SSA-094954

csafDEsiemens_psirt

SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II

view advisory published 2025-08-12

RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-40761US—OT elevated—
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All ve…
02

references

External citations — patches, advisories, analysis.

03

remediations (22)

  • MitigationRUGGEDCOM ROX MX5000

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX MX5000RE

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1400

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983826/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1500

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1501

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1510

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1511

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1512

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1524

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX1536

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details

  • MitigationRUGGEDCOM ROX RX5000

    Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details

  • No fix availableRUGGEDCOM ROX MX5000

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX MX5000RE

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1400

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1500

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1501

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1510

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1511

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1512

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1524

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX1536

    Currently no fix is available

  • No fix availableRUGGEDCOM ROX RX5000

    Currently no fix is available

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan