Details of VAR-202605-1680

ID

VAR-202605-1680

CVE

CVE-2025-40949

TITLE

Siemens' RUGGEDCOM ROX MX5000 Firmware and other multiple products OS Command injection vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2026-021628

DESCRIPTION

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly sanitize user-supplied input in the Scheduler functionality of the Web UI, allowing commands to be injected into the task scheduling backend. This could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. root It may be possible to execute it with the appropriate permissions.- All information handled by the software may be leaked to external parties. - All information handled by the software may be overwritten. - The software may completely shut down

Trust: 1.62

sources: NVD: CVE-2025-40949 // JVNDB: JVNDB-2026-021628

AFFECTED PRODUCTS

vendor:	siemens	model:	ruggedcom rox rx1510	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1524	scope:	lte	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox mx5000	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1501	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1400	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1500	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1536	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1511	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx1512	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox rx5000	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	siemens	model:	ruggedcom rox mx5000re	scope:	lt	version:	2.17.1	Trust: 1.0
vendor:	シーメンス	model:	ruggedcom rox rx1501	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1524	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1510	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx5000	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1512	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox mx5000	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1500	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1511	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1536	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox rx1400	scope:	-	version:	-	Trust: 0.8
vendor:	シーメンス	model:	ruggedcom rox mx5000re	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-021628 // NVD: CVE-2025-40949

CVSS

SEVERITY

CVSSV2

CVSSV3

productcert@siemens.com:	CVE-2025-40949
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-021628
value:	CRITICAL
Trust: 0.8

productcert@siemens.com:	CVE-2025-40949
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.3
impactScore:	6.0
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-021628
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-021628 // NVD: CVE-2025-40949

PROBLEMTYPE DATA

problemtype:	CWE-78	Trust: 1.0
problemtype:	OS Command injection (CWE-78) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-021628 // NVD: CVE-2025-40949

PATCH

title:

SSA-081142

url:

https://cert-portal.siemens.com/productcert/html/ssa-081142.html

Trust: 0.8

sources: JVNDB: JVNDB-2026-021628

EXTERNAL IDS

db:	NVD	id:	CVE-2025-40949	Trust: 2.6
db:	SIEMENS	id:	SSA-081142	Trust: 1.0
db:	JVNDB	id:	JVNDB-2026-021628	Trust: 0.8

sources: JVNDB: JVNDB-2026-021628 // NVD: CVE-2025-40949

REFERENCES

url:	https://cert-portal.siemens.com/productcert/html/ssa-081142.html	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2025-40949	Trust: 0.8

sources: JVNDB: JVNDB-2026-021628 // NVD: CVE-2025-40949

SOURCES

db:	JVNDB	id:	JVNDB-2026-021628
db:	NVD	id:	CVE-2025-40949

LAST UPDATE DATE

2026-07-04T23:48:03.562000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-021628	date:	2026-06-30T02:23:00
db:	NVD	id:	CVE-2025-40949	date:	2026-06-29T14:08:26.717

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-021628	date:	2026-06-30T00:00:00
db:	NVD	id:	CVE-2025-40949	date:	2026-05-12T10:16:43.360