Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Siemens’ April 2024 ICS Patch Tuesday included two advisories for Palo Alto Networks Virtual NGFW running on its RUGGEDCOM APE1808 platform. The advisories cover different vulnerability sets and version thresholds: SSA-822518 recommends Virtual NGFW V11.0.1, while SSA-455250 recommends V11.1.2-h3. They were later revised, so treat these as the recommendations recorded in those advisories—not confirmation of the latest available fixes as of October 2026.
What Siemens’ April 2024 advisories cover
SecurityWeek reported that Siemens issued eight new ICS advisories in April 2024, covering roughly 80 vulnerabilities across its products. Two of those advisories concern Palo Alto Networks Virtual NGFW on the RUGGEDCOM APE1808 industrial application-hosting platform. Siemens maps upstream vulnerability information to the affected Siemens product and provides product-specific remediation instructions; the underlying vulnerabilities concern Palo Alto Networks software. SecurityWeek’s April 9, 2024 report provides the release context.
The advisories are not interchangeable patch instructions. Each has its own affected-version conditions, vulnerability list, revision history, and recommended target version.
| Advisory | Affected Virtual NGFW versions on APE1808 | Recommended upgrade in the advisory | Siemens advisory revision |
|---|---|---|---|
| SSA-822518 | Before V11.0.1 | V11.0.1 | Version 1.2; last updated December 10, 2024 |
| SSA-455250 | See the advisory’s individual version conditions; some listed issues depend on BGP being enabled, and CVE-2025-0127 is identified for versions before V11.0.4 | V11.1.2-h3 | Version 1.6; last updated May 13, 2025 |
Both pages give April 9, 2024 as the publication date. Their later revision dates matter: consult the live Siemens advisories and both vendors before treating an entry here as current operational guidance.
#1 Best Overall
- BUSINESS CYBERSECURITY SOLUTION: SafeBiz is an advanced cybersecurity solution that protects your work network and safeguards your Business data and all internet connected devices in your business from cyber threats and hackers. SafeHome blocks phishing, malware, ransomware, online scams and dark web threats.
- ADVANCED THREAT PREVENTION: SafeBiz includes a Next-Gen Firewall, DNS Security, Web Filtering, Dark Web Protection, Geo-fencing and other AI Powered cybersecurity features protecting your Business and Sensitive Data from internet threats and hackers.
- BUSINESS DATA & IDENTITY SECURITY: Safeguards your Official and financial data, protecting them from online theft and unauthorized access.
- EASY SETUP: Connects effortlessly to any existing wireless router or internet connection, setting up in minutes without the need for any changes to your Business internet connection.
- HIGH SPEED CONNECTIVITY: Supports an aggregate throughput of up-to 4.3 Gbps, maintaining high-speed browsing and streaming performance for up to 128 devices.
SSA-822518: vulnerabilities in versions before V11.0.1
Siemens ProductCERT’s SSA-822518 covers Palo Alto Networks Virtual NGFW before V11.0.1 on RUGGEDCOM APE1808. It lists CVE-2022-0028, CVE-2023-0005, CVE-2023-0008, CVE-2023-6790, CVE-2023-6791, CVE-2023-38046, CVE-2024-5911, and CVE-2024-5917. Siemens assigns the advisory an overall CVSS v3.1 base score of 8.8 and CVSS v4.0 base score of 7.5; these are advisory-level scores, not the scores for every individual CVE.
What the advisory says about CVE-2022-0028
Siemens describes CVE-2022-0028 as a reflected and amplified TCP denial-of-service risk under a specific configuration: a URL-filtering profile with at least one blocked category is assigned to a source zone with an external-facing interface. Siemens notes that an attack may appear to originate from a Palo Alto Networks firewall. The advisory says this issue does not affect the confidentiality, integrity, or availability of the Siemens products it covers. Those details describe CVE-2022-0028’s stated scenario and should not be generalized to the other CVEs in the advisory.
Recommended action
The advisory recommends upgrading Virtual NGFW to V11.0.1 and contacting Siemens customer support for patch and update information. It also directs customers to Palo Alto Networks’ upstream security notifications for relevant workarounds. Siemens states: “Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.” Check the advisory for its current status and product-specific instructions.
SSA-455250: a separate set of vulnerabilities and conditions
Siemens ProductCERT’s SSA-455250 addresses a different and later set of Palo Alto Networks Virtual NGFW vulnerabilities on RUGGEDCOM APE1808. Its listed CVEs include CVE-2017-8923, CVE-2020-25658, CVE-2023-0286, CVE-2024-0008, CVE-2024-5916, CVE-2024-5918, CVE-2024-5919, CVE-2024-8688, and CVE-2025-0127. The advisory contains additional entries; use its complete list and individual version conditions rather than assuming these examples are exhaustive.
Rank #3
- HIGH AVAILABILITY UNIT: Secondary appliance for active/standby stateful failover; requires a matching primary firewall. Hardware only — security services and support are not included.
- PERFORMANCE: Up to 5 Gbps firewall inspection, 2.5 Gbps threat prevention and 2.5 Gbps IPSec VPN throughput driven by SonicWall's patented Reassembly-Free Deep Packet Inspection (RFDPI) engine.
- CONNECTIVITY: 8x1GbE + 2x5G SFP+ + 2x10G SFP in a desktop form factor; zero-touch deploy and manage on-box or via cloud Network Security Manager (NSM).
- THREAT PROTECTION: SonicOS 8 delivers intrusion prevention, gateway anti-malware, application control, TLS/SSL decryption, Capture ATP multi-engine sandboxing (RTDMI) and reputation-based content & DNS filtering with an active service subscription.
- BUILT FOR DISTRIBUTED & HIGH-END SMB: Secure SD-WAN, IPSec and SSL VPN plus Zero-Trust Network Access through Cloud Secure Edge keep distributed sites and remote workers protected.
Some listed vulnerabilities apply when BGP routing features are enabled. Separately, the advisory identifies CVE-2025-0127 for versions before V11.0.4. These conditions do not mean every APE1808 deployment is affected by every listed CVE. Siemens assigns SSA-455250 an advisory-level CVSS v3.1 base score of 9.8 and CVSS v4.0 base score of 8.7; those values are not individual CVE scores.
Recommended action and mitigation notes
Siemens recommends upgrading Virtual NGFW on APE1808 to V11.1.2-h3 and contacting customer support for patch and update information. For CVE-2023-0286, Siemens lists disabling CRL checking, if possible, as a mitigation. It also recommends protecting network access to devices with appropriate mechanisms and following its industrial security operational guidelines and product manuals. Consult SSA-455250 and the linked Palo Alto Networks notifications for the exact applicability and workarounds.
Quick Recap
Rank #4
- Powerful 16-Core Performance & Low Power: Powered by the Intel Atom C3958 Processor (16 Cores/16 Threads, 2.00 GHz), this mini PC delivers exceptional multi-tasking capabilities for virtualization and routing. With a TDP of only 31W and a peak power consumption of 30W, it offers enterprise-grade performance with high energy efficiency.
- Massive 10-Port Network Connectivity: Designed for heavy network loads. Features 6x Intel i226-V 2.5G LAN ports and 4x Intel X553 10G SFP ports on the front panel. Ideal for use as a high-performance firewall, soft router (pfSense/OPNsense), or network gateway handling massive data throughput.
- Flexible Storage & Memory Expansion: Supports up to 2x SO-DIMM DDR4 2400MHz memory slots for smooth multitasking. Storage is versatile with options for 2x M.2 2280 SATA SSDs, 1x SFF SATA HDD/SSD, and an onboard eMMC interface, ensuring fast boot times and ample space for logs and databases.
- Versatile I/O & Wireless Support: Equipped with a rear VGA port for local debugging/management and a Console port for direct system access. Includes an M.2 slot for a 4G LTE module (with SIM slot) and WiFi antenna ports, providing reliable wireless backup connectivity for remote management.
- Compact Industrial Design & Wide OS Support: Measuring just 9.25" x 4.72" x 2.76", this fanless-style compact unit fits easily into server racks or network cabinets. It supports Windows Server and Linux distributions, operating reliably in temperatures from 0°C to 45°C, making it perfect for 24/7 industrial applications.
How to determine which advisory applies
- Identify the deployment. Confirm that the device is a RUGGEDCOM APE1808 running Palo Alto Networks Virtual NGFW. These advisories do not establish that all Siemens products or all firewall installations are affected.
- Check the installed software version. Compare it with the thresholds and CVE-specific conditions in both Siemens advisories. In SSA-455250, check whether BGP is enabled and review the distinct pre-V11.0.4 condition for CVE-2025-0127.
- Use the matching advisory’s recommendation. SSA-822518 specifies V11.0.1; SSA-455250 specifies V11.1.2-h3. Do not substitute one target for the other based only on the shared platform name.
- Confirm the current remediation path. Because the advisory pages were revised after publication and identify different target versions, verify applicability, available updates, and any compensating measures with Siemens support and Palo Alto Networks before making a production change.
What these advisories do—and do not—establish
- They document Siemens’ mapping of Palo Alto Networks vulnerability information to Virtual NGFW deployments on RUGGEDCOM APE1808 and provide Siemens-specific remediation guidance.
- They do not establish that every listed vulnerability is remotely exploitable, that every APE1808 installation is affected, or that a Siemens hardware recall is involved.
- The recommendations above are those recorded in the respective Siemens advisories, which were last updated in December 2024 and May 2025. They do not by themselves confirm Palo Alto Networks’ present patch status or current workaround guidance.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
