Advisories · Technology

Siemens RUGGEDCOM ROX MX5000.

Every CVE that names Siemens RUGGEDCOM ROX MX5000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-40949 CVE record

CVSS 8.9 High

OS command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 12 May 2026
CVE-2025-40948 CVE record

CVSS 6.1 Medium

Argument injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 12 May 2026
CVE-2025-40947 CVE record

CVSS 7.7 High

OS command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 12 May 2026
CVE-2024-56840 CVE record

CVSS 7.5 High

Injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Other injection
Not analysed yet 9 Dec 2025
CVE-2024-56839 CVE record

CVSS 8.6 High

Injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Other injection
Not analysed yet 9 Dec 2025
CVE-2024-56838 CVE record

CVSS 8.6 High

Injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Other injection
Not analysed yet 9 Dec 2025
CVE-2024-56837 CVE record

CVSS 8.6 High

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 9 Dec 2025
CVE-2024-56836 CVE record

CVSS 7.7 High

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 9 Dec 2025
CVE-2024-56835 CVE record

CVSS 8.7 High

Injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Other injection
Not analysed yet 9 Dec 2025
CVE-2025-40761 CVE record

CVSS 8.6 High

Authentication bypass in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Authentication bypass
Not analysed yet 12 Aug 2025
CVE-2025-33023 CVE record

CVSS 5.1 Medium

Unrestricted file upload in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Unrestricted file upload
Not analysed yet 12 Aug 2025
CVE-2025-40591 CVE record

CVSS 8.3 High

Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
Not analysed yet 10 Jun 2025
CVE-2025-33025 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
Not analysed yet 13 May 2025
CVE-2025-33024 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
Not analysed yet 13 May 2025
CVE-2025-32469 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
Not analysed yet 13 May 2025
CVE-2020-28398 CVE record

CVSS 8.6 High

Cross-site request forgery in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Cross-site request forgery (CSRF)
Not analysed yet 10 Dec 2024
CVE-2023-36755 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 11 Jul 2023
CVE-2023-36754 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 11 Jul 2023
CVE-2023-36753 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 11 Jul 2023
CVE-2023-36752 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 11 Jul 2023
CVE-2023-36751 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 11 Jul 2023
CVE-2023-36750 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 11 Jul 2023
CVE-2023-36749 CVE record

CVSS 7.4 High

Broken or risky cryptographic algorithm in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Weak cryptography or TLS
Not analysed yet 11 Jul 2023
CVE-2023-36748 CVE record

CVSS 5.9 Medium

Weak encryption in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Weak cryptography or TLS
Not analysed yet 11 Jul 2023
CVE-2023-36390 CVE record

CVSS 8.8 High

Cross-site scripting in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2023-36389 CVE record

CVSS 8.8 High

Cross-site scripting in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2023-36386 CVE record

CVSS 8.8 High

Cross-site scripting in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Cross-site scripting (XSS)
Not analysed yet 11 Jul 2023
CVE-2022-29562 CVE record

CVSS 3.7 Low

Improper input validation in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-20
Not analysed yet 11 Jul 2023
CVE-2022-29561 CVE record

CVSS 7.5 High

Cross-site request forgery in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Cross-site request forgery (CSRF)
Not analysed yet 11 Jul 2023
CVE-2022-29560 CVE record

Command injection in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- Command injection
Not analysed yet 12 Jul 2022
CVE-2021-41546 CVE record

Uncontrolled resource consumption in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX RX1400
- Denial of service
Not analysed yet 12 Oct 2021
CVE-2021-37175 CVE record

Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX RX1400
- CWE-280
Not analysed yet 14 Sept 2021
CVE-2021-37174 CVE record

Execution with unnecessary privileges in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX RX1400
- Privilege escalation
Not analysed yet 14 Sept 2021
CVE-2021-37173 CVE record

Improper privilege management in Siemens RUGGEDCOM ROX MX5000 and others
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX RX1400
- Privilege escalation
Not analysed yet 14 Sept 2021