CVE record · CVE-2025-41222

Improper handling of exceptional conditions in Siemens RUGGEDCOM i800 and others

CVSS 6.9 MediumEPSS 0.0034 · 26th percentile

Published by the CVE Program (CNA: siemens) at 8 Jul 2025, 10:35 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Siemens	RUGGEDCOM i800	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM i801	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM i802	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM i803	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M2100	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M2200	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM M969	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RMC30	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V4.X	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RMC8388 V5.X	affected before V5.10.0 custom Other versions: unknown
Siemens	RUGGEDCOM RP110	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600F	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS1600T	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS400	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS401	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416P	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416Pv2 V4.X	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416Pv2 V5.X	affected before V5.10.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS416v2 V4.X	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS416v2 V5.X	affected before V5.10.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS8000	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS8000A	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS8000H	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS8000T	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900 (32M) V4.X	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900 (32M) V5.X	affected before V5.10.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS900G	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900G (32M) V4.X	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900G (32M) V5.X	affected before V5.10.0 custom Other versions: unknown
Siemens	RUGGEDCOM RS900GP	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900L	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900M-GETS-C01	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900M-GETS-XX	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900M-STND-C01	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900M-STND-XX	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS900W	affected before * custom Other versions: unknown
Siemens	RUGGEDCOM RS910	affected before * custom Other versions: unknown

And 34 more products. The full list is on the CVE record.

Identifiers: CVE-2025-41222
CNA: siemens
Weakness (CWE): CWE-755
Tags: Siemens RUGGEDCOM i800
Siemens RUGGEDCOM i801
Siemens RUGGEDCOM i802
Siemens RUGGEDCOM i803
Siemens RUGGEDCOM M2100
Siemens RUGGEDCOM M2200
Siemens RUGGEDCOM M969
Siemens RUGGEDCOM RMC30
CWE-755
Published: 8 Jul 2025
Updated: 8 Jul 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.3	Medium	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	CNA (siemens)
6.9	Medium	4.0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	CNA (siemens)Used for this record

CISA KEV Not listed.
EPSS 0.0034, the 26th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 8 Jul 2025. New records show when each source confirmed them.

Sources

References from the CNA

cert-portal.siemens.com/productcert/html/ssa-083019.html

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.