Siemens RUGGEDCOM RST2228

Name: Siemens RUGGEDCOM RST2228
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical5high9medium1low

updated 2026-10-28

vulnerabilities (53)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-3596US	critical9.0OT high	14.9% (97th)	Exploit	no fix	2024-07-09	3 versions
CVE-2024-43485US	—	3.08% (88th)	—	no fix	2024-10-08	2 versions
CVE-2024-30105US	—	2.94% (87th)	—	no fix	2024-07-09	2 versions
CVE-2024-43483US	—	2.90% (87th)	—	no fix	2024-10-08	2 versions
CVE-2024-20672US	—	2.90% (87th)	—	no fix	2024-01-09	2 versions
CVE-2024-38095US	—	2.74% (86th)	—	no fix	2024-07-09	2 versions
CVE-2024-35264US	—	2.56% (85th)	—	no fix	2024-07-09	2 versions
CVE-2021-31895US	high7.5	2.20% (82nd)	—	V5.5.4	2021-07-13	3 versions
CVE-2022-39158US	—	1.47% (74th)	—	V5.6.0	2022-09-13	5 versions
CVE-2024-38081US	—	1.30% (70th)	—	no fix	2024-07-09	2 versions
CVE-2024-0056US	—OT elevated	1.18% (68th)	—	no fix	2024-01-09	2 versions
CVE-2017-12736US	medium5.8OT elevated	1.07% (65th)	—	V5.0.1	2017-12-26	3 versions
CVE-2021-42018US	high7.5	1.02% (63rd)	—	V5.6.0	2022-03-08	3 versions
CVE-2021-42020US	medium5.0	0.98% (62nd)	—	V5.6.0	2022-03-08	3 versions
CVE-2025-26389US	critical9.8	0.98% (62nd)	—	no fix	2025-05-13	2 versions
CVE-2022-34663US	medium6.0	0.94% (61st)	—	V5.6.0	2022-07-12	4 versions
CVE-2021-42019US	high7.5	0.92% (60th)	—	V5.6.0	2022-03-08	3 versions
CVE-2024-52963US	medium5.9	0.80% (56th)	—	no fix	2025-01-14	2 versions
CVE-2023-24845US	critical9.8	0.69% (53rd)	—	V5.8.0	2023-08-08	4 versions
CVE-2025-30176US	—	0.65% (51st)	—	no fix	2025-05-13	2 versions
CVE-2025-30175US	—	0.65% (51st)	—	no fix	2025-05-13	2 versions
CVE-2025-30174US	—	0.65% (51st)	—	no fix	2025-05-13	2 versions
CVE-2025-26390US	—	0.64% (51st)	—	no fix	2025-05-13	2 versions
CVE-2023-39269US	high7.5	0.64% (50th)	—	V5.8.0	2023-08-08	4 versions
CVE-2021-42016US	medium5.0	0.63% (50th)	—	V5.6.0	2022-03-08	3 versions
CVE-2018-18440US	high7.8	0.60% (48th)	—	with_U-Boot_V2016.05RS09	2018-11-20	2 versions
CVE-2024-23815US	—OT elevated	0.57% (47th)	—	no fix	2025-05-13	2 versions
CVE-2024-51444US	—	0.57% (47th)	—	no fix	2025-05-13	2 versions
CVE-2024-51445US	—	0.55% (46th)	—	no fix	2025-05-13	2 versions
CVE-2021-37208US	low3.5	0.53% (45th)	—	V5.6.0	2022-03-08	3 versions
CVE-2024-51447US	—	0.48% (42nd)	—	no fix	2025-05-13	2 versions
CVE-2021-42017US	medium4.3	0.47% (41st)	—	V5.6.0	2022-03-08	3 versions
CVE-2025-40566US	critical9.8	0.46% (40th)	—	no fix	2025-05-13	2 versions
CVE-2023-52237US	—	0.44% (38th)	—	V5.9.0	2024-07-09	3 versions
CVE-2025-24009US	—	0.43% (37th)	—	no fix	2025-05-13	2 versions
CVE-2021-37209US	medium4.0OT elevated	0.38% (32nd)	—	V5.7.0	2022-03-08	4 versions
CVE-2023-52238US	—	0.35% (29th)	—	V5.9.0	2024-07-09	3 versions
CVE-2024-38278US	—	0.34% (28th)	—	V5.9.0	2024-07-09	3 versions
CVE-2024-51446US	medium5.4	0.34% (27th)	—	no fix	2025-05-13	2 versions
CVE-2025-41222US	—	0.34% (27th)	—	V5.10.0	2025-07-08	3 versions
CVE-2025-24007US	—OT elevated	0.30% (23rd)	—	no fix	2025-05-13	2 versions
CVE-2025-31930US	—OT elevated	0.29% (21st)	—	no fix	2025-05-13	2 versions
CVE-2025-24008US	—OT elevated	0.27% (20th)	—	no fix	2025-05-13	2 versions
CVE-2025-24510US	—	0.27% (19th)	—	no fix	2025-05-13	2 versions
CVE-2025-41224US	—	0.26% (17th)	—	V5.10.0	2025-07-08	3 versions
CVE-2025-40556US	—	0.25% (16th)	—	no fix	2025-05-13	2 versions
CVE-2025-40935US	—	0.25% (16th)	—	V5.10.1	2025-12-09	3 versions
CVE-2025-40555US	—	0.22% (12th)	—	no fix	2025-05-13	2 versions
CVE-2024-32122US	medium4.4	0.22% (12th)	—	no fix	2025-04-08	2 versions
CVE-2023-52236US	—OT elevated	0.20% (10th)	—	V5.10.0	2025-07-08	3 versions

showing 50 of 53

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-1188Initialization of a Resource with an Insecure Default2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-311Missing Encryption of Sensitive Data2 CVEs

sources (4)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)31 CVEs
USCISA CSAF OT advisories (ICS)23 CVEs
DESiemens ProductCERT (CSAF)22 CVEs
EUEU Vulnerability Database (ENISA)21 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan