SSA-494539: Multiple Vulnerabilities in SINEC OS
SINEC OS is affected by multiple vulnerabilities due to open UDP ports, which could allow an attacker to access non-sensitive information without authentication or potentially cause temporary denial of service. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40803US | — | — | ||
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device exposes certain non-critical information from the device. This could a… | ||||
| CVE-2025-40802US | medium4.3 | — | ||
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device may be susceptible to resource exhaustion when subjected to high volum… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationRUGGEDCOM RST2428P (6GK6242-6PA00)
Create a firewall rule that blocks the UDP ports if not required. The device uses UDP 34964 and one port in range 49152-65535 for discovery protocols like LLDP, DCP, MRP etc.
- MitigationRUGGEDCOM RST2428P (6GK6242-6PA00)
Create a firewall rule that blocks the UDP ports if not required. The device uses UDP 34964 and one port in range 49152-65535 for discovery protocols like LLDP, DCP, MRP etc.
- No fix availableRUGGEDCOM RST2428P (6GK6242-6PA00)
Currently no fix is available
- No fix availableRUGGEDCOM RST2428P (6GK6242-6PA00)
Currently no fix is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan