Siemens RUGGEDCOM ROX II
RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40761US | —OT erhöht | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All ve… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II - CSAF Versionself
- SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II - HTML Versionself
- ICS Advisory ICSA-25-226-20 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-226-20 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (22)
- MitigationRUGGEDCOM ROX MX5000
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX MX5000RE
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1400
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983826/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1500
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1501
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1510
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1511
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1512
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1524
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX1536
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983829/ Sec. 5.9.3 for more details
- MitigationRUGGEDCOM ROX RX5000
Ensure a secure boot password is set as described in the configuration manual to prevent unauthorized access to BIST mode. See https://support.industry.siemens.com/cs/document/109983832/ Sec. 5.9.3 for more details
- Kein Fix verfügbarRUGGEDCOM ROX MX5000
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX MX5000RE
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1400
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1500
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1501
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1510
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1511
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1512
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1524
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1536
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX5000
Currently no fix is available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan