PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-64157 Siemens CVE debrief

The supplied advisory data describes an externally controlled format string issue that could let an authenticated admin execute unauthorized code or commands through a specially crafted configuration. Defensive handling should focus on privilege review, configuration-change controls, and vendor patch validation. Important: the corpus contains a product mismatch—CISA metadata names Siemens RUGGEDCOM APE1808, while the vulnerability text and remediation point to Fortinet FortiOS/FortiGate—so treat this record as needing manual verification before remediation planning.

Vendor
Siemens
Product
RUGGEDCOM APE1808
CVSS
MEDIUM 6.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-10
Original CVE updated
2026-05-14
Advisory published
2026-03-10
Advisory updated
2026-05-14

Who should care

Fortinet/FortiGate administrators, OT and industrial-network defenders consuming CISA ICS advisories, and incident responders validating whether the affected FortiOS branches are present in their environment.

Technical summary

The source description identifies a use of externally controlled format string vulnerability. The supplied CVSS vector (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates a local, high-privilege, no-user-interaction issue with high potential impact if an attacker already has authenticated admin access. The corpus also shows an internal advisory inconsistency: the CISA CSAF metadata lists Siemens RUGGEDCOM APE1808, but the text, references, and remediation describe Fortinet FortiOS/FortiGate NGFW versions and updates.

Defensive priority

Medium. The issue requires authenticated administrative privileges, but the potential for unauthorized code or command execution warrants prompt validation and patch planning in environments that match the affected FortiOS branches.

Recommended defensive actions

  • Verify whether any devices run the affected FortiOS branches listed in the advisory text before taking action.
  • Cross-check the CISA CSAF and the referenced vendor advisory because the supplied corpus contains a Siemens/Fortinet product mismatch.
  • If affected, follow the vendor remediation path and update FortiGate NGFW to V7.4.10 or later, or use the vendor-supported fix for the relevant branch.
  • Review and restrict administrative access, enforce strong change control for configuration updates, and audit privileged actions on management interfaces.
  • Apply CISA ICS recommended practices and defense-in-depth guidance for OT/industrial environments.

Evidence notes

Based on CISA CSAF ICSA-26-071-02, published 2026-03-10 and last updated 2026-05-14 in the supplied timeline and revision history. The corpus references Siemens ProductCERT SSA-975644, but the vulnerability description and remediation text refer to Fortinet FortiOS/FortiGate. Because of this mismatch, the record should be validated against the official vendor advisory before remediation.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-64157 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-64157

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-64157 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-64157

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-071-02.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-975644.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-975644.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-02

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.