Siemens: Node2Shell and php2shell reach Desigo CC, Gridscale X, RUGGEDCOM APE1808, Industrial Edge and building/energy products (CVSS 9.8)
- Do now: update where Siemens has fixed versions (e.g. the Industrial Edge configurators); for products marked all versions, apply Siemens' mitigations and restrict network access until fixes ship.
- Industrial Edge: Siemens says an IEM with no Management Applications installed needs no action; Edge Hub and IEM Cloud got WAF protection on Siemens' side.
- APE1808: follow Palo Alto's upstream advisories for PAN-OS.
Sources: CISA ICSA-26-316-01: Siemens Building Automation and Energy Products (php2shell) · CISA ICSA-26-316-02: Siemens Desigo, Gridscale (Node2Shell) · CISA ICSA-26-316-03: Siemens Industrial Edge Management (Node2Shell) · CISA ICSA-26-316-04: Siemens RUGGEDCOM APE1808 (Node2Shell) · CISA ICSA-26-316-05: Siemens RUGGEDCOM APE1808 (php2shell)