Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly sanitize user-supplied input during the feature key installation process. This could allow an authenticated remote attacker to inject arbitrary commands, resulting in remote code execution with root privileges on the underlying operating system.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 22 products
| Date | Total | Labels |
|---|
| 2026-05-12 | 1 | Patch1 |
| 2026-07-22 | 1 | General1 |
Цепочка эксплуатации Siemens ROX II: от file disclosure до persistent root (CVE-2025-40947/48/49) https://tier1.life/thread/427 http://tieronemkfevyizxcnt355agysp2iemvhon6iyclwrc7yuc7oszgzrid.onion/thread/427 #articles
Post summary
The post announces an exploitation chain for Siemens ROX II involving CVE‑2025‑40947/48/49 but does not provide any PoC, exploit code, patch information, or confirmation of active exploitation.
Entity detects CVE-2025-40947: authenticated command injection in Siemens RUGGEDCOM ROX devices (<V2.17.1). Attacker gains root RCE via unsanitized input during feature key install. Patch to V2.17.1+ now. https://0x2ed3bb60.xyz/threat/3636083d02d08cdd
Post summary
An entity reported detection of CVE‑2025‑40947, an authenticated command injection that allows root RCE on Siemens RUGGEDCOM ROX devices before v2.17.1, and a patch is now available for affected firmware.
22 of 22 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | siemens | ruggedcom_rox_mx5000 | - | - | - |
| OS | siemens | ruggedcom_rox_mx5000_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_mx5000re | - | - | - |
| OS | siemens | ruggedcom_rox_mx5000re_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1400 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1400_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1500 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1500_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1501 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1501_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1510 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1510_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1511 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1511_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1512 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1512_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1524 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1524_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx1536 | - | - | - |
| OS | siemens | ruggedcom_rox_rx1536_firmware | - | - | - |
| HW | siemens | ruggedcom_rox_rx5000 | - | - | - |
| OS | siemens | ruggedcom_rox_rx5000_firmware | - | - | - |