Skip to content
fr Sign in
8.8 High

CVE-2020-28398 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All…

Description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The CLI feature in the web interface of affected devices is vulnerable to cross-site request forgery (CSRF). This could allow an attacker to read or modify the device configuration by tricking an authenticated legitimate user into accessing a malicious link.

Affected products and versions

Product Affected versions Fixed in
RUGGEDCOM ROX MX5000 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX MX5000RE 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1400 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1500 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1501 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1510 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1511 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1512 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX1524 2.16 earliest → < 2.16.0 2.16.0
Show the 13 other branches
Product Affected versions Fixed in
RUGGEDCOM ROX RX1536 2.16 earliest → < 2.16.0 2.16.0
RUGGEDCOM ROX RX5000 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_mx5000 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_mx5000re 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1400 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1500 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1501 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1510 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1511 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1512 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1524 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx1536 2.16 earliest → < 2.16.0 2.16.0
ruggedcom_rox_rx5000 2.16 earliest → < 2.16.0 2.16.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of RUGGEDCOM ROX MX5000

The 91 CVEs of RUGGEDCOM ROX MX5000 →
CVE-2025-40949 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All… 9.1 Critical CVE-2025-40948 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All… 6.8 Medium CVE-2025-40947 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All… 7.5 High CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Not rated
Track this CVE