Siemens RUGGEDCOM ROX II
RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files onto the filesystem of the devices. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-33023US | — | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All ve… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-665108: Arbitrary File Upload Vulnerability in RUGGEDCOM ROX II - CSAF Versionself
- SSA-665108: Arbitrary File Upload Vulnerability in RUGGEDCOM ROX II - HTML Versionself
- ICS Advisory ICSA-25-226-14 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-226-14 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (22)
- MitigationRUGGEDCOM ROX MX5000
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX MX5000RE
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1400
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1500
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1501
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1510
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1511
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1512
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1524
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX1536
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- MitigationRUGGEDCOM ROX RX5000
Restrict highly privileged access to the web interface to authorized and trusted personnel only
- Kein Fix verfügbarRUGGEDCOM ROX MX5000
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX MX5000RE
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1400
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1500
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1501
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1510
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1511
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1512
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1524
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX1536
Currently no fix is available
- Kein Fix verfügbarRUGGEDCOM ROX RX5000
Currently no fix is available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan