PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-26011 Siemens CVE debrief

CVE-2024-26011 is a missing authentication vulnerability in multiple Fortinet products that allows remote attackers to execute unauthorized code or commands via specially crafted packets. The vulnerability affects FortiManager, FortiPAM, FortiProxy, FortiSwitchManager, FortiPortal, and FortiOS across numerous versions. Siemens has identified this as an upstream vulnerability affecting the RUGGEDCOM APE1808, which incorporates Fortinet NGFW technology. The vulnerability was published on July 9, 2024, and carries a CVSS 3.1 score of 5.3 (Medium severity). Siemens released a vendor fix on October 8, 2024, advising customers to update the Fortigate NGFW component to version 7.4.4.

Vendor
Siemens
Product
RUGGEDCOM APE1808
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2024-03-12
Original CVE updated
2026-01-14
Advisory published
2024-03-12
Advisory updated
2026-01-14

Who should care

Organizations operating Siemens RUGGEDCOM APE1808 devices with Fortinet NGFW components, network security teams managing Fortinet infrastructure, industrial control system operators using affected Fortinet products for network segmentation, and compliance teams tracking CVE remediation for critical infrastructure environments.

Technical summary

This vulnerability stems from missing authentication for critical functions in Fortinet's management and security products. An unauthenticated remote attacker can send specially crafted packets to execute unauthorized code or commands. The attack requires network access to affected services but no authentication credentials. The vulnerability affects multiple Fortinet product lines used in enterprise network security infrastructure. Siemens RUGGEDCOM APE1808 devices incorporate Fortinet NGFW technology and are affected through this upstream component. The fix requires updating the Fortinet NGFW to version 7.4.4.

Defensive priority

medium

Recommended defensive actions

  • Update Fortigate NGFW component to version 7.4.4 on affected RUGGEDCOM APE1808 devices
  • Contact Siemens customer support to obtain patch and update information for the Fortinet NGFW component
  • Apply network segmentation to limit exposure of management interfaces
  • Monitor for unauthorized access attempts to Fortinet management services
  • Review Fortinet security advisories for additional affected products and patches

Evidence notes

The source advisory (ICSA-24-193-02) identifies CVE-2024-26011 as an upstream Fortinet vulnerability affecting the Siemens RUGGEDCOM APE1808 product. The vulnerability description and affected product versions are derived from the CISA CSAF source. The vendor fix was added in Revision 3 of the advisory on October 8, 2024. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N confirms network attack vector with low attack complexity, no privileges required, and low integrity impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-26011 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-26011

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-26011 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-26011

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-193-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-698820.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-698820.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.