CVE-2021-42019

CVE-2021-42019 affects Siemens RUGGEDCOM ROS devices and related ROS components (RUGGEDCOM i800/i801/i802/i803, M2100/M2200/M969, RMC/RMC8388/RP110/RS400/RS900 series, RSG2100/RSL910/etc. across V4.X–V5.X). The issue is a fault in a third‑party component where the process allocating partition siz...

CVE-2021-37209

CVE-2021-37209 affects Siemens RUGGEDCOM ROS/RMC/RS/RSG/RSL/RST devices with the SSH server offering weak ciphers by default, enabling potential MITM data exposure. Connected sources list affected products and versions (e.g., RUGGEDCOM ROS i800/i801/i802/i803, M2100/M2200, RMC8388, RS416/RS416Pv2...

CVE-2021-42018

CVE-2021-42018 affects Siemens RUGGEDCOM ROS devices (multiple models such as i800/i801/i802/i803, M2100/M2200, RMC/RMC8388, RP110, RS400/RS8000 families, RS900/RS910/RS920/RS930/RS940, etc.) due to heap-based buffer overflow caused by unchecked out-of-bounds memory allocation in a third-party co...

CVE-2021-42020

CVE-2021-42020 affects Siemens RUGGEDCOM ROS devices via a third‑party component’s TFTP functionality that fails to check for null terminations in file names. This can lead to data corruption and potentially a hard fault in the application. Siemens recommends updating to v5.6.0 or later (RUGGEDCO...

CVE-2021-42016

CVE-2021-42016 affects Siemens RUGGEDCOM ROS/RUGGEDCOM IOS/RUGGEDCOM ROS devices (extensive list of i800/i801/i802/i803, M2100/M2100F/M2200/M969/M969F/RMC/RMC30/RM/RS family, RSG/RSL/UI variants). A timing attack in a third‑party component could allow retrieval of the private key used to encrypt ...

CVE-2021-37208

CVE-2021-37208 affects Siemens RUGGEDCOM ROS devices (multiple models such as i800/i801/i802/i803, M2100/M2200, RMC8388/RS... etc). The root cause is improper neutralization of special characters on the web server configuration page, enabling cross-site scripting in a privileged context and poten...

CVE-2021-42017

CVE-2021-42017 affects Siemens RUGGEDCOM ROS and associated RuggedCom devices (e.g., i800/i801/.../RSG2100, RS900 family, RMC8388, etc.), where third-party components expose a vulnerability from CBC-mode TLS implementations in TLS 1.0–1.2. The issue enables a man-in-the-middle to eavesdrop on enc...

CVE-2022-34663

CVE-2022-34663 affects Siemens RUGGEDCOM ROS devices, enabling a web-based code injection via the console (CWE-94). Affected products include a wide range of ROS models (i800/i801/i802/i803, M2100/M2200/M969 families, RMC/RMC8388, RP110, RS400/RS416/RS900 family, RSG2100/2288/2300/2488, RSL910, R...

CVE-2022-39158

CVE-2022-39158 affects Siemens RuggedCom ROS/ROS-based devices (e.g., i800, i801, i802, i803, RMC8388, RP110, RS1600/RS400 variants, RSG family, RSL/RST series, etc.). Root cause: improper handling of partial HTTP requests, enabling a slowloris-style denial of service that can persist until the a...

CVE-2017-12736

CVE-2017-12736 affects Siemens Ruggedcom ROS and SCALANCE devices. After initial configuration, the Ruggedcom Discovery Protocol (RCDP) can still write to the device under certain conditions, potentially allowing an attacker in the adjacent network to perform unauthorized administrative actions. ...

CVE-2023-24845

Summary of CVE-2023-24845 (Siemens RUGGEDCOM ROS/Mirror Port) : The vulnerability arises from an incorrect provision of specified functionality in a broad set of Siemens RUGGEDCOM devices (i800, i801, i802, i803, M2100/M2200/M969, RP110, RS1600/RS400/RS416/RS8000/RS900 family, RSG2100/2200/2288/2...

CVE-2023-39269

The CVE-2023-39269 vulnerability affects Siemens RUGGEDCOM web servers across many models (e.g., i800/i800NC/i801/.../RS940G, RSG2100, etc.). 3.2.1 CWE-770 describes an Allocation of Resources without Limits or Throttling leading to Denial of Service, with CVSS v3 base score 7.5 (Network, Low com...