Siemens Ruggedcom Rox

🗓️ 12 May 2026 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 41 Views

Ruggedcom Rox Scheduler flaw enables authenticated remote root execution; update to latest versions.

Reporter	Title	Published	Views	Family All 15
attackerkb	CVE-2025-40949	12 May 202608:20	–	attackerkb
BDU FSTEC	RUGGEDCOM ROX MX5000 Scheduler Arbitrary Command Execution	13 Jul 202600:00	–	bdu_fstec
Circl	CVE-2025-40949	12 May 202612:19	–	circl
CNNVD	Siemens’ various products have vulnerabilities related to operating system command injection.	12 May 202600:00	–	cnnvd
CNVD	Siemens RUGGEDCOM operating system command injection vulnerability (CNVD-2026-23336)	20 May 202600:00	–	cnvd
CVE	CVE-2025-40949	12 May 202608:20	–	cve
Cvelist	CVE-2025-40949	12 May 202608:20	–	cvelist
EUVD	EUVD-2025-209782	12 May 202612:32	–	euvd
NCSC	Vulnerabilities present in Siemens products	13 May 202606:33	–	ncsc
NVD	CVE-2025-40949	12 May 202610:16	–	nvd

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-081142.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-081142.html
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-134-12.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-134-12
cisa	www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b

12 May 2026 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 48.9

CVSS 3.19.1

EPSS0.00674

SSVC

Ruggedcom Rox Scheduler vulnerability remote root execution root privileges latest versions