Vulnerability in RUGGEDCOM Networking Devices Affecting Modbus Service Configuration

CVE-2024-39675

What is CVE-2024-39675?

A vulnerability in specific RUGGEDCOM networking devices allows for the unintended activation of the Modbus service within non-managed VLANs. This issue primarily impacts models such as RMC30, RS910, and others, causing potential exposure for serial devices connected to these affected models. The flaw arises from improper configurations, raising security concerns that could lead to unauthorized access or data interception. Ensuring that the affected products are running on versions V4.3.10 and above is essential to mitigate associated risks.

References