CVE-2025-41224 Information

Jul 09, 2025 cve

Description

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0) RUGGEDCOM RMC8388NC V5.X (All versions < V5.10.0) RUGGEDCOM RS416NCv2 V5.X (All versions < V5.10.0) RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.10.0) RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0) RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0) RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0) RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0) RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.10.0) RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.10.0) RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0) RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.10.0) RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0) RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.10.0) RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0) RUGGEDCOM RSG2288NC V5.X (All versions < V5.10.0) RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0) RUGGEDCOM RSG2300NC V5.X (All versions < V5.10.0) RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0) RUGGEDCOM RSG2300PNC V5.X (All versions < V5.10.0) RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0) RUGGEDCOM RSG2488NC V5.X (All versions < V5.10.0) RUGGEDCOM RSG907R (All versions < V5.10.0) RUGGEDCOM RSG908C (All versions < V5.10.0) RUGGEDCOM RSG909R (All versions < V5.10.0) RUGGEDCOM RSG910C (All versions < V5.10.0) RUGGEDCOM RSG920P V5.X (All versions < V5.10.0) RUGGEDCOM RSG920PNC V5.X (All versions < V5.10.0) RUGGEDCOM RSL910 (All versions < V5.10.0) RUGGEDCOM RSL910NC (All versions < V5.10.0) RUGGEDCOM RST2228 (All versions < V5.10.0) RUGGEDCOM RST2228P (All versions < V5.10.0) RUGGEDCOM RST916C (All versions < V5.10.0) RUGGEDCOM RST916P (All versions < V5.10.0). The affected products do not properly enforce interface access restrictions when changing from management to non-management interface configurations until a system reboot occurs despite configuration being saved. This could allow an attacker with network access and credentials to gain access to device through non-management and maintain SSH access to the device until reboot.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

https://cert-portal.siemens.com/productcert/html/ssa-083019.html

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8

CNNVD-202507-935 (Published: 2025-07-08)

Share on: