High SSA-150692 3 CVEs

SSA-150692: Multiple Vulnerabilities in RUGGEDCOM ROX

Published Sep 14, 2021 · Updated Oct 12, 2021 · Revision 2

Vendor: Siemens Product: RUGGEDCOM ROX MX5000 Product: RUGGEDCOM ROX RX1400 Product: RUGGEDCOM ROX RX1500 Product: RUGGEDCOM ROX RX1501 Product: RUGGEDCOM ROX RX1510 Product: RUGGEDCOM ROX RX1511 Product: RUGGEDCOM ROX RX1512 Product: RUGGEDCOM ROX RX1524 Product: RUGGEDCOM ROX RX1536 Product: RUGGEDCOM ROX RX5000

Summary

Multiple vulnerabilities in RUGGEDCOM ROX devices have been detected, ranging from command injection to filesystem traversal. An attacker could exploit these to gain root access to the affected devices.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

Unscored —

CVE-2021-37173

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All version…

Siemens RUGGEDCOM ROX MX5000 RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37174

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All version…

Siemens RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 RUGGEDCOM ROX RX1536 ICS / OT

Sep 14, 2021
Unscored —

CVE-2021-37175

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All version…

Siemens RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 RUGGEDCOM ROX MX5000 ICS / OT

Sep 14, 2021

Revision history

2021-10-12 #2
Improvement of CVE description
2021-09-14 #1
Publication Date

References

SSA-150692: Multiple Vulnerabilities in RUGGEDCOM ROX - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf
SSA-150692: Multiple Vulnerabilities in RUGGEDCOM ROX - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-150692.txt