CVE Feed

    Dashboard / CVE / CVE-2024-38278

    CVE-2024-38278

    A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.9.0), RUGGEDCOM RMC8388NC V5.X (All versions < V5.9.0), RUGGEDCOM RS416NCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416PNCv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.9.0), RUGGEDCOM RS416v2 V5.X (All versions < V5.9.0), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900GNC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RS900NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100NC(32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2100PNC (32M) V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2288NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300P V5.X (All versions < V5.9.0), RUGGEDCOM RSG2300PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488 V5.X (All versions < V5.9.0), RUGGEDCOM RSG2488NC V5.X (All versions < V5.9.0), RUGGEDCOM RSG907R (All versions < V5.9.0), RUGGEDCOM RSG908C (All versions < V5.9.0), RUGGEDCOM RSG909R (All versions < V5.9.0), RUGGEDCOM RSG910C (All versions < V5.9.0), RUGGEDCOM RSG920P V5.X (All versions < V5.9.0), RUGGEDCOM RSG920PNC V5.X (All versions < V5.9.0), RUGGEDCOM RSL910 (All versions < V5.9.0), RUGGEDCOM RSL910NC (All versions < V5.9.0), RUGGEDCOM RST2228 (All versions < V5.9.0), RUGGEDCOM RST2228P (All versions < V5.9.0), RUGGEDCOM RST916C (All versions < V5.9.0), RUGGEDCOM RST916P (All versions < V5.9.0). The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system.

    Published:Jul 9, 2024
    Last Modified:Apr 15, 2026
    EPS:Jul 9, 2024
    EPSS Score:0.00093
    CVSS Score:6.6

    Affected Products

    Vendor
    Siemens
    Product
    Ruggedcom Ros Rmc8388
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rmc8388nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs416ncv2
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs416pncv2
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs416pv2
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs416v2
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs900
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs900g
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs900gnc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rs900nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2100
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2100nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2288
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2288nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2300
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2300nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2300p
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2300pnc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2488
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg2488nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg907r
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg908c
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg909r
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg910c
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg920p
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsg920pnc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsl910
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rsl910nc
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rst2228
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rst2228p
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rst916c
    Vendor
    Siemens
    Product
    Ruggedcom Ros Rst916p

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-266 Incorrect Privilege Assignment

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High