CVE-2025-40949
published 2026-05-12CVE-2025-40949: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400…
PriorityP262critical9.1CVSS 3.1
AVNACLPRHUINSCCHIHAH
EPSS
0.67%
51.6th percentile
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly sanitize user-supplied input in the Scheduler functionality of the Web UI, allowing commands to be injected into the task scheduling backend.
This could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | ruggedcom_rox_mx5000 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_mx5000_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_mx5000re | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_mx5000re_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1400 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1400_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1500 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1500_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1501 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1501_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1510 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1510_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1511 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1511_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1512 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1512_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx1524 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1524_firmware | <= 2.17.1 | — |
| siemens | ruggedcom_rox_rx1536 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx1536_firmware | < 2.17.1 | 2.17.1 |
| siemens | ruggedcom_rox_rx5000 | < V2.17.1 | V2.17.1 |
| siemens | ruggedcom_rox_rx5000_firmware | < 2.17.1 | 2.17.1 |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
nvdv4.08.9HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Hackernews
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
blogs_hackernews·2026-07-27
CVE-2026-16232 ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
Monday starts with the usual promise that everything is under control. Then the logs wake up.
This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. Nothing looked strange at first. That helped.
That is the mood. Here is the full recap.
## ⚡ Threat of the Week
OpenAI Says Its AI Agent Went Rogue and Targeted Hugging Face - OpenAI disclosed that it lost control of two AI models during a security evaluation that ended in a breach o
Unit42
Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy
blogs_unit42·2026-07-17·CVSS 7.5
CVE-2025-40947 [HIGH] Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy
## Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy
Emmanuel Zhou
Adam Robbie
Rick Wyble
Miguel Pereira
Published: July 17, 2026
Threat Research
Vulnerabilities
Command injection
CVE-2025-40947
CVE-2025-40948
CVE-2025-40949
Exploit Chain
Privilege escalation
Rox II OT switches
## Executive Summary
We conducted this research in close partnership with Siemens, reflecting our shared commitment to advancing the security and resilience of critical infrastructure.
This report details a critical, chained exploit comprising three zero-day vulnerabilities (CVE-2025-40948, CVE-2025-40947, and CVE-2025-40949) discovered in Siemens ROX II operational technology (OT) switches. Successful exploitation of this chain would allow an attacker to achieve full privilege escal
2026-05-12
Published