Vulnerability-Lookup

CVE-2025-40935 (GCVE-0-2025-40935)

Vulnerability from cvelistv5 – Published: 2025-12-09 10:44 – Updated: 2025-12-09 15:35

Summary

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.1), RUGGEDCOM RSG907R (All versions < V5.10.1), RUGGEDCOM RSG908C (All versions < V5.10.1), RUGGEDCOM RSG909R (All versions < V5.10.1), RUGGEDCOM RSG910C (All versions < V5.10.1), RUGGEDCOM RSG920P V5.X (All versions < V5.10.1), RUGGEDCOM RSL910 (All versions < V5.10.1), RUGGEDCOM RST2228 (All versions < V5.10.1), RUGGEDCOM RST2228P (All versions < V5.10.1), RUGGEDCOM RST916C (All versions < V5.10.1), RUGGEDCOM RST916P (All versions < V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 15:34 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/html/…

Impacted products

21 products

Vendor	Product	Version	CPE status
Siemens	RUGGEDCOM RMC8388 V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RS416Pv2 V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RS416v2 V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RS900 (32M) V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RS900G (32M) V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG2100 (32M) V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG2100P (32M) V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG2288 V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG2300 V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG2300P V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG2488 V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG907R	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG908C	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG909R	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG910C	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSG920P V5.X	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RSL910	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RST2228	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RST2228P	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RST916C	Affected: 0 , < V5.10.1 (custom)	guessed
Siemens	RUGGEDCOM RST916P	Affected: 0 , < V5.10.1 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-40935",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T15:34:03.895420Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-09T15:35:36.265Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RMC8388 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416Pv2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416v2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900 (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900G (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100 (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100P (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2288 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300P V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2488 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG907R",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG908C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG909R",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG910C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG920P V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSL910",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST2228",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST2228P",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST916C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST916P",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG907R (All versions \u003c V5.10.1), RUGGEDCOM RSG908C (All versions \u003c V5.10.1), RUGGEDCOM RSG909R (All versions \u003c V5.10.1), RUGGEDCOM RSG910C (All versions \u003c V5.10.1), RUGGEDCOM RSG920P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSL910 (All versions \u003c V5.10.1), RUGGEDCOM RST2228 (All versions \u003c V5.10.1), RUGGEDCOM RST2228P (All versions \u003c V5.10.1), RUGGEDCOM RST916C (All versions \u003c V5.10.1), RUGGEDCOM RST916P (All versions \u003c V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        {
          "cvssV4_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-09T10:44:34.649Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-763474.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2025-40935",
    "datePublished": "2025-12-09T10:44:34.649Z",
    "dateReserved": "2025-04-16T09:06:15.878Z",
    "dateUpdated": "2025-12-09T15:35:36.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-40935",
      "date": "2026-09-16",
      "epss": "0.00248",
      "percentile": "0.1628"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-40935\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2025-12-09T16:17:47.070\",\"lastModified\":\"2026-06-17T09:22:19.660\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG907R (All versions \u003c V5.10.1), RUGGEDCOM RSG908C (All versions \u003c V5.10.1), RUGGEDCOM RSG909R (All versions \u003c V5.10.1), RUGGEDCOM RSG910C (All versions \u003c V5.10.1), RUGGEDCOM RSG920P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSL910 (All versions \u003c V5.10.1), RUGGEDCOM RST2228 (All versions \u003c V5.10.1), RUGGEDCOM RST2228P (All versions \u003c V5.10.1), RUGGEDCOM RST916C (All versions \u003c V5.10.1), RUGGEDCOM RST916P (All versions \u003c V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.\"}],\"affected\":[{\"source\":\"productcert@siemens.com\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RMC8388 V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RS416Pv2 V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RS416v2 V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RS900 (32M) V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RS900G (32M) V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG2100 (32M) V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG2100P (32M) V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG2288 V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG2300 V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG2300P V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG2488 V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG907R\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG908C\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG909R\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG910C\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSG920P V5.X\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RSL910\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RST2228\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RST2228P\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RST916C\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RST916P\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V5.10.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"LOW\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-12-09T15:34:03.895420Z\",\"id\":\"CVE-2025-40935\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-763474.html\",\"source\":\"productcert@siemens.com\"}]}}",
    "redhat_vex": {
      "current_release_date": "2026-01-09T09:16:09+00:00",
      "cve": "CVE-2025-40935",
      "id": "CVE-2025-40935",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2025-40935",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-40935.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-40935\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-12-09T15:34:03.895420Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-12-09T15:35:30.304Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\"}}, {\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N\"}}], \"affected\": [{\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RMC8388 V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RS416Pv2 V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RS416v2 V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RS900 (32M) V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RS900G (32M) V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG2100 (32M) V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG2100P (32M) V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG2288 V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG2300 V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG2300P V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG2488 V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG907R\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG908C\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG909R\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG910C\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSG920P V5.X\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RSL910\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RST2228\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RST2228P\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RST916C\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RST916P\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.10.1\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-763474.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG907R (All versions \u003c V5.10.1), RUGGEDCOM RSG908C (All versions \u003c V5.10.1), RUGGEDCOM RSG909R (All versions \u003c V5.10.1), RUGGEDCOM RSG910C (All versions \u003c V5.10.1), RUGGEDCOM RSG920P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSL910 (All versions \u003c V5.10.1), RUGGEDCOM RST2228 (All versions \u003c V5.10.1), RUGGEDCOM RST2228P (All versions \u003c V5.10.1), RUGGEDCOM RST916C (All versions \u003c V5.10.1), RUGGEDCOM RST916P (All versions \u003c V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20: Improper Input Validation\"}]}], \"providerMetadata\": {\"orgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"shortName\": \"siemens\", \"dateUpdated\": \"2025-12-09T10:44:34.649Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-40935\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-12-09T15:35:36.265Z\", \"dateReserved\": \"2025-04-16T09:06:15.878Z\", \"assignerOrgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"datePublished\": \"2025-12-09T10:44:34.649Z\", \"assignerShortName\": \"siemens\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2025-15662 (CVE-2025-40935)

Vulnerability from fstec – Published: 2025-12-15 – Updated: 2025-12-15 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения Ethernet коммутаторов RUGGEDCOM ROS, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость микропрограммного обеспечения Ethernet коммутаторов RUGGEDCOM ROS связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Severity

4.0 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:S/C:N/I:N/A:P

4.3 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

5.3 (Medium) CVSS 4.0


                      
                        CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2025-40935, SSA-763474

References

1 reference

URL
https://cert-portal.siemens.com/productcert/html/ssa-763474.html

Impacted products

21 products from 1 vendor

Vendors

Siemens AG

Products

RUGGEDCOM RMC8388, RUGGEDCOM RS416Pv2, RUGGEDCOM RS416v2, RUGGEDCOM RS900 (32M), RUGGEDCOM RS900G (32M), RUGGEDCOM RSG2100 (32M), RUGGEDCOM RSG2100P (32M), RUGGEDCOM RSG2288, RUGGEDCOM RSG2300, RUGGEDCOM RSG2300P, RUGGEDCOM RSG2488, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P, RUGGEDCOM RSL910, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P

Versions

до 5.10.1 (RUGGEDCOM RMC8388), до 5.10.1 (RUGGEDCOM RS416Pv2), до 5.10.1 (RUGGEDCOM RS416v2), до 5.10.1 (RUGGEDCOM RS900 (32M)), до 5.10.1 (RUGGEDCOM RS900G (32M)), до 5.10.1 (RUGGEDCOM RSG2100 (32M)), до 5.10.1 (RUGGEDCOM RSG2100P (32M)), до 5.10.1 (RUGGEDCOM RSG2288), до 5.10.1 (RUGGEDCOM RSG2300), до 5.10.1 (RUGGEDCOM RSG2300P), до 5.10.1 (RUGGEDCOM RSG2488), до 5.10.1 (RUGGEDCOM RSG907R), до 5.10.1 (RUGGEDCOM RSG908C), до 5.10.1 (RUGGEDCOM RSG909R), до 5.10.1 (RUGGEDCOM RSG910C), до 5.10.1 (RUGGEDCOM RSG920P), до 5.10.1 (RUGGEDCOM RSL910), до 5.10.1 (RUGGEDCOM RST2228), до 5.10.1 (RUGGEDCOM RST2228P), до 5.10.1 (RUGGEDCOM RST916C), до 5.10.1 (RUGGEDCOM RST916P)

Product types

Network device, Network software, Network appliance software, Appliance software

Mitigations

Использование рекомендаций производителя: https://cert-portal.siemens.com/productcert/html/ssa-763474.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
  "CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
  "CVSS 4.0": "AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Siemens AG",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 5.10.1 (RUGGEDCOM RMC8388), \u0434\u043e 5.10.1 (RUGGEDCOM RS416Pv2), \u0434\u043e 5.10.1 (RUGGEDCOM RS416v2), \u0434\u043e 5.10.1 (RUGGEDCOM RS900 (32M)), \u0434\u043e 5.10.1 (RUGGEDCOM RS900G (32M)), \u0434\u043e 5.10.1 (RUGGEDCOM RSG2100 (32M)), \u0434\u043e 5.10.1 (RUGGEDCOM RSG2100P (32M)), \u0434\u043e 5.10.1 (RUGGEDCOM RSG2288), \u0434\u043e 5.10.1 (RUGGEDCOM RSG2300), \u0434\u043e 5.10.1 (RUGGEDCOM RSG2300P), \u0434\u043e 5.10.1 (RUGGEDCOM RSG2488), \u0434\u043e 5.10.1 (RUGGEDCOM RSG907R), \u0434\u043e 5.10.1 (RUGGEDCOM RSG908C), \u0434\u043e 5.10.1 (RUGGEDCOM RSG909R), \u0434\u043e 5.10.1 (RUGGEDCOM RSG910C), \u0434\u043e 5.10.1 (RUGGEDCOM RSG920P), \u0434\u043e 5.10.1 (RUGGEDCOM RSL910), \u0434\u043e 5.10.1 (RUGGEDCOM RST2228), \u0434\u043e 5.10.1 (RUGGEDCOM RST2228P), \u0434\u043e 5.10.1 (RUGGEDCOM RST916C), \u0434\u043e 5.10.1 (RUGGEDCOM RST916P)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://cert-portal.siemens.com/productcert/html/ssa-763474.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "15.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "15.12.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-15662",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-40935, SSA-763474",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "RUGGEDCOM RMC8388, RUGGEDCOM RS416Pv2, RUGGEDCOM RS416v2, RUGGEDCOM RS900 (32M), RUGGEDCOM RS900G (32M), RUGGEDCOM RSG2100 (32M), RUGGEDCOM RSG2100P (32M), RUGGEDCOM RSG2288, RUGGEDCOM RSG2300, RUGGEDCOM RSG2300P, RUGGEDCOM RSG2488, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P, RUGGEDCOM RSL910, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Ethernet \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 RUGGEDCOM ROS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Ethernet \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 RUGGEDCOM ROS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cert-portal.siemens.com/productcert/html/ssa-763474.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)"
}

CNVD-2026-10344

Vulnerability from cnvd - Published: 2026-02-06

Title

Siemens RUGGEDCOM输入验证错误漏洞

Description

Siemens RUGGEDCOM是德国西门子（Siemens）公司的一个通信设备。为电力，交通，石油和天然气及其他行业提供快速可靠的通信。 Siemens RUGGEDCOM存在输入验证错误漏洞，该漏洞源于TLS证书上传过程中输入验证不足，攻击者可利用该漏洞导致设备崩溃和重启。

Severity

中

Patch Name

Siemens RUGGEDCOM输入验证错误漏洞的补丁

Patch Description

Siemens RUGGEDCOM是德国西门子（Siemens）公司的一个通信设备。为电力，交通，石油和天然气及其他行业提供快速可靠的通信。 Siemens RUGGEDCOM存在输入验证错误漏洞，该漏洞源于TLS证书上传过程中输入验证不足，攻击者可利用该漏洞导致设备崩溃和重启。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://cert-portal.siemens.com/productcert/html/ssa-763474.html

Reference

https://nvd.nist.gov/vuln/detail/CVE-2025-40935

Impacted products

Name
['SIEMENS RUGGEDCOM RMC8388 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS416Pv2 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS416v2 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS900 (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS900G (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2100 (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2100P (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2288 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2300 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2300P V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2488 V5.X <V5.10.1', 'Siemens RUGGEDCOM RSG907R <V5.10.1', 'Siemens RUGGEDCOM RSG908C <V5.10.1', 'Siemens RUGGEDCOM RSG909R <V5.10.1', 'Siemens RUGGEDCOM RSG910C <V5.10.1', 'SIEMENS RUGGEDCOM RSG920P V5.X <V5.10.1', 'Siemens RUGGEDCOM RSL910 <V5.10.1', 'Siemens RUGGEDCOM RST2228 <V5.10.1', 'Siemens RUGGEDCOM RST2228P <V5.10.1', 'Siemens RUGGEDCOM RST916C <V5.10.1', 'Siemens RUGGEDCOM RST916P <V5.10.1']

Name

['SIEMENS RUGGEDCOM RMC8388 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS416Pv2 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS416v2 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS900 (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RS900G (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2100 (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2100P (32M) V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2288 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2300 V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2300P V5.X <V5.10.1', 'SIEMENS RUGGEDCOM RSG2488 V5.X <V5.10.1', 'Siemens RUGGEDCOM RSG907R <V5.10.1', 'Siemens RUGGEDCOM RSG908C <V5.10.1', 'Siemens RUGGEDCOM RSG909R <V5.10.1', 'Siemens RUGGEDCOM RSG910C <V5.10.1', 'SIEMENS RUGGEDCOM RSG920P V5.X <V5.10.1', 'Siemens RUGGEDCOM RSL910 <V5.10.1', 'Siemens RUGGEDCOM RST2228 <V5.10.1', 'Siemens RUGGEDCOM RST2228P <V5.10.1', 'Siemens RUGGEDCOM RST916C <V5.10.1', 'Siemens RUGGEDCOM RST916P <V5.10.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2025-40935",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2025-40935"
    }
  },
  "description": "Siemens RUGGEDCOM\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u901a\u4fe1\u8bbe\u5907\u3002\u4e3a\u7535\u529b\uff0c\u4ea4\u901a\uff0c\u77f3\u6cb9\u548c\u5929\u7136\u6c14\u53ca\u5176\u4ed6\u884c\u4e1a\u63d0\u4f9b\u5feb\u901f\u53ef\u9760\u7684\u901a\u4fe1\u3002\n\nSiemens RUGGEDCOM\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eTLS\u8bc1\u4e66\u4e0a\u4f20\u8fc7\u7a0b\u4e2d\u8f93\u5165\u9a8c\u8bc1\u4e0d\u8db3\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u8bbe\u5907\u5d29\u6e83\u548c\u91cd\u542f\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-763474.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2026-10344",
  "openTime": "2026-02-06",
  "patchDescription": "Siemens RUGGEDCOM\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u901a\u4fe1\u8bbe\u5907\u3002\u4e3a\u7535\u529b\uff0c\u4ea4\u901a\uff0c\u77f3\u6cb9\u548c\u5929\u7136\u6c14\u53ca\u5176\u4ed6\u884c\u4e1a\u63d0\u4f9b\u5feb\u901f\u53ef\u9760\u7684\u901a\u4fe1\u3002\r\n\r\nSiemens RUGGEDCOM\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eTLS\u8bc1\u4e66\u4e0a\u4f20\u8fc7\u7a0b\u4e2d\u8f93\u5165\u9a8c\u8bc1\u4e0d\u8db3\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u8bbe\u5907\u5d29\u6e83\u548c\u91cd\u542f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens RUGGEDCOM\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "SIEMENS RUGGEDCOM RMC8388 V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RS416Pv2 V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RS416v2 V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RS900 (32M) V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RS900G (32M) V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG2100 (32M) V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG2100P (32M) V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG2288 V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG2300 V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG2300P V5.X \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG2488 V5.X \u003cV5.10.1",
      "Siemens RUGGEDCOM RSG907R \u003cV5.10.1",
      "Siemens RUGGEDCOM RSG908C \u003cV5.10.1",
      "Siemens RUGGEDCOM RSG909R \u003cV5.10.1",
      "Siemens RUGGEDCOM RSG910C \u003cV5.10.1",
      "SIEMENS RUGGEDCOM RSG920P V5.X \u003cV5.10.1",
      "Siemens RUGGEDCOM RSL910 \u003cV5.10.1",
      "Siemens RUGGEDCOM RST2228 \u003cV5.10.1",
      "Siemens RUGGEDCOM RST2228P \u003cV5.10.1",
      "Siemens RUGGEDCOM RST916C \u003cV5.10.1",
      "Siemens RUGGEDCOM RST916P \u003cV5.10.1"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2025-40935",
  "serverity": "\u4e2d",
  "submitTime": "2025-12-15",
  "title": "Siemens RUGGEDCOM\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}

FKIE_CVE-2025-40935

Vulnerability from fkie_nvd - Published: 2025-12-09 16:17 - Updated: 2026-06-17 09:22

Severity

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Summary

References

	URL	Tags
	productcert@siemens.com	https://cert-portal.siemens.com/productcert/html/ssa-763474.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RMC8388 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416Pv2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS416v2 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900 (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RS900G (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100 (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2100P (32M) V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2288 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2300P V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG2488 V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG907R",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG908C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG909R",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG910C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSG920P V5.X",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RSL910",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST2228",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST2228P",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST916C",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "RUGGEDCOM RST916P",
          "vendor": "Siemens",
          "versions": [
            {
              "lessThan": "V5.10.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "productcert@siemens.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG907R (All versions \u003c V5.10.1), RUGGEDCOM RSG908C (All versions \u003c V5.10.1), RUGGEDCOM RSG909R (All versions \u003c V5.10.1), RUGGEDCOM RSG910C (All versions \u003c V5.10.1), RUGGEDCOM RSG920P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSL910 (All versions \u003c V5.10.1), RUGGEDCOM RST2228 (All versions \u003c V5.10.1), RUGGEDCOM RST2228P (All versions \u003c V5.10.1), RUGGEDCOM RST916C (All versions \u003c V5.10.1), RUGGEDCOM RST916P (All versions \u003c V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device."
    }
  ],
  "id": "CVE-2025-40935",
  "lastModified": "2026-06-17T09:22:19.660",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "productcert@siemens.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "productcert@siemens.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-40935",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-12-09T15:34:03.895420Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-12-09T16:17:47.070",
  "references": [
    {
      "source": "productcert@siemens.com",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-763474.html"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    }
  ]
}

GHSA-PJXC-PGW9-PCX2

Vulnerability from github – Published: 2025-12-09 18:30 – Updated: 2025-12-09 18:30

Details

Severity

4.3 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

5.3 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-40935"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-09T16:17:47Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSG907R (All versions \u003c V5.10.1), RUGGEDCOM RSG908C (All versions \u003c V5.10.1), RUGGEDCOM RSG909R (All versions \u003c V5.10.1), RUGGEDCOM RSG910C (All versions \u003c V5.10.1), RUGGEDCOM RSG920P V5.X (All versions \u003c V5.10.1), RUGGEDCOM RSL910 (All versions \u003c V5.10.1), RUGGEDCOM RST2228 (All versions \u003c V5.10.1), RUGGEDCOM RST2228P (All versions \u003c V5.10.1), RUGGEDCOM RST916C (All versions \u003c V5.10.1), RUGGEDCOM RST916P (All versions \u003c V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.",
  "id": "GHSA-pjxc-pgw9-pcx2",
  "modified": "2025-12-09T18:30:36Z",
  "published": "2025-12-09T18:30:36Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-40935"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-763474.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

ICSA-26-015-05

Vulnerability from csaf_cisa - Published: 2025-12-09 00:00 - Updated: 2026-01-14 22:35

Summary

Siemens RUGGEDCOM ROS

Scope

1 vulnerability in this advisory, including CVE-2025-40935.

CVE-2025-40935

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Known affected: 21 products

https://support.industry.siemens.com/cs/ww/en/view/109997649/

Open the full advisory

NCSC-2025-0382

Vulnerability from csaf_ncscnl - Published: 2025-12-09 13:15 - Updated: 2025-12-09 13:15

Summary

Kwetsbaarheden verholpen in Siemens producten

Scope

124 vulnerabilities in this advisory, including CVE-2025-40935.

CVE-2025-40935

A vulnerability in RUGGEDCOM devices (versions below V5.10.1) allows authenticated remote attackers to exploit improper input validation during TLS certificate uploads, potentially leading to device crashes and Denial of Service.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Known affected: 32 products

Open the full advisory

SSA-763474

Vulnerability from csaf_siemens - Published: 2025-12-09 00:00 - Updated: 2025-12-09 00:00

Summary

SSA-763474: Denial of Service Vulnerability in Ruggedcom ROS devices before V5.10.1

Scope

1 vulnerability in this advisory, including CVE-2025-40935.

CVE-2025-40935

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Known affected: 21 products

https://support.industry.siemens.com/cs/ww/en/view/109997649/

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-40935 (GCVE-0-2025-40935)

BDU:2025-15662 (CVE-2025-40935)

CNVD-2026-10344

FKIE_CVE-2025-40935

GHSA-PJXC-PGW9-PCX2

ICSA-26-015-05

NCSC-2025-0382

SSA-763474

Tags

Sightings

Nomenclature

Related by attack behaviour