Privilege escalation in Siemens Ruggedcom Rst2428p
CVE-2024-41797
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK5324-8TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 (6GK5328-4TS00-2AC2) (All versions < V3.1), SCALANCE XC324-4 EEC…
Vulnerability class: Privilege Escalation
EPSS: 0.006 (69.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Siemens Ruggedcom Rst2428p — versions 0
- Siemens Scalance Xc316-8 — versions 0
- Siemens Scalance Xc324-4 — versions 0
- Siemens Scalance Xc324-4 Eec — versions 0
- Siemens Scalance Xc332 — versions 0
- Siemens Scalance Xc416-8 — versions 0
- Siemens Scalance Xc424-4 — versions 0
- Siemens Scalance Xc432 — versions 0
- Siemens Scalance Xch328 — versions 0
- Siemens Scalance Xcm324 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-41797?
- CVE-2024-41797 is a medium-severity vulnerability in Siemens Ruggedcom Rst2428p, classified under Improper Privilege Management. CVSS score: 4.3/10. Published 2025-06-10.
- How severe is CVE-2024-41797?
- Medium severity. CVSS v3 base score is 4.3 out of 10.