CVE-2026-41918 MEDIUM

CVE-2026-41918

Vendor Siemens
Product RUGGEDCOM RST2428P
Weakness CWE-525
Published June 2, 2026
Last update June 2, 2026
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when an authenticated user modify specific configurations. This could allow an authenticated attacker to access sensitive data stored in the browser.

Key dates

02Disclosure timeline

June 2, 2026 CVE published
June 2, 2026 Record updated