Siemens Third-Party Components in SINEC OS

Act NowCVSS 9.1ICS-CERT ICSA-25-226-07Aug 12, 2025

Siemens

Attack path

Attack VectorNetwork

Auth RequiredNone

ComplexityLow

User InteractionNone needed

Summary

SINEC OS before V3.2 contains multiple vulnerabilities in third-party components, including input validation flaws and memory safety issues. These affect RUGGEDCOM RST2428P and SCALANCE XC/XR/XCM/XRM/XCH/XRH series network devices. The vulnerabilities allow remote attackers without credentials to cause denial of service (device crash) or disclose sensitive information. Siemens has released SINEC OS V3.2 with fixes for all affected products.

What this means

What could happen

Multiple unpatched vulnerabilities in critical network infrastructure equipment could allow an attacker to remotely crash devices or extract sensitive information without authentication, causing loss of network connectivity or visibility across your plant.

Who's at risk

This affects network infrastructure devices that provide industrial connectivity: RUGGEDCOM industrial routers, SCALANCE managed switches and wireless access points. These are commonly used in water authority and electric utility networks to connect PLCs, RTUs, and control systems across substations and treatment plants. Organizations running any version of SINEC OS before 3.2 on these devices are at risk.

How it could be exploited

An attacker on the network (or from the internet if the device is exposed) can send malformed packets or specially crafted requests to the device running SINEC OS. The device will process these without proper validation due to the third-party component flaws, allowing the attacker to either crash it (denial of service) or read memory containing sensitive data.

Prerequisites

Network access to the device on its management or protocol ports (no authentication required)
Device is reachable from an untrusted network or the internet

remotely exploitableno authentication requiredlow complexityactively exploited (KEV)affects critical infrastructure

Exploitability

Actively exploited — confirmed by CISA KEV

Public Proof-of-Concept (PoC) on GitHub (5 repositories)

Affected products (3)

3 with fix

ProductAffected VersionsFix Status

RUGGEDCOM RST2428P (6GK6242-6PA00)< 3.23.2

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family< 3.23.2

SCALANCE XCM-/XRM-/XCH-/XRH-300 family< 3.23.2

Remediation & Mitigation

0/4

Do now

0/2

HOTFIXUpdate RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500, and SCALANCE XCM-/XRM-/XCH-/XRH-300 devices to SINEC OS version 3.2 or later

WORKAROUNDRestrict network access to affected devices by applying firewall rules to block inbound traffic on management ports (e.g., SSH, HTTP/HTTPS, SNMP) from untrusted networks

Long-term hardening

0/2

HARDENINGIsolate these network devices on a separate industrial network segment, not directly accessible from office/IT networks or the internet

HARDENINGIf remote management is required, implement a VPN gateway and ensure remote access users authenticate before reaching the device

CVEs (486)

CVE-2024-50602 CVE-2024-9681 CVE-2024-8176 CVE-2021-47316 CVE-2022-48666 CVE-2022-48827 CVE-2022-48828 CVE-2022-48829 CVE-2022-49034 CVE-2023-4039 CVE-2023-52887 CVE-2023-52918 CVE-2024-6197 CVE-2024-6874 CVE-2024-7264 CVE-2024-36484 CVE-2024-36894 CVE-2024-36901 CVE-2024-36938 CVE-2024-36974 CVE-2024-36978 CVE-2024-37078 CVE-2024-38586 CVE-2024-38619 CVE-2024-39468 CVE-2024-39469 CVE-2024-39482 CVE-2024-39484 CVE-2024-39487 CVE-2024-39495 CVE-2024-39499 CVE-2024-39502 CVE-2024-39503 CVE-2024-39505 CVE-2024-39506 CVE-2024-39509 CVE-2024-40901 CVE-2024-40902 CVE-2024-40904 CVE-2024-40905 CVE-2024-40912 CVE-2024-40916 CVE-2024-40929 CVE-2024-40931 CVE-2024-40932 CVE-2024-40934 CVE-2024-40941 CVE-2024-40942 CVE-2024-40943 CVE-2024-40945 CVE-2024-40947 CVE-2024-40958 CVE-2024-40959 CVE-2024-40960 CVE-2024-40961 CVE-2024-40963 CVE-2024-40968 CVE-2024-40971 CVE-2024-40974 CVE-2024-40976 CVE-2024-40978 CVE-2024-40980 CVE-2024-40981 CVE-2024-40983 CVE-2024-40984 CVE-2024-40987 CVE-2024-40988 CVE-2024-40990 CVE-2024-40995 CVE-2024-41000 CVE-2024-41004 CVE-2024-41005 CVE-2024-41006 CVE-2024-41007 CVE-2024-41009 CVE-2024-41012 CVE-2024-41015 CVE-2024-41017 CVE-2024-41020 CVE-2024-41022 CVE-2024-41034 CVE-2024-41035 CVE-2024-41040 CVE-2024-41041 CVE-2024-41044 CVE-2024-41046 CVE-2024-41049 CVE-2024-41055 CVE-2024-41059 CVE-2024-41063 CVE-2024-41064 CVE-2024-41065 CVE-2024-41068 CVE-2024-41070 CVE-2024-41072 CVE-2024-41077 CVE-2024-41078 CVE-2024-41081 CVE-2024-41087 CVE-2024-41089 CVE-2024-41090 CVE-2024-41091 CVE-2024-41092 CVE-2024-41095 CVE-2024-41097 CVE-2024-42076 CVE-2024-42077 CVE-2024-42082 CVE-2024-42084 CVE-2024-42086 CVE-2024-42087 CVE-2024-42092 CVE-2024-42093 CVE-2024-42094 CVE-2024-42095 CVE-2024-42101 CVE-2024-42105 CVE-2024-42145 CVE-2024-42148 CVE-2024-42152 CVE-2024-42153 CVE-2024-42154 CVE-2024-42161 CVE-2024-42223 CVE-2024-42224 CVE-2024-42229 CVE-2024-42232 CVE-2024-42236 CVE-2024-42244 CVE-2024-42247 CVE-2024-43098 CVE-2024-43861 CVE-2024-43867 CVE-2024-43871 CVE-2024-43879 CVE-2024-43880 CVE-2024-43882 CVE-2024-43883 CVE-2024-43889 CVE-2024-43890 CVE-2024-43893 CVE-2024-43894 CVE-2024-43907 CVE-2024-43908 CVE-2024-43914 CVE-2024-44935 CVE-2024-44944 CVE-2024-44949 CVE-2024-44954 CVE-2024-44960 CVE-2024-44965 CVE-2024-44969 CVE-2024-44971 CVE-2024-44987 CVE-2024-44988 CVE-2024-44989 CVE-2024-44990 CVE-2024-44995 CVE-2024-44998 CVE-2024-44999 CVE-2024-45003 CVE-2024-45006 CVE-2024-45008 CVE-2024-45021 CVE-2024-45025 CVE-2024-46673 CVE-2024-46674 CVE-2024-46675 CVE-2024-46676 CVE-2024-46677 CVE-2024-46679 CVE-2024-46685 CVE-2024-46689 CVE-2024-46702 CVE-2024-46707 CVE-2024-46713 CVE-2024-46714 CVE-2024-46719 CVE-2024-46721 CVE-2024-46722 CVE-2024-46723 CVE-2024-46724 CVE-2024-46725 CVE-2024-46731 CVE-2024-46737 CVE-2024-46738 CVE-2024-46739 CVE-2024-46740 CVE-2024-46743 CVE-2024-46744 CVE-2024-46745 CVE-2024-46747 CVE-2024-46750 CVE-2024-46755 CVE-2024-46759 CVE-2024-46761 CVE-2024-46763 CVE-2024-46771 CVE-2024-46777 CVE-2024-46780 CVE-2024-46781 CVE-2024-46782 CVE-2024-46783 CVE-2024-46791 CVE-2024-46798 CVE-2024-46800 CVE-2024-46804 CVE-2024-46814 CVE-2024-46815 CVE-2024-46817 CVE-2024-46818 CVE-2024-46819 CVE-2024-46822 CVE-2024-46828 CVE-2024-46829 CVE-2024-46832 CVE-2024-46840 CVE-2024-46844 CVE-2024-47143 CVE-2024-47659 CVE-2024-47660 CVE-2024-47663 CVE-2024-47667 CVE-2024-47668 CVE-2024-47669 CVE-2024-47679 CVE-2024-47684 CVE-2024-47685 CVE-2024-47692 CVE-2024-47696 CVE-2024-47697 CVE-2024-47698 CVE-2024-47699 CVE-2024-47701 CVE-2024-47705 CVE-2024-47706 CVE-2024-47709 CVE-2024-47710 CVE-2024-47712 CVE-2024-47713 CVE-2024-47718 CVE-2024-47723 CVE-2024-47735 CVE-2024-47737 CVE-2024-47739 CVE-2024-47740 CVE-2024-47742 CVE-2024-47747 CVE-2024-47748 CVE-2024-47749 CVE-2024-47756 CVE-2024-47757 CVE-2024-48881 CVE-2024-49851 CVE-2024-49858 CVE-2024-49860 CVE-2024-49863 CVE-2024-49867 CVE-2024-49868 CVE-2024-49875 CVE-2024-49877 CVE-2024-49878 CVE-2024-49879 CVE-2024-49881 CVE-2024-49882 CVE-2024-49883 CVE-2024-49884 CVE-2024-49889 CVE-2024-49890 CVE-2024-49892 CVE-2024-49894 CVE-2024-49895 CVE-2024-49896 CVE-2024-49900 CVE-2024-49901 CVE-2024-49902 CVE-2024-49903 CVE-2024-49907 CVE-2024-49913 CVE-2024-49924 CVE-2024-49930 CVE-2024-49933 CVE-2024-49936 CVE-2024-49938 CVE-2024-49944 CVE-2024-49948 CVE-2024-49949 CVE-2024-49952 CVE-2024-49955 CVE-2024-49957 CVE-2024-49958 CVE-2024-49959 CVE-2024-49962 CVE-2024-49963 CVE-2024-49965 CVE-2024-49966 CVE-2024-49969 CVE-2024-49971 CVE-2024-49973 CVE-2024-49975 CVE-2024-49977 CVE-2024-49981 CVE-2024-49982 CVE-2024-49983 CVE-2024-49985 CVE-2024-49997 CVE-2024-50001 CVE-2024-50006 CVE-2024-50007 CVE-2024-50008 CVE-2024-50013 CVE-2024-50015 CVE-2024-50024 CVE-2024-50033 CVE-2024-50035 CVE-2024-50039 CVE-2024-50040 CVE-2024-50044 CVE-2024-50045 CVE-2024-50046 CVE-2024-50049 CVE-2024-50051 CVE-2024-50059 CVE-2024-50074 CVE-2024-50082 CVE-2024-50083 CVE-2024-50095 CVE-2024-50096 CVE-2024-50099 CVE-2024-50179 CVE-2024-50180 CVE-2024-50184 CVE-2024-50185 CVE-2024-50188 CVE-2024-50193 CVE-2024-50194 CVE-2024-50195 CVE-2024-50198 CVE-2024-50199 CVE-2024-50201 CVE-2024-50202 CVE-2024-50218 CVE-2024-50234 CVE-2024-50236 CVE-2024-50237 CVE-2024-50251 CVE-2024-50262 CVE-2024-50264 CVE-2024-50265 CVE-2024-50267 CVE-2024-50268 CVE-2024-50269 CVE-2024-50273 CVE-2024-50278 CVE-2024-50279 CVE-2024-50282 CVE-2024-50287 CVE-2024-50290 CVE-2024-50292 CVE-2024-50295 CVE-2024-50296 CVE-2024-50299 CVE-2024-50301 CVE-2024-50302 CVE-2024-50304 CVE-2024-52332 CVE-2024-53052 CVE-2024-53057 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066 CVE-2024-53097 CVE-2024-53101 CVE-2024-53103 CVE-2024-53104 CVE-2024-53145 CVE-2024-53146 CVE-2024-53148 CVE-2024-53150 CVE-2024-53155 CVE-2024-53156 CVE-2024-53157 CVE-2024-53158 CVE-2024-53161 CVE-2024-53165 CVE-2024-53171 CVE-2024-53172 CVE-2024-53173 CVE-2024-53174 CVE-2024-53181 CVE-2024-53183 CVE-2024-53184 CVE-2024-53194 CVE-2024-53197 CVE-2024-53198 CVE-2024-53214 CVE-2024-53217 CVE-2024-53226 CVE-2024-53227 CVE-2024-53237 CVE-2024-53239 CVE-2024-53240 CVE-2024-53241 CVE-2024-53680 CVE-2024-56531 CVE-2024-56532 CVE-2024-56533 CVE-2024-56539 CVE-2024-56548 CVE-2024-56558 CVE-2024-56562 CVE-2024-56567 CVE-2024-56568 CVE-2024-56569 CVE-2024-56570 CVE-2024-56572 CVE-2024-56574 CVE-2024-56576 CVE-2024-56581 CVE-2024-56586 CVE-2024-56587 CVE-2024-56589 CVE-2024-56593 CVE-2024-56594 CVE-2024-56595 CVE-2024-56596 CVE-2024-56597 CVE-2024-56598 CVE-2024-56600 CVE-2024-56601 CVE-2024-56602 CVE-2024-56603 CVE-2024-56605 CVE-2024-56606 CVE-2024-56610 CVE-2024-56615 CVE-2024-56619 CVE-2024-56623 CVE-2024-56629 CVE-2024-56630 CVE-2024-56633 CVE-2024-56634 CVE-2024-56636 CVE-2024-56637 CVE-2024-56642 CVE-2024-56643 CVE-2024-56644 CVE-2024-56645 CVE-2024-56648 CVE-2024-56650 CVE-2024-56659 CVE-2024-56661 CVE-2024-56662 CVE-2024-56670 CVE-2024-56681 CVE-2024-56688 CVE-2024-56690 CVE-2024-56691 CVE-2024-56698 CVE-2024-56700 CVE-2024-56701 CVE-2024-56704 CVE-2024-56705 CVE-2024-56720 CVE-2024-56723 CVE-2024-56724 CVE-2024-56728 CVE-2024-56739 CVE-2024-56746 CVE-2024-56747 CVE-2024-56748 CVE-2024-56754 CVE-2024-56756 CVE-2024-56770 CVE-2024-56779 CVE-2024-56780 CVE-2024-56785 CVE-2024-57874 CVE-2024-57951 CVE-2025-21687 CVE-2025-21689 CVE-2025-21692 CVE-2025-21694 CVE-2025-21699

View full CISA ICS-CERT advisory

↑↓ Navigate · Esc Close

API: /api/v1/advisories/a66aa184-d734-4f8a-af4c-cf9128e4d3b1

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.