CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1911 matches found

CVE•added 2023/07/11 9:7 a.m.•56 views

CVE-2023-36750

Siemens RUGGEDCOM ROX family (MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) are affected by CVE-2023-36750. The issue is a command injection in the web interface via the software-upgrade URL parameter caused by missing server-side input sanitation. An a...

9.1CVSS7AI score0.01535EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/07/11 9:7 a.m.•23 views

CVE-2023-36750

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.0, RUGGEDCOM ROX MX5000RE All versions V2.16.0, RUGGEDCOM ROX RX1400 All versions V2.16.0, RUGGEDCOM ROX RX1500 All versions V2.16.0, RUGGEDCOM ROX RX1501 All versions V2.16.0, RUGGEDCOM ROX RX1510 All versions V2.16.0...

9.1CVSS9.3AI score0.01535EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/11 9:7 a.m.•16 views

CVE-2023-36749

7.4CVSS6.9AI score0.00292EPSS

SaveExploits0References1

Cvelist•added 2023/07/11 9:7 a.m.•24 views

CVE-2023-36749

7.4CVSS7.3AI score0.00292EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:7 a.m.•54 views

CVE-2023-36749

Siemens RUGGEDCOM ROX family is affected by CVE-2023-36749 due to use of insecure TLS 1.0 in the webserver, enabling potential man-in-the-middle attacks with data confidentiality and integrity impact. Affected devices include ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, R...

7.4CVSS7.1AI score0.00292EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/07/11 9:7 a.m.•9 views

CVE-2023-36748

5.9CVSS6.7AI score0.00243EPSS

SaveExploits0References1

Cvelist•added 2023/07/11 9:7 a.m.•33 views

CVE-2023-36748

5.9CVSS6.4AI score0.00243EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:7 a.m.•52 views

CVE-2023-36748

CVE-2023-36748 affects Siemens RUGGEDCOM ROX family (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions before V2.16.0. The root cause is that these devices are configured to offer weak ciphers by default, enabling an attacker in a man‑in‑th...

6.8CVSS6.2AI score0.00243EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/07/11 9:7 a.m.•11 views

CVE-2023-36390

8.8CVSS5.6AI score0.00442EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:7 a.m.•55 views

CVE-2023-36390

Siemens RUGGEDCOM ROX devices are affected by a reflected cross-site scripting (XSS) vulnerability in the web interface. Affected series include ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000, all versions before V2.16.0. The issue arises from uns...

8.8CVSS5.7AI score0.00442EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/07/11 9:7 a.m.•28 views

CVE-2023-36390

8.8CVSS7.8AI score0.00442EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/11 9:7 a.m.•10 views

CVE-2023-36389

8.8CVSS5.6AI score0.00442EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:7 a.m.•56 views

CVE-2023-36389

CVE-2023-36389 is a reflected cross-site scripting (XSS) vulnerability in the web interfaces of Siemens RUGGEDCOM ROX devices. Affected products include ROX MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, and RX5000, all versions before V2.16.0. The flaw occurs w...

8.8CVSS5.7AI score0.00442EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/07/11 9:7 a.m.•29 views

CVE-2023-36389

8.8CVSS7.8AI score0.00442EPSS

SaveExploits0References1

Vulnrichment•added 2023/07/11 9:7 a.m.•15 views

CVE-2023-36386

8.8CVSS5.6AI score0.00442EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:7 a.m.•60 views

CVE-2023-36386

Affected products: Siemens RUGGEDCOM ROX family (MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with versions prior to V2.16.0. Issue: a reflected cross-site scripting (XSS) vulnerability exists in the web interface where user-controlled input is echoed ...

8.8CVSS5.7AI score0.00442EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/07/11 9:7 a.m.•28 views

CVE-2023-36386

8.8CVSS7.8AI score0.00442EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:7 a.m.•69 views

CVE-2022-29562

Affected products: Siemens RUGGEDCOM ROX MX5000/MX5000RE/RX1400/RX1500/RX1501/RX1510/RX1511/RX1512/RX1524/RX1536/RX5000 (all versions before V2.16.0). Vulnerability type & root cause: Improper input validation in the web interface leading to inability to properly handle malformed HTTP packets. Th...

5.3CVSS5.2AI score0.00748EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2023/07/11 9:7 a.m.•10 views

CVE-2022-29562

3.7CVSS7.2AI score0.00748EPSS

SaveExploits0References1

CVE•added 2023/07/11 9:6 a.m.•57 views

CVE-2022-29561

The CVE-2022-29561 entry documents a Cross-Site Request Forgery (CSRF) vulnerability in Siemens RUGGEDCOM ROX devices. Affected products and older versions include MX5000, MX5000RE, RX1400, RX1500/1501/1510/1511/1512/1524/1536, and RX5000, all versions

8.8CVSS8.4AI score0.00276EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by