CISA 2026-05-19

Siemens RUGGEDCOM APE1808 Devices

CVE-2026-0300

Machine-generated analysis · WAYSCloud LLM

The advisory states that all versions of the Siemens RUGGEDCOM APE1808 are affected due to a buffer overflow in the User-ID Authentication Portal service inherited from Palo Alto Networks' PAN-OS software.

Context

The Siemens RUGGEDCOM APE1808 Devices are industrial networking products used in critical manufacturing environments. The advisory states that a buffer overflow vulnerability in the User-ID Authentication Portal service could allow unauthenticated remote code execution with root privileges. This issue originates from PAN-OS software used within these Siemens devices. The advisory references Palo Alto Networks' upstream notifications for further details and mitigation.

Operator considerations

Check: whether the User-ID Authentication Portal is enabled on any interface handling untrusted traffic
Isolate: interfaces exposed to untrusted networks by restricting access to trusted internal IP addresses only
Patch: contact Siemens customer support to obtain available patches, as no public fix is listed
Log: monitor for unexpected traffic to the User-ID Authentication Portal service if enabled

From Cybersecurity and Infrastructure Security Agency ↗

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/

The following versions of Siemens RUGGEDCOM APE1808 Devices are affected:

RUGGEDCOM APE1808 vers:all/* (CVE-2026-0300)

Vendor

Equipment

Siemens

Siemens RUGGEDCOM APE1808 Devices

Out-of-bounds Write

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company...

Read the full advisory on CISA →