Skip to content
Fencer Intel
medium 4.8

CVE-2025-40569 json

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All…

published last yr. modified 4mo ago also EUVD-2025-17679

cvss
4.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 22%
public exploits
0
none known

Summary

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.

Patch / fix

  • Siemens RUGGEDCOM RST2428P V3.2
  • Siemens SCALANCE XCH328 V3.2
  • Siemens SCALANCE XCM324 V3.2
  • Siemens SCALANCE XCM328 V3.2
  • Siemens SCALANCE XCM332 V3.2
  • Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) V3.2
  • Siemens SCALANCE XRM334 (230 V AC, 12xFO) V3.2
  • Siemens SCALANCE XRM334 (230 V AC, 8xFO) V3.2
  • Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) V3.2
  • Siemens SCALANCE XRM334 (24 V DC, 12xFO) V3.2
  • Siemens SCALANCE XRM334 (24 V DC, 8xFO) V3.2
  • Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) V3.2
  • Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) V3.2
  • Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) V3.2
  • Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) V3.2

Is CVE-2025-40569 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-162-04 updated cvss 4.8

Siemens SCALANCE and RUGGEDCOM

  • Siemens RUGGEDCOM RST2428P (6GK6242-6PA00) < 3.2 Siemens SCALANCE XCH328 (6GK5328-4TS01-2EC2) < 3.2 Siemens SCALANCE XCM324 (6GK5324-8TS01-2AC2) < 3.2 Siemens SCALANCE XCM328 (6GK5328-4TS01-2AC2) < 3.2 Siemens SCALANCE XCM332 (6GK5332-0GA01-2AC2) < 3.2 Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) < 3.2
    +9 more products
    Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) < 3.2 Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) < 3.2 Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) < 3.2 Siemens SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) < 3.2 Siemens SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) < 3.2 Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) < 3.2 Siemens SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) < 3.2 Siemens SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) < 3.2 Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) < 3.2
    affected: fixed in V3.2 support.industry.siemens.com
  • Siemens SCALANCE XC316-8 (6GK5324-8TS00-2AC2) Siemens SCALANCE XC324-4 (6GK5328-4TS00-2AC2) Siemens SCALANCE XC324-4 EEC (6GK5328-4TS00-2EC2) Siemens SCALANCE XC332 (6GK5332-0GA00-2AC2) Siemens SCALANCE XC416-8 (6GK5424-8TR00-2AC2) Siemens SCALANCE XC424-4 (6GK5428-4TR00-2AC2)
    +19 more products
    Siemens SCALANCE XC432 (6GK5432-0GR00-2AC2) Siemens SCALANCE XR302-32 (6GK5334-5TS00-2AR3) Siemens SCALANCE XR302-32 (6GK5334-5TS00-3AR3) Siemens SCALANCE XR302-32 (6GK5334-5TS00-4AR3) Siemens SCALANCE XR322-12 (6GK5334-3TS00-2AR3) Siemens SCALANCE XR322-12 (6GK5334-3TS00-3AR3) Siemens SCALANCE XR322-12 (6GK5334-3TS00-4AR3) Siemens SCALANCE XR326-8 (6GK5334-2TS00-2AR3) Siemens SCALANCE XR326-8 (6GK5334-2TS00-3AR3) Siemens SCALANCE XR326-8 (6GK5334-2TS00-4AR3) Siemens SCALANCE XR326-8 EEC (6GK5334-2TS00-2ER3) Siemens SCALANCE XR502-32 (6GK5534-5TR00-2AR3) Siemens SCALANCE XR502-32 (6GK5534-5TR00-3AR3) Siemens SCALANCE XR502-32 (6GK5534-5TR00-4AR3) Siemens SCALANCE XR522-12 (6GK5534-3TR00-2AR3) Siemens SCALANCE XR522-12 (6GK5534-3TR00-3AR3) Siemens SCALANCE XR522-12 (6GK5534-3TR00-4AR3) Siemens SCALANCE XR526-8 (6GK5534-2TR00-2AR3) Siemens SCALANCE XR526-8 (6GK5534-2TR00-3AR3)
    not affected

1 more not affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
last yr.

Exploit prediction

0.30% chance of exploitation in the next 30 days, higher than 22% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
CNA 4.0 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CNA 4.0 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Siemens RUGGEDCOM RST2428P
  • Siemens SCALANCE XCH328
  • Siemens SCALANCE XCM324
  • Siemens SCALANCE XCM328
  • Siemens SCALANCE XCM332
  • Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC)
  • Siemens SCALANCE XRM334 (230 V AC, 12xFO)
  • Siemens SCALANCE XRM334 (230 V AC, 8xFO)
  • Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)
  • Siemens SCALANCE XRM334 (24 V DC, 12xFO)
  • Siemens SCALANCE XRM334 (24 V DC, 8xFO)
  • Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)
  • Siemens SCALANCE XRM334 (2x230 V AC, 12xFO)
  • Siemens SCALANCE XRM334 (2x230 V AC, 8xFO)
  • Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.