Skip to content
fr Sign in
4.3 Medium

CVE-2023-52238 A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions <…

Description

A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients.

Affected products and versions

Product Affected versions Fixed in
RUGGEDCOM RST2228 5.9 earliest → < 5.9.0 5.9.0
RUGGEDCOM RST2228P 5.9 earliest → < 5.9.0 5.9.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of RUGGEDCOM RST2228

The 22 CVEs of RUGGEDCOM RST2228 →
CVE-2025-40935 A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All… 4.3 Medium CVE-2025-41224 A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All… 8.8 High CVE-2025-41223 A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All… 4.8 Medium CVE-2025-41222 A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All… 5.3 Medium
Track this CVE