Vulnerabilities (CVE)

Filtered by vendor Siemens Subscribe
Filtered by product Ruggedcom Rst2428p
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-35535 2 Siemens, Sudo Project 3 Ruggedcom Rst2428p, Sinec Os, Sudo 2026-09-01 N/A 7.4 HIGH
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
CVE-2025-8732 3 Ibm, Siemens, Xmlsoft 5 Aix, Vios, Ruggedcom Rst2428p and 2 more 2026-07-01 1.7 LOW 3.3 LOW
A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that "[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all."
CVE-2025-40803 1 Siemens 2 Ruggedcom Rst2428p, Ruggedcom Rst2428p Firmware 2026-06-17 N/A 3.1 LOW
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially leading to a breach of confidentiality.
CVE-2025-40802 1 Siemens 2 Ruggedcom Rst2428p, Ruggedcom Rst2428p Firmware 2026-06-17 N/A 3.1 LOW
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device may be susceptible to resource exhaustion when subjected to high volumes of query requests. This could allow an attacker to cause a temporary denial of service, with the system recovering once the activity stops.
CVE-2024-50302 4 Debian, Google, Linux and 1 more 34 Debian Linux, Android, Linux Kernel and 31 more 2026-06-17 N/A 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.