Critical CVEs (CVE‑2025‑55018, CVE‑2025‑62439, CVE‑2025‑64157, CVE‑2026‑24858) in Siemens RUGGEDCOM APE1808 Devices Threaten Industrial Operations
What It Is – Four critical vulnerabilities (CVSS v3 9.8) have been disclosed in Siemens RUGGEDCOM APE1808 industrial routers/switches. The flaws include HTTP request/response smuggling, improper source verification, an externally‑controlled format‑string, and an authentication‑bypass path.
Exploitability – The vulnerabilities are publicly documented; proof‑of‑concept exploits for the HTTP smuggling issue have been observed in the wild. No active ransomware‑style exploit chain has been reported yet, but the high CVSS score indicates easy remote exploitation.
Affected Products – All firmware versions of the Siemens RUGGEDCOM APE1808 (global deployments) are vulnerable. Siemens has issued a firmware update; Fortinet’s advisory references the same issues for FortiOS firewalls that may sit in front of the devices.
TPRM Impact – Organizations that rely on Siemens RUGGEDCOM hardware in critical manufacturing, energy, or transportation supply chains face potential service disruption, unauthorized command execution, and data exfiltration. A compromised device can become a pivot point for broader OT network attacks, jeopardizing third‑party relationships and compliance obligations.
Recommended Actions –
- Immediately inventory all Siemens RUGGEDCOM APE1808 units across your enterprise and third‑party sites.
- Apply Siemens‑provided firmware patches (latest version) to every affected device.
- Validate firewall and IDS/IPS rules to block malformed HTTP headers that could trigger smuggling.
- Conduct a risk‑based segmentation review of OT networks to limit lateral movement.
- Update your third‑party risk register to reflect the elevated supply‑chain risk and require vendors to provide remediation proof.
Source: CISA Advisory – ICSA‑26‑071‑02