Skip to content
fr Sign in
4.8 Medium

CVE-2025-40569 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328…

Description

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.

Affected products and versions

Product Affected versions Fixed in
RUGGEDCOM RST2428P 3.2 earliest → < 3.2 3.2
SCALANCE XC316-8 3.2 earliest → < 3.2 3.2
SCALANCE XC324-4 3.2 earliest → < 3.2 3.2
SCALANCE XC324-4 EEC 3.2 earliest → < 3.2 3.2
SCALANCE XC332 3.2 earliest → < 3.2 3.2
SCALANCE XC416-8 3.2 earliest → < 3.2 3.2
SCALANCE XC424-4 3.2 earliest → < 3.2 3.2
SCALANCE XC432 3.2 earliest → < 3.2 3.2
SCALANCE XCH328 3.2 earliest → < 3.2 3.2
Show the 20 other branches
Product Affected versions Fixed in
SCALANCE XCM324 3.2 earliest → < 3.2 3.2
SCALANCE XCM328 3.2 earliest → < 3.2 3.2
SCALANCE XCM332 3.2 earliest → < 3.2 3.2
SCALANCE XR302-32 3.2 earliest → < 3.2 3.2
SCALANCE XR322-12 3.2 earliest → < 3.2 3.2
SCALANCE XR326-8 3.2 earliest → < 3.2 3.2
SCALANCE XR326-8 EEC 3.2 earliest → < 3.2 3.2
SCALANCE XR502-32 3.2 earliest → < 3.2 3.2
SCALANCE XR522-12 3.2 earliest → < 3.2 3.2
SCALANCE XR526-8 3.2 earliest → < 3.2 3.2
SCALANCE XRH334 (24 V DC, 8xFO, CC) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (230 V AC, 12xFO) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (230 V AC, 8xFO) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (24 V DC, 12xFO) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (24 V DC, 8xFO) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (2x230 V AC, 12xFO) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (2x230 V AC, 8xFO) 3.2 earliest → < 3.2 3.2
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) 3.2 earliest → < 3.2 3.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of RUGGEDCOM RST2428P

The 326 CVEs of RUGGEDCOM RST2428P →
CVE-2026-41918 A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0) 5.7 Medium CVE-2026-35535 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop… 7.4 High CVE-2025-69720 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in… 7.3 High CVE-2026-3784 curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses… 6.5 Medium
Track this CVE