https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:54:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05701 bdu:2024-05701 https://cve.radiocsirt.org/vuln/bdu:2024-05701 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0552 certfr-2024-avi-0552 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0552 https://cve.radiocsirt.org/vuln/cnvd-2024-31236 cnvd-2024-31236 https://cve.radiocsirt.org/vuln/cnvd-2024-31236 https://cve.radiocsirt.org/vuln/euvd-2026-251104 EUVD-2026-251104 https://cve.radiocsirt.org/vuln/euvd-2026-251104 https://cve.radiocsirt.org/vuln/fkie_cve-2023-52238 <p>A vulnerability has been identified in RUGGEDCOM RST2228 (All versions &lt; V5.9.0), RUGGEDCOM RST2228P (All versions &lt; V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients.</p> <p>A vulnerability has been identified in RUGGEDCOM RST2228 (All versions &lt; V5.9.0), RUGGEDCOM RST2228P (All versions &lt; V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-52238 https://cve.radiocsirt.org/vuln/ghsa-jfvv-8342-x746 <p>A vulnerability has been identified in RUGGEDCOM RST2228 (All versions &lt; V5.9.0), RUGGEDCOM RST2228P (All versions &lt; V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients.</p> <p>A vulnerability has been identified in RUGGEDCOM RST2228 (All versions &lt; V5.9.0), RUGGEDCOM RST2228P (All versions &lt; V5.9.0). The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients.</p> https://cve.radiocsirt.org/vuln/ghsa-jfvv-8342-x746 https://cve.radiocsirt.org/vuln/gsd-2023-52238 gsd-2023-52238 https://cve.radiocsirt.org/vuln/gsd-2023-52238 https://cve.radiocsirt.org/vuln/icsa-24-193-06 <p>The web server of the affected devices allow a low privileged user to access hashes and password salts of all system&#39;s users, including admin users. An attacker could use the obtained information to brute force the passwords offline. The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients. The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system. In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability.</p> <p>The web server of the affected devices allow a low privileged user to access hashes and password salts of all system&#39;s users, including admin users. An attacker could use the obtained information to brute force the passwords offline. The web server of the affected systems leaks the MACSEC key in clear text to a logged in user. An attacker with the credentials of a low privileged user could retrieve the MACSEC key and access (decrypt) the ethernet frames sent by authorized recipients. The affected products with IP forwarding enabled wrongly make available certain remote services in non-managed VLANs, even if these services are not intentionally activated. An attacker could leverage this vulnerability to create a remote shell to the affected system. In some configurations the affected products wrongly enable the Modbus service in non-managed VLANS. Only serial devices are affected by this vulnerability.</p> https://cve.radiocsirt.org/vuln/icsa-24-193-06