CVE-2025-40935A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.1), RUGGEDCOM RS…
Updated under an hour ago ()
Does this affect you?
It affects Siemens RUGGEDCOM RMC8388 V5.X and 20 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.1), RUGGEDCOM RSG907R (All versions < V5.10.1), RUGGEDCOM RSG908C (All versions < V5.10.1), RUGGEDCOM RSG909R (All versions < V5.10.1), RUGGEDCOM RSG910C (All versions < V5.10.1), RUGGEDCOM RSG920P V5.X (All versions < V5.10.1), RUGGEDCOM RSL910 (All versions < V5.10.1), RUGGEDCOM RST2228 (All versions < V5.10.1), RUGGEDCOM RST2228P (All versions < V5.10.1), RUGGEDCOM RST916C (All versions < V5.10.1), RUGGEDCOM RST916P (All versions < V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.
- CVSS
- 4.3 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Weakness (CWE)
- CWE-20
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- siemens
- NVD analysis
- Deferred
- Record last updated
- Dec 9, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Siemens RUGGEDCOM RMC8388 V5.X siemens:ruggedcom_rmc8388_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RS416Pv2 V5.X siemens:ruggedcom_rs416pv2_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RS416v2 V5.X siemens:ruggedcom_rs416v2_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RS900 (32M) V5.X siemens:ruggedcom_rs900_32m_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RS900G (32M) V5.X siemens:ruggedcom_rs900g_32m_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG2100 (32M) V5.X siemens:ruggedcom_rsg2100_32m_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG2100P (32M) V5.X siemens:ruggedcom_rsg2100p_32m_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG2288 V5.X siemens:ruggedcom_rsg2288_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG2300 V5.X siemens:ruggedcom_rsg2300_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG2300P V5.X siemens:ruggedcom_rsg2300p_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG2488 V5.X siemens:ruggedcom_rsg2488_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG907R siemens:ruggedcom_rsg907r (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG908C siemens:ruggedcom_rsg908c (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG909R siemens:ruggedcom_rsg909r (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG910C siemens:ruggedcom_rsg910c (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSG920P V5.X siemens:ruggedcom_rsg920p_v5.x (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RSL910 siemens:ruggedcom_rsl910 (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RST2228 siemens:ruggedcom_rst2228 (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RST2228P siemens:ruggedcom_rst2228p (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RST916C siemens:ruggedcom_rst916c (from the name) | before V5.10.1 | CNA record |
Siemens RUGGEDCOM RST916P siemens:ruggedcom_rst916p (from the name) | before V5.10.1 | CNA record |
References
- https://cert-portal.siemens.com/productcert/html/ssa-763474.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.