Siemens SINEC OS

Plan PatchCVSS 9.8ICS-CERT ICSA-26-188-05Jun 2, 2026

Siemens

Attack path

Attack VectorNetwork

Auth RequiredNone

ComplexityLow

User InteractionNone needed

Summary

SINEC OS before V4.0 in RUGGEDCOM RST2428P contains multiple vulnerabilities including memory corruption (CWE-119, CWE-121, CWE-787), resource exhaustion (CWE-835), improper input validation (CWE-20), path traversal (CWE-22), and access control weaknesses (CWE-284). These flaws allow remote code execution without authentication or user interaction. Siemens has released version 4.0 with fixes for these issues.

What this means

What could happen

An attacker with network access to RUGGEDCOM RST2428P could exploit multiple vulnerabilities to execute code remotely, potentially disrupting network connectivity, gaining unauthorized access to industrial control systems, or causing equipment to malfunction.

Who's at risk

Water and electric utilities operating RUGGEDCOM RST2428P industrial Ethernet switches in critical control networks. This switch manages connectivity between RTUs, PLCs, and SCADA servers, making it a key choke point for industrial network traffic.

How it could be exploited

An attacker on the network could send specially crafted packets to the RUGGEDCOM RST2428P device to trigger memory corruption, input validation, or other weaknesses in SINEC OS. Successful exploitation would allow arbitrary code execution on the device, giving the attacker control over the industrial Ethernet switch and access to connected control systems.

Prerequisites

Network access to RUGGEDCOM RST2428P device on industrial network
Device running SINEC OS version before V4.0
No authentication required for exploitation

remotely exploitableno authentication requiredlow complexitycritical severitymultiple vulnerability typesaffects network infrastructure

Exploitability

Some exploitation risk — EPSS score 2.2%

Public Proof-of-Concept (PoC) on GitHub (10 repositories)

Affected products (1)

ProductAffected VersionsFix Status

RUGGEDCOM RST2428P (6GK6242-6PA00)< 4.04.0

Remediation & Mitigation

0/1

Schedule — requires maintenance window

0/1

Patching may require device reboot — plan for process interruption

HOTFIXUpdate RUGGEDCOM RST2428P to SINEC OS version 4.0 or later

CVEs (77)

CVE-2025-1352 CVE-2025-1376 CVE-2025-6052 CVE-2025-6141 CVE-2025-6170 CVE-2025-7039 CVE-2025-8732 CVE-2025-9086 CVE-2025-9230 CVE-2025-9231 CVE-2025-9232 CVE-2025-10966 CVE-2025-13465 CVE-2025-13601 CVE-2025-39913 CVE-2025-40214 CVE-2025-40248 CVE-2025-40250 CVE-2025-40251 CVE-2025-40252 CVE-2025-40254 CVE-2025-40257 CVE-2025-40258 CVE-2025-40261 CVE-2025-40262 CVE-2025-40263 CVE-2025-40264 CVE-2025-40271 CVE-2025-40278 CVE-2025-40280 CVE-2025-40281 CVE-2025-40345 CVE-2025-46394 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796 CVE-2025-60876 CVE-2025-66382 CVE-2025-66412 CVE-2025-69720 CVE-2025-71185 CVE-2025-71186 CVE-2025-71188 CVE-2025-71189 CVE-2025-71190 CVE-2025-71191 CVE-2026-1484 CVE-2026-1489 CVE-2026-3784 CVE-2026-22610 CVE-2026-22976 CVE-2026-22977 CVE-2026-23025 CVE-2026-23026 CVE-2026-23030 CVE-2026-23031 CVE-2026-23032 CVE-2026-23033 CVE-2026-23037 CVE-2026-23038 CVE-2026-23111 CVE-2026-23112 CVE-2026-23220 CVE-2026-23222 CVE-2026-23228 CVE-2026-23229 CVE-2026-23230 CVE-2026-23231 CVE-2026-23236 CVE-2026-23238 CVE-2026-24515 CVE-2026-25210 CVE-2026-26157 CVE-2026-26158 CVE-2026-35535 CVE-2026-41918 CVE-2025-66035

View full CISA ICS-CERT advisory

↑↓ Navigate · Esc Close

API: /api/v1/advisories/6496d720-8492-4526-a509-b04aafff7e8b

Get OT security insights every Tuesday

Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.