RUGGEDCOM APE1808 inherits Nozomi Guardian and CMC flaws
Original title: Siemens RUGGEDCOM APE1808 Devices
All listed APE1808 versions are affected; the highest detailed score is 7.5 for unvalidated Smart Polling connections.
Siemens says RUGGEDCOM APE1808 devices running Nozomi Guardian/CMC are affected by vulnerabilities Nozomi Networks disclosed. Issues include dashboard template injection, weak Credentials Manager authorization, missing host validation in Smart Polling, Smart Polling access-control bypass, and a login CSRF whose description is cut off. Every listed version is known affected. Siemens tells customers to contact support for patch information.
Unconfirmed: The CSRF write-up is truncated, and no fixed version is named.
- CVE-2026-33389 scores 7.5 and can let a MITM capture polling credentials.
- CVE-2026-33388 scores 7.4; limited users can edit or delete credential entries.
- CVE-2026-33387 scores 4.6 and CVE-2026-33391 scores 5.4.
- CVE-2026-33920 is a login CSRF; the excerpt ends mid-description.
Impact: Credential interception, data changes, or disrupted monitoring
| Product | Affected |
|---|---|
| Siemens RUGGEDCOM APE1808 with Nozomi Guardian/CMC | all versions |
- 1.Contact Siemens customer support for patch and update information.
- Vendors
- SiemensNozomi Networks
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-33387 | Dashboards functionality due to improper validation of an input parameter: An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be… | 5.1 | <1% | ||
| CVE-2026-33388 | An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges | 6.4 | <1% | ||
| CVE-2026-33389 | An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target… | 5.3 | <1% | ||
| CVE-2026-33391 | An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges | 5.3 | <1% | ||
| CVE-2026-33920 | A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token | 5.1 | <1% |
From the original article
6 min read at cisa.govView CSAF Summary Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update information.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.