Siemens Ruggedcom RST2428P vulnerabilities

47 CVEs affecting Siemens Ruggedcom RST2428P, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-41918, published 2026-06-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-2511, published 2024-04-08. Medium severity, CVSS 5.9. EPSS: 52.4% chance of exploitation in the next 30 days. Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to…
CVE-2024-5535, published 2024-06-27. Critical severity, CVSS 9.1. EPSS: 5.6% chance of exploitation in the next 30 days. Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A…
CVE-2025-9231, published 2025-09-30. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing…
CVE-2025-9232, published 2025-09-30. Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days. Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority…
CVE-2025-49796, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input…
CVE-2025-9230, published 2025-09-30. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may…
CVE-2024-8176, published 2025-03-14. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references,…
CVE-2024-41996, published 2024-08-26. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily…
CVE-2025-49794, published 2025-06-16. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements.…
CVE-2026-26157, published 2026-02-11. High severity, CVSS 7.0. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may…

Latest

CVE-2026-41918, published 2026-06-02. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user…
CVE-2026-26158, published 2026-02-11. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unvalidated hardlink or…
CVE-2026-23038, published 2026-01-31. EPSS: 0.3% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for…
CVE-2026-23037, published 2026-01-31. EPSS: 0.2% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: allow partial RX URB allocation to succeed When es58x_alloc_rx_urbs() fails to allocate the requested number…
CVE-2026-23033, published 2026-01-31. EPSS: 0.2% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dma_pool resource leak in error paths The dma_pool created by dma_pool_create() is not destroyed…
CVE-2026-23032, published 2026-01-31. EPSS: 0.2% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: null_blk: fix kmemleak by releasing references to fault configfs items When CONFIG_BLK_DEV_NULL_BLK_FAULT_INJECTION is enabled,…
CVE-2026-23031, published 2026-01-31. EPSS: 0.2% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak In gs_can_open(), the URBs for USB-in transfers are allocated,…
CVE-2026-23030, published 2026-01-31. EPSS: 0.2% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() The for_each_available_child_of_node() calls…
CVE-2026-1489, published 2026-01-27. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode…