EUVD-2024-25114

Malicious code in bioql PyPI...

EUVD-2023-40696

Malicious code in bioql PyPI...

CVE-2025-40802

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering onc...

CVE-2025-40803

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products such as Apogee, Industial Edge, RUGGEDCOM, SIMATIC, SIMOTION and SINAMICS. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulati...

CVE-2025-40802

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering onc...

CVE-2025-40803

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality...

CVE-2025-40803

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality...

CVE-2025-40803

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality...

CVE-2025-40803

The CVE-2025-40803 affects Siemens/RUGGEDCOM RST2428P (6GK6242-6PA00) across all versions, exposing certain non-critical device information that could allow an unauthenticated attacker to access sensitive data and breach confidentiality. Connected sources (Tenable OT plugin, NVD, Red Hat, CNNVD, ...

CVE-2025-40802

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering onc...

CVE-2025-40802

A vulnerability has been identified in RUGGEDCOM RST2428P 6GK6242-6PA00 All versions. The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering onc...

CVE-2025-40802

The CVE-2025-40802 issue affects Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) across all versions. Affected component/behavior: resource exhaustion caused by high volumes of query requests, resulting in a temporary denial of service with recovery after activity stops. Public technical details in pr...

Siemens RUGGEDCOM RST2428P 资源管理错误漏洞

The Siemens RUGGEDCOM RST2428P is a server communication device from Siemens Germany. A resource management error vulnerability exists in the Siemens RUGGEDCOM RST2428P that stems from resource exhaustion and could result in a temporary denial of service...

PT-2025-36686

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RST2428P 6GK6242-6PA00 affected versions not specified Description: The affected device exposes certain non-critical information, potentially leading to a breach of confidentiality. An unauthenticated attacker could access sensitive...

PT-2025-36685

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RST2428P 6GK6242-6PA00 affected versions not specified Description: A vulnerability exists that may cause resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial...

Siemens RUGGEDCOM RST2428P 信息泄露漏洞

The Siemens RUGGEDCOM RST2428P is a server communication device from Siemens Germany. An information disclosure vulnerability exists in the Siemens RUGGEDCOM RST2428P, which arises from the device exposing non-critical information that could lead to the disclosure of sensitive data...

Siemens RUGGEDCOM APE1808 Nozomi Guardian/CMC Vulnerability

RUGGEDCOM APE1808 is an industrial-grade application hosting platform. The Siemens RUGGEDCOM APE1808 suffers from a Nozomi Guardian/CMC vulnerability that can be exploited by an attacker to execute unauthorized arbitrary operating system commands...

Multiple Vulnerabilities in Third-Party Components Prior to SIEMENS SINEC OS V3.2

The RUGGEDCOM RST2428P is a SINEC OS-based Layer 2 Ethernet switch with up to 28 non-blocking interfaces.SCALANCE X switches are used for connecting industrial components such as programmable logic controllers PLCs or human machine interfaces HMIs. Multiple vulnerabilities exist in third-party...

Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC) Multiple Vulnerabilities

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. Multiple vulnerabilities exist in the Siemens RUGGEDCOM CROSSBOW Station Access Controller SAC, which can be exploited by attackers to execute arbitrary code or cau...