Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-41222 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All versions), RUGGEDCOM M2100 (All versions), RUGGEDCOM M2200 (All versions), RUGGEDCOM M969 (All versions), RUGGEDCOM RMC30 (All versions), RUGGEDCOM RMC8388 V4.X (All versions), RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RP110 (All versions), RUGGEDCOM RS1600 (All versions), RUGGEDCOM RS1600F (All versions), RUGGEDCOM RS1600T (All versions), RUGGEDCOM RS400 (All versions), RUGGEDCOM RS401 (All versions), RUGGEDCOM RS416 (All versions), RUGGEDCOM RS416P (All versions), RUGGEDCOM RS416Pv2 V4.X (All versions), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V4.X (All versions), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS8000 (All versions), RUGGEDCOM RS8000A (All versions), RUGGEDCOM RS8000H (All versions), RUGGEDCOM RS8000T (All versions), RUGGEDCOM RS900 (All versions), RUGGEDCOM RS900 (32M) V4.X (All versions), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (All versions), RUGGEDCOM RS900G (32M) V4.X (All versions), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GP (All versions), RUGGEDCOM RS900L (All versions), RUGGEDCOM RS900M-GETS-C01 (All versions), RUGGEDCOM RS900M-GETS-XX (All versions), RUGGEDCOM RS900M-STND-C01 (All versions), RUGGEDCOM RS900M-STND-XX (All versions), RUGGEDCOM RS900W (All versions), RUGGEDCOM RS910 (All versions), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910W (All versions), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920W (All versions), RUGGEDCOM RS930L (All versions), RUGGEDCOM RS930W (All versions), RUGGEDCOM RS940G (All versions), RUGGEDCOM RS969 (All versions), RUGGEDCOM RSG2100 (All versions), RUGGEDCOM RSG2100 (32M) V4.X (All versions), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (All versions), RUGGEDCOM RSG2100P (32M) V4.X (All versions), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2200 (All versions), RUGGEDCOM RSG2288 V4.X (All versions), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V4.X (All versions), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V4.X (All versions), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V4.X (All versions), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V4.X (All versions), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). Affected devices do not properly handle malformed TLS handshake messages. This could allow an attacker with network access to the webserver to cause a denial of service resulting in the web server and the device to crash.

A denial-of-service vulnerability has been identified in multiple Siemens RUGGEDCOM products, including the RUGGEDCOM i800, i801, i802, i803, M2100, M2200, M969, RMC30, RMC8388 V4.X, RMC8388 V5.X (All versions < V5.10.0), RP110, RS1600, RS1600F, RS1600T, RS400, RS401, RS416, RS416P, RS416Pv2 V4.X, RS416Pv2 V5.X (All versions < V5.10.0), RS416v2 V4.X, RS416v2 V5.X (All versions < V5.10.0), RS8000, RS8000A, RS8000H, RS8000T, RS900, RS900 (32M) V4.X, RS900 (32M) V5.X (All versions < V5.10.0), RS900G, RS900G (32M) V4.X, RS900G (32M) V5.X (All versions < V5.10.0), RS900GP, RS900L, RS900M-GETS-C01, RS900M-GETS-XX, RS900M-STND-C01, RS900M-STND-XX, RS900W, RS910, RS910L, RS910W, RS920L, RS920W, RS930L, RS930W, RS940G, RS969, RSG2100, RSG2100 (32M) V4.X, RSG2100 (32M) V5.X (All versions < V5.10.0), RSG2100P, RSG2100P (32M) V4.X, RSG2100P (32M) V5.X (All versions < V5.10.0), RSG2200, RSG2288 V4.X, RSG2288 V5.X (All versions < V5.10.0), RSG2300 V4.X, RSG2300 V5.X (All versions < V5.10.0), RSG2300P V4.X, RSG2300P V5.X (All versions < V5.10.0), RSG2488 V4.X, RSG2488 V5.X (All versions < V5.10.0), RSG907R (All versions < V5.10.0), RSG908C (All versions < V5.10.0), RSG909R (All versions < V5.10.0), RSG910C (All versions < V5.10.0), RSG920P V4.X, RSG920P V5.X (All versions < V5.10.0), RSL910 (All versions < V5.10.0), RST2228 (All versions < V5.10.0), RST2228P (All versions < V5.10.0), RST916C (All versions < V5.10.0), RST916P (All versions < V5.10.0). The vulnerability arises because affected devices do not properly process malformed TLS handshake messages, potentially allowing an attacker with network access to the device's web server to cause a crash, disrupting both the web server and the device itself.

For RUGGEDCOM ROS V5.X family, users should update to version 5.10.0 or later. For RUGGEDCOM ROS V4.X family, no fix is currently available. As a general security measure, it is recommended to protect network access to devices with appropriate mechanisms and to follow Siemens' operational guidelines for Industrial Security.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-083019.html	[email protected]	AdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-755	Improper Handling of Exceptional Conditions	[email protected]

Affected Products

Product	Versions
Siemens RUGGEDCOM i800	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i800:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM i801	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i801:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM i802	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i802:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM i803	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i803:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM M2100	All versions
CPE cpe:2.3:h:siemens:ruggedcom_m2100:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM M2200	All versions
CPE cpe:2.3:h:siemens:ruggedcom_m2200:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM M969	All versions
CPE cpe:2.3:h:siemens:ruggedcom_m969:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RMC30	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rmc30:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RMC8388	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rmc8388:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RP110	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rp110:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS1600	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs1600:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS1600F	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs1600f:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS1600T	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs1600t:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS400	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs400:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS401	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs401:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs416:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416P	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs416p:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416Pv2	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rs416pv2:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RS416v2	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rs416v2:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RS8000	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000A	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000a:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000H	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000h:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000T	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000t:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens RUGGEDCOM RS900G	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rs900g:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RS900GP	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900gp:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-GETS-C01	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-gets-c01:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-GETS-XX	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-gets-xx:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-STND-C01	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-stnd-c01:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-STND-XX	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-stnd-xx:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS910	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs910:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS910L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs910l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS910W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs910w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS920L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs920l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS920W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs920w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS930L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs930l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS930W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs930w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS940G	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs940g:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS969	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs969:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2100	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2100:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG2100P	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2100p:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG2200	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rsg2200:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2288	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2288:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG2300	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2300:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG2300P	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2300p:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG2488	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2488:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG907R	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg907r:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG908C	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg908c:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG909R	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg909r:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG910C	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg910c:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSG920P	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg920p:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RSL910	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsl910:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RST2228	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rst2228:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RST2228P	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens RUGGEDCOM RST916C	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rst916c:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM RST916P	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rst916p:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.
Siemens RUGGEDCOM ROS	>= 4, < 5.10.0
CPE cpe:2.3:o:siemens:ruggedcom_ros:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952 Mitigation:low effort Deactivate the webserver if supported by the product. Mitigation:low effort Restrict access to port 443/tcp to trusted IP addresses only.

Change History

3 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jul 8, 2025	New CVE Received	[email protected]

CVE-2025-41222 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE