PT-2025-20862 · Siemens · Ruggedcom Rox Mx5000+8

Published

2025-05-13

·

Updated

2025-05-13

·

CVE-2025-33025

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 versions prior to V2.16.5 RUGGEDCOM ROX MX5000RE versions prior to V2.16.5 RUGGEDCOM ROX RX1400 versions prior to V2.16.5 RUGGEDCOM ROX RX1500 versions prior to V2.16.5 RUGGEDCOM ROX RX1501 versions prior to V2.16.5 RUGGEDCOM ROX RX1510 versions prior to V2.16.5 RUGGEDCOM ROX RX1511 versions prior to V2.16.5 RUGGEDCOM ROX RX1512 versions prior to V2.16.5 RUGGEDCOM ROX RX1524 versions prior to V2.16.5 RUGGEDCOM ROX RX1536 versions prior to V2.16.5 RUGGEDCOM ROX RX5000 versions prior to V2.16.5
Description: A vulnerability has been identified in the 'traceroute' tool in the web interface of affected devices, which is vulnerable to command injection due to missing server-side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.
Recommendations: Update RUGGEDCOM ROX MX5000 to version V2.16.5 or later. Update RUGGEDCOM ROX MX5000RE to version V2.16.5 or later. Update RUGGEDCOM ROX RX1400 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1500 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1501 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1510 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1511 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1512 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1524 to version V2.16.5 or later. Update RUGGEDCOM ROX RX1536 to version V2.16.5 or later. Update RUGGEDCOM ROX RX5000 to version V2.16.5 or later.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

BDU:2025-05547
CVE-2025-33025

Affected Products

Ruggedcom Rox Mx5000
Ruggedcom Rox Rx1400
Ruggedcom Rox Rx1500
Ruggedcom Rox Rx1501
Ruggedcom Rox Rx1510
Ruggedcom Rox Rx1511
Ruggedcom Rox Rx1512
Ruggedcom Rox Rx1524
Ruggedcom Rox Rx1536