Code Injection Vulnerability in RUGGEDCOM ROX II Products by Siemens
CVE-2024-56839
8.6HIGH
What is CVE-2024-56839?
A code injection vulnerability has been discovered in the RUGGEDCOM ROX II devices, specifically impacting all versions prior to V2.17.0. When using Virtual Routing and Forwarding (VRF), an attacker can exploit this flaw to execute arbitrary code with root privileges. This poses a significant risk to device integrity and confidentiality, as unauthorized commands may be executed, leading to data breaches or service disruptions. Organizations utilizing these devices should prioritize patching to mitigate potential threats.
Affected Version(s)
RUGGEDCOM ROX II family 0
References
CVSS V4
Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved