CVE-2025-40947High· 7.5▾ TwilightA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.5%
Last analysed / modified upstream
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCOM ROX RX1501 (All versions < V2.17.1), RUGGEDCOM ROX RX1510 (All versions < V2.17.1), RUGGEDCOM ROX RX1511 (All versions < V2.17.1), RUGGEDCOM ROX RX1512 (All versions < V2.17.1), RUGGEDCOM ROX RX1524 (All versions < V2.17.1), RUGGEDCOM ROX RX1536 (All versions < V2.17.1), RUGGEDCOM ROX RX5000 (All versions < V2.17.1). Affected devices do not properly sanitize user-supplied input during the feature key installation process.
This could allow an authenticated remote attacker to inject arbitrary commands, resulting in remote code execution with root privileges on the underlying operating system.
ruggedcom_rox_mx5000_firmware < 2.17.1ruggedcom_rox_mx5000re_firmware < 2.17.1ruggedcom_rox_rx1400_firmware < 2.17.1ruggedcom_rox_rx1500_firmware < 2.17.1ruggedcom_rox_rx1501_firmware < 2.17.1ruggedcom_rox_rx1510_firmware < 2.17.1ruggedcom_rox_rx1511_firmware < 2.17.1ruggedcom_rox_rx1512_firmware < 2.17.1ruggedcom_rox_rx1524_firmware < 2.17.1ruggedcom_rox_rx1536_firmware < 2.17.1ruggedcom_rox_rx5000_firmware < 2.17.1Upgrade past the affected range:
ruggedcom_rox_mx5000_firmware 2.17.1ruggedcom_rox_mx5000re_firmware 2.17.1ruggedcom_rox_rx1400_firmware 2.17.1ruggedcom_rox_rx1500_firmware 2.17.1ruggedcom_rox_rx1501_firmware 2.17.1ruggedcom_rox_rx1510_firmware 2.17.1ruggedcom_rox_rx1511_firmware 2.17.1ruggedcom_rox_rx1512_firmware 2.17.1ruggedcom_rox_rx1524_firmware 2.17.1ruggedcom_rox_rx1536_firmware 2.17.1ruggedcom_rox_rx5000_firmware 2.17.1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-40949Critical· 9.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…
CVE-2022-1292High· 7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection
CVE-2025-40582High· 7.8A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed)
CVE-2025-40948Medium· 6.8A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1500 (All versions < V2.17.1), RUGGEDCO…
CVE-2022-33186Critical· 9.8A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticated attacker to execute on a Brocade Fabric OS switch commands capable of modifying zoning, disabling …
CVE-2022-37902High· 7.2Authenticated command injection vulnerabilities exist in the ArubaOS command line interface