vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-37209

MEDIUM
6.7
CVSS Score
Published: March 8, 2022 at 12:00 AM UTC
Updated: June 17, 2026 at 04:00 AM UTC
60 products affected across 1 vendorRUGGEDCOM RosRuggedcom Rmc20Ruggedcom Rmc40

Using RUGGEDCOM i800 by Siemens?

Get instant alerts when new vulnerabilities affect RUGGEDCOM i800 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.7
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.8), RUGGEDCOM i801 (All versions < V4.3.8), RUGGEDCOM i802 (All versions < V4.3.8), RUGGEDCOM i803 (All versions < V4.3.8), RUGGEDCOM M2100 (All versions < V4.3.8), RUGGEDCOM M2200 (All versions < V4.3.8), RUGGEDCOM M969 (All versions < V4.3.8), RUGGEDCOM RMC30 (All versions < V4.3.8), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.8), RUGGEDCOM RMC8388 V5.X (All versions < V5.7.0), RUGGEDCOM RP110 (All versions < V4.3.8), RUGGEDCOM RS1600 (All versions < V4.3.8), RUGGEDCOM RS1600F (All versions < V4.3.8), RUGGEDCOM RS1600T (All versions < V4.3.8), RUGGEDCOM RS400 (All versions < V4.3.8), RUGGEDCOM RS401 (All versions < V4.3.8), RUGGEDCOM RS416 (All versions < V4.3.8), RUGGEDCOM RS416P (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.7.0), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.8), RUGGEDCOM RS416v2 V5.X (All versions < V5.7.0), RUGGEDCOM RS8000 (All versions < V4.3.8), RUGGEDCOM RS8000A (All versions < V4.3.8), RUGGEDCOM RS8000H (All versions < V4.3.8), RUGGEDCOM RS8000T (All versions < V4.3.8), RUGGEDCOM RS900 (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900G (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RS900GP (All versions < V4.3.8), RUGGEDCOM RS900L (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-GETS-XX (All versions < V4.3.8), RUGGEDCOM RS900M-STND-C01 (All versions < V4.3.8), RUGGEDCOM RS900M-STND-XX (All versions < V4.3.8), RUGGEDCOM RS900W (All versions < V4.3.8), RUGGEDCOM RS910 (All versions < V4.3.8), RUGGEDCOM RS910L (All versions < V4.3.8), RUGGEDCOM RS910W (All versions < V4.3.8), RUGGEDCOM RS920L (All versions < V4.3.8), RUGGEDCOM RS920W (All versions < V4.3.8), RUGGEDCOM RS930L (All versions < V4.3.8), RUGGEDCOM RS930W (All versions < V4.3.8), RUGGEDCOM RS940G (All versions < V4.3.8), RUGGEDCOM RS969 (All versions < V4.3.8), RUGGEDCOM RSG2100 (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2100P (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.8), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.7.0), RUGGEDCOM RSG2200 (All versions < V4.3.8), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2288 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300 V5.X (All versions < V5.7.0), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.8), RUGGEDCOM RSG2300P V5.X (All versions < V5.7.0), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.8), RUGGEDCOM RSG2488 V5.X (All versions < V5.7.0), RUGGEDCOM RSG907R (All versions < V5.7.0), RUGGEDCOM RSG908C (All versions < V5.7.0), RUGGEDCOM RSG909R (All versions < V5.7.0), RUGGEDCOM RSG910C (All versions < V5.7.0), RUGGEDCOM RSG920P V4.X (All versions < V4.3.8), RUGGEDCOM RSG920P V5.X (All versions < V5.7.0), RUGGEDCOM RSL910 (All versions < V5.7.0), RUGGEDCOM RST2228 (All versions < V5.7.0), RUGGEDCOM RST2228P (All versions < V5.7.0), RUGGEDCOM RST916C (All versions < V5.7.0), RUGGEDCOM RST916P (All versions < V5.7.0). The SSH server on affected devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

RUGGEDCOM Ros· Siemens
95%
All versions
siemens-ruggedcom-i800 (environment) · siemens-ruggedcom-i801 (environment) · siemens-ruggedcom-i802 (environment) · siemens-ruggedcom-i803 (environment) · siemens-ruggedcom-m2100 (environment) · siemens-ruggedcom-m2200 (environment) · siemens-ruggedcom-m969 (environment) · siemens-ruggedcom-rmc (same device) · siemens-ruggedcom-rmc20 (same device) · siemens-ruggedcom-rmc30 (same device) · siemens-ruggedcom-rmc40 (same device) · siemens-ruggedcom-rmc41 (same device) · siemens-ruggedcom-rmc8388 (same device) · siemens-ruggedcom-rp110 (same device) · siemens-ruggedcom-rs400 (same device) · siemens-ruggedcom-rs401 (same device) · siemens-ruggedcom-rs416 (same device) · siemens-ruggedcom-rs416v2 (same device) · siemens-ruggedcom-rs8000 (same device) · siemens-ruggedcom-rs8000a (same device) · siemens-ruggedcom-rs8000h (same device) · siemens-ruggedcom-rs8000t (same device) · siemens-ruggedcom-rs900 (same device) · siemens-ruggedcom-rs900g (same device) · siemens-ruggedcom-rs900gp (same device) · siemens-ruggedcom-rs900l (same device) · siemens-ruggedcom-rs900w (same device) · siemens-ruggedcom-rs910 (same device) · siemens-ruggedcom-rs910l (same device) · siemens-ruggedcom-rs910w (same device) · siemens-ruggedcom-rs920l (same device) · siemens-ruggedcom-rs920w (same device) · siemens-ruggedcom-rs930l (same device) · siemens-ruggedcom-rs930w (same device) · siemens-ruggedcom-rs940g (same device) · siemens-ruggedcom-rs969 (same device) · siemens-ruggedcom-rsg2100 (same device) · siemens-ruggedcom-rsg2100p (same device) · siemens-ruggedcom-rsg2200 (same device) · siemens-ruggedcom-rsg2288 (same device) · siemens-ruggedcom-rsg2300 (same device) · siemens-ruggedcom-rsg2300p (same device) · siemens-ruggedcom-rsg2488 (same device) · siemens-ruggedcom-rsg907r (same device) · siemens-ruggedcom-rsg908c (same device) · siemens-ruggedcom-rsg909r (same device) · siemens-ruggedcom-rsg910c (same device) · siemens-ruggedcom-rsg920p (same device) · siemens-ruggedcom-rsl910 (same device) · siemens-ruggedcom-rst2228 (same device) · siemens-ruggedcom-rst2228p (same device) · siemens-ruggedcom-rst916c (same device) · siemens-ruggedcom-rst916p (same device)
RUGGEDCOM i800· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM i801· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM i802· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM i803· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM M2100· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM M2200· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM M969· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM RMC30· Siemens
60%
v < V4.3.8
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
RUGGEDCOM RMC8388· Siemens
60%
v < V4.3.8v < V5.7.0
Affected range stops below V4.3.8, so it looks safe — our inference, not a vendor statement
Affected range stops below V5.7.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

Source: [email protected]
https://cert-portal.siemens.com/productcert/html/ssa-764417.html
Vendor Advisory
Source: [email protected]
https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.7MEDIUMsiemens
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-326CWE-311

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card