Skip to content
OpenAdvisories
High ICSA-26-015-07 12 CVEs

Siemens RUGGEDCOM APE1808 Devices

Published Jan 13, 2026 · Updated Jul 9, 2026 · Revision 8

Vendor: Siemens Product: RUGGEDCOM APE1808

Summary

Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities.

Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.

Vulnerabilities 12

  • High 8.9
    CVE-2025-40892

    Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0

    A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing a JavaScript payload, or a victim c…

    Nozomi Networks CMC Guardian
  • High 8.9
    CVE-2025-40899

    Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0

    A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter. An authenticated user with custom fields privileges can define a malicious custom field containing a JavaScript …

    Nozomi Networks CMC Guardian
  • High 8.1
    CVE-2025-40897

    Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0

    An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intell…

    Nozomi Networks CMC Guardian
  • High 8.1
    CVE-2025-40898

    Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0

    A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited privileges, by uploading a specifically-crafted Arc data archive, can potentially w…

    Nozomi Networks CMC Guardian
  • Medium 6.5
    CVE-2025-40904

    HTML injection in Smart Polling in Guardian/CMC before 26.1.0

    A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync.…

    Nozomi Networks CMC Guardian
  • Medium 6.1
    CVE-2025-40893

    HTML injection in Asset List in Guardian/CMC before 25.5.0

    A Stored HTML Injection vulnerability was discovered in the Asset List functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets to inject HTML tags into asset attributes. When a v…

    Nozomi Networks CMC Guardian
  • Medium 5.9
    CVE-2025-40901

    HTML injection in Credentials Manager in Guardian/CMC before 26.1.0

    A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious identity containing HTML tags. When a v…

    Nozomi Networks CMC Guardian
  • Medium 5.9
    CVE-2025-40902

    HTML injection in Users in Guardian/CMC before 26.1.0

    A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a malicious user whose username contains HTML tags. When a victim…

    Nozomi Networks CMC Guardian
  • Medium 5.9
    CVE-2025-40903

    HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0

    A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious restore schedule containing HTML t…

    Nozomi Networks CMC Guardian
  • Medium 4.7
    CVE-2025-40891

    HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0

    A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper validation of network traffic data. An unauthenticated attacker can send specially crafted network packets at two different times to inject HT…

    Nozomi Networks CMC Guardian
  • Medium 4.6
    CVE-2025-40900

    Angular template injection in Reports in Guardian/CMC before 26.1.0

    An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a v…

    Nozomi Networks CMC Guardian
  • Medium 4.4
    CVE-2025-40894

    HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0

    A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter. A malicious authenticated user with the required privileges could edit a node label to inject HTML tags. If the…

    Nozomi Networks CMC Guardian

Revision history

  1. #8

    CISA Republication update based on Siemens ProductCERT SSA-827968 advisory

  2. #7

    Added CVE-2025-40900, CVE-2025-40901, CVE-2025-40902, CVE--2025-40903 and CVE-2025-40904

  3. #6

    CISA Republication update based on Siemens ProductCERT SSA-827968 advisory

  4. #5

    Added CVE-2025-40897 and CVE-2025-40899

  5. #4

    CISA Republication update based on Siemens ProductCERT SSA-827968 advisory

  6. #3

    Added CVE-2025-40894

  7. #2

    CISA Republication - Initial Republication of Siemens ProductCERT SSA-827968 advisory

  8. #1

    Publication Date

References