SSA-599506: Command Injection Vulnerability in RUGGEDCOM ROX
RUGGEDCOM ROX devices are affected by a command injection vulnerability that could allow an attacker with administrative privileges to gain root access. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29560US | high7.2 | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < 2.15.1), RUGGEDCOM ROX MX5000RE (All versions < 2.15.1), RUGGEDCOM ROX RX1400 (All versions < 2.15.1), R… | ||||
references
External citations — patches, advisories, analysis.
remediations (22)
- FixedRUGGEDCOM ROX MX5000
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX MX5000RE
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1400
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1500
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1501
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1510
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1511
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1512
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1524
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX1536
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - FixedRUGGEDCOM ROX RX5000
Update to V2.15.1 or later version
https://support.industry.siemens.com/cs/document/109810800 - WorkaroundRUGGEDCOM ROX MX5000
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX MX5000RE
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1400
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1500
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1501
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1510
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1511
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1512
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1524
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX1536
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
- WorkaroundRUGGEDCOM ROX RX5000
Apply Defense-in-Depth practices to the SSH, Web and NETCONF services on ROX
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan