CVE-2025-41224

highpriority · track · 0EPSS 0.003 · 17 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.26% (17th) EPSS

CVSS 8.8 · high

Is it mine?

159 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · scored 2026-10-27

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RSL910NC (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credentials to gain access to device through non-management and maintain SSH access to the device until reboot.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRUGGEDCOM RMC8388 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RMC8388NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416NCv2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416PNCv2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416Pv2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416v2 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900 (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900G (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900GNC(32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900NC(32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100 (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100NC(32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100P (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100PNC (32M) V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2288 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2288NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300P V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300PNC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2488 V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2488NC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG907Rsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG908Csiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG909Rsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG910Csiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG920P V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG920PNC V5.Xsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSL910siemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSL910NCsiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST2228siemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST2228Psiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST916Csiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST916Psiemens_psirt
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RMC8388 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RMC8388NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416NCv2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416PNCv2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416Pv2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS416v2 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900 (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900G (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900GNC(32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RS900NC(32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100 (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100NC(32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100P (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2100PNC (32M) V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2288 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2288NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300P V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2300PNC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2488 V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG2488NC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG907Rcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG908Ccisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG909Rcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG910Ccisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG920P V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSG920PNC V5.Xcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSL910cisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RSL910NCcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST2228cisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST2228Pcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST916Ccisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/
FixedRUGGEDCOM RST916Pcisa_csaf_ot
Update to V5.10.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989952/

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.2–8.8

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · productcert@siemens.com DEexploitability 2.8 · impact 5.9

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.18.8highAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US

v4.07.7highCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · productcert@siemens.com DE

v4.07.7highCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.2mediumCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-693USCWE-693USCWE-693USCWE-693US

affected products (159)

Products and version ranges known to be affected.

RUGGEDCOM RMC8388 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RMC8388NC V5.Xall versionscisa_csaf_otUS
RUGGEDCOM ROS V4.X familyall versionsnot affectedcisa_csaf_otUS
RUGGEDCOM RS416NCv2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416PNCv2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416Pv2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS416v2 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS900 (32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS900G (32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS900GNC(32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RS900NC(32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2100 (32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2100NC(32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2100P (32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2100PNC (32M) V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2288 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2288NC V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2300 V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2300NC V5.Xall versionscisa_csaf_otUS
RUGGEDCOM RSG2300P V5.Xall versionscisa_csaf_otUS

showing 20 of 159

advisories (2)

Vendor and ecosystem advisories describing this.

SSA-083019SSA-083019: Multiple Vulnerabilities in RUGGEDCOM ROS Devices2025-07-08csaf · siemens_psirtDE
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
ICSA-25-294-04Siemens RUGGEDCOM ROS Devices2025-07-08icsa · cisa_csaf_otUS
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot siemens_psirt NVD CVE.org MITRE

published 2025-07-08modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan