Input Validation Flaw in RUGGEDCOM Devices by Siemens

CVE-2025-40935

What is CVE-2025-40935?

An input validation issue exists in multiple Siemens RUGGEDCOM devices, impacting versions prior to V5.10.1. This vulnerability arises during the TLS certificate upload process within the web service, which does not adequately validate user input. A successful exploitation of this flaw may enable an authenticated remote attacker to trigger an unexpected device crash, resulting in a temporary denial of service (DoS). Organizations using these RUGGEDCOM devices should consider applying necessary updates and implementing security best practices to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References