CVE-2025-33024

🗓️ 13 May 2025 09:38:47Reported by siemensType

Vulnerability in RUGGEDCOM devices allows command injection via tcpdump, risking arbitrary code execution.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-33024	13 May 202510:30	–	circl
CNNVD	Siemens多款产品安全漏洞	13 May 202500:00	–	cnnvd
CVE	CVE-2025-33024	13 May 202509:38	–	cve
EUVD	EUVD-2025-14689	3 Oct 202520:07	–	euvd
NVD	CVE-2025-33024	13 May 202510:15	–	nvd
Positive Technologies	PT-2025-20861 · Siemens +1 · Ruggedcom Rox Mx5000 +9	13 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-33024	15 May 202510:11	–	redhatcve
Tenable Nessus	Siemens RUGGEDCOM ROX II Client-Side Enforcement of Server-Side Security (CVE-2025-33024)	18 Nov 202500:00	–	nessus
Vulnrichment	CVE-2025-33024	13 May 202509:38	–	vulnrichment

[
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX MX5000",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX MX5000RE",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1400",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1500",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1501",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1510",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1511",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1512",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1524",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX1536",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "vendor": "Siemens",
    "product": "RUGGEDCOM ROX RX5000",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "V2.16.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-301229.html

13 May 2025 09:38Current

CVSS 49.4

CVSS 3.19.9

EPSS0.0094

CWE-602