PT-2025-32658 · Ruggedcom · Ruggedcom Rox Rx1510+8

Published

2025-08-12

·

Updated

2025-09-08

·

CVE-2025-40761

CVSS v3.1

7.6

High

VectorAV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM ROX MX5000 (affected versions not specified) RUGGEDCOM ROX MX5000RE (affected versions not specified) RUGGEDCOM ROX RX1400 (affected versions not specified) RUGGEDCOM ROX RX1500 (affected versions not specified) RUGGEDCOM ROX RX1501 (affected versions not specified) RUGGEDCOM ROX RX1510 (affected versions not specified) RUGGEDCOM ROX RX1511 (affected versions not specified) RUGGEDCOM ROX RX1512 (affected versions not specified) RUGGEDCOM ROX RX1524 (affected versions not specified) RUGGEDCOM ROX RX1536 (affected versions not specified) RUGGEDCOM ROX RX5000 (affected versions not specified)
Description: The affected devices do not properly limit access through its Built-In-Self-Test (BIST) mode. This could allow an attacker with physical access to the serial interface to bypass authentication and gain access to a root shell on the device.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2025-10716
CVE-2025-40761

Affected Products

Ruggedcom Rox Mx5000
Ruggedcom Rox Rx1400
Ruggedcom Rox Rx1500
Ruggedcom Rox Rx1501
Ruggedcom Rox Rx1510
Ruggedcom Rox Rx1511
Ruggedcom Rox Rx1512
Ruggedcom Rox Rx1524
Ruggedcom Rox Rx1536