Auth bypass in Siemens Ruggedcom Rst2428p
CVE-2025-40567
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK53…
Vulnerability class: Broken Access Control
EPSS: 0.001 (23.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Siemens Ruggedcom Rst2428p — versions 0
- Siemens Scalance Xch328 — versions 0
- Siemens Scalance Xcm324 — versions 0
- Siemens Scalance Xcm328 — versions 0
- Siemens Scalance Xcm332 — versions 0
- Siemens Scalance Xrh334 (24 V Dc, 8xfo, Cc) — versions 0
- Siemens Scalance Xrm334 (230 V Ac, 12xfo) — versions 0
- Siemens Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+) — versions 0
- Siemens Scalance Xrm334 (230 V Ac, 8xfo) — versions 0
- Siemens Scalance Xrm334 (24 V Dc, 12xfo) — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-40567?
- CVE-2025-40567 is a medium-severity vulnerability in Siemens Ruggedcom Rst2428p, classified under Incorrect Authorization. CVSS score: 6.5/10. Published 2025-06-10.
- How severe is CVE-2025-40567?
- Medium severity. CVSS v3 base score is 6.5 out of 10.