CVE-2025-40935: Input Validation
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.10.1), RUGGEDCOM RS416v2 V5.X (All versions < V5.10.1), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.10.1), RUGGEDCOM RSG2288 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300 V5.X (All versions < V5.10.1), RUGGEDCOM RSG2300P V5.X (All versions < V5.10.1), RUGGEDCOM RSG2488 V5.X (All versions < V5.10.1), RUGGEDCOM RSG907R (All versions < V5.10.1), RUGGEDCOM RSG908C (All versions < V5.10.1), RUGGEDCOM RSG909R (All versions < V5.10.1), RUGGEDCOM RSG910C (All versions < V5.10.1), RUGGEDCOM RSG920P V5.X (All versions < V5.10.1), RUGGEDCOM RSL910 (All versions < V5.10.1), RUGGEDCOM RST2228 (All versions < V5.10.1), RUGGEDCOM RST2228P (All versions < V5.10.1), RUGGEDCOM RST916C (All versions < V5.10.1), RUGGEDCOM RST916P (All versions < V5.10.1). Affected devices do not properly validate input during the TLS certificate upload process of the web service. This could allow an authenticated remote attacker to trigger a device crash and reboot, leading to a temporary Denial of Service on the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RUGGEDCOM devices listed in the advisoryto a version that resolves this vulnerability.Fixed in V5.10.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40935?
The severity of CVE-2025-40935 is considered high due to its potential impact on security.
How do I fix CVE-2025-40935?
To fix CVE-2025-40935, upgrade to the latest version V5.10.1 or later of the affected RUGGEDCOM products.
Which RUGGEDCOM products are affected by CVE-2025-40935?
CVE-2025-40935 affects multiple RUGGEDCOM products, including RMC8388, RS416Pv2, RS416v2, RS900, and others with versions below V5.10.1.
What are the risks of not addressing CVE-2025-40935?
Failing to address CVE-2025-40935 may leave systems vulnerable to unauthorized access or other malicious activities.
Is there a patch available for CVE-2025-40935?
Yes, users should apply the available patch or upgrade to version V5.10.1 or newer to mitigate CVE-2025-40935.