description: A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default.
This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.
problem types: CWE-326: Inadequate Encryption Strength
affected:
{
vendor: Siemens
product: RUGGEDCOM i800
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM i801
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM i802
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM i803
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM M2100
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM M2200
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM M969
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RMC30
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RMC8388 V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RMC8388 V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RP110
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS1600
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS1600F
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS1600T
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS400
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS401
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS416
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS416P
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS416Pv2 V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS416Pv2 V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS416v2 V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS416v2 V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS8000
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS8000A
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS8000H
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS8000T
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900 (32M) V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900 (32M) V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900G
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900G (32M) V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900G (32M) V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900GP
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900L
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900M-GETS-C01
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900M-GETS-XX
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900M-STND-C01
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900M-STND-XX
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS900W
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS910
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS910L
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS910W
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS920L
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS920W
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS930L
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS930W
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS940G
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RS969
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2100
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2100 (32M) V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2100 (32M) V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2100P
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2200
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2288 V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2288 V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2300 V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2300 V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2300P V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2300P V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2488 V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG2488 V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG907R
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG908C
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG909R
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG910C
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG920P V4.X
versions:
version: All versions < V4.3.8, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSG920P V5.X
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RSL910
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RST2228
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RST2228P
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RST916C
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
{
vendor: Siemens
product: RUGGEDCOM RST916P
versions:
version: All versions < V5.7.0, status: affected
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:C
baseScore: 6.7
baseSeverity: MEDIUM
]