{"id":"CVE-2025-40948","title":"A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…","summary":"A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-88"],"vendor":"siemens","product":"ruggedcom_rox_mx5000_firmware","affected":["ruggedcom_rox_mx5000_firmware < 2.17.1","ruggedcom_rox_mx5000re_firmware < 2.17.1","ruggedcom_rox_rx1400_firmware < 2.17.1","ruggedcom_rox_rx1500_firmware < 2.17.1","ruggedcom_rox_rx1501_firmware < 2.17.1","ruggedcom_rox_rx1510_firmware < 2.17.1","ruggedcom_rox_rx1511_firmware < 2.17.1","ruggedcom_rox_rx1512_firmware < 2.17.1","ruggedcom_rox_rx1524_firmware < 2.17.1","ruggedcom_rox_rx1536_firmware < 2.17.1","ruggedcom_rox_rx5000_firmware < 2.17.1"],"patched":["ruggedcom_rox_mx5000_firmware 2.17.1","ruggedcom_rox_mx5000re_firmware 2.17.1","ruggedcom_rox_rx1400_firmware 2.17.1","ruggedcom_rox_rx1500_firmware 2.17.1","ruggedcom_rox_rx1501_firmware 2.17.1","ruggedcom_rox_rx1510_firmware 2.17.1","ruggedcom_rox_rx1511_firmware 2.17.1","ruggedcom_rox_rx1512_firmware 2.17.1","ruggedcom_rox_rx1524_firmware 2.17.1","ruggedcom_rox_rx1536_firmware 2.17.1","ruggedcom_rox_rx5000_firmware 2.17.1"],"published":"2026-05-12","updated":"2026-10-14","sourceUpdated":"2026-10-14T13:10:00.187","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-40948","references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-973901.html","label":"productcert@siemens.com"}],"tags":["nvd"],"epss":0.00397,"epssPercentile":0.33765,"ingestedAt":"2026-06-29T14:29:18.070Z","slug":"CVE-2025-40948","body":"## Overview\n\nA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly validate input in the web server's JSON-RPC interface.\r\n\r\nThis could allow an authenticated remote attacker to read arbitrary files from the underlying operating system's filesystem with root privileges.\n\n## Affected\n\n- `ruggedcom_rox_mx5000_firmware < 2.17.1`\n- `ruggedcom_rox_mx5000re_firmware < 2.17.1`\n- `ruggedcom_rox_rx1400_firmware < 2.17.1`\n- `ruggedcom_rox_rx1500_firmware < 2.17.1`\n- `ruggedcom_rox_rx1501_firmware < 2.17.1`\n- `ruggedcom_rox_rx1510_firmware < 2.17.1`\n- `ruggedcom_rox_rx1511_firmware < 2.17.1`\n- `ruggedcom_rox_rx1512_firmware < 2.17.1`\n- `ruggedcom_rox_rx1524_firmware < 2.17.1`\n- `ruggedcom_rox_rx1536_firmware < 2.17.1`\n- `ruggedcom_rox_rx5000_firmware < 2.17.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `ruggedcom_rox_mx5000_firmware 2.17.1`\n- `ruggedcom_rox_mx5000re_firmware 2.17.1`\n- `ruggedcom_rox_rx1400_firmware 2.17.1`\n- `ruggedcom_rox_rx1500_firmware 2.17.1`\n- `ruggedcom_rox_rx1501_firmware 2.17.1`\n- `ruggedcom_rox_rx1510_firmware 2.17.1`\n- `ruggedcom_rox_rx1511_firmware 2.17.1`\n- `ruggedcom_rox_rx1512_firmware 2.17.1`\n- `ruggedcom_rox_rx1524_firmware 2.17.1`\n- `ruggedcom_rox_rx1536_firmware 2.17.1`\n- `ruggedcom_rox_rx5000_firmware 2.17.1`","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}