Auth bypass in Siemens Ruggedcom Rst2428p
CVE-2025-40568
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK53…
Vulnerability class: Broken Access Control
EPSS: 0.002 (40.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Siemens Ruggedcom Rst2428p — versions 0
- Siemens Scalance Xch328 — versions 0
- Siemens Scalance Xcm324 — versions 0
- Siemens Scalance Xcm328 — versions 0
- Siemens Scalance Xcm332 — versions 0
- Siemens Scalance Xrh334 (24 V Dc, 8xfo, Cc) — versions 0
- Siemens Scalance Xrm334 (230 V Ac, 12xfo) — versions 0
- Siemens Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+) — versions 0
- Siemens Scalance Xrm334 (230 V Ac, 8xfo) — versions 0
- Siemens Scalance Xrm334 (24 V Dc, 12xfo) — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-40568?
- CVE-2025-40568 is a medium-severity vulnerability in Siemens Ruggedcom Rst2428p, classified under Incorrect Authorization. CVSS score: 4.3/10. Published 2025-06-10.
- How severe is CVE-2025-40568?
- Medium severity. CVSS v3 base score is 4.3 out of 10.