CVE-2025-40568: Siemens RUGGEDCOM RST2428P vulnerability
Siemens · RUGGEDCOM RST2428P
Vendor fix available · Affected: Siemens RUGGEDCOM RST2428P · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 45% of scored CVEs
DescriptionCVE.org
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). An internal session termination functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to terminate legitimate users' sessions.
Affected products15
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Siemens · RUGGEDCOM RST2428Pbefore V3.2
- Siemens · SCALANCE XCH328before V3.2
- Siemens · SCALANCE XCM324before V3.2
- Siemens · SCALANCE XCM328before V3.2
- Siemens · SCALANCE XCM332before V3.2
- Siemens · SCALANCE XRH334 (24 V DC, 8xFO, CC)before V3.2
- Siemens · SCALANCE XRM334 (230 V AC, 12xFO)before V3.2
- Siemens · SCALANCE XRM334 (230 V AC, 8xFO)before V3.2
- Siemens · SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)before V3.2
- Siemens · SCALANCE XRM334 (24 V DC, 12xFO)before V3.2
- Siemens · SCALANCE XRM334 (24 V DC, 8xFO)before V3.2
- Siemens · SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)before V3.2
- Siemens · SCALANCE XRM334 (2x230 V AC, 12xFO)before V3.2
- Siemens · SCALANCE XRM334 (2x230 V AC, 8xFO)before V3.2
- Siemens · SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)before V3.2
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2025-40568 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.