Privilege Escalation Vulnerability in RUGGEDCOM ROX Devices

CVE-2021-37173

Summary

A privilege escalation vulnerability exists in RUGGEDCOM ROX devices, where the command line interface does not adequately restrict file read and write operations for low privileged users. This imperfection can be exploited by an authenticated remote attacker, enabling them to escalate their privileges and potentially gain root access to the affected devices. Users are advised to upgrade to version V2.14.1 or later to mitigate the risk associated with this vulnerability. For additional details, refer to the Siemens security advisory.

References