A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All v
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V4.3.8, V5.7.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Siemens RUGGEDCOM i800
fixed in V4.3.8
- Siemens RUGGEDCOM i801
fixed in V4.3.8
- Siemens RUGGEDCOM i802
fixed in V4.3.8
- Siemens RUGGEDCOM i803
fixed in V4.3.8
- Siemens RUGGEDCOM M2100
fixed in V4.3.8
- Siemens RUGGEDCOM M2200
fixed in V4.3.8
- Siemens RUGGEDCOM M969
fixed in V4.3.8
- Siemens RUGGEDCOM RMC30
fixed in V4.3.8
- Siemens RUGGEDCOM RMC8388 V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RMC8388 V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RP110
fixed in V4.3.8
- Siemens RUGGEDCOM RS1600
fixed in V4.3.8
- Siemens RUGGEDCOM RS1600F
fixed in V4.3.8
- Siemens RUGGEDCOM RS1600T
fixed in V4.3.8
- Siemens RUGGEDCOM RS400
fixed in V4.3.8
- Siemens RUGGEDCOM RS401
fixed in V4.3.8
- Siemens RUGGEDCOM RS416
fixed in V4.3.8
- Siemens RUGGEDCOM RS416P
fixed in V4.3.8
- Siemens RUGGEDCOM RS416Pv2 V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RS416Pv2 V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RS416v2 V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RS416v2 V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RS8000
fixed in V4.3.8
- Siemens RUGGEDCOM RS8000A
fixed in V4.3.8
- Siemens RUGGEDCOM RS8000H
fixed in V4.3.8
- Siemens RUGGEDCOM RS8000T
fixed in V4.3.8
- Siemens RUGGEDCOM RS900
fixed in V4.3.8
- Siemens RUGGEDCOM RS900 (32M) V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RS900 (32M) V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RS900G
fixed in V4.3.8
- Siemens RUGGEDCOM RS900G (32M) V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RS900G (32M) V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RS900GP
fixed in V4.3.8
- Siemens RUGGEDCOM RS900L
fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-GETS-C01
fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-GETS-XX
fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-STND-C01
fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-STND-XX
fixed in V4.3.8
- Siemens RUGGEDCOM RS900W
fixed in V4.3.8
- Siemens RUGGEDCOM RS910
fixed in V4.3.8
- Siemens RUGGEDCOM RS910L
fixed in V4.3.8
- Siemens RUGGEDCOM RS910W
fixed in V4.3.8
- Siemens RUGGEDCOM RS920L
fixed in V4.3.8
- Siemens RUGGEDCOM RS920W
fixed in V4.3.8
- Siemens RUGGEDCOM RS930L
fixed in V4.3.8
- Siemens RUGGEDCOM RS930W
fixed in V4.3.8
- Siemens RUGGEDCOM RS940G
fixed in V4.3.8
- Siemens RUGGEDCOM RS969
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100 (32M) V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100 (32M) V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSG2100P
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100P (32M) V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100P (32M) V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSG2200
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2288 V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2288 V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSG2300 V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2300 V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSG2300P V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2300P V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSG2488 V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG2488 V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSG907R
fixed in V5.7.0
- Siemens RUGGEDCOM RSG908C
fixed in V5.7.0
- Siemens RUGGEDCOM RSG909R
fixed in V5.7.0
- Siemens RUGGEDCOM RSG910C
fixed in V5.7.0
- Siemens RUGGEDCOM RSG920P V4.X
fixed in V4.3.8
- Siemens RUGGEDCOM RSG920P V5.X
fixed in V5.7.0
- Siemens RUGGEDCOM RSL910
fixed in V5.7.0
- Siemens RUGGEDCOM RST2228
fixed in V5.7.0
- Siemens RUGGEDCOM RST2228P
fixed in V5.7.0
- Siemens RUGGEDCOM RST916C
fixed in V5.7.0
- Siemens RUGGEDCOM RST916P
fixed in V5.7.0