High SSA-170375 4 CVEs

SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9

Published Jul 9, 2024 · Updated Aug 12, 2025 · Revision 2

Vendor: Siemens Product: RUGGEDCOM i800 Product: RUGGEDCOM i800NC Product: RUGGEDCOM i801 Product: RUGGEDCOM i801NC Product: RUGGEDCOM i802 Product: RUGGEDCOM i802NC Product: RUGGEDCOM i803 Product: RUGGEDCOM i803NC Product: RUGGEDCOM M2100 Product: RUGGEDCOM M2100NC Product: RUGGEDCOM M2200 Product: RUGGEDCOM M2200NC Product: RUGGEDCOM M969 Product: RUGGEDCOM M969NC Product: RUGGEDCOM RMC30 Product: RUGGEDCOM RMC30NC Product: RUGGEDCOM RMC8388 V4.X Product: RUGGEDCOM RMC8388 V5.X Product: RUGGEDCOM RMC8388NC V4.X Product: RUGGEDCOM RMC8388NC V5.X Product: RUGGEDCOM RP110 Product: RUGGEDCOM RP110NC Product: RUGGEDCOM RS1600 Product: RUGGEDCOM RS1600F Product: RUGGEDCOM RS1600FNC Product: RUGGEDCOM RS1600NC Product: RUGGEDCOM RS1600T Product: RUGGEDCOM RS1600TNC Product: RUGGEDCOM RS400 +107 more

Summary

Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). The common denominator to all vulnerabilities is the leak of confidential information.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 4

High 8.8

CVE-2024-39675

A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3…

Siemens RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS416v2 V4.X ICS / OT

Jul 9, 2024
High 7.5

CVE-2023-52237

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i8…

Siemens RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RMC8388 V5.X ICS / OT

Jul 9, 2024
Medium 6.6

CVE-2024-38278

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All ve…

Siemens RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RMC8388 V5.X ICS / OT

Jul 9, 2024
Medium 4.3

CVE-2023-52238

A vulnerability has been identified in RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5…

Siemens RUGGEDCOM RST2228 RUGGEDCOM RST2228P ICS / OT

Jul 9, 2024

Revision history

2025-08-12 #2
Added RUGGEDCOM RSG2100P (32M) and RUGGEDCOM RSG2100PNC (32M) for V4.x and V5.x
2024-07-09 #1
Publication Date

References

SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-170375.html