CVE-2025-41224

highPriorität · verfolgen · 0EPSS 0.003 · 17. PerzentilDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.26% (17th) EPSS

CVSS 8.8 · high

Is it mine?

159 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RSL910NC (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credentials to gain access to device through non-management and maintain SSH access to the device until reboot.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM RMC8388 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RMC8388NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416NCv2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416PNCv2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416Pv2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416v2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900 (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900G (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900GNC(32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900NC(32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100 (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100NC(32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100P (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100PNC (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2288 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2288NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300P V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300PNC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2488 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2488NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG907Rsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG908Csiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG909Rsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG910Csiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG920P V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG920PNC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSL910siemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSL910NCsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST2228siemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST2228Psiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST916Csiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST916Psiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RMC8388NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416NCv2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416PNCv2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416Pv2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS416v2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900 (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900G (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900GNC(32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RS900NC(32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100 (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100NC(32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100P (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2100PNC (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2288 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2288NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300P V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2300PNC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG2488NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG907Rcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG908Ccisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG909Rcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG910Ccisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG920P V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSG920PNC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSL910cisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RSL910NCcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST2228cisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST2228Pcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST916Ccisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
BehobenRUGGEDCOM RST916Pcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.2–8.8

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEAusnutzbarkeit 2.8 · Auswirkung 5.9

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.18.8highAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v4.07.7highCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.07.7highCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.2mediumCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-693USCWE-693USCWE-693USCWE-693US

betroffene Produkte (159)

Betroffene Produkte und Versionsbereiche.

RUGGEDCOM RMC8388 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RMC8388NC V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM ROS V4.X familyalle Versionennot affectedcisa_csaf_otUS
RUGGEDCOM RS416NCv2 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS416PNCv2 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS416Pv2 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS416v2 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS900 (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS900G (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS900GNC(32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RS900NC(32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2100 (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2100NC(32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2100P (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2100PNC (32M) V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2288 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2288NC V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2300 V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2300NC V5.Xalle Versionencisa_csaf_otUS
RUGGEDCOM RSG2300P V5.Xalle Versionencisa_csaf_otUS

20 von 159 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

SSA-083019SSA-083019: Multiple Vulnerabilities in RUGGEDCOM ROS Devices2025-07-08csaf · siemens_psirtDE
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
ICSA-25-294-04Siemens RUGGEDCOM ROS Devices2025-07-08icsa · cisa_csaf_otUS
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

veröffentlicht 2025-07-08geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan