CVE record · CVE-2021-42017

Siemens RUGGEDCOM i800: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802…

CVSS 5.9 MediumEPSS 0.0047 · 40th percentile

Published by the CVE Program (CNA: siemens) at 8 Mar 2022, 11:31 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Siemens	RUGGEDCOM i800	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i801	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i802	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i803	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2100	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2100F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M2200	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2200F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M969	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M969F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RMC30	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V5.X	affected before V5.6.0 custom Other versions: unknown
Siemens	RUGGEDCOM RP110	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600F	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600T	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS400	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS400F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS401	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416P	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416PF	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416Pv2 V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416Pv2 V5.X	affected before V5.6.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS416v2 V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416v2 V5.X	affected before V5.6.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS8000	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS8000A	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS8000H	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS8000T	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS900	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS900 (32M) V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS900 (32M) V5.X	affected before V5.6.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS900F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900G	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS900G (32M) V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS900G (32M) V5.X	affected before V5.6.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS900GF	affected before * custom Other versions: unknown

And 50 more products. The full list is on the CVE record.

Identifiers: CVE-2021-42017
CNA: siemens
Weakness (CWE): CWE-358
Tags: Siemens RUGGEDCOM i800
Siemens RUGGEDCOM i801
Siemens RUGGEDCOM i802
Siemens RUGGEDCOM i803
Siemens RUGGEDCOM M2100
Siemens RUGGEDCOM M2100F
Siemens RUGGEDCOM M2200
Siemens RUGGEDCOM M2200F
CWE-358
Published: 8 Mar 2022
Updated: 12 Aug 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.9	Medium	3.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C	CNA (siemens)

CISA KEV Not listed.
EPSS 0.0047, the 40th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 8 Mar 2022. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.