CVE-2025-40567
Description
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Rollback" functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to make the affected product roll back configuration changes made by privileged users.
How to fix
- Siemens RUGGEDCOM RST2428PV3.2 or later
- Siemens SCALANCE XCH328V3.2 or later
- Siemens SCALANCE XCM324V3.2 or later
- Siemens SCALANCE XCM328V3.2 or later
- Siemens SCALANCE XCM332V3.2 or later
- Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC)V3.2 or later
- Siemens SCALANCE XRM334 (230 V AC, 12xFO)V3.2 or later
- Siemens SCALANCE XRM334 (230 V AC, 8xFO)V3.2 or later
- Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)V3.2 or later
- Siemens SCALANCE XRM334 (24 V DC, 12xFO)V3.2 or later
- Siemens SCALANCE XRM334 (24 V DC, 8xFO)V3.2 or later
- Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)V3.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens RUGGEDCOM RST2428P | v < V3.2 | V3.2 |
| Siemens SCALANCE XCH328 | v < V3.2 | V3.2 |
| Siemens SCALANCE XCM324 | v < V3.2 | V3.2 |
| Siemens SCALANCE XCM328 | v < V3.2 | V3.2 |
| Siemens SCALANCE XCM332 | v < V3.2 | V3.2 |
| Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (230 V AC, 12xFO) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (230 V AC, 8xFO) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (24 V DC, 12xFO) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (24 V DC, 8xFO) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) | v < V3.2 | V3.2 |
| Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) | v < V3.2 | V3.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.