Code Injection Vulnerability in RUGGEDCOM ROX II Products by Siemens

CVE-2024-56839

What is CVE-2024-56839?

A code injection vulnerability has been discovered in the RUGGEDCOM ROX II devices, specifically impacting all versions prior to V2.17.0. When using Virtual Routing and Forwarding (VRF), an attacker can exploit this flaw to execute arbitrary code with root privileges. This poses a significant risk to device integrity and confidentiality, as unauthorized commands may be executed, leading to data breaches or service disruptions. Organizations utilizing these devices should prioritize patching to mitigate potential threats.

References