CVE-2025-40569: Siemens Ruggedcom RST2428P

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.

Affected products

Siemens Ruggedcom RST2428P: before V3.2 (fixed in V3.2)
Siemens Scalance XCH328: before V3.2 (fixed in V3.2)
Siemens Scalance XCM324: before V3.2 (fixed in V3.2)
Siemens Scalance XCM328: before V3.2 (fixed in V3.2)
Siemens Scalance XCM332: before V3.2 (fixed in V3.2)
Siemens Scalance XRH334 24 V Dc, 8xfo, Cc: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 230 V Ac, 12xfo: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 230 V Ac, 8xfo: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 230v Ac, 2x10g, 24xsfp, 8xsfp+: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 24 V Dc, 12xfo: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 24 V Dc, 8xfo: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 24v Dc, 2x10g, 24xsfp, 8xsfp+: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 2x230 V Ac, 12xfo: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 2x230 V Ac, 8xfo: before V3.2 (fixed in V3.2)
Siemens Scalance XRM334 2x230v Ac, 2x10g, 24xsfp, 8xsfp+: before V3.2 (fixed in V3.2)

Published 2025-06-10. Last modified 2026-06-17.