Siemens RUGGEDCOM RST2428P

Name: Siemens RUGGEDCOM RST2428P
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical10high4medium1low

updated 2026-10-28

vulnerabilities (48)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-10585US	critical9.8OT critical	8.97% (95th)	KEV	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-13223US	—OT critical	4.90% (92nd)	KEV	no fix	2025-11-17	≤ vers:unknown/*
CVE-2018-25032US	high7.5	51.7% (99th)	Exploit	no fix	2022-03-25	≤ vers:unknown/*
CVE-2025-48976US	—	32.9% (98th)	Exploit	no fix	2025-06-16	≤ vers:unknown/*
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	no fix	2022-08-05	≤ vers:unknown/*
CVE-2025-26465US	medium6.8	7.72% (95th)	Exploit	no fix	2025-02-18	≤ vers:unknown/*
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	≤ vers:unknown/*
CVE-2022-23303US	critical9.8	3.05% (88th)	Exploit	no fix	2022-01-17	≤ vers:unknown/*
CVE-2026-0273US	high7.2	1.34% (71st)	Exploit	no fix	2026-06-10	≤ vers:unknown/*
CVE-2025-5222US	—	0.44% (38th)	Exploit	no fix	2025-05-27	≤ vers:unknown/*
CVE-2017-14919US	high7.5	8.30% (95th)	—	no fix	2017-10-30	≤ vers:unknown/*
CVE-2016-9841US	critical9.8	7.55% (94th)	—	no fix	2017-05-23	≤ vers:unknown/*
CVE-2005-2096US	high7.5	5.63% (93rd)	—	no fix	2005-07-06	≤ vers:unknown/*
CVE-2016-9842US	high8.8	5.20% (92nd)	—	no fix	2017-05-23	≤ vers:unknown/*
CVE-2016-9840US	high8.8	4.88% (92nd)	—	no fix	2017-05-23	≤ vers:unknown/*
CVE-2019-9494US	medium5.9	3.88% (90th)	—	no fix	2019-04-17	≤ vers:unknown/*
CVE-2019-9495US	low3.7OT elevated	3.48% (89th)	—	no fix	2019-04-17	≤ vers:unknown/*
CVE-2023-45853US	critical9.8	3.45% (89th)	—	no fix	2023-10-14	≤ vers:unknown/*
CVE-2022-48174US	critical9.8	3.16% (88th)	—	no fix	2023-08-22	≤ vers:unknown/*
CVE-2025-9231US	—	2.24% (83rd)	—	no fix	2025-09-30	≤ vers:unknown/*
CVE-2025-9232US	—	2.00% (81st)	—	no fix	2025-09-30	≤ vers:unknown/*
CVE-2022-23304US	critical9.8	1.91% (80th)	—	no fix	2022-01-17	≤ vers:unknown/*
CVE-2025-9230US	—	1.55% (75th)	—	no fix	2025-09-30	≤ vers:unknown/*
CVE-2026-5121US	—	1.09% (65th)	—	no fix	2026-03-30	≤ vers:unknown/*
CVE-2025-40795US	—	0.72% (54th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-40798US	—	0.54% (45th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-40797US	—	0.54% (45th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-40568US	—OT elevated	0.52% (44th)	—	V3.2	2025-06-10	0 → V3.2
CVE-2025-40796US	—	0.50% (43rd)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2026-56451US	—	0.50% (43rd)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2025-5914US	high7.8	0.47% (41st)	—	no fix	2025-06-09	≤ vers:unknown/*
CVE-2025-40567US	—OT elevated	0.44% (38th)	—	V3.2	2025-06-10	0 → V3.2
CVE-2026-22184US	high7.8	0.41% (35th)	—	no fix	2026-01-07	≤ vers:unknown/*
CVE-2025-40804US	—	0.41% (35th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2024-41797US	—	0.38% (32nd)	—	V3.1	2025-06-10	0 → V3.1
CVE-2022-37660US	—OT elevated	0.38% (32nd)	—	no fix	2025-02-11	≤ vers:unknown/*
CVE-2025-43715US	—	0.33% (26th)	—	no fix	2025-04-17	≤ vers:unknown/*
CVE-2025-40569US	—	0.29% (21st)	—	V3.2	2025-06-10	0 → V3.2
CVE-2026-7891DE	critical9.1	0.27% (20th)	—	no fix	2026-05-07	≤ vers:unknown/*
CVE-2025-40757US	—	0.27% (19th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2026-54429US	—	0.27% (18th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-0272US	high7.2OT elevated	0.26% (18th)	—	no fix	2026-06-10	≤ vers:unknown/*
CVE-2025-40594US	critical9.8	0.21% (11th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2026-41918US	—	0.19% (9th)	—	V4.0	2026-06-02	0 → V4.0
CVE-2025-40802US	medium4.3	0.18% (7th)	—	*	2025-09-09	2 versions
CVE-2025-40803US	—	0.18% (7th)	—	*	2025-09-09	2 versions
CVE-2025-40945US	—	0.16% (6th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-0266US	medium4.8	0.14% (3rd)	—	no fix	2026-06-10	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read7 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-203Observable Discrepancy4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)43 CVEs
EUEU Vulnerability Database (ENISA)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan