CVE-2025-41224
Description
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RSL910NC (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs, despite configuration being saved. This could allow an attacker with network access and credentials to gain access to device through non-management and maintain SSH access to the device until reboot.
How to fix
- Siemens RUGGEDCOM RMC8388 V5.XV5.10.0 or later
- Siemens RUGGEDCOM RMC8388NC V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS416NCv2 V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS416PNCv2 V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS416Pv2 V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS416v2 V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS900 (32M) V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS900G (32M) V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS900GNC(32M) V5.XV5.10.0 or later
- Siemens RUGGEDCOM RS900NC(32M) V5.XV5.10.0 or later
- Siemens RUGGEDCOM RSG2100 (32M) V5.XV5.10.0 or later
- Siemens RUGGEDCOM RSG2100NC(32M) V5.XV5.10.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Siemens RUGGEDCOM RMC8388 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RMC8388NC V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS416NCv2 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS416PNCv2 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS416Pv2 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS416v2 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS900 (32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS900G (32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS900GNC(32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RS900NC(32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2100 (32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2100NC(32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2100P (32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2100PNC (32M) V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2288 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2288NC V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2300 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2300NC V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2300P V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2300PNC V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2488 V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG2488NC V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG907R | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG908C | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG909R | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG910C | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG920P V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSG920PNC V5.X | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSL910 | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RSL910NC | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RST2228 | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RST2228P | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RST916C | v < V5.10.0 | V5.10.0 |
| Siemens RUGGEDCOM RST916P | v < V5.10.0 | V5.10.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.