SSA-078743: Remote Code Execution Vulnerability in Ruggedcom Rox Before V2.17.1
Ruggedcom Rox contains an input validation vulnerability in the feature key installation process that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40947US | — | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1)… | ||||
references
External citations — patches, advisories, analysis.
remediations (11)
- FixedRUGGEDCOM ROX MX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX MX5000RE
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1400
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1500
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1501
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1510
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1511
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1512
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1524
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1536
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan