Siemens RUGGEDCOM RST2428P Information Exposure Vulnerability

An information exposure vulnerability has been identified in the Siemens RUGGEDCOM RST2428P switch model (6GK6242-6PA00), affecting all versions. The vulnerability allows an unauthenticated attacker to access certain non-critical device information, potentially leading to a breach of confidentiality.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data, causing a breach of confidentiality.

Remediation

Siemens currently has no fix available for this vulnerability. However, it is recommended to create a firewall rule that blocks the UDP ports used by the device for discovery protocols, such as LLDP, DCP, and MRP, if those ports are not required. Additionally, follow Siemens' operational guidelines for Industrial Security to protect network access to the device.