High ICSA-26-015-11 6 CVEs

Siemens RUGGEDCOM ROX II

Published Dec 9, 2025 · Updated Dec 9, 2025

Vendor: Siemens Product: RUGGEDCOM ROX II family

Summary

Devices based on RUGGEDCOM ROX before V2.17 contain multiple high severity vulnerabilities.

Siemens has released a new version for RUGGEDCOM ROX II family and recommends to update to the latest version.

Vulnerabilities 6

High 8.8

CVE-2024-56835

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 ICS / OT

Dec 9, 2025
High 7.5

CVE-2024-56836

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1501 RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 ICS / OT

Dec 9, 2025
High 7.2

CVE-2024-56837

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 ICS / OT

Dec 9, 2025
High 7.2

CVE-2024-56838

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 ICS / OT

Dec 9, 2025
High 7.2

CVE-2024-56839

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 ICS / OT

Dec 9, 2025
High 7.2

CVE-2024-56840

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1400 RUGGEDCOM ROX RX1501 RUGGEDCOM ROX RX1511 ICS / OT

Dec 9, 2025

Revision history

2025-12-09 #1
Publication Date

References

SSA-912274: Multiple Vulnerabilities in RUGGEDCOM ROX Before V2.17 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-912274.html
ICS Advisory ICSA-26-015-11 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-015-11
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b