CVE-2025-40591 - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5)

Back Back to CVE browser

HIGH

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5)

Published Jun 10, 2025

8.3

HIGH

CVSS 4.0

EPSS 0.67%

Description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'Log Viewers' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute the 'tail' command with root privileges and disclose contents of all files in the filesystem.

Affected products

Vendor Siemens Product Ruggedcom Rox Mx5000 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Mx5000re Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1400 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1500 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1501 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1510 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1511 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1512 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1524 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx1536 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5
Vendor Siemens Product Ruggedcom Rox Rx5000 Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <V2.16.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siemens

Ruggedcom Rox Mx5000

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Mx5000re

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1400

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1500

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1501

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1510

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1511

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1512

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1524

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx1536

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Siemens

Ruggedcom Rox Rx5000

n/a

Version	Status	Constraints
0	affected	<V2.16.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-602

References (2)

Link	Providers	Tags
https://cert-portal.siemens.com/productcert/html/ssa-301229.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-17713		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner siemens

Published Jun 10, 2025

Updated Jun 10, 2025

Reserved Apr 16, 2025

Link CVE-2025-40591

CISA Vulnrichment

Updated Jun 10, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-40591

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-40591

ENISA EUVD

Assigner siemens

Published Jun 10, 2025

Updated Jun 10, 2025

Exploited since n/a

Link EUVD-2025-17713

EUVD-2025-17713