Siemens Working on Fix for Device Affected by Palo Alto Firewall Bug

Siemens warns that Ruggedcom APE1808 devices configured with Palo Alto Networks Virtual NGFW are affected by CVE-2024-3400, a critical command-injection zero-day actively exploited in the wild to deploy a Python backdoor; Palo Alto, Siemens, and CISA have issued advisories and mitigations, Shadowserver observed roughly 5,850 Internet-exposed vulnerable instances, and vendors recommend disabling GlobalProtect components and applying temporary threat-ID-based blocks while fixes are prepared.