CVE-2025-40569
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
RUGGEDCOM RST2428P
- Vendor
- Siemens
- Product
- RUGGEDCOM RST2428P
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XCH328
- Vendor
- Siemens
- Product
- SCALANCE XCH328
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XCM324
- Vendor
- Siemens
- Product
- SCALANCE XCM324
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XCM328
- Vendor
- Siemens
- Product
- SCALANCE XCM328
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XCM332
- Vendor
- Siemens
- Product
- SCALANCE XCM332
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRH334 (24 V DC, 8xFO, CC)
- Vendor
- Siemens
- Product
- SCALANCE XRH334 (24 V DC, 8xFO, CC)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (230 V AC, 12xFO)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (230 V AC, 12xFO)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (230 V AC, 8xFO)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (230 V AC, 8xFO)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (24 V DC, 12xFO)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (24 V DC, 12xFO)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (24 V DC, 8xFO)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (24 V DC, 8xFO)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (2x230 V AC, 12xFO)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (2x230 V AC, 12xFO)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (2x230 V AC, 8xFO)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (2x230 V AC, 8xFO)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |
SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)
- Vendor
- Siemens
- Product
- SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | custom | V3.2 | Unavailable | None listed |