MACSEC Key Leakage in RUGGEDCOM RST2228 and RST2228P by Siemens
CVE-2023-52238
2.3LOW
Key Information:
- Vendor
Siemens
- Vendor
- CVE Published:
- 9 July 2024
What is CVE-2023-52238?
A vulnerability exists in the web server of RUGGEDCOM RST2228 and RST2228P systems, allowing low privileged users to retrieve the MACSEC key in clear text. This security flaw enables unauthorized decryption of ethernet frames, compromising the confidentiality of sensitive data transmitted over the network. Users are advised to update to version V5.9.0 or later to mitigate the risk associated with this vulnerability.
Affected Version(s)
RUGGEDCOM RST2228 0
RUGGEDCOM RST2228P 0