A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0)…
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-266.
Summary
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG907R (All versions < V5.9.0), RUGGEDCOM RSG908C (All versions < V5.9.0), RUGGEDCOM RSG909R (All versions < V5.9.0), RUGGEDCOM RSG910C (All versions < V5.9.0), RUGGEDCOM RSG920P V5.X (All versions < V5.9.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSL910 (All versions < V5.9.0), RUGGEDCOM RSL910NC (All versions < V5.9.0), RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0), RUGGEDCOM RST916C (All versions < V5.9.0), RUGGEDCOM RST916P (All versions < V5.9.0). The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | RUGGEDCOM RMC8388 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RMC8388NC V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS416NCv2 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS416PNCv2 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS416Pv2 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS416v2 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS900 (32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS900G (32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS900GNC(32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RS900NC(32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2100 (32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2100NC(32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2100P (32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2100PNC (32M) V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2288 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2288NC V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2300 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2300NC V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2300P V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2300PNC V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2488 V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG2488NC V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG907R | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG908C | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG909R | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG910C | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG920P V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSG920PNC V5.X | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSL910 | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RSL910NC | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RST2228 | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RST2228P | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RST916C | before V5.9.0 | V5.9.0 | Patch available | CNA |
| Siemens | RUGGEDCOM RST916P | before V5.9.0 | V5.9.0 | Patch available | CNA |
- RUGGEDCOM RMC8388 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RMC8388NC V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS416NCv2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS416PNCv2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS416Pv2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS416v2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS900 (32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS900G (32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS900GNC(32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RS900NC(32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2100 (32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2100NC(32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2100P (32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2100PNC (32M) V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2288 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2288NC V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2300 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2300NC V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2300P V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2300PNC V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2488 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG2488NC V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG907R VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG908C VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG909R VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG910C VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG920P V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSG920PNC V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSL910 VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RSL910NC VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RST2228 VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RST2228P VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RST916C VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
- RUGGEDCOM RST916P VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
CPE names CISA-ADP · 32
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:ruggedcom_ros_rmc8388:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rmc8388nc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs900:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs900g:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs900gnc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rs900nc:*:*:*:*:*:*:*:* | — | — | Siemens |
- cpe:2.3:o:siemens:ruggedcom_ros_rmc8388:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rmc8388nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs900:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs900g:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs900gnc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rs900nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
Show 22 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2100:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2100nc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2288:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2288nc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2300:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2300nc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2300p:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2300pnc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2488:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg2488nc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg907r:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg908c:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg909r:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg910c:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg920p:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsg920pnc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsl910:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rsl910nc:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rst2228:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rst2228p:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rst916c:*:*:*:*:*:*:*:* | — | — | Siemens |
| cpe:2.3:o:siemens:ruggedcom_ros_rst916p:*:*:*:*:*:*:*:* | — | — | Siemens |
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2100:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2100nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2288:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2288nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2300:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2300nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2300p:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2300pnc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2488:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg2488nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg907r:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg908c:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg909r:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg910c:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg920p:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsg920pnc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsl910:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rsl910nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rst2228:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rst2228p:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rst916c:*:*:*:*:*:*:*:* Versions — — ·Siemens
- cpe:2.3:o:siemens:ruggedcom_ros_rst916p:*:*:*:*:*:*:*:* Versions — — ·Siemens
Remediation
- Fix · CNA RUGGEDCOM RMC8388 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RMC8388NC V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS416NCv2 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS416PNCv2 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS416Pv2 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS416v2 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS900 (32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS900G (32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS900GNC(32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RS900NC(32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2100 (32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2100NC(32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2100P (32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2100PNC (32M) V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2288 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2288NC V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2300 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2300NC V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2300P V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2300PNC V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2488 V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG2488NC V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG907R (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG908C (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG909R (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG910C (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG920P V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSG920PNC V5.X (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSL910 (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RSL910NC (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RST2228 (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RST2228P (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RST916C (Siemens) Fixed in V5.9.0
- Fix · CNA RUGGEDCOM RST916P (Siemens) Fixed in V5.9.0
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Siemens RUGGEDCOM RST2228, RUGGEDCOM RST2228P V5.9.0
3 records Highest priority Priority LOW 3 LOW
Other records, highest priority first
- TI-2023-28665 Information disclosure in Siemens RUGGEDCOM i800Priority LOW 36
- TI-2023-28666 Information disclosure in Siemens RUGGEDCOM RST2228Priority LOW 12
- Release ·
Siemens RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416PNCv2 V5.X and 2 more products V5.9.0
3 records Highest priority Priority LOW 3 LOW
Other records, highest priority first
- TI-2024-26599 A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10)…Priority LOW 39
- TI-2023-28665 Information disclosure in Siemens RUGGEDCOM i800Priority LOW 36
Show 1 more group
- Release ·
Siemens RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V5.X and 26 more products V5.9.0
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2023-28665 Information disclosure in Siemens RUGGEDCOM i800Priority LOW 36
Timeline
- 2026-10-02 Threatist record created from CVE-2024-38278
- 2026-10-03 Alias added: GHSA-4r8m-6jq5-437v
References
More Siemens vulnerabilities
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
- TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
Sources
- CVE-2024-38278 · CVE Program
- CVE-2024-38278 · NVD
- FIRST EPSS
- GHSA-4r8m-6jq5-437v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences