Unpatched PAN-OS Flaws in Siemens RUGGEDCOM Devices Enable Remote Code Execution
Written by AI from the linked story. Not reviewed by an editor. How this works
Siemens RUGGEDCOM APE1808 devices running multiple versions of Palo Alto Networks PAN-OS are vulnerable to use-after-free flaws (CVE-2026-109618 and CVE-2026-109619) that can allow attackers to execute arbitrary code remotely. The root cause is the delayed identification and remediation of known vulnerabilities in a third-party software component embedded within critical infrastructure hardware. This is particularly dangerous because RUGGEDCOM devices are commonly deployed in industrial and operational technology environments where exploitation could have serious physical consequences. The incident highlights how vulnerabilities in integrated third-party components can expose critical infrastructure operators who may not monitor upstream vendor advisories closely.
Tactical Insight
Immediate actions
- Apply the PAN-OS patches recommended by Siemens and Palo Alto Networks to all affected RUGGEDCOM APE1808 devices immediately
- Implement available workarounds from Palo Alto Networks on any device where immediate patching is not feasible
- Identify and inventory all RUGGEDCOM APE1808 devices in the environment to assess exposure scope
Long-term improvements
- Maintain a comprehensive software bill of materials (SBOM) for all network appliances to rapidly identify third-party component vulnerabilities
- Establish a formal process to monitor security advisories from both primary hardware vendors and their upstream software suppliers
- Implement emergency patching procedures with defined SLAs for critical vulnerabilities in operational technology environments
Detection measures
- Deploy network-based intrusion detection to monitor for exploitation attempts targeting PAN-OS management interfaces
- Enable centralized logging on all RUGGEDCOM devices and alert on anomalous traffic or unexpected process behavior
- Conduct regular vulnerability scans against all OT/ICS network appliances, including embedded software versions