CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2113 matches found

CVE•added 2025/12/09 10:44 a.m.•31 views

CVE-2024-56838

CVE-2024-56838 affects Siemens RUGGEDCOM ROX II family (and ROX MX5000/ROX RX1400/1500/1510/1511/1512/1524/1536/ROX RX5000) with versions before 2.17.0. The SCEP client used for secure certificate enrollment fails to validate multiple fields, enabling an attacker to execute arbitrary code with ro...

8.6CVSS7.7AI score0.00391EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•10 views

CVE-2024-56838

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.17.0, RUGGEDCOM ROX MX5000RE All versions V2.17.0, RUGGEDCOM ROX RX1400 All versions V2.17.0, RUGGEDCOM ROX RX1500 All versions V2.17.0, RUGGEDCOM ROX RX1501 All versions V2.17.0, RUGGEDCOM ROX RX1510 All versions V2.17.0...

8.6CVSS7.7AI score0.00391EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•39 views

CVE-2024-56838

8.6CVSS0.00391EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•37 views

CVE-2024-56837

Siemens RUGGEDCOM ROX II family devices (ROX II) prior to v2.17.0 are affected by a code-injection vulnerability caused by insufficient validation during installation and loading of certain configuration files. Several sources document that an attacker could exploit this to spawn a reverse shell ...

8.6CVSS7AI score0.00517EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•41 views

CVE-2024-56837

8.6CVSS0.00517EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•8 views

CVE-2024-56837

8.6CVSS7AI score0.00517EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•35 views

CVE-2024-56836

The CVE-2024-56836 issue affects Siemens RUGGEDCOM ROX II devices (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with versions before 2.17.0. According to connected documents, the vulnerability arises during Dynamic DNS configuration where additional con...

8.8CVSS7.1AI score0.00433EPSS

SaveExploits0References1Affected Software1

Vulnrichment•added 2025/12/09 10:44 a.m.•6 views

CVE-2024-56836

7.7CVSS7.1AI score0.00433EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 10:44 a.m.•42 views

CVE-2024-56836

7.7CVSS0.00433EPSS

SaveExploits0References1

CVE•added 2025/12/09 10:44 a.m.•35 views

CVE-2024-56835

CVE-2024-56835 affects Siemens RUGGEDCOM ROX II family (MX5000/MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) prior to v2.17.0. The DHCP Server configuration file is subject to code injection, enabling an attacker to spawn a reverse shell and gain root access. C...

8.8CVSS7.7AI score0.00507EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2025/12/09 10:44 a.m.•31 views

CVE-2024-56835

8.8CVSS0.00507EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 10:44 a.m.•6 views

CVE-2024-56835

8.8CVSS7.7AI score0.00507EPSS

SaveExploits0References1

CNNVD•added 2025/12/09 12:00 a.m.•19 views

Siemens RUGGEDCOM ROX II 命令注入漏洞

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from a command injection vulnerability that is caused by a flaw in the dynamic DNS configuration process. An attacker can exploit the vulnerability to execute...

8.8CVSS9.6AI score0.00433EPSS

SaveExploits0References1

CNNVD•added 2025/12/09 12:00 a.m.•21 views

Siemens RUGGEDCOM ROX II 命令注入漏洞

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from a command injection vulnerability that is caused by insufficient authentication during the installation and loading of certain configuration files. An attacker...

8.6CVSS9.8AI score0.00517EPSS

SaveExploits0References1

Positive Technologies•added 2025/12/09 12:00 a.m.•14 views

PT-2025-49841

Name of the Vulnerable Software and Affected Versions RUGGEDCOM RMC8388 versions prior to 5.10.1 RUGGEDCOM RS416Pv2 versions prior to 5.10.1 RUGGEDCOM RS416v2 versions prior to 5.10.1 RUGGEDCOM RS900 32M versions prior to 5.10.1 RUGGEDCOM RS900G 32M versions prior to 5.10.1 RUGGEDCOM RSG2100 32M...

5.3CVSS6.5AI score0.00248EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2025/12/09 12:00 a.m.•10 views

CVE-2024-56836: Improper Neutralization of Special Elements used in a Command

8.8CVSS7.1AI score0.00433EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/12/09 12:00 a.m.•6 views

CVE-2024-56835: Improper Neutralization of Special Elements in Output Used by a Downstream Component

8.8CVSS7.7AI score0.00507EPSS

SaveExploits0References1

CNNVD•added 2025/12/09 12:00 a.m.•15 views

Siemens RUGGEDCOM ROX II 注入漏洞

Siemens RUGGEDCOM ROX II is an operating system for industrial applications from Siemens, Germany. Siemens RUGGEDCOM ROX II suffers from an injection vulnerability that can be exploited by an attacker to cause execution of arbitrary code...

8.6CVSS9.3AI score0.00637EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/12/09 12:00 a.m.•7 views

CVE-2024-56837: Improper Neutralization of Special Elements used in a Command

8.6CVSS7AI score0.00517EPSS

SaveExploits0References1

Positive Technologies•added 2025/12/09 12:00 a.m.•17 views

PT-2025-49831

Name of the Vulnerable Software and Affected Versions RUGGEDCOM ROX II versions prior to 2.17.0 Description The RUGGEDCOM ROX II family is affected by an issue where, under certain conditions, IPsec may allow code injection. This could allow an attacker to execute arbitrary code as a root user...

9CVSS9.4AI score0.00637EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by