Siemens Ruggedcom Rox

An attacker with valid credentials could remotely execute commands on your RUGGEDCOM ROX devices, potentially allowing them to modify network configurations, access or alter industrial process data, or disrupt network operations.

Water utilities and electrical utilities operating RUGGEDCOM ROX industrial-grade managed switches for network infrastructure. The MX5000 and RX series switches are commonly used in substation automation and remote terminal unit environments to provide secure, ruggedized connectivity for critical control devices.

An attacker with valid credentials accesses the RUGGEDCOM ROX device remotely and submits a malicious feature key during the key installation process. The device does not properly validate the input, allowing the attacker to inject arbitrary commands that execute with root privileges.