CVE-2025-40935

mediumPriorität · verfolgen · 0EPSS 0.002 · 15. PerzentilDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.25% (15th) EPSS

CVSS 4.3 · medium

Is it mine?

137 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-22

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.1), RUGGEDCOM RSG907R (All versions < V5.10.1), RUGGEDCOM RSG908C (All versions < V5.10.1), RUGGEDCOM RSG909R (All versions < V5.10.1), RUGGEDCOM RSG910C (All versions < V5.10.1), RUGGEDCOM RSG920P V5.X (All versions < V5.10.1), RUGGEDCOM RSL910 (All versions < V5.10.1), RUGGEDCOM RST2228 (All versions < V5.10.1), RUGGEDCOM RST2228P (All versions < V5.10.1), RUGGEDCOM RST916C (All versions < V5.10.1), RUGGEDCOM RST916P (All versions < V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM RMC8388 V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS416Pv2 V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS416v2 V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS900 (32M) V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS900G (32M) V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2100 (32M) V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2100P (32M) V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2288 V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2300 V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2300P V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2488 V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG907Rsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG908Csiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG909Rsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG910Csiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG920P V5.Xsiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSL910siemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST2228siemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST2228Psiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST916Csiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST916Psiemens_psirt
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS416Pv2 V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS416v2 V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS900 (32M) V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RS900G (32M) V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2100 (32M) V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2100P (32M) V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2288 V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2300 V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2300P V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG907Rcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG908Ccisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG909Rcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG910Ccisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSG920P V5.Xcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RSL910cisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST2228cisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST2228Pcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST916Ccisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/
BehobenRUGGEDCOM RST916Pcisa_csaf_ot
Update to V5.10.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997649/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 1.3–5.3

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · NCSC-NL NL

v3.14.3mediumAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · productcert@siemens.com DEAusnutzbarkeit 2.8 · Auswirkung 1.4

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · Siemens ProductCERT DE

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · CISA US

v4.05.3mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.3mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.01.3lowCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USCWE-20USCWE-20USCWE-20USCWE-20US

betroffene Produkte (137)

Betroffene Produkte und Versionsbereiche.

RUGGEDCOM RMC8388 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS416Pv2 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS416v2 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS900 (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS900G (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2100 (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2100P (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2288 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2300 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2300P V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2488 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG907Ralle Versionencisa_csaf_otUS
RUGGEDCOM RSG908Calle Versionencisa_csaf_otUS
RUGGEDCOM RSG909Ralle Versionencisa_csaf_otUS
RUGGEDCOM RSG910Calle Versionencisa_csaf_otUS
RUGGEDCOM RSG920P V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSL910alle Versionencisa_csaf_otUS
RUGGEDCOM RST2228alle Versionencisa_csaf_otUS
RUGGEDCOM RST2228Palle Versionencisa_csaf_otUS
RUGGEDCOM RST916Calle Versionencisa_csaf_otUS

20 von 137 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-763474SSA-763474: Denial of Service Vulnerability in Ruggedcom ROS devices before V5.10.12025-12-09csaf · siemens_psirtDE
Ruggedcom ROS devices contain a temporary denial of service vulnerability that could allow an attacker to crash and restart the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
ICSA-26-015-05Siemens RUGGEDCOM ROS2025-12-09icsa · cisa_csaf_otUS
Ruggedcom ROS devices contain a temporary denial of service vulnerability that could allow an attacker to crash and restart the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

veröffentlicht 2025-12-09geändert 2026-10-07

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan