Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-41223 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOM i803 (All versions), RUGGEDCOM M2100 (All versions), RUGGEDCOM M2200 (All versions), RUGGEDCOM M969 (All versions), RUGGEDCOM RMC30 (All versions), RUGGEDCOM RMC8388 V4.X (All versions), RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RP110 (All versions), RUGGEDCOM RS1600 (All versions), RUGGEDCOM RS1600F (All versions), RUGGEDCOM RS1600T (All versions), RUGGEDCOM RS400 (All versions), RUGGEDCOM RS401 (All versions), RUGGEDCOM RS416 (All versions), RUGGEDCOM RS416P (All versions), RUGGEDCOM RS416Pv2 V4.X (All versions), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.0), RUGGEDCOM RS416v2 V4.X (All versions), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.0), RUGGEDCOM RS8000 (All versions), RUGGEDCOM RS8000A (All versions), RUGGEDCOM RS8000H (All versions), RUGGEDCOM RS8000T (All versions), RUGGEDCOM RS900 (All versions), RUGGEDCOM RS900 (32M) V4.X (All versions), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900G (All versions), RUGGEDCOM RS900G (32M) V4.X (All versions), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RS900GP (All versions), RUGGEDCOM RS900L (All versions), RUGGEDCOM RS900M-GETS-C01 (All versions), RUGGEDCOM RS900M-GETS-XX (All versions), RUGGEDCOM RS900M-STND-C01 (All versions), RUGGEDCOM RS900M-STND-XX (All versions), RUGGEDCOM RS900W (All versions), RUGGEDCOM RS910 (All versions), RUGGEDCOM RS910L (All versions), RUGGEDCOM RS910W (All versions), RUGGEDCOM RS920L (All versions), RUGGEDCOM RS920W (All versions), RUGGEDCOM RS930L (All versions), RUGGEDCOM RS930W (All versions), RUGGEDCOM RS940G (All versions), RUGGEDCOM RS969 (All versions), RUGGEDCOM RSG2100 (All versions), RUGGEDCOM RSG2100 (32M) V4.X (All versions), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2100P (All versions), RUGGEDCOM RSG2100P (32M) V4.X (All versions), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.0), RUGGEDCOM RSG2200 (All versions), RUGGEDCOM RSG2288 V4.X (All versions), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300 V4.X (All versions), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.0), RUGGEDCOM RSG2300P V4.X (All versions), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.0), RUGGEDCOM RSG2488 V4.X (All versions), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.0), RUGGEDCOM RSG907R (All versions < V5.10.0), RUGGEDCOM RSG908C (All versions < V5.10.0), RUGGEDCOM RSG909R (All versions < V5.10.0), RUGGEDCOM RSG910C (All versions < V5.10.0), RUGGEDCOM RSG920P V4.X (All versions), RUGGEDCOM RSG920P V5.X (All versions < V5.10.0), RUGGEDCOM RSL910 (All versions < V5.10.0), RUGGEDCOM RST2228 (All versions < V5.10.0), RUGGEDCOM RST2228P (All versions < V5.10.0), RUGGEDCOM RST916C (All versions < V5.10.0), RUGGEDCOM RST916P (All versions < V5.10.0). The affected devices support the TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 cipher suite, which uses CBC (Cipher Block Chaining) mode that is known to be vulnerable to timing attacks. This could allow an attacker to compromise the integrity and confidentiality of encrypted communications.

A vulnerability exists in multiple RUGGEDCOM products that support the TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 cipher suite, which is susceptible to timing attacks. This vulnerability affects all versions of RUGGEDCOM i800, i801, i802, i803, M2100, M2200, M969, RMC30, RMC8388 V4.X, RMC8388 V5.X (All versions < V5.10.0), RP110, RS1600, RS1600F, RS1600T, RS400, RS401, RS416, RS416P, RS416Pv2 V4.X, RS416Pv2 V5.X (All versions < V5.10.0), RS416v2 V4.X, RS416v2 V5.X (All versions < V5.10.0), RS8000, RS8000A, RS8000H, RS8000T, RS900, RS900 (32M) V4.X, RS900 (32M) V5.X (All versions < V5.10.0), RS900G, RS900G (32M) V4.X, RS900G (32M) V5.X (All versions < V5.10.0), RS900GP, RS900L, RS900M-GETS-C01, RS900M-GETS-XX, RS900M-STND-C01, RS900M-STND-XX, RS900W, RS910, RS910L, RS910W, RS920L, RS920W, RS930L, RS930W, RS940G, RS969, RSG2100, RSG2100 (32M) V4.X, RSG2100 (32M) V5.X (All versions < V5.10.0), RSG2100P, RSG2100P (32M) V4.X, RSG2100P (32M) V5.X (All versions < V5.10.0), RSG2200, RSG2288 V4.X, RSG2288 V5.X (All versions < V5.10.0), RSG2300 V4.X, RSG2300 V5.X (All versions < V5.10.0), RSG2300P V4.X, RSG2300P V5.X (All versions < V5.10.0), RSG2488 V4.X, RSG2488 V5.X (All versions < V5.10.0), RSG907R (All versions < V5.10.0), RSG908C (All versions < V5.10.0), RSG909R (All versions < V5.10.0), RSG910C (All versions < V5.10.0), RSG920P V4.X, RSG920P V5.X (All versions < V5.10.0), RSL910 (All versions < V5.10.0), RST2228 (All versions < V5.10.0), RST2228P (All versions < V5.10.0), RST916C (All versions < V5.10.0), RST916P (All versions < V5.10.0). The vulnerability allows an attacker to compromise the integrity and confidentiality of encrypted communications by exploiting the timing attack vulnerability inherent in the CBC mode of the cipher suite.

Users are advised to update to RUGGEDCOM ROS V5.10.0 or later. For products in the RUGGEDCOM ROS V4.X family, where no fix is currently available, it is recommended to deactivate the SSH server and webserver if not required, and to restrict access to certain ports to trusted IP addresses only. Additionally, for CVE-2025-41223, users should configure the web client to use GCM ciphers.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

CNA: [email protected]CVSS-B:4.8 MEDIUMVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-083019.html	[email protected]	AdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-327	Use of a Broken or Risky Cryptographic Algorithm	[email protected]

Affected Products

Product	Versions
Siemens RUGGEDCOM i800	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i800:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM i801	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i801:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM i802	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i802:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM i803	All versions
CPE cpe:2.3:h:siemens:ruggedcom_i803:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM M2100	All versions
CPE cpe:2.3:h:siemens:ruggedcom_m2100:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM M2200	All versions
CPE cpe:2.3:h:siemens:ruggedcom_m2200:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM M969	All versions
CPE cpe:2.3:h:siemens:ruggedcom_m969:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RMC30	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rmc30:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RMC8388	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rmc8388:::::::: Remediation Upgrade: 5.10.0moderate efforthttps://support.industry.siemens.com/cs/ww/en/view/109989952
Siemens RUGGEDCOM RP110	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rp110:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS1600	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs1600:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS1600F	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs1600f:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS1600T	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs1600t:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS400	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs400:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS401	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs401:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs416:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416P	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs416p:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416Pv2	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rs416pv2:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS416v2	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rs416v2:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000A	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000a:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000H	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000h:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS8000T	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs8000t:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens RUGGEDCOM RS900G	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rs900g:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900G	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens RUGGEDCOM RS900GP	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900gp:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-GETS-C01	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-gets-c01:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-GETS-XX	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-gets-xx:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-STND-C01	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-stnd-c01:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900M-STND-XX	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900m-stnd-xx:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS900W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs900w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS910	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs910:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS910L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs910l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS910W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs910w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS920L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs920l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS920W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs920w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS930L	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs930l:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS930W	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs930w:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS940G	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs940g:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RS969	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rs969:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2100	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2100:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2100	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2100P	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2100p:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2200	All versions
CPE cpe:2.3:h:siemens:ruggedcom_rsg2200:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2288	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2288:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2300	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2300:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2300P	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2300p:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG2488	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg2488:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG907R	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg907r:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG908C	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg908c:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG909R	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg909r:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG910C	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsg910c:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSG920P	>= 4, < 5.10.0
CPE cpe:2.3:h:siemens:ruggedcom_rsg920p:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RSL910	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rsl910:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RST2228	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rst2228:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RST2228P	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.
Siemens RUGGEDCOM RST916C	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rst916c:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM RST916P	< 5.10.0 (semver)
CPE cpe:2.3:h:siemens:ruggedcom_rst916p:::::::: Remediation No remediation found in references.
Siemens RUGGEDCOM ROS	~4 ~5
CPE cpe:2.3:o:siemens:ruggedcom_ros:::::::: Remediation No remediation found in references.

Change History

3 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jul 8, 2025	New CVE Received	[email protected]

CVE-2025-41223 Details

ANALYZED

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE