CVE-2024-38278
published 2024-07-09CVE-2024-38278: A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2…
PriorityP335medium6.6CVSS 3.1
AVNACHPRHUINSUCHIHAH
EPSS
0.34%
26.5th percentile
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG907R (All versions < V5.9.0), RUGGEDCOM RSG908C (All versions < V5.9.0), RUGGEDCOM RSG909R (All versions < V5.9.0), RUGGEDCOM RSG910C (All versions < V5.9.0), RUGGEDCOM RSG920P V5.X (All versions < V5.9.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSL910 (All versions < V5.9.0), RUGGEDCOM RSL910NC (All versions < V5.9.0), RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0), RUGGEDCOM RST916C (All versions < V5.9.0), RUGGEDCOM RST916P (All versions < V5.9.0). The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | ruggedcom_rmc8388_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rmc8388nc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs416ncv2_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs416pncv2_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs416pv2_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs416v2_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs900_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs900g_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs900gnc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rs900nc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2100_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2100nc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2100p_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2100pnc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2288_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2288nc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2300_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2300nc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2300p_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2300pnc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2488_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg2488nc_v5.x | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg907r | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg908c | < V5.9.0 | V5.9.0 |
| siemens | ruggedcom_rsg909r | < V5.9.0 | V5.9.0 |
CVSS provenance
nvdv3.16.6MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.5HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4r8m-6jq5-437v: A vulnerability has been identified in RUGGEDCOM RMC8388 V5
ghsa_unreviewed·2024-07-09
CVE-2024-38278 [HIGH] CWE-266 GHSA-4r8m-6jq5-437v: A vulnerability has been identified in RUGGEDCOM RMC8388 V5
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.9.0)
CISA ICS
Siemens RUGGEDCOM
cisa_ics·2024-07-11·CVSS 7.7
[HIGH] Siemens RUGGEDCOM
ICS Advisory
##
Siemens RUGGEDCOM
Release DateJuly 11, 2024
Alert CodeICSA-24-193-06
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM
- Vulnerabilities: Exposure of Sensitive Information to an Unauthorized Actor, Incorrect Privilege Assignment, Exposure of Sensitive
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-09
Published