-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-02
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b