Siemens RUGGEDCOM ROX II
RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40761US | —OT elevated | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All ve… | ||||
references
External citations — patches, advisories, analysis.
- SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II - CSAF Versionself
- SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II - HTML Versionself
- ICS Advisory ICSA-25-226-20 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-226-20 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (22)
- MitigationRUGGEDCOM ROX MX5000
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX MX5000RE
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1400
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983826/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1500
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1501
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1510
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1511
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1512
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1524
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1536
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX5000
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details
- No fix availableRUGGEDCOM ROX MX5000
Currently no fix is available
- No fix availableRUGGEDCOM ROX MX5000RE
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1400
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1500
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1501
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1510
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1511
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1512
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1524
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1536
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX5000
Currently no fix is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan