CVE-2021-37174

Summary

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices have a privilege escalation vulnerability, if exploited, an attacker could gain root user access.

Affected Software

VendorProductVersion RangeStatus
SiemensRUGGEDCOM ROX MX5000All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1400All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1500All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1501All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1510All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1511All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1512All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1524All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX1536All versions < V2.14.1affected
SiemensRUGGEDCOM ROX RX5000All versions < V2.14.1affected

Weaknesses

  • CWE-250: CWE-250: Execution with Unnecessary Privileges

ADP Enrichment

CVE Program Container

Additional References

References