CVE-2025-41224
published 2025-07-08CVE-2025-41224: A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2…
PriorityP351high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.22%
12.5th percentile
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RSL910NC (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credenti
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | ruggedcom_rmc8388_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rmc8388nc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs416ncv2_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs416pncv2_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs416pv2_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs416v2_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs900_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs900g_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs900gnc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rs900nc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2100_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2100nc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2100p_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2100pnc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2288_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2288nc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2300_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2300nc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2300p_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2300pnc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2488_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg2488nc_v5.x | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg907r | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg908c | < V5.10.0 | V5.10.0 |
| siemens | ruggedcom_rsg909r | < V5.10.0 | V5.10.0 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.7HIGHCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens RUGGEDCOM ROS Devices
cisa_ics·2025-10-21·CVSS 7.0
[HIGH] Siemens RUGGEDCOM ROS Devices
ICS Advisory
##
Siemens RUGGEDCOM ROS Devices
Release DateOctober 21, 2025
Alert CodeICSA-25-294-04
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 7.7
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM ROS Devices
- Vulnerabilities: Use of a Broken or Risky Cryptographic Algorithm, Improper Handling of Exceptional Cond
GHSA
GHSA-fg6g-24v3-5276: A vulnerability has been identified in RUGGEDCOM RMC8388 V5
ghsa_unreviewed·2025-07-08
CVE-2025-41224 [HIGH] CWE-693 GHSA-fg6g-24v3-5276: A vulnerability has been identified in RUGGEDCOM RMC8388 V5
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-08
Published