Remote Code Execution Vulnerability in RUGGEDCOM ROX II from Siemens

CVE-2024-56836

What is CVE-2024-56836?

A vulnerability exists in the RUGGEDCOM ROX II family of products, specifically in versions prior to V2.17.0. The issue arises during Dynamic DNS configuration where improper validation allows an attacker to inject additional configuration parameters. This flaw could be exploited to initiate a reverse shell, granting the attacker root access to the system, thereby compromising its integrity and security. Prompt action and updates are recommended to mitigate potential threats.

References