SSA-665108: Arbitrary File Upload Vulnerability in RUGGEDCOM ROX II
RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files onto the filesystem of the devices. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-33023US | — | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All ve… | ||||
references
External citations — patches, advisories, analysis.
remediations (22)
- MitigationRUGGEDCOM ROX MX5000
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX MX5000RE
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1400
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1500
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1501
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1510
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1511
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1512
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1524
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1536
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX5000
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- No fix availableRUGGEDCOM ROX MX5000
Currently no fix is available
- No fix availableRUGGEDCOM ROX MX5000RE
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1400
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1500
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1501
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1510
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1511
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1512
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1524
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX1536
Currently no fix is available
- No fix availableRUGGEDCOM ROX RX5000
Currently no fix is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan