CVE-2025-40568

Siemens RUGGEDCOM RST2428P

MEDIUM 5.3

En bref

Source: NVD
EPSS: EPSS 0.52 % · centile 44 (2026-10-28)
État: PUBLISHED
Publiée: 2025-06-10 15:17 UTC
Mise à jour: 2026-01-13 09:43 UTC
Attribuée par: siemens
Statut NVD: Deferred

Description

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). An internal session termination functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to terminate legitimate users' sessions.

Faiblesses (CWE)

CWE-863 — Autorisation incorrecte

Références

https://cert-portal.siemens.com/productcert/html/ssa-693776.html

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	MEDIUM 4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	siemens
CVSS 4.0	MEDIUM 5.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	siemens
CVSS 4.0	MEDIUM 5.3	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X	NVD · productcert@siemens.com (Secondary)
CVSS 3.1	MEDIUM 4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	NVD · productcert@siemens.com (Secondary)

Références européennes

ENISA EUVD · EUVD-2025-17680
GCVE · GCVE-0-2025-40568

Avis du CERT-FR

CERTFR-2025-AVI-0492 — Multiples vulnérabilités dans les produits Siemens · cert.ssi.gouv.fr

Produits affectés

Produit	Versions
Siemens · RUGGEDCOM RST2428P	affected 0 < V3.2
Siemens · SCALANCE XCH328	affected 0 < V3.2
Siemens · SCALANCE XCM324	affected 0 < V3.2
Siemens · SCALANCE XCM328	affected 0 < V3.2
Siemens · SCALANCE XCM332	affected 0 < V3.2
Siemens · SCALANCE XRH334 (24 V DC, 8xFO, CC)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (230 V AC, 12xFO)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (230 V AC, 8xFO)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (24 V DC, 12xFO)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (24 V DC, 8xFO)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (2x230 V AC, 12xFO)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (2x230 V AC, 8xFO)	affected 0 < V3.2
Siemens · SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)	affected 0 < V3.2

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD