CVE-2025-40569: Siemens RUGGEDCOM RST2428P vulnerability
Siemens · RUGGEDCOM RST2428P
Vendor fix available · Affected: Siemens RUGGEDCOM RST2428P · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 22% of scored CVEs
DescriptionCVE.org
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.
Affected products15
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Siemens · RUGGEDCOM RST2428Pbefore V3.2
- Siemens · SCALANCE XCH328before V3.2
- Siemens · SCALANCE XCM324before V3.2
- Siemens · SCALANCE XCM328before V3.2
- Siemens · SCALANCE XCM332before V3.2
- Siemens · SCALANCE XRH334 (24 V DC, 8xFO, CC)before V3.2
- Siemens · SCALANCE XRM334 (230 V AC, 12xFO)before V3.2
- Siemens · SCALANCE XRM334 (230 V AC, 8xFO)before V3.2
- Siemens · SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)before V3.2
- Siemens · SCALANCE XRM334 (24 V DC, 12xFO)before V3.2
- Siemens · SCALANCE XRM334 (24 V DC, 8xFO)before V3.2
- Siemens · SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)before V3.2
- Siemens · SCALANCE XRM334 (2x230 V AC, 12xFO)before V3.2
- Siemens · SCALANCE XRM334 (2x230 V AC, 8xFO)before V3.2
- Siemens · SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)before V3.2
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Weakness
- Race Condition · Race Conditions
- Vendor
- Siemens
- Published
- June 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-40569 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.