Detections
Analytics
Siemens RUGGEDCOM RST2428P User Interface (UI) Misrepresentation of Critical Information (CVE-2025-46394)
low Tenable OT Security Plugin ID 505439
Synopsis
The remote OT asset is affected by a vulnerability.Description
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
Refer to the vendor advisory.See Also
https://cert-portal.siemens.com/productcert/html/ssa-253495.html
https://support.industry.siemens.com/cs/ww/en/view/110002573/
Plugin Details
Severity: Low
ID: 505439
File Name: tenable_ot_siemens_CVE-2025-46394.nasl
Version: 1.2
Type: Remote
Family: Tenable.ot
Published: 6/18/2026
Updated: 6/20/2026
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Low
Score: 3.2
Percentile: 51.08
CVSS v2
Risk Factor: Low
Base Score: 1.7
Temporal Score: 1.3
Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:P/A:N
CVSS Score Source: CVE-2025-46394
CVSS v3
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.9
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:siemens:ruggedcom_rst2428p_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Ease: No known exploits are available
Patch Publication Date: 6/2/2026
Vulnerability Publication Date: 4/23/2025
Reference Information
CVE: CVE-2025-46394
CWE: 451