Information disclosure in Siemens Ruggedcom Rst2228

CVE-2023-52238

A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with t…

Vulnerability class: Information Disclosure

EPSS: 0.004 (27.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2023-52238?
CVE-2023-52238 is a medium-severity vulnerability in Siemens Ruggedcom Rst2228, classified under Information Disclosure. CVSS score: 4.3/10. Published 2024-07-09.
How severe is CVE-2023-52238?
Medium severity. CVSS v3 base score is 4.3 out of 10.