Read the docs
TI-2024-26599 Aliases CVE-2024-39675GHSA-2fxj-84g8-m9vw

A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10)…

Priority LOW 39CWE-497Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-497.

Summary

A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3.10), RUGGEDCOM RP110 (All versions < V4.3.10), RUGGEDCOM RP110NC (All versions < V4.3.10), RUGGEDCOM RS400 (All versions < V4.3.10), RUGGEDCOM RS400NC (All versions < V4.3.10), RUGGEDCOM RS401 (All versions < V4.3.10), RUGGEDCOM RS401NC (All versions < V4.3.10), RUGGEDCOM RS416 (All versions < V4.3.10), RUGGEDCOM RS416NC (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416P (All versions < V4.3.10), RUGGEDCOM RS416PNC (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.10), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS910 (All versions < V4.3.10), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910LNC (All versions), RUGGEDCOM RS910NC (All versions < V4.3.10), RUGGEDCOM RS910W (All versions < V4.3.10), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920LNC (All versions), RUGGEDCOM RS920W (All versions). In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00282 20th percentileScored 2026-11-07
Fix Fixed RUGGEDCOM RMC30 (Siemens): V4.3.10RUGGEDCOM RMC30NC (Siemens): V4.3.10+21 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensRUGGEDCOM RMC30before V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RMC30NCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RP110before V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RP110NCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS400before V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS400NCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS401before V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS401NCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416before V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416NCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416NCv2 V4.Xbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416NCv2 V5.Xbefore V5.9.0V5.9.0Patch availableCNA
SiemensRUGGEDCOM RS416Pbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416PNCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416PNCv2 V4.Xbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416PNCv2 V5.Xbefore V5.9.0V5.9.0Patch availableCNA
SiemensRUGGEDCOM RS416Pv2 V4.Xbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416Pv2 V5.Xbefore V5.9.0V5.9.0Patch availableCNA
SiemensRUGGEDCOM RS416v2 V4.Xbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS416v2 V5.Xbefore V5.9.0V5.9.0Patch availableCNA
SiemensRUGGEDCOM RS910before V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS910Lall versions—No fix listedCNA
SiemensRUGGEDCOM RS910LNCall versions—No fix listedCNA
SiemensRUGGEDCOM RS910NCbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS910Wbefore V4.3.10V4.3.10Patch availableCNA
SiemensRUGGEDCOM RS920Lall versions—No fix listedCNA
SiemensRUGGEDCOM RS920LNCall versions—No fix listedCNA
SiemensRUGGEDCOM RS920Wall versions—No fix listedCNA
  • RUGGEDCOM RMC30 VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RMC30NC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RP110 VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RP110NC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS400 VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS400NC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS401 VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS401NC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416 VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416NC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416NCv2 V4.X VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416NCv2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
  • RUGGEDCOM RS416P VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416PNC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416PNCv2 V4.X VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416PNCv2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
  • RUGGEDCOM RS416Pv2 V4.X VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416Pv2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
  • RUGGEDCOM RS416v2 V4.X VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS416v2 V5.X VendorSiemens Affected before V5.9.0 Fixed in V5.9.0 Patch available CNA
  • RUGGEDCOM RS910 VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS910L VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • RUGGEDCOM RS910LNC VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • RUGGEDCOM RS910NC VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS910W VendorSiemens Affected before V4.3.10 Fixed in V4.3.10 Patch available CNA
  • RUGGEDCOM RS920L VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • RUGGEDCOM RS920LNC VendorSiemens Affected all versions Fixed in — No fix listed CNA
  • RUGGEDCOM RS920W VendorSiemens Affected all versions Fixed in — No fix listed CNA

CPE names CISA-ADP · 24

CPEVersionsRoleVendor
cpe:2.3:o:siemens:ruggedcom_ros_rmc30:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rmc30nc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rp110:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rp110nc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs400:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs400nc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs401:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs401nc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416nc:*:*:*:*:*:*:*:*——Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rmc30:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rmc30nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rp110:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rp110nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs400:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs400nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs401:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs401nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416p:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416pnc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs910:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs910l:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs920l:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs910lnc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs910nc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs920lnc:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs910w:*:*:*:*:*:*:*:*——Siemens
cpe:2.3:o:siemens:ruggedcom_ros_rs920w:*:*:*:*:*:*:*:*——Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416ncv2:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416p:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416pnc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416pncv2:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416pv2:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs416v2:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs910:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs910l:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs920l:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs910lnc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs910nc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs920lnc:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs910w:*:*:*:*:*:*:*:* Versions — — ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_ros_rs920w:*:*:*:*:*:*:*:* Versions — — ·Siemens

Remediation

  • Fix · CNA RUGGEDCOM RMC30 (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RMC30NC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RP110 (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RP110NC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS400 (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS400NC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS401 (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS401NC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416 (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416NC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416NCv2 V4.X (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416NCv2 V5.X (Siemens) Fixed in V5.9.0
  • Fix · CNA RUGGEDCOM RS416P (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416PNC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416PNCv2 V4.X (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416PNCv2 V5.X (Siemens) Fixed in V5.9.0
  • Fix · CNA RUGGEDCOM RS416Pv2 V4.X (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416Pv2 V5.X (Siemens) Fixed in V5.9.0
  • Fix · CNA RUGGEDCOM RS416v2 V4.X (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS416v2 V5.X (Siemens) Fixed in V5.9.0
  • Fix · CNA RUGGEDCOM RS910 (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS910NC (Siemens) Fixed in V4.3.10
  • Fix · CNA RUGGEDCOM RS910W (Siemens) Fixed in V4.3.10

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Siemens RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416PNCv2 V5.X and 2 more products V5.9.0

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2023-28665 Information disclosure in Siemens RUGGEDCOM i800Priority LOW 36
    • TI-2024-25556 A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0)…Priority LOW 35
    Show all 3 records →
  • Release ·

    Siemens RUGGEDCOM RMC30, RUGGEDCOM RMC30NC and 17 more products V4.3.10

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2023-28665 Information disclosure in Siemens RUGGEDCOM i800Priority LOW 36
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-39675
  2. 2026-10-03 Alias added: GHSA-2fxj-84g8-m9vw

References

Other 1

  • TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07142 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
See all 2487 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences