SSA-081142: Arbitrary Code Execution Vulnerability in Ruggedcom Rox Before 2.17.1
Ruggedcom Rox contains an input validation vulnerability in the Scheduler functionality that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40949US | — | — | ||
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1)… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (11)
- BehobenRUGGEDCOM ROX MX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX MX5000RE
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1400
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1500
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1501
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1510
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1511
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1512
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1524
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX1536
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/ - BehobenRUGGEDCOM ROX RX5000
Update to V2.17.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/110002017/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan