PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-50290 Siemens CVE debrief

CVE-2024-50290 is a medium-severity vulnerability in the Linux kernel's cx24116 media driver, affecting Siemens industrial networking products. The flaw involves an integer underflow in Signal-to-Noise Ratio (SNR) calculations when register reads fail, returning negative values that cause arithmetic underflow. This local attack vector requires low privileges and no user interaction, with high availability impact but no confidentiality or integrity impact. The vulnerability was identified through Coverity static analysis and affects Siemens RUGGEDCOM RST2428P and SCALANCE switch families running SINEC OS. Siemens has released firmware updates to address this issue.

Vendor
Siemens
Product
RUGGEDCOM RST2428P (6GK6242-6PA00)
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2026-02-25
Advisory published
2025-08-12
Advisory updated
2026-02-25

Who should care

Organizations operating Siemens RUGGEDCOM RST2428P industrial routers or SCALANCE XC/XR/XCM/XRM/XCH/XRH switch families in industrial control system environments. Security teams responsible for OT/ICS infrastructure, network administrators managing industrial Ethernet switches, and compliance personnel tracking CVE remediation in critical infrastructure sectors.

Technical summary

The vulnerability exists in the cx24116 DVB-S/S2 demodulator driver within the Linux kernel media subsystem. When SNR register reads fail, the driver returns a negative error code that is subsequently used in unsigned arithmetic operations, causing an integer underflow. This results in incorrect SNR calculations and potential system instability. The CVSS 3.1 score of 5.5 reflects local attack vector, low attack complexity, low privileges required, no user interaction, and high availability impact with no confidentiality or integrity effects. The flaw was detected through Coverity static analysis. Affected Siemens products incorporate this vulnerable kernel component in their SINEC OS firmware.

Defensive priority

medium

Recommended defensive actions

  • Apply vendor firmware updates: Update RUGGEDCOM RST2428P and SCALANCE XCM-/XRM-/XCH-/XRH-300 family devices to firmware V3.2 or later per Siemens guidance
  • For SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, consult Siemens ProductCERT advisory SSA-355557 for specific configuration guidance and available updates
  • Implement defense-in-depth controls for industrial control systems per CISA recommended practices
  • Restrict local access to affected devices to authorized personnel only
  • Monitor for anomalous system behavior or unexpected device resets that may indicate exploitation attempts

Evidence notes

Vulnerability description indicates Coverity static analysis identified the flaw. CVSS 3.1 vector confirms local attack vector with low attack complexity. Siemens ProductCERT advisory SSA-355557 provides remediation guidance. CISA ICS advisory ICSA-25-226-07 republished with corrections through February 2026.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-50290 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-50290

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-50290 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-50290

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-07.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/csaf/ssa-355557.json

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://cert-portal.siemens.com/productcert/html/ssa-355557.html

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.