Siemens Ruggedcom Rox Improper Neutralization of Special Elements Used in an OS Command (CVE-2025-40949)

Affected devices do not properly sanitize user-supplied input in the Scheduler functionality of the Web UI, allowing commands to be injected into the task scheduling backend. This could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying...

CVE-2025-40949

creationtimestamp| type| source ---|---|--- 2026-05-12 12:19:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnrjhsgsn2g 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-12...

CVE-2025-40949

The CVE-2025-40949 issue affects RUGGEDCOM ROX devices (MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions