ID
VAR-202508-3770
TITLE
Multiple vulnerabilities exist in third-party components of SIEMENS SINEC OS V3.2 and earlier
Trust: 0.6
sources:
CNVD: CNVD-2025-19350
DESCRIPTION
The RUGGEDCOM RST2428P is a Layer 2 Ethernet switch based on SINEC OS with up to 28 non-blocking interfaces. SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) and human-machine interfaces (HMIs). Multiple vulnerabilities exist in third-party components prior to SIEMENS SINEC OS V3.2. These vulnerabilities could be exploited to corrupt values, leading to undefined behavior or security issues.
Trust: 0.6
sources:
CNVD: CNVD-2025-19350
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2025-19350
AFFECTED PRODUCTS
| vendor: | siemens | model: | ruggedcom rst2428p | scope: | lt | version: | v3.2 | Trust: 0.6 |
| vendor: | siemens | model: | scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family | scope: | lt | version: | v3.2 | Trust: 0.6 |
| vendor: | siemens | model: | scalance xcm-/xrm-/xch-/xrh-300 family | scope: | lt | version: | v3.2 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-19350
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2025-19350
PATCH
| title: | Patch for Multiple vulnerabilities exist in third-party components of SIEMENS SINEC OS V3.2 and earlier | url: | https://www.cnvd.org.cn/patchInfo/show/723061 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-19350
EXTERNAL IDS
| db: | SIEMENS | id: | SSA-355557 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2025-19350 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-19350
REFERENCES
| url: | https://cert-portal.siemens.com/productcert/html/ssa-355557.html | Trust: 0.6 |
sources:
CNVD: CNVD-2025-19350
SOURCES
| db: | CNVD | id: | CNVD-2025-19350 |
LAST UPDATE DATE
2025-10-16T23:54:06.755000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-19350 | date: | 2025-08-22T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-19350 | date: | 2025-08-12T00:00:00 |