Description
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V2.17.0), RUGGEDCOM ROX RX1501 (All versions < V2.17.0), RUGGEDCOM ROX RX1510 (All versions < V2.17.0), RUGGEDCOM ROX RX1511 (All versions < V2.17.0), RUGGEDCOM ROX RX1512 (All versions < V2.17.0), RUGGEDCOM ROX RX1524 (All versions < V2.17.0), RUGGEDCOM ROX RX1536 (All versions < V2.17.0), RUGGEDCOM ROX RX5000 (All versions < V2.17.0). During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | RUGGEDCOM ROX MX5000 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX MX5000RE | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1400 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1500 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1501 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1510 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1511 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1512 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1524 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX1536 | < V2.17.0 | V2.17.0 |
| Siemens | RUGGEDCOM ROX RX5000 | < V2.17.0 | V2.17.0 |
Advisories 3
- SSA-912274 SSA-912274: Multiple Vulnerabilities in RUGGEDCOM ROX Before V2.17 Siemens ProductCERT · Jan 13, 2026
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- ICSA-26-015-11 Siemens RUGGEDCOM ROX II CISA ICS & IT advisories · Dec 9, 2025