CVE-2025-41224

published 2025-07-08

CVE-2025-41224: A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2…

high 7.7 CVSS 4.0

AV A AC L AT P PR N UI N VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RSL910NC (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credenti

Affected

34 ranges · showing 25

Vendor	Product	Version range	Fixed in
siemens	ruggedcom_rmc8388_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rmc8388nc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs416ncv2_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs416pncv2_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs416pv2_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs416v2_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs900_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs900g_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs900gnc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rs900nc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2100_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2100nc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2100p_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2100pnc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2288_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2288nc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2300_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2300nc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2300p_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2300pnc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2488_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg2488nc_v5.x	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg907r	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg908c	< V5.10.0	V5.10.0
siemens	ruggedcom_rsg909r	< V5.10.0	V5.10.0

CWE-693