Input Validation Flaw in RUGGEDCOM Devices by Siemens

CVE-2025-40935

What is CVE-2025-40935?

An input validation issue exists in multiple Siemens RUGGEDCOM devices, impacting versions prior to V5.10.1. This vulnerability arises during the TLS certificate upload process within the web service, which does not adequately validate user input. A successful exploitation of this flaw may enable an authenticated remote attacker to trigger an unexpected device crash, resulting in a temporary denial of service (DoS). Organizations using these RUGGEDCOM devices should consider applying necessary updates and implementing security best practices to mitigate potential risks.

References