CVE-2025-40948

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly validate input in the web server's JSON-RPC interface. This could allow an authenticated remote attacker to read arbitrary files from the underlying operating system's filesystem with root privileges.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.3 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-973901.html	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_mx5000re_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_mx5000re:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1524_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1524:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx1536_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx1536:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:*

History

29 Jun 2026, 14:08

Type	Values Removed	Values Added
First Time		Siemens ruggedcom Rox Mx5000re Firmware Siemens ruggedcom Rox Rx1536 Firmware Siemens ruggedcom Rox Rx1510 Firmware Siemens ruggedcom Rox Rx1400 Firmware Siemens ruggedcom Rox Rx1524 Firmware Siemens ruggedcom Rox Rx1500 Siemens ruggedcom Rox Rx1501 Siemens ruggedcom Rox Rx1524 Siemens ruggedcom Rox Mx5000re Siemens ruggedcom Rox Mx5000 Siemens ruggedcom Rox Rx5000 Siemens ruggedcom Rox Mx5000 Firmware Siemens ruggedcom Rox Rx1400 Siemens Siemens ruggedcom Rox Rx1512 Siemens ruggedcom Rox Rx1500 Firmware Siemens ruggedcom Rox Rx1511 Siemens ruggedcom Rox Rx1501 Firmware Siemens ruggedcom Rox Rx1512 Firmware Siemens ruggedcom Rox Rx5000 Firmware Siemens ruggedcom Rox Rx1511 Firmware Siemens ruggedcom Rox Rx1536 Siemens ruggedcom Rox Rx1510
CPE		cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:::::::* cpe:2.3:o:siemens:ruggedcom_rox_rx1501_firmware:::::::: cpe:2.3:o:siemens:ruggedcom_rox_rx1512_firmware:::::::: cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:::::::* cpe:2.3:h:siemens:ruggedcom_rox_rx1524:-:::::::* cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:::::::* cpe:2.3:o:siemens:ruggedcom_rox_rx5000_firmware:::::::: cpe:2.3:h:siemens:ruggedcom_rox_mx5000re:-:::::::* cpe:2.3:o:siemens:ruggedcom_rox_mx5000re_firmware:::::::: cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:::::::* cpe:2.3:o:siemens:ruggedcom_rox_rx1500_firmware:::::::: cpe:2.3:o:siemens:ruggedcom_rox_rx1511_firmware:::::::: cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:::::::* cpe:2.3:o:siemens:ruggedcom_rox_mx5000_firmware:::::::: cpe:2.3:o:siemens:ruggedcom_rox_rx1510_firmware:::::::: cpe:2.3:o:siemens:ruggedcom_rox_rx1400_firmware:::::::: cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:::::::* cpe:2.3:o:siemens:ruggedcom_rox_rx1536_firmware:::::::: cpe:2.3:o:siemens:ruggedcom_rox_rx1524_firmware:::::::: cpe:2.3:h:siemens:ruggedcom_rox_rx1536:-:::::::* cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:::::::* cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:::::::*
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-973901.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-973901.html - Mitigation, Vendor Advisory

12 May 2026, 10:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-12 10:16

Updated : 2026-06-29 14:08

NVD link : CVE-2025-40948

Mitre link : CVE-2025-40948

CVE.ORG link : CVE-2025-40948

JSON object : View

Products Affected

siemens

ruggedcom_rox_mx5000_firmware
ruggedcom_rox_rx1511_firmware
ruggedcom_rox_rx1501
ruggedcom_rox_mx5000re
ruggedcom_rox_rx1536_firmware
ruggedcom_rox_rx1500_firmware
ruggedcom_rox_rx1400
ruggedcom_rox_rx1512
ruggedcom_rox_mx5000re_firmware
ruggedcom_rox_rx1512_firmware
ruggedcom_rox_rx1510
ruggedcom_rox_rx5000
ruggedcom_rox_rx1536
ruggedcom_rox_rx1400_firmware
ruggedcom_rox_rx5000_firmware
ruggedcom_rox_rx1500
ruggedcom_rox_rx1510_firmware
ruggedcom_rox_rx1511
ruggedcom_rox_rx1501_firmware
ruggedcom_rox_rx1524
ruggedcom_rox_rx1524_firmware
ruggedcom_rox_mx5000

CWE

CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

6.8 /10