CVE-2026-41918
- State
- Published
- Severity
- 5.9 Medium
- Published
- Jun 2, 2026
- Updated
- Jun 2, 2026
- Reserved
- Apr 22, 2026
Description
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenticated attacker to access sensitive data stored in the browser.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.9 Medium | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | siemens |
| 3.1 | 5.7 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N | siemens |
Weaknesses
- CWE-525 Use of Web Browser Cache Containing Sensitive Information
Affected Products
| Product | Versions |
|---|---|
RUGGEDCOM RST2428PSiemens |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.