Remote Code Execution in RUGGEDCOM ROX II by Siemens

CVE-2024-56837

What is CVE-2024-56837?

A security vulnerability has been discovered in the RUGGEDCOM ROX II family of devices that allows attackers to exploit insufficient validation during the installation and loading of certain configuration files. This flaw can potentially enable unauthorized users to spawn a reverse shell, granting root access to the affected system and posing a significant risk to network security and integrity.

References