CVE record · CVE-2023-24845

Siemens RUGGEDCOM i800: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801…

CVSS 9.1 CriticalCriticalEPSS 0.0069 · 53rd percentile

Critical, because:

CVSS score 9.1: 9.0 or more.

Published by the CVE Program (CNA: siemens) at 8 Aug 2023, 09:20 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Siemens	RUGGEDCOM i800	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i800NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i801	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i801NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i802	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i802NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i803	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM i803NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2100	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2100F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M2100NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2200	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M2200F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M2200NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M969	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM M969F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M969NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC30	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC30NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V5.X	affected before V5.8.0 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388NC V4.X	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388NC V5.X	affected before V5.8.0 custom Other versions: unknown
Siemens	RUGGEDCOM RP110	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RP110NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS1600	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600FNC	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600NC	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600T	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600TNC	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS400	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS400F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS400NC	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS401	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS401NC	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416NC	affected before V4.3.8 custom Other versions: unknown
Siemens	RUGGEDCOM RS416NCv2 V4.X	affected before V4.3.8 custom Other versions: unknown

And 116 more products. The full list is on the CVE record.

Identifiers: CVE-2023-24845
CNA: siemens
Weakness (CWE): CWE-684
Tags: Siemens RUGGEDCOM i800
Siemens RUGGEDCOM i800NC
Siemens RUGGEDCOM i801
Siemens RUGGEDCOM i801NC
Siemens RUGGEDCOM i802
Siemens RUGGEDCOM i802NC
Siemens RUGGEDCOM i803
Siemens RUGGEDCOM i803NC
CWE-684
Published: 8 Aug 2023
Updated: 12 Aug 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
9.1	Critical	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C	CNA (siemens)

CISA KEV Not listed.
EPSS 0.0069, the 53rd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 8 Aug 2023. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.