Riskcovery

CVE-2021-37209

State
Published
Severity
6.7 Medium
Published
Mar 8, 2022
Updated
Aug 12, 2025
Reserved
Jul 21, 2021

Read the record on cve.org

Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default.

This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

Scores

CVSSScoreVectorSource
3.16.7 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H/E:P/RL:U/RC:Csiemens

Weaknesses

  • CWE-326 Inadequate Encryption Strength

Affected Products

ProductVersions
RUGGEDCOM i800Siemens
  • before V4.3.8Affected
RUGGEDCOM i801Siemens
  • before V4.3.8Affected
RUGGEDCOM i802Siemens
  • before V4.3.8Affected
RUGGEDCOM i803Siemens
  • before V4.3.8Affected
RUGGEDCOM M2100Siemens
  • before V4.3.8Affected
RUGGEDCOM M2200Siemens
  • before V4.3.8Affected
RUGGEDCOM M969Siemens
  • before V4.3.8Affected
RUGGEDCOM RMC30Siemens
  • before V4.3.8Affected
RUGGEDCOM RMC8388 V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RMC8388 V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RP110Siemens
  • before V4.3.8Affected
RUGGEDCOM RS1600Siemens
  • before V4.3.8Affected
RUGGEDCOM RS1600FSiemens
  • before V4.3.8Affected
RUGGEDCOM RS1600TSiemens
  • before V4.3.8Affected
RUGGEDCOM RS400Siemens
  • before V4.3.8Affected
RUGGEDCOM RS401Siemens
  • before V4.3.8Affected
RUGGEDCOM RS416Siemens
  • before V4.3.8Affected
RUGGEDCOM RS416PSiemens
  • before V4.3.8Affected
RUGGEDCOM RS416Pv2 V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RS416Pv2 V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RS416v2 V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RS416v2 V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RS8000Siemens
  • before V4.3.8Affected
RUGGEDCOM RS8000ASiemens
  • before V4.3.8Affected
RUGGEDCOM RS8000HSiemens
  • before V4.3.8Affected
RUGGEDCOM RS8000TSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900Siemens
  • before V4.3.8Affected
RUGGEDCOM RS900 (32M) V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900 (32M) V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RS900GSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900G (32M) V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900G (32M) V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RS900GPSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900LSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900M-GETS-C01Siemens
  • before V4.3.8Affected
RUGGEDCOM RS900M-GETS-XXSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900M-STND-C01Siemens
  • before V4.3.8Affected
RUGGEDCOM RS900M-STND-XXSiemens
  • before V4.3.8Affected
RUGGEDCOM RS900WSiemens
  • before V4.3.8Affected
RUGGEDCOM RS910Siemens
  • before V4.3.8Affected
RUGGEDCOM RS910LSiemens
  • before V4.3.8Affected
RUGGEDCOM RS910WSiemens
  • before V4.3.8Affected
RUGGEDCOM RS920LSiemens
  • before V4.3.8Affected
RUGGEDCOM RS920WSiemens
  • before V4.3.8Affected
RUGGEDCOM RS930LSiemens
  • before V4.3.8Affected
RUGGEDCOM RS930WSiemens
  • before V4.3.8Affected
RUGGEDCOM RS940GSiemens
  • before V4.3.8Affected
RUGGEDCOM RS969Siemens
  • before V4.3.8Affected
RUGGEDCOM RSG2100Siemens
  • before V4.3.8Affected
RUGGEDCOM RSG2100 (32M) V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2100 (32M) V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG2100PSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2100P (32M) V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2100P (32M) V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG2200Siemens
  • before V4.3.8Affected
RUGGEDCOM RSG2288 V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2288 V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG2300 V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2300 V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG2300P V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2300P V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG2488 V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG2488 V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG907RSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG908CSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG909RSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG910CSiemens
  • before V5.7.0Affected
RUGGEDCOM RSG920P V4.XSiemens
  • before V4.3.8Affected
RUGGEDCOM RSG920P V5.XSiemens
  • before V5.7.0Affected
RUGGEDCOM RSL910Siemens
  • before V5.7.0Affected
RUGGEDCOM RST2228Siemens
  • before V5.7.0Affected
RUGGEDCOM RST2228PSiemens
  • before V5.7.0Affected
RUGGEDCOM RST916CSiemens
  • before V5.7.0Affected
RUGGEDCOM RST916PSiemens
  • before V5.7.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.