7.6
High
CVE-2025-40761 A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions),…
Description
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All versions), RUGGEDCOM ROX RX1501 (All versions), RUGGEDCOM ROX RX1510 (All versions), RUGGEDCOM ROX RX1511 (All versions), RUGGEDCOM ROX RX1512 (All versions), RUGGEDCOM ROX RX1524 (All versions), RUGGEDCOM ROX RX1536 (All versions), RUGGEDCOM ROX RX5000 (All versions). Affected devices do not properly limit access through its Built-In-Self-Test (BIST) mode. This could allow an attacker with physical access to the serial interface to bypass authentication and get access to a root shell on the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM ROX MX5000 | Versions not published | |
| RUGGEDCOM ROX MX5000RE | Versions not published | |
| RUGGEDCOM ROX RX1400 | Versions not published | |
| RUGGEDCOM ROX RX1500 | Versions not published | |
| RUGGEDCOM ROX RX1501 | Versions not published | |
| RUGGEDCOM ROX RX1510 | Versions not published | |
| RUGGEDCOM ROX RX1511 | Versions not published | |
| RUGGEDCOM ROX RX1512 | Versions not published | |
| RUGGEDCOM ROX RX1524 | Versions not published |
Show the 2 other branches Hide the 2 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| RUGGEDCOM ROX RX1536 | Versions not published | |
| RUGGEDCOM ROX RX5000 | Versions not published |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of RUGGEDCOM ROX MX5000
The 91 CVEs of RUGGEDCOM ROX MX5000 →
CVE-2025-40949
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All…
9.1
Critical
CVE-2025-40948
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All…
6.8
Medium
CVE-2025-40947
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All…
7.5
High
CVE-2025-15467
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can…
Not rated