CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

380 matches found

EUVD•added 2025/12/09 6:30 p.m.•8 views

EUVD-2024-55308

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. During the Dynamic DNS configuration of the affected product it is possible to inject additional configuration parameters. Under certain circumstances, an attacker could leverage this vulnerability to spawn a...

7.7CVSS6.5AI score0.00414EPSS

SaveExploits0References2

EUVD•added 2025/12/09 6:30 p.m.•9 views

EUVD-2024-55309

A vulnerability has been identified in RUGGEDCOM ROX II family All versions V2.17.0. The DHCP Server configuration file of the affected products is subject to code injection. An attacker could leverage this vulnerability to spawn a reverse shell and gain root access on the affected system...

8.8CVSS6.8AI score0.00485EPSS

SaveExploits0References2

NVD•added 2025/12/09 4:17 p.m.•6 views

CVE-2024-56839

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.6CVSS0.00609EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•5 views

CVE-2024-56839

8.6CVSS6.1AI score0.00609EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•9 views

CVE-2024-56840

7.5CVSS0.00609EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•7 views

CVE-2024-56838

8.6CVSS0.00381EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:17 p.m.•4 views

CVE-2024-56840

7.5CVSS6.1AI score0.00609EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•8 views

CVE-2024-56836

8.8CVSS0.00414EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•8 views

CVE-2024-56837

8.6CVSS0.00495EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:17 p.m.•9 views

CVE-2024-56835

8.8CVSS0.00485EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•5 views

CVE-2024-56840

7.5CVSS9.3AI score0.00609EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•27 views

CVE-2024-56840

The CVE-2024-56840 issue affects Siemens RUGGEDCOM ROX II family devices (and older ROX MX/RX variants) with all versions prior to 2.17.0. Under certain conditions, IPsec may allow code injection, enabling an attacker to execute arbitrary code as root on the affected device. Several connected sou...

7.5CVSS9.3AI score0.00609EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•35 views

CVE-2024-56840

7.5CVSS0.00609EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•3 views

CVE-2024-56839

8.6CVSS9.3AI score0.00609EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•20 views

CVE-2024-56839

8.6CVSS0.00609EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•20 views

CVE-2024-56839

CVE-2024-56839 affects Siemens RUGGEDCOM ROX II family (ROX II, MX5000/MX5000RE, RX1400/1500/1501/1510/1511/1512/1524/1536 and ROX 5000) with code injection possible when VRF is used. The root cause is injection in VRF-enabled configurations, enabling arbitrary code execution as root. Impact is h...

8.6CVSS9.3AI score0.00609EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•7 views

CVE-2024-56838

8.6CVSS9.2AI score0.00381EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•14 views

CVE-2024-56838

CVE-2024-56838 affects Siemens RUGGEDCOM ROX II family (and ROX MX5000/ROX RX1400/1500/1510/1511/1512/1524/1536/ROX RX5000) with versions before 2.17.0. The SCEP client used for secure certificate enrollment fails to validate multiple fields, enabling an attacker to execute arbitrary code with ro...

8.6CVSS9.2AI score0.00381EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•26 views

CVE-2024-56838

8.6CVSS0.00381EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•15 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS8.9AI score0.00495EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by