CVE-2023-52238

published 2024-07-09

CVE-2023-52238: A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0). The web server of the affected…

low 2.3 CVSS 4.0

AV N AC L AT P PR L UI N VC L VI N VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rst2228	< V5.9.0	V5.9.0
siemens	ruggedcom_rst2228p	< V5.9.0	V5.9.0

CWE-200