CVE-2025-40761 PUBLISHED

Assigner: siemens
Reserved: 16.04.2025 Published: 12.08.2025 Updated: 12.08.2025

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All versions), RUGGEDCOM ROX RX1501 (All versions), RUGGEDCOM ROX RX1510 (All versions), RUGGEDCOM ROX RX1511 (All versions), RUGGEDCOM ROX RX1512 (All versions), RUGGEDCOM ROX RX1524 (All versions), RUGGEDCOM ROX RX1536 (All versions), RUGGEDCOM ROX RX5000 (All versions). Affected devices do not properly limit access through its Built-In-Self-Test (BIST) mode. This could allow an attacker with physical access to the serial interface to bypass authentication and get access to a root shell on the device.

CVSS Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 7.6

Attack Vector	Physical	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	None	Availability Impact	High

CVSS 3.1

CVSS Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score: 8.6

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Physical	Confidentiality	High	Confidentiality	High
Attack Complexity	Low	Integrity	High	Integrity	High
Attack Requirements	None	Availability	High	Availability	High
Privileges Required	None
User Interaction	None

CVSS 4.0

Product Status

Vendor	Siemens
Product	RUGGEDCOM ROX MX5000
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX MX5000RE
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1400
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1500
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1501
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1510
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1511
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1512
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1524
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX1536
Versions	Default: unknown affected from 0 to * (excl.)

Vendor	Siemens
Product	RUGGEDCOM ROX RX5000
Versions	Default: unknown affected from 0 to * (excl.)

References

https://cert-portal.siemens.com/productcert/html/ssa-094954.html

Problem Types

CWE-288: Authentication Bypass Using an Alternate Path or Channel CWE