CVE-2025-40569

Severity: medium (CVSS 4.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-10 · updated 2026-06-17
Weakness: CWE-362

Description

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.2), SCALANCE XCH328 (6GK5328-4TS01-2EC2) (All versions < V3.2), SCALANCE XCM324 (6GK5324-8TS01-2AC2) (All versions < V3.2), SCALANCE XCM328 (6GK5328-4TS01-2AC2) (All versions < V3.2), SCALANCE XCM332 (6GK5332-0GA01-2AC2) (All versions < V3.2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) (All versions < V3.2), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) (All versions < V3.2). The "Load Configuration from Local PC" functionality in the web interface of affected products contains a race condition vulnerability. This could allow an authenticated remote attacker to make the affected product load an attacker controlled configuration instead of the legitimate one. Successful exploitation requires that a legitimate administrator invokes the functionality and the attacker wins the race condition.

Affected products

Siemens RUGGEDCOM RST2428P: before V3.2 — fixed in V3.2
Siemens SCALANCE XCH328: before V3.2 — fixed in V3.2
Siemens SCALANCE XCM324: before V3.2 — fixed in V3.2
Siemens SCALANCE XCM328: before V3.2 — fixed in V3.2
Siemens SCALANCE XCM332: before V3.2 — fixed in V3.2
Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (230 V AC, 12xFO): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (230 V AC, 8xFO): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (24 V DC, 12xFO): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (24 V DC, 8xFO): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (2x230 V AC, 12xFO): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (2x230 V AC, 8xFO): before V3.2 — fixed in V3.2
Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+): before V3.2 — fixed in V3.2

How to fix

Upgrade to a fixed version: Siemens RUGGEDCOM RST2428P V3.2; Siemens SCALANCE XCH328 V3.2; Siemens SCALANCE XCM324 V3.2; Siemens SCALANCE XCM328 V3.2; Siemens SCALANCE XCM332 V3.2; Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) V3.2; Siemens SCALANCE XRM334 (230 V AC, 12xFO) V3.2; Siemens SCALANCE XRM334 (230 V AC, 8xFO) V3.2; Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) V3.2; Siemens SCALANCE XRM334 (24 V DC, 12xFO) V3.2; Siemens SCALANCE XRM334 (24 V DC, 8xFO) V3.2; Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) V3.2. Check the vendor advisory for mitigations.

References

https://cert-portal.siemens.com/productcert/html/ssa-693776.html

Get alerted when CVE-2025-40569 or the next vulnerability affects your stack