Skip to content
OpenAdvisories
Critical SSA-301229 4 CVEs

SSA-301229: Client-Side Enforcement of Server-Side Security Vulnerabilities in RUGGEDCOM ROX II

Published May 13, 2025 · Updated Nov 11, 2025 · Revision 3

Vendor: Siemens Product: RUGGEDCOM ROX MX5000 Product: RUGGEDCOM ROX MX5000RE Product: RUGGEDCOM ROX RX1400 Product: RUGGEDCOM ROX RX1500 Product: RUGGEDCOM ROX RX1501 Product: RUGGEDCOM ROX RX1510 Product: RUGGEDCOM ROX RX1511 Product: RUGGEDCOM ROX RX1512 Product: RUGGEDCOM ROX RX1524 Product: RUGGEDCOM ROX RX1536 Product: RUGGEDCOM ROX RX5000

Summary

The web interface of RUGGEDCOM ROX II devices contain multiple Client-Side Enforcement of Server-Side Security vulnerabilities that could allow an attacker with a legitimate, highly privileged account on the web interface to get privileged code execution in the underlying OS of the affected products.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 4

Revision history

  1. #3

    Added Humza Ahmand to the acknowledgements

  2. #2

    Added CVE-2025-40591

  3. #1

    Publication Date

References