ICS Advisory: Siemens RUGGEDCOM APE1808 before V11.0.1

Summary:

A security vulnerability affecting Siemens RUGGEDCOM APE1808, an application hosting platform, has been identified. The vulnerability, rated CVSS v4 6.1, is remotely exploitable with low attack complexity. Successful exploitation could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The affected products are all versions of Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW before V11.0.1. The vulnerability does not impact the confidentiality, integrity, or availability of the products. However, it may help obfuscate the identity of the attacker and implicate the firewall as the source of the attack. Siemens has released patches for the vulnerability and recommends upgrading to V11.0.1. CISA recommends performing defensive measures to minimize the risk of exploitation, including minimizing network exposure and using more secure remote access methods.