Skip to content
OpenAdvisories
High SSA-373591 1 CVE

SSA-373591: Buffer Overflow Vulnerability in RUGGEDCOM ROS Devices

Published Jul 13, 2021 · Updated Oct 14, 2025 · Revision 3

Vendor: Siemens Product: RUGGEDCOM i800 Product: RUGGEDCOM i801 Product: RUGGEDCOM i802 Product: RUGGEDCOM i803 Product: RUGGEDCOM M2100 Product: RUGGEDCOM M2200 Product: RUGGEDCOM M969 Product: RUGGEDCOM RMC30 Product: RUGGEDCOM RMC8388 V4.X Product: RUGGEDCOM RMC8388 V5.X Product: RUGGEDCOM RP110 Product: RUGGEDCOM RS1600 Product: RUGGEDCOM RS1600F Product: RUGGEDCOM RS1600T Product: RUGGEDCOM RS400 Product: RUGGEDCOM RS401 Product: RUGGEDCOM RS416 Product: RUGGEDCOM RS416P Product: RUGGEDCOM RS416Pv2 V4.X Product: RUGGEDCOM RS416Pv2 V5.X Product: RUGGEDCOM RS416v2 V4.X Product: RUGGEDCOM RS416v2 V5.X Product: RUGGEDCOM RS8000 Product: RUGGEDCOM RS8000A Product: RUGGEDCOM RS8000H Product: RUGGEDCOM RS8000T Product: RUGGEDCOM RS900 (32M) V4.X Product: RUGGEDCOM RS900 (32M) V5.X Product: RUGGEDCOM RS900G +40 more

Summary

The latest update for RUGGEDCOM ROS devices fixes a buffer overflow vulnerability in the third party component that could allow an attacker with network access to an affected device to cause a remote code execution condition.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #3

    Added fix for RSG2100

  2. #2

    Added RUGGEDCOM RSG2100PNC (32M) V4.X and RSG2100PNC (32M) V5.X as affected products. Removed not affected products: RUGGEDCOM ROS RMC, RUGGEDCOM ROS RMC20, RUGGEDCOM ROS RMC40, RUGGEDCOM ROS RMC41, RUGGEDCOM RSG900 V4.X, RUGGEDCOM RSG900 V5.X, RUGGEDCOM RSG900G V4.X, RUGGEDCOM RSG900G V5.X, RUGGEDCOM ROS RSG900C, RUGGEDCOM ROS RSG900R. Added RUGGEDCOM RS416P, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600T and RUGGEDCOM RST2228P V5.X

  3. #1

    Publication Date

References