SSA-973901: Arbitrary File Disclosure Vulnerability in Ruggedcom Rox Before V2.17.1
Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating system's filesystem. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40948US | — | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1)… | ||||
references
External citations — patches, advisories, analysis.
remediations (11)
- FixedRUGGEDCOM ROX MX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX MX5000RE
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1400
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1500
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1501
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1510
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1511
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1512
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1524
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX1536
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - FixedRUGGEDCOM ROX RX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan