PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-26011 Siemens CVE debrief

CVE-2024-26011 is a missing authentication vulnerability in multiple Fortinet products that allows remote attackers to execute unauthorized code or commands via specially crafted packets. The vulnerability affects FortiManager, FortiPAM, FortiProxy, FortiSwitchManager, FortiPortal, and FortiOS across numerous versions. Siemens has identified this as an upstream vulnerability affecting the RUGGEDCOM APE1808, which incorporates Fortinet NGFW technology. The vulnerability was published on July 9, 2024, and carries a CVSS 3.1 score of 5.3 (Medium severity). Siemens released a vendor fix on October 8, 2024, advising customers to update the Fortigate NGFW component to version 7.4.4.

Vendor
Siemens
Product
RUGGEDCOM APE1808
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2024-03-12
Original CVE updated
2026-01-14
Advisory published
2024-03-12
Advisory updated
2026-01-14

Who should care

Organizations operating Siemens RUGGEDCOM APE1808 devices with Fortinet NGFW components, network security teams managing Fortinet infrastructure, industrial control system operators using affected Fortinet products for network segmentation, and compliance teams tracking CVE remediation for critical infrastructure environments.

Technical summary

This vulnerability stems from missing authentication for critical functions in Fortinet's management and security products. An unauthenticated remote attacker can send specially crafted packets to execute unauthorized code or commands. The attack requires network access to affected services but no authentication credentials. The vulnerability affects multiple Fortinet product lines used in enterprise network security infrastructure. Siemens RUGGEDCOM APE1808 devices incorporate Fortinet NGFW technology and are affected through this upstream component. The fix requires updating the Fortinet NGFW to version 7.4.4.

Defensive priority

medium

Recommended defensive actions

  • Update Fortigate NGFW component to version 7.4.4 on affected RUGGEDCOM APE1808 devices
  • Contact Siemens customer support to obtain patch and update information for the Fortinet NGFW component
  • Apply network segmentation to limit exposure of management interfaces
  • Monitor for unauthorized access attempts to Fortinet management services
  • Review Fortinet security advisories for additional affected products and patches

Evidence notes

The source advisory (ICSA-24-193-02) identifies CVE-2024-26011 as an upstream Fortinet vulnerability affecting the Siemens RUGGEDCOM APE1808 product. The vulnerability description and affected product versions are derived from the CISA CSAF source. The vendor fix was added in Revision 3 of the advisory on October 8, 2024. The CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N confirms network attack vector with low attack complexity, no privileges required, and low integrity impact.

Official resources

2024-07-09