Remote Code Execution Vulnerability in RUGGEDCOM ROX II from Siemens
CVE-2024-56836
7.7HIGH
What is CVE-2024-56836?
A vulnerability exists in the RUGGEDCOM ROX II family of products, specifically in versions prior to V2.17.0. The issue arises during Dynamic DNS configuration where improper validation allows an attacker to inject additional configuration parameters. This flaw could be exploited to initiate a reverse shell, granting the attacker root access to the system, thereby compromising its integrity and security. Prompt action and updates are recommended to mitigate potential threats.
Affected Version(s)
RUGGEDCOM ROX II family 0
References
CVSS V4
Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved