Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Siemens Component: Ruggedcom Rox Ii Firmware Clear all filters
TI-2024-37690 CVE-2024-56840 · GHSA-7jwp-5g38-77m9

Injection in Siemens RUGGEDCOM ROX MX5000

Priority LOW 36

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00637 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37689 CVE-2024-56839 · GHSA-4xh8-gf5r-5x5p

Injection in Siemens RUGGEDCOM ROX MX5000

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00637 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37688 CVE-2024-56838 · GHSA-7g84-v2xm-86jp

Injection in Siemens RUGGEDCOM ROX MX5000

Priority LOW 39

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00391 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37687 CVE-2024-56837 · GHSA-qv88-4mhc-fr44

Command injection in Siemens RUGGEDCOM ROX MX5000

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00517 Published 2025-12-09 Fixed in V2.17.0 CWE-77
TI-2024-37686 CVE-2024-56836 · GHSA-fv2q-3g76-r9cg

Command injection in Siemens RUGGEDCOM ROX MX5000

Priority LOW 36

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00433 Published 2025-12-09 Fixed in V2.17.0 CWE-77
TI-2024-37685 CVE-2024-56835 · GHSA-477c-gmpf-4vgp

Injection in Siemens RUGGEDCOM ROX MX5000

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00507 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2018-03924 CVE-2018-5391 · GHSA-p6x5-xg7h-fj5h

Uncontrolled resource consumption in Linux Kernel

Priority MEDIUM 57

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.32445 Published 2018-09-06 Partial fix CWE-400
TI-2018-03914 CVE-2018-5381 · GHSA-g4qp-j7fc-2xcf

Infinite loop in Quagga bgpd

Priority MEDIUM 56

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.30162 Published 2018-02-19 Partial fix · 1.2.3 CWE-228
TI-2018-03913 CVE-2018-5380 · GHSA-265f-c4jh-jcfq

Out-of-bounds read in Quagga bgpd

Priority LOW 36

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.14836 Published 2018-02-19 Partial fix · 1.2.3 CWE-125
TI-2018-03912 CVE-2018-5379 · GHSA-5prq-47x2-38gv

Double free in Quagga bgpd

Priority HIGH 69

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.38454 Published 2018-02-19 Partial fix · 1.2.3 CWE-415
TI-2015-04662 CVE-2015-5537 · GHSA-gmxw-f223-9jx2

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does…

Priority LOW 22

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01139 Published 2015-08-03 No fix listed CWE-312