high
7.5
CWE
208 203
Advisory Published
Updated

CVE-2021-42016

First published: Tue Mar 08 2022(Updated: )

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2100F (All versions), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M2200F (All versions), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM M969F (All versions), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.6.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS400F (All versions), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416F (All versions), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416PF (All versions), RUGGEDCOM RS416Pv2 (All versions < V5.6.0), RUGGEDCOM RS416v2 (All versions < V5.6.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.6.0), RUGGEDCOM RS900F (All versions), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.6.0), RUGGEDCOM RS900GF (All versions), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900GPF (All versions), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS940GF (All versions), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.6.0), RUGGEDCOM RSG2100F (All versions), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100PF (All versions), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2200F (All versions), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.6.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.6.0), RUGGEDCOM RSG2300F (All versions), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.6.0), RUGGEDCOM RSG2300PF (All versions), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.6.0), RUGGEDCOM RSG2488F (All versions), RUGGEDCOM RSG907R (All versions < V5.6.0), RUGGEDCOM RSG908C (All versions < V5.6.0), RUGGEDCOM RSG909R (All versions < V5.6.0), RUGGEDCOM RSG910C (All versions < V5.6.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.6.0), RUGGEDCOM RSL910 (All versions < V5.6.0), RUGGEDCOM RST2228 (All versions < V5.6.0), RUGGEDCOM RST2228P (All versions < V5.6.0), RUGGEDCOM RST916C (All versions < V5.6.0), RUGGEDCOM RST916P (All versions < V5.6.0). A timing attack, in a third-party component, could make the retrieval of the private key possible, used for encryption of sensitive data. If a threat actor were to exploit this, the data integrity and security could be compromised.

Credit: productcert@siemens.com productcert@siemens.com

Affected SoftwareAffected VersionHow to fix
Siemens ROS
Siemens RUGGEDCOM i800
Siemens RUGGEDCOM i801
Siemens RUGGEDCOM ROS i802
Siemens RUGGEDCOM i803NC
siemens RUGGEDCOM M2100F
Siemens RUGGEDCOM M2200
Siemens RUGGEDCOM ROS M969
Siemens RUGGEDCOM RMC
Siemens RUGGEDCOM ROS RMC20
Siemens RUGGEDCOM ROS RMC30
Siemens RUGGEDCOM RMC40
Siemens RUGGEDCOM RMC41
Siemens RUGGEDCOM RP110
Siemens RUGGEDCOM RS400NC
Siemens RUGGEDCOM ROS RS401
Siemens RUGGEDCOM ROS RS416
Siemens RUGGEDCOM RS8000
Siemens RUGGEDCOM ROS RS8000A
Siemens RUGGEDCOM ROS RS8000H
Siemens RUGGEDCOM ROS RS8000T
Siemens RUGGEDCOM ROS RS900GP
Siemens RUGGEDCOM RS900
Siemens RUGGEDCOM ROS RS900W
Siemens RUGGEDCOM RS910
Siemens RUGGEDCOM ROS RS910L
Siemens RUGGEDCOM ROS RS910W
Siemens RUGGEDCOM ROS RS920L
Siemens RUGGEDCOM ROS RS920W
Siemens RUGGEDCOM ROS RS930L
Siemens RUGGEDCOM ROS RS930W
Siemens RUGGEDCOM ROS RS940G
Siemens RUGGEDCOM ROS RS969
Siemens RUGGEDCOM ROS RSG2100P
Siemens RUGGEDCOM ROS RSG2200
Siemens ROS<5.6.0
Siemens RUGGEDCOM ROS RMC8388
Siemens RUGGEDCOM ROS RS416v2
Siemens RUGGEDCOM ROS RS900
Siemens RUGGEDCOM RS900G (32M)
Siemens RUGGEDCOM ROS RSG2100
Siemens RUGGEDCOM RSG2288
siemens RUGGEDCOM ROS RSG2300
Siemens RUGGEDCOM ROS RSG2300P
Siemens RUGGEDCOM ROS RSG2488
Siemens RUGGEDCOM RSG907R
siemens RUGGEDCOM RSG908C
Siemens RUGGEDCOM RSG909R
Siemens RUGGEDCOM RSG910C
Siemens RUGGEDCOM ROS RSG920P
Siemens RUGGEDCOM RSL910
Siemens RUGGEDCOM ROS RST2228
siemens RUGGEDCOM RST2228P
Siemens RUGGEDCOM ROS RST916C
Siemens RUGGEDCOM ROS RST916P
All of
Siemens ROS
Any of
Siemens RUGGEDCOM i800
Siemens RUGGEDCOM i801
Siemens RUGGEDCOM ROS i802
Siemens RUGGEDCOM i803NC
siemens RUGGEDCOM M2100F
Siemens RUGGEDCOM M2200
Siemens RUGGEDCOM ROS M969
Siemens RUGGEDCOM RMC
Siemens RUGGEDCOM ROS RMC20
Siemens RUGGEDCOM ROS RMC30
Siemens RUGGEDCOM RMC40
Siemens RUGGEDCOM RMC41
Siemens RUGGEDCOM RP110
Siemens RUGGEDCOM RS400NC
Siemens RUGGEDCOM ROS RS401
Siemens RUGGEDCOM ROS RS416
Siemens RUGGEDCOM RS8000
Siemens RUGGEDCOM ROS RS8000A
Siemens RUGGEDCOM ROS RS8000H
Siemens RUGGEDCOM ROS RS8000T
Siemens RUGGEDCOM ROS RS900GP
Siemens RUGGEDCOM RS900
Siemens RUGGEDCOM ROS RS900W
Siemens RUGGEDCOM RS910
Siemens RUGGEDCOM ROS RS910L
Siemens RUGGEDCOM ROS RS910W
Siemens RUGGEDCOM ROS RS920L
Siemens RUGGEDCOM ROS RS920W
Siemens RUGGEDCOM ROS RS930L
Siemens RUGGEDCOM ROS RS930W
Siemens RUGGEDCOM ROS RS940G
Siemens RUGGEDCOM ROS RS969
Siemens RUGGEDCOM ROS RSG2100P
Siemens RUGGEDCOM ROS RSG2200
All of
Siemens ROS<5.6.0
Any of
Siemens RUGGEDCOM ROS RMC8388
Siemens RUGGEDCOM ROS RS416v2
Siemens RUGGEDCOM ROS RS900
Siemens RUGGEDCOM RS900G (32M)
Siemens RUGGEDCOM ROS RSG2100
Siemens RUGGEDCOM RSG2288
siemens RUGGEDCOM ROS RSG2300
Siemens RUGGEDCOM ROS RSG2300P
Siemens RUGGEDCOM ROS RSG2488
Siemens RUGGEDCOM RSG907R
siemens RUGGEDCOM RSG908C
Siemens RUGGEDCOM RSG909R
Siemens RUGGEDCOM RSG910C
Siemens RUGGEDCOM ROS RSG920P
Siemens RUGGEDCOM RSL910
Siemens RUGGEDCOM ROS RST2228
siemens RUGGEDCOM RST2228P
Siemens RUGGEDCOM ROS RST916C
Siemens RUGGEDCOM ROS RST916P

Remedy

https://cert-portal.siemens.com/productcert/pdf/ssa-256353.pdf

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the vulnerability ID for this Siemens Ruggedcom vulnerability?

    The vulnerability ID for this Siemens Ruggedcom vulnerability is CVE-2021-42016.

  • Which versions of RUGGEDCOM i800 are affected by this vulnerability?

    All versions of RUGGEDCOM i800 before V4.3.8 are affected by this vulnerability.

  • How severe is the Siemens Ruggedcom vulnerability with ID CVE-2021-42016?

    The severity of the Siemens Ruggedcom vulnerability with ID CVE-2021-42016 is high, with a severity value of 7.5.

  • What is the Common Weakness Enumeration (CWE) ID associated with this vulnerability?

    The Common Weakness Enumeration (CWE) ID associated with this vulnerability is CWE-208, CWE-203.

  • Where can I find more information about this vulnerability?

    You can find more information about this vulnerability at the following reference: [https://cert-portal.siemens.com/productcert/pdf/ssa-256353.pdf](https://cert-portal.siemens.com/productcert/pdf/ssa-256353.pdf)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203