Low severity · published Sep 9, 2025
CVE-2025-40803
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions)
3.1
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RR
RUGGEDCOM RST2428P · Siemens
0 · source: vendor
RR
Ruggedcom Rst2428p Firmware · Siemens
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40803
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-494539.html
More from RUGGEDCOM RST2428P
9.8
CVE-2026-23112
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
9.8
CVE-2025-40261
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
9.8
CVE-2025-40258
mptcp: fix race condition in mptcp_schedule_work()
9.8
CVE-2025-40257
mptcp: fix a race in mptcp_pm_del_add_timer()
9.8
CVE-2025-40252
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()