Medium severity · published Jun 10, 2025
CVE-2025-40568
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324…
4.3
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). An internal session termination functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with "guest" role to terminate legitimate users' sessions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RR
RUGGEDCOM RST2428P · Siemens
before V3.2 · source: vendor
SX
SCALANCE XCH328 · Siemens
before V3.2 · source: vendor
SX
SCALANCE XCM324 · Siemens
before V3.2 · source: vendor
SX
SCALANCE XCM328 · Siemens
before V3.2 · source: vendor
SX
SCALANCE XCM332 · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRH334 (24 V DC, 8xFO, CC) · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRM334 (230 V AC, 12xFO) · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRM334 (230 V AC, 8xFO) · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRM334 (24 V DC, 12xFO) · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRM334 (24 V DC, 8xFO) · Siemens
before V3.2 · source: vendor
SX
SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) · Siemens
before V3.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-40568
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-40568
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/html/ssa-693776.html
More from RUGGEDCOM RST2428P
9.8
CVE-2026-23112
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
9.8
CVE-2025-40261
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
9.8
CVE-2025-40258
mptcp: fix race condition in mptcp_schedule_work()
9.8
CVE-2025-40257
mptcp: fix a race in mptcp_pm_del_add_timer()
9.8
CVE-2025-40252
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()