Siemens RUGGEDCOM APE1808 Devices

Summary

Vulnerabilities 6

• Critical 9.4
  CVE-2026-24858 Exploited Public exploit EPSS 87%

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnal…

  Fortinet FortiOS FortiManager FortiProxy Network devices
  Jan 27, 2026

  KEV Jan 27, 2026
• Medium 5.4
  CVE-2025-61624 Exploited

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet Fo…

  Fortinet FortiOS FortiProxy FortiPAM Network devices
  Apr 14, 2026

  KEV Oct 16, 2026
• Medium 6.7
  CVE-2025-64157

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 throu…

  Fortinet FortiOS Network devices
  Feb 10, 2026
• Medium 6.2
  CVE-2025-53847

  A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 thr…

  Fortinet FortiOS Network devices
  Apr 14, 2026
• Medium 5.2
  CVE-2025-55018

  An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, For…

  Fortinet FortiOS Network devices
  Feb 10, 2026
• Low 3.8
  CVE-2025-62439

  An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS…

  Fortinet FortiOS Network devices
  Feb 10, 2026

Revision history

1. 2026-05-14 #4

   CISA Republication update based on Siemens ProductCERT SSA-975644 advisory

2. 2026-05-12 #3

   Added CVE-2025-61624 and CVE-2025-53847

3. 2026-03-12 #2

   CISA Republication - Initial CISA Republication of Siemens ProductCERT SSA-975644 advisory

4. 2026-03-10 #1

   Publication Date

References

• SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices - HTML Version
  https://cert-portal.siemens.com/productcert/html/ssa-975644.html
• ICS Advisory ICSA-26-071-02 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-02
• Recommended Practices
  https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b