AND
     OR
          *cpe:2.3:o:siemens:ruggedcom_rst2428p_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.0
     OR
          cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:*

OR
          *cpe:2.3:a:ibm:vios:*:*:*:*:*:*:*:* versions from (including) 4.1.0 up to (excluding) 4.1.1.30
          *cpe:2.3:a:ibm:vios:4.1.2.0:*:*:*:*:*:*:*
          *cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:* versions from (including) 7.2.5 up to (excluding) 7.2.5.12
          *cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:* versions from (including) 7.3.2 up to (excluding) 7.3.3.3
          *cpe:2.3:o:ibm:aix:7.3.4:*:*:*:*:*:*:*

OR
          *cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:* versions up to (excluding) 2.15.2

VulDB: https://drive.google.com/file/d/1woIeYVcSQB_NwfEhaVnX6MedpWJ_nqWl/view?usp=drive_link Types: Broken Link

VulDB: https://gitlab.gnome.org/GNOME/libxml2/-/issues/958 Types: Exploit, Issue Tracking, Third Party Advisory

VulDB: https://gitlab.gnome.org/GNOME/libxml2/-/issues/958#note_2505853 Types: Exploit, Issue Tracking, Third Party Advisory

VulDB: https://vuldb.com/?ctiid.319228 Types: Permissions Required, Third Party Advisory

VulDB: https://vuldb.com/?id.319228 Types: Permissions Required, Third Party Advisory

VulDB: https://vuldb.com/?submit.622285 Types: Permissions Required, Third Party Advisory

siemens-SADP: https://cert-portal.siemens.com/productcert/html/ssa-253495.html Types: Third Party Advisory

[{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","lessThan":"V4.0","versionType":"custom","status":"affected"}]}]

{"timestamp":"2025-08-08T17:04:09.914830Z","id":"CVE-2025-8732","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"n/a","product":"libxml2","modules":["xmlcatalog"],"versions":[{"version":"2.14.0","status":"affected"},{"version":"2.14.1","status":"affected"},{"version":"2.14.2","status":"affected"},{"version":"2.14.3","status":"affected"},{"version":"2.14.4","status":"affected"},{"version":"2.14.5","status":"affected"}]}]

https://cert-portal.siemens.com/productcert/html/ssa-253495.html

4.8

1.9

disputed

A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the component xmlcatalog. The manipulation leads to uncontrolled recursion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The code maintainer explains, that "[t]he issue can only be triggered with untrusted SGML catalogs and it makes absolutely no sense to use untrusted catalogs. I also doubt that anyone is still using SGML catalogs at all."

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

(AV:L/AC:L/Au:S/C:N/I:N/A:P)

CWE-404

CWE-674

https://drive.google.com/file/d/1woIeYVcSQB_NwfEhaVnX6MedpWJ_nqWl/view?usp=drive_link

https://gitlab.gnome.org/GNOME/libxml2/-/issues/958

https://gitlab.gnome.org/GNOME/libxml2/-/issues/958#note_2505853

https://vuldb.com/?ctiid.319228

https://vuldb.com/?id.319228

https://vuldb.com/?submit.622285