Siemens Ruggedcom Rox
Ruggedcom Rox contains an input validation vulnerability in the Scheduler functionality that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40949US | — | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1)… | ||||
references
External citations — patches, advisories, analysis.
- SSA-081142: Arbitrary Code Execution Vulnerability in Ruggedcom Rox Before 2.17.1 - CSAF Versionself
- SSA-081142: Arbitrary Code Execution Vulnerability in Ruggedcom Rox Before 2.17.1 - HTML Versionself
- ICS Advisory ICSA-26-134-12 JSONself
- ICS Advisory ICSA-26-134-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (11)
- FixedRUGGEDCOM ROX MX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX MX5000RE
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1400
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1500
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1501
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1510
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1511
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1512
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1524
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1536
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan