Detections
Analytics
Siemens RUGGEDCOM RST2428P NULL Pointer Dereference (CVE-2026-24515)
low Tenable OT Security Plugin ID 505405
Synopsis
The remote OT asset is affected by a vulnerability.Description
In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://cert-portal.siemens.com/productcert/html/ssa-253495.html
https://support.industry.siemens.com/cs/ww/en/view/110002573/
Plugin Details
Severity: Low
ID: 505405
File Name: tenable_ot_siemens_CVE-2026-24515.nasl
Version: 1.1
Type: Remote
Family: Tenable.ot
Published: 6/18/2026
Updated: 6/18/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 2.9
CVSS v3
Risk Factor: Low
Base Score: 2.9
Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Information
CPE: cpe:/o:siemens:ruggedcom_rst2428p_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 6/2/2026
Vulnerability Publication Date: 1/23/2026
Reference Information
CVE: CVE-2026-24515
CWE: 476