A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default.

This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00091.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Siemens RUGGEDCOM i800 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM i801 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM i802 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM i803 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM M2100 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM M2200 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM M969 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RMC30 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RMC8388 V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RMC8388 V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RP110 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS1600 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS1600F unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS1600T unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS400 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS401 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS416 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS416P unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS416Pv2 V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS416Pv2 V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RS416v2 V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS416v2 V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RS8000 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS8000A unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS8000H unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS8000T unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900 (32M) V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900 (32M) V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RS900G unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900G (32M) V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900G (32M) V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RS900GP unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900L unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900M-GETS-C01 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900M-GETS-XX unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900M-STND-C01 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900M-STND-XX unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS900W unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS910 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS910L unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS910W unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS920L unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS920W unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS930L unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS930W unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS940G unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RS969 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2100 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2100 (32M) V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2100 (32M) V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG2100P unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2100P (32M) V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2100P (32M) V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG2200 unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2288 V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2288 V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG2300 V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2300 V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG2300P V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2300P V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG2488 V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG2488 V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG907R unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG908C unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG909R unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG910C unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSG920P V4.X unknown
Version Status Constraints
0 affected < V4.3.8
Siemens RUGGEDCOM RSG920P V5.X unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RSL910 unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RST2228 unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RST2228P unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RST916C unknown
Version Status Constraints
0 affected < V5.7.0
Siemens RUGGEDCOM RST916P unknown
Version Status Constraints
0 affected < V5.7.0

Configuration 1 [-]

AND
cpe:2.3:o:siemens:ruggedcom_ros:*:*:*:*:*:*:*:*
OR cpe:2.3:h:siemens:ruggedcom_i800:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_i801:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_i802:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_i803:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_m2100:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_m2200:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_m969:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rmc:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rmc20:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rmc30:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rmc40:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rmc41:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rmc8388:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rp110:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs400:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs401:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs416:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs416v2:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs8000:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs8000a:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs8000h:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs8000t:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs900:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs900g:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs900gp:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs900l:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs900w:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs910:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs910l:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs910w:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs920l:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs920w:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs930l:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs930w:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs940g:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rs969:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2100:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2100p:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2200:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2288:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2300:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2300p:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg2488:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg907r:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg908c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg909r:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg910c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsg920p:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rsl910:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rst2228:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rst2228p:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rst916c:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_rst916p:-:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Siemens Subscribe
Ruggedcom I800 Subscribe
Ruggedcom I801 Subscribe
Ruggedcom I802 Subscribe
Ruggedcom I803 Subscribe
Ruggedcom M2100 Subscribe
Ruggedcom M2200 Subscribe
Ruggedcom M969 Subscribe
Ruggedcom Rmc Subscribe
Ruggedcom Rmc20 Subscribe
Ruggedcom Rmc30 Subscribe
Ruggedcom Rmc40 Subscribe
Ruggedcom Rmc41 Subscribe
Ruggedcom Rmc8388 Subscribe
Ruggedcom Ros Subscribe
Ruggedcom Rp110 Subscribe
Ruggedcom Rs400 Subscribe
Ruggedcom Rs401 Subscribe
Ruggedcom Rs416 Subscribe
Ruggedcom Rs416v2 Subscribe
Ruggedcom Rs8000 Subscribe
Ruggedcom Rs8000a Subscribe
Ruggedcom Rs8000h Subscribe
Ruggedcom Rs8000t Subscribe
Ruggedcom Rs900 Subscribe
Ruggedcom Rs900g Subscribe
Ruggedcom Rs900gp Subscribe
Ruggedcom Rs900l Subscribe
Ruggedcom Rs900w Subscribe
Ruggedcom Rs910 Subscribe
Ruggedcom Rs910l Subscribe
Ruggedcom Rs910w Subscribe
Ruggedcom Rs920l Subscribe
Ruggedcom Rs920w Subscribe
Ruggedcom Rs930l Subscribe
Ruggedcom Rs930w Subscribe
Ruggedcom Rs940g Subscribe
Ruggedcom Rs969 Subscribe
Ruggedcom Rsg2100 Subscribe
Ruggedcom Rsg2100p Subscribe
Ruggedcom Rsg2200 Subscribe
Ruggedcom Rsg2288 Subscribe
Ruggedcom Rsg2300 Subscribe
Ruggedcom Rsg2300p Subscribe
Ruggedcom Rsg2488 Subscribe
Ruggedcom Rsg907r Subscribe
Ruggedcom Rsg908c Subscribe
Ruggedcom Rsg909r Subscribe
Ruggedcom Rsg910c Subscribe
Ruggedcom Rsg920p Subscribe
Ruggedcom Rsl910 Subscribe
Ruggedcom Rst2228 Subscribe
Ruggedcom Rst2228p Subscribe
Ruggedcom Rst916c Subscribe
Ruggedcom Rst916p Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2021-23783 A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://cert-portal.siemens.com/productcert/html/ssa-764417.html cve-icon cve-icon
https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf cve-icon cve-icon
History

Tue, 12 Aug 2025 11:30:00 +0000

Type Values Removed Values Added
Description A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.
References

Mon, 21 Apr 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: siemens

Published:

Updated: 2025-08-12T11:10:51.567Z

Reserved: 2021-07-21T00:00:00.000Z

Link: CVE-2021-37209

cve-icon Vulnrichment

Updated: 2024-08-04T01:16:03.378Z

cve-icon NVD

Status : Modified

Published: 2022-03-08T12:15:10.330

Modified: 2025-08-12T12:15:27.570

Link: CVE-2021-37209

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses