CVE-2024-39675

highpriority · track · 0EPSS 0.003 · 20 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.28% (20th) EPSS

CVSS 8.8 · high

Is it mine?

152 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-23

A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3.10), RUGGEDCOM RP110 (All versions < V4.3.10), RUGGEDCOM RP110NC (All versions < V4.3.10), RUGGEDCOM RS400 (All versions < V4.3.10), RUGGEDCOM RS400NC (All versions < V4.3.10), RUGGEDCOM RS401 (All versions < V4.3.10), RUGGEDCOM RS401NC (All versions < V4.3.10), RUGGEDCOM RS416 (All versions < V4.3.10), RUGGEDCOM RS416NC (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416P (All versions < V4.3.10), RUGGEDCOM RS416PNC (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS910 (All versions < V4.3.10), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910LNC (All versions), RUGGEDCOM RS910NC (All versions < V4.3.10), RUGGEDCOM RS910W (All versions < V4.3.10), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920LNC (All versions), RUGGEDCOM RS920W (All versions). In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRUGGEDCOM RMC30siemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RMC30NCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RP110siemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RP110NCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS400siemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS400NCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS401siemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS401NCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416siemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416NCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416NCv2 V4.Xsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416NCv2 V5.Xsiemens_psirt
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS416Psiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416PNCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416PNCv2 V4.Xsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416PNCv2 V5.Xsiemens_psirt
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS416Pv2 V4.Xsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416Pv2 V5.Xsiemens_psirt
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS416v2 V4.Xsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416v2 V5.Xsiemens_psirt
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS910siemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS910NCsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS910Wsiemens_psirt
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RMC30cisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RMC30NCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RP110cisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RP110NCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS400cisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS400NCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS401cisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS401NCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416cisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416NCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416NCv2 V4.Xcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416NCv2 V5.Xcisa_csaf_ot
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS416Pcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416PNCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416PNCv2 V4.Xcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416PNCv2 V5.Xcisa_csaf_ot
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS416Pv2 V4.Xcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416Pv2 V5.Xcisa_csaf_ot
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS416v2 V4.Xcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS416v2 V5.Xcisa_csaf_ot
Update to V5.9.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972217/
FixedRUGGEDCOM RS910cisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS910NCcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
FixedRUGGEDCOM RS910Wcisa_csaf_ot
Update to V4.3.10 or later version
https://support.industry.siemens.com/cs/ww/en/view/109972218/
MitigationRUGGEDCOM RMC30siemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RMC30NCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RP110siemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RP110NCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS400siemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS400NCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS401siemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS401NCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416siemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416NCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416NCv2 V4.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416NCv2 V5.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416Psiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416PNCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416PNCv2 V4.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416PNCv2 V5.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416Pv2 V4.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416Pv2 V5.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416v2 V4.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416v2 V5.Xsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910siemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910Lsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910LNCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910NCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910Wsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS920Lsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS920LNCsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS920Wsiemens_psirt
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RMC30cisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RMC30NCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RP110cisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RP110NCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS400cisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS400NCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS401cisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS401NCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416cisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416NCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416NCv2 V4.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416NCv2 V5.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416Pcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416PNCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416PNCv2 V4.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416PNCv2 V5.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416Pv2 V4.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416Pv2 V5.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416v2 V4.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS416v2 V5.Xcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910cisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910Lcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910LNCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910NCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS910Wcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS920Lcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS920LNCcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
MitigationRUGGEDCOM RS920Wcisa_csaf_ot
Disable the Modbus Server if not required on the affected system. Restrict the access to Port 502/tcp to trusted IP address only. Also note, Modbus is disabled by default
No fix plannedRUGGEDCOM RS910Lsiemens_psirt
Currently no fix is planned
No fix plannedRUGGEDCOM RS910LNCsiemens_psirt
Currently no fix is planned
No fix plannedRUGGEDCOM RS920Lsiemens_psirt
Currently no fix is planned
No fix plannedRUGGEDCOM RS920LNCsiemens_psirt
Currently no fix is planned
No fix plannedRUGGEDCOM RS920Wsiemens_psirt
Currently no fix is planned
No fix plannedRUGGEDCOM RS910Lcisa_csaf_ot
Currently no fix is planned
No fix plannedRUGGEDCOM RS910LNCcisa_csaf_ot
Currently no fix is planned
No fix plannedRUGGEDCOM RS920Lcisa_csaf_ot
Currently no fix is planned
No fix plannedRUGGEDCOM RS920LNCcisa_csaf_ot
Currently no fix is planned
No fix plannedRUGGEDCOM RS920Wcisa_csaf_ot
Currently no fix is planned

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.3–8.8

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE

v3.18.8highAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v4.08.7highCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.08.7highCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.06.3mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-497USCWE-497USCWE-497USCWE-497USCWE-497US

affected products (152)

Products and version ranges known to be affected.

RUGGEDCOM RMC30all versionscisa_csaf_otUS
RUGGEDCOM RMC30NCall versionscisa_csaf_otUS
RUGGEDCOM RP110all versionscisa_csaf_otUS
RUGGEDCOM RP110NCall versionscisa_csaf_otUS
RUGGEDCOM RS400all versionscisa_csaf_otUS
RUGGEDCOM RS400NCall versionscisa_csaf_otUS
RUGGEDCOM RS401all versionscisa_csaf_otUS
RUGGEDCOM RS401NCall versionscisa_csaf_otUS
RUGGEDCOM RS416all versionscisa_csaf_otUS
RUGGEDCOM RS416NCall versionscisa_csaf_otUS
RUGGEDCOM RS416NCv2 V4.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416NCv2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416Pall versionscisa_csaf_otUS
RUGGEDCOM RS416PNCall versionscisa_csaf_otUS
RUGGEDCOM RS416PNCv2 V4.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416PNCv2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416Pv2 V4.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416Pv2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416v2 V4.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416v2 V5.Xall versionscisa_csaf_otUS

showing 20 of 152

advisories (3)

Vendor and ecosystem advisories describing this.

NCSC-2024-0282Kwetsbaarheden verholpen in Siemens ProductenNL2024-07-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDOM, SIMATIC, SINEMA, SIPROTEC en de Engineering Platforms voor diverse systemen.
SSA-170375SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.92024-07-09csaf · siemens_psirtDE
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). The common denominator to all vulnerabilities is the leak of confidential information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
ICSA-24-193-06Siemens RUGGEDCOM2024-07-09icsa · cisa_csaf_otUS
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). The common denominator to all vulnerabilities is the leak of confidential information. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot ncsc_nl siemens_psirt NVD CVE.org MITRE

published 2024-07-09modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan