Rockwell RUGGEDCOM ROS Vulnerability Advisory: CVE-2025-52236, CVE-2025-41222-4

Key Information Summary Vulnerability Overview Advisory ID: SSA-083019 Release Date: 2025-07-08 CVSS Score: - CVSS v3.1 Base Score: 8.8 - CVSS v4.0 Base Score: 7.7 Affected Products and Versions Affected Products and Versions: - RUGGEDCOM ROS V4.X Family - RUGGEDCOM ROS V5.X Family Unaffected Products and Reasons Unaffected Products and Reasons: - RUGGEDCOM ROS V4.X Family (all versions): The affected functionality is implemented differently and is not vulnerable. - RUGGEDCOM ROS V4.X NC Products (all versions): The affected functionality is not supported. - RUGGEDCOM ROS V4.X NC Products (all versions): The affected functionality is not supported. - RUGGEDCOM ROS V5.X NC Products (all versions): The affected functionality is not supported. Workarounds and Mitigations CVE-2025-52236: Disable DSI service (if not required), or disable the web server (if not required). CVE-2025-52236: Restrict access to ports 80/tcp, 443/tcp, and 22/tcp. CVE-2025-41222: Configure the web client to use GCM cipher suites. CVE-2025-41223: Configure the web client to use GCM cipher suites. Vulnerability Descriptions CVE-2025-52236: Supports insecure encryption algorithms, potentially leading to man-in-the-middle attacks or communication tampering. CVE-2025-41222: Improper handling of malformed TLS handshake messages, potentially causing a denial-of-service. CVE-2025-41223: Uses TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 cipher suite in CBC mode, which may be exploited to compromise the integrity and confidentiality of encrypted communications. CVE-2025-41224: Interface access restrictions are not fully enforced, potentially allowing unauthorized SSH access.

Goal Reached Thanks to every supporter — we hit 100%!

Rockwell RUGGEDCOM ROS Vulnerability Advisory: CVE-2025-52236, CVE-2025-41222-4