How many Siemens RUGGEDCOM RST2428P CVEs are in CISA KEV?

Yes — 1 of Siemens RUGGEDCOM RST2428P's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Siemens RUGGEDCOM RST2428P are affected?

8 distinct Siemens RUGGEDCOM RST2428P versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Siemens RUGGEDCOM RST2428P CVEs?

Siemens RUGGEDCOM RST2428P's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).

How many critical Siemens RUGGEDCOM RST2428P vulnerabilities are there?

Siemens RUGGEDCOM RST2428P has 23 critical and 120 high-severity CVEs.

What is the average severity of Siemens RUGGEDCOM RST2428P CVEs?

The average CVSS base score across Siemens RUGGEDCOM RST2428P's scored CVEs is 6.6.

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Home
Vendors
Siemens
Ruggedcom Rst2428p

RadicalNotion.AI

We do not sell or share your personal information.

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Home
Vendors
Siemens
Ruggedcom Rst2428p

Siemens RUGGEDCOM RST2428P Vulnerabilities: CVEs, CISA KEV & Security Advisories

Siemens

293 CVEs

1 in CISA KEV

Siemens RUGGEDCOM RST2428P Vulnerabilities

Name: Siemens RUGGEDCOM RST2428P vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for RUGGEDCOM RST2428P by Siemens.

293

Total CVEs

Published

In CISA KEV

Exploited in the wild

Public exploits

PoC or exploit code

6.6

Avg CVSS

2022–2026

Last updated June 2, 2026

Overview

Siemens RUGGEDCOM RST2428P has 293 published CVE records since 2022, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 29 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

Severity and exploitation

How the CVSS severity of Siemens RUGGEDCOM RST2428P's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical23

High120

Medium136

Low14

In CISA’s Known Exploited Vulnerabilities catalog

One of Siemens RUGGEDCOM RST2428P's CVEs is confirmed exploited in the wild.

Public exploits

29 of Siemens RUGGEDCOM RST2428P's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Siemens RUGGEDCOM RST2428P version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< V3.1104 CVEs
< V4.077 CVEs
< V3.273 CVEs
< V3.327 CVEs

Fixed in

V3.1104 CVEs
V4.077 CVEs
V3.273 CVEs
V3.327 CVEs

Find a version

293 CVEs

Sort

Medium vulnerability · 2026-06-02
CVE-2026-41918
Patch
CWE-525
Medium · CVSS 5.9
EPSS 0.3% (25th pct)2026-06-02
High vulnerability · 2026-04-03
CVE-2026-35535
Patch
CWE-271
High · CVSS 7.8
EPSS 0.2% (6th pct)2026-04-03
Critical vulnerability · 2026-03-19
CVE-2025-69720
Public exploit
Patch
CWE-120
Critical · CVSS 9.8
EPSS 0.5% (39th pct)2026-03-19
wrong proxy connection reuse with credentials
CVE-2026-3784
Public exploit
Patch
CWE-305
Medium · CVSS 6.5
EPSS 0.5% (39th pct)2026-03-11
romfs: check sb_set_blocksize() return value
CVE-2026-23238
Patch
CWE-617
Medium · CVSS 6.9
EPSS 0.2% (9th pct)2026-03-04
fbdev: smscufx: properly copy ioctl memory to kernelspace
CVE-2026-23236
Patch
High · CVSS 7.3
EPSS 0.2% (10th pct)2026-03-04
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
CVE-2026-23231
Public exploit
Patch
CWE-416
High · CVSS 7.8
EPSS 0.8% (56th pct)2026-03-04
smb: client: split cached_fid bitfields to avoid shared-byte RMW races
CVE-2026-23230
Patch
High · CVSS 8.8
EPSS 0.3% (17th pct)2026-02-18
crypto: virtio - Add spinlock protection with virtqueue notification
CVE-2026-23229
Patch
Medium · CVSS 4.7
EPSS 0.1% (3th pct)2026-02-18
smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
CVE-2026-23228
Patch
CWE-401
Medium · CVSS 6.6
EPSS 0.1% (3th pct)2026-02-18
crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
CVE-2026-23222
Patch
High · CVSS 7.8
EPSS 0.1% (4th pct)2026-02-18
ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
CVE-2026-23220
Patch
CWE-835
High · CVSS 8.7
EPSS 0.1% (3th pct)2026-02-18
nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
CVE-2026-23112
Patch
CWE-787
Critical · CVSS 9.8
EPSS 0.5% (39th pct)2026-02-13
netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
CVE-2026-23111
Patch
Workaround
CWE-416
High · CVSS 7.8
EPSS 0.5% (43th pct)2026-02-13
Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries
CVE-2026-26158
Patch
Workaround
CWE-73
High · CVSS 7.0
EPSS 0.2% (9th pct)2026-02-11
Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization
CVE-2026-26157
Public exploit
Patch
Workaround
CWE-73
High · CVSS 7.0
EPSS 0.7% (52th pct)2026-02-11
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
CVE-2026-23038
Patch
Medium · CVSS 6.6
EPSS 0.3% (20th pct)2026-01-31
can: etas_es58x: allow partial RX URB allocation to succeed
CVE-2026-23037
Patch
Low · CVSS 1.0
EPSS 0.2% (15th pct)2026-01-31
dmaengine: omap-dma: fix dma_pool resource leak in error paths
CVE-2026-23033
Patch
Medium · CVSS 4.6
EPSS 0.2% (13th pct)2026-01-31
null_blk: fix kmemleak by releasing references to fault configfs items
CVE-2026-23032
Patch
Low · CVSS 1.0
EPSS 0.2% (13th pct)2026-01-31
can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
CVE-2026-23031
Patch
Medium · CVSS 6.7
EPSS 0.2% (12th pct)2026-01-31
phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()
CVE-2026-23030
Patch
High · CVSS 8.6
EPSS 0.2% (15th pct)2026-01-31
dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
CVE-2026-23026
Patch
CWE-401
Medium · CVSS 6.7
EPSS 0.2% (11th pct)2026-01-31
mm/page_alloc: prevent pcp corruption with SMP=n
CVE-2026-23025
Patch
Critical · CVSS 9.2
EPSS 0.2% (10th pct)2026-01-31
dmaengine: at_hdmac: fix device leak on of_dma_xlate()
CVE-2025-71191
Patch
Medium · CVSS 4.6
EPSS 0.2% (11th pct)2026-01-31
dmaengine: bcm-sba-raid: fix device leak on probe
CVE-2025-71190
Patch
Medium · CVSS 5.5
EPSS 0.2% (11th pct)2026-01-31
dmaengine: dw: dmamux: fix OF node leak on route allocation failure
CVE-2025-71189
Patch
CWE-401
Medium · CVSS 4.0
EPSS 0.2% (10th pct)2026-01-31
dmaengine: lpc18xx-dmamux: fix device leak on route allocation
CVE-2025-71188
Patch
CWE-401
Medium · CVSS 4.8
EPSS 0.2% (10th pct)2026-01-31
dmaengine: stm32: dmamux: fix device leak on route allocation
CVE-2025-71186
Patch
CWE-401
Medium · CVSS 6.7
EPSS 0.2% (11th pct)2026-01-31
dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
CVE-2025-71185
Patch
CWE-401
Medium · CVSS 4.6
EPSS 0.2% (11th pct)2026-01-31

Showing 30 of 293

Common weakness types

The CWE weakness categories most often found in Siemens RUGGEDCOM RST2428P CVEs. Follow any weakness for its full explanation.

CWE-476NULL Pointer Dereference35 CVEs
CWE-416Use After Free27 CVEs
CWE-787Out-of-bounds Write16 CVEs
CWE-125Out-of-bounds Read16 CVEs
CWE-401Missing Release of Memory after Effective Lifetime12 CVEs
CWE-667Improper Locking

Disclosure activity by year

How many Siemens RUGGEDCOM RST2428P CVEs were published each year.

2022

2023

2024

174

2025

2026

Other Siemens products

Browse vulnerabilities for other products by Siemens.

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP1,134 CVEs SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP1,132 CVEs SIPLUS S7-1500 CPU 1518-4 PN/DP MFP1,132 CVEs SIMATIC S7-1500 TM MFP - GNU/Linux subsystem952 CVEs SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family213 CVEs teamcenter visualization189 CVEs

Frequently asked questions

Common questions about Siemens RUGGEDCOM RST2428P vulnerabilities.

How many CVEs does Siemens RUGGEDCOM RST2428P have?: Siemens RUGGEDCOM RST2428P has 293 published CVE records since 2022.
How many Siemens RUGGEDCOM RST2428P CVEs are in CISA KEV?: Yes — 1 of Siemens RUGGEDCOM RST2428P's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Siemens RUGGEDCOM RST2428P vulnerabilities?: Yes — 29 of Siemens RUGGEDCOM RST2428P's CVEs have a known public exploit.
Which versions of Siemens RUGGEDCOM RST2428P are affected?: 8 distinct Siemens RUGGEDCOM RST2428P versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Siemens RUGGEDCOM RST2428P CVEs?: Siemens RUGGEDCOM RST2428P's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-416 (Use After Free), CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read).
How many critical Siemens RUGGEDCOM RST2428P vulnerabilities are there?: Siemens RUGGEDCOM RST2428P has 23 critical and 120 high-severity CVEs.
What is the average severity of Siemens RUGGEDCOM RST2428P CVEs?: The average CVSS base score across Siemens RUGGEDCOM RST2428P's scored CVEs is 6.6.