Medium severity · published Sep 9, 2025
CVE-2025-40802
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions)
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests.
This could allow an attacker to cause a temporary denial of service, with the system recovering once the activity stops.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RR
RUGGEDCOM RST2428P · Siemens
0 · source: vendor
RR
Ruggedcom Rst2428p Firmware · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40802
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40802
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-494539.html
More from RUGGEDCOM RST2428P
9.8
CVE-2026-23112
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
9.8
CVE-2025-40261
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
9.8
CVE-2025-40258
mptcp: fix race condition in mptcp_schedule_work()
9.8
CVE-2025-40257
mptcp: fix a race in mptcp_pm_del_add_timer()
9.8
CVE-2025-40252
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()