CVE-2025-40761_CVE-2025-40761

7.6 / 10

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All versions), RUGGEDCOM ROX RX1501 (All versions), RUGGEDCOM ROX RX1510 (All versions), RUGGEDCOM ROX RX1511 (All versions), RUGGEDCOM ROX RX1512 (All versions), RUGGEDCOM ROX RX1524 (All versions), RUGGEDCOM ROX RX1536 (All versions), RUGGEDCOM ROX RX5000 (All versions). Affected devices do not properly limit access through its Built-In-Self-Test (BIST) mode.
This could allow an attacker with physical access to the serial interface to bypass authentication and get access to a root shell on the device.

AI Analysis

A vulnerability in Siemens RUGGEDCOM ROX devices allows attackers with physical access to bypass authentication via the serial interface's Built-In-Self-Test (BIST) mode, gaining root shell access.

Basic Information

ID CVE-2025-40761

Source siemens

Published Aug 12, 2025 at 11:17

Modified Aug 12, 2025 at 18:23

Affected Product

Vendor Siemens

Product RUGGEDCOM ROX MX5000

Affected Versions Siemens RUGGEDCOM ROX MX5000 0
Siemens RUGGEDCOM ROX MX5000RE 0
Siemens RUGGEDCOM ROX RX1400 0
Siemens RUGGEDCOM ROX RX1500 0
Siemens RUGGEDCOM ROX RX1501 0
Siemens RUGGEDCOM ROX RX1510 0
Siemens RUGGEDCOM ROX RX1511 0
Siemens RUGGEDCOM ROX RX1512 0
Siemens RUGGEDCOM ROX RX1524 0
Siemens RUGGEDCOM ROX RX1536 0
Siemens RUGGEDCOM ROX RX5000 0

CWE Classification

CWE-288

AI Assessment

AI Score 7.6 / 10

AI Severity HIGH

Vendor Siemens

Product RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000

Version All versions

References

cert-portal.siemens.com /productcert/html/ssa-094954.html

{
    "lastseen": "",
    "description": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions), RUGGEDCOM ROX RX1500 (All versions), RUGGEDCOM ROX RX1501 (All versions), RUGGEDCOM ROX RX1510 (All versions), RUGGEDCOM ROX RX1511 (All versions), RUGGEDCOM ROX RX1512 (All versions), RUGGEDCOM ROX RX1524 (All versions), RUGGEDCOM ROX RX1536 (All versions), RUGGEDCOM ROX RX5000 (All versions). Affected devices do not properly limit access through its Built-In-Self-Test (BIST) mode.\r\nThis could allow an attacker with physical access to the serial interface to bypass authentication and get access to a root shell on the device.",
    "published": "2025-08-12T11:17:11.853Z",
    "modified": "2025-08-12T18:23:25.349Z",
    "type": "cve",
    "title": "CVE-2025-40761",
    "source": "siemens",
    "references": "https://cert-portal.siemens.com/productcert/html/ssa-094954.html",
    "id": "CVE-2025-40761",
    "bulletinFamily": "",
    "cwe": [
        "CWE-288"
    ],
    "cvelist": null,
    "sourceData": "Siemens RUGGEDCOM ROX MX5000 0\nSiemens RUGGEDCOM ROX MX5000RE 0\nSiemens RUGGEDCOM ROX RX1400 0\nSiemens RUGGEDCOM ROX RX1500 0\nSiemens RUGGEDCOM ROX RX1501 0\nSiemens RUGGEDCOM ROX RX1510 0\nSiemens RUGGEDCOM ROX RX1511 0\nSiemens RUGGEDCOM ROX RX1512 0\nSiemens RUGGEDCOM ROX RX1524 0\nSiemens RUGGEDCOM ROX RX1536 0\nSiemens RUGGEDCOM ROX RX5000 0",
    "sourceHref": "",
    "cvss": {
        "score": 7.6,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "RUGGEDCOM ROX MX5000",
    "version": "0",
    "vendor": "Siemens",
    "ai_description": "A vulnerability in Siemens RUGGEDCOM ROX devices allows attackers with physical access to bypass authentication via the serial interface's Built-In-Self-Test (BIST) mode, gaining root shell access.",
    "ai_severity": "HIGH",
    "ai_vendor": "Siemens",
    "ai_product": "RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000",
    "ai_version": "All versions",
    "ai_score": 7.6
}