CVE-2025-40935: Input Validation

Published Dec 9, 2025
·
Updated

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.1), RUGGEDCOM RSG907R (All versions < V5.10.1), RUGGEDCOM RSG908C (All versions < V5.10.1), RUGGEDCOM RSG909R (All versions < V5.10.1), RUGGEDCOM RSG910C (All versions < V5.10.1), RUGGEDCOM RSG920P V5.X (All versions < V5.10.1), RUGGEDCOM RSL910 (All versions < V5.10.1), RUGGEDCOM RST2228 (All versions < V5.10.1), RUGGEDCOM RST2228P (All versions < V5.10.1), RUGGEDCOM RST916C (All versions < V5.10.1), RUGGEDCOM RST916P (All versions < V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.

Affected Software

20 affected components
RUGGEDCOM RMC8388<5.10.1
RUGGEDCOM RS416Pv2<5.10.1
RUGGEDCOM RS416v2<5.10.1
RUGGEDCOM RS900 (32M)<5.10.1
RUGGEDCOM RS900G (32M)<5.10.1
RUGGEDCOM RSG2100 (32M)<5.10.1
RUGGEDCOM RSG2100P (32M)<5.10.1
RUGGEDCOM RSG2288<5.10.1
RUGGEDCOM RSG2300<5.10.1
RUGGEDCOM RSG2300P<5.10.1
RUGGEDCOM RSG2488<5.10.1
RUGGEDCOM RSG907R<5.10.1
RUGGEDCOM RSG908C<5.10.1
RUGGEDCOM RSG909R<5.10.1
RUGGEDCOM RSG910C<5.10.1
RUGGEDCOM RSG920P<5.10.1
RUGGEDCOM RSL910<5.10.1
RUGGEDCOM RST2228<5.10.1
RUGGEDCOM RST2228P<5.10.1
RUGGEDCOM RST916C<5.10.1

Event History

Dec 9, 2025
CVE Published
via MITRE·10:44 AM
Data Sourced
via MITRE·10:44 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-40935?

The severity of CVE-2025-40935 is considered high due to its potential impact on security.

2

How do I fix CVE-2025-40935?

To fix CVE-2025-40935, upgrade to the latest version V5.10.1 or later of the affected RUGGEDCOM products.

3

Which RUGGEDCOM products are affected by CVE-2025-40935?

CVE-2025-40935 affects multiple RUGGEDCOM products, including RMC8388, RS416Pv2, RS416v2, RS900, and others with versions below V5.10.1.

4

What are the risks of not addressing CVE-2025-40935?

Failing to address CVE-2025-40935 may leave systems vulnerable to unauthorized access or other malicious activities.

5

Is there a patch available for CVE-2025-40935?

Yes, users should apply the available patch or upgrade to version V5.10.1 or newer to mitigate CVE-2025-40935.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203