Information Disclosure Vulnerability in RUGGEDCOM Products by Siemens
CVE-2025-40803

2.3LOW

Key Information:

Vendor

Siemens

Vendor
CVE Published:
9 September 2025

What is CVE-2025-40803?

A vulnerability has been identified in RUGGEDCOM RST2428P devices manufactured by Siemens, where non-critical information can be exposed. This exposure could allow an unauthenticated attacker to gain access to sensitive data, potentially compromising the confidentiality of information. Organizations utilizing these devices should be aware of this vulnerability and assess their security posture to mitigate potential risks.

Affected Version(s)

RUGGEDCOM RST2428P 0

References

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.