← Vulnerability feed

Vulnerability record · CVE-2023-36755 · published 11 July 2023

CVE-2023-36755: Siemens ruggedcom rox mx5000 firmware command injection vulnerability

Siemens · Ruggedcom Rox Mx5000 Firmware

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The SCEP CA Certificate Name parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

7.2 CVSS 3.1 High EPSS 0.97% · top 39.4% CWE-77 · Command injection
7.2CVSS 3.1 base score
0.97%EPSS exploitation probability, 30 days
NoNot in CISA KEV
11Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The SCEP CA Certificate Name parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

11 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-146325.pdf Vendor Advisory

Track CVE-2023-36755 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-17006Siemens ruggedcom rox mx5000 firmware improper input validation vulnerabilityIn Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling th…EPSS 3.6%8.9CVE-2025-40949Siemens ruggedcom rox mx5000 firmware os command injection vulnerabilityA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX …EPSS 0.67%8.8CVE-2022-29561Siemens ruggedcom rox mx5000 firmware cross-site request forgery vulnerabilityA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX …EPSS 0.28%8.8CVE-2021-37173Siemens ruggedcom rox rx1400 firmware improper privilege management vulnerabilityA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX…EPSS 1.6%8.8CVE-2021-37174Siemens ruggedcom rox rx1400 firmware execution with unnecessary privileges vulnerabilityA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX…EPSS 1.2%8.8CVE-2019-11745Mozilla firefox out-of-bounds write vulnerabilityWhen encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could…EPSS 3.0%7.7CVE-2025-40947Siemens ruggedcom rox mx5000 firmware os command injection vulnerabilityA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX …EPSS 0.54%7.5CVE-2021-41546Siemens ruggedcom rox mx5000 firmware uncontrolled resource consumption vulnerabilityA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX…EPSS 0.98%

Source: NIST National Vulnerability Database (record CVE-2023-36755), CISA KEV, FIRST EPSS (scores of 2026-10-05). This page is refreshed as NVD updates the record.