Siemens Ruggedcom Rox

An authenticated attacker with administrative access could execute arbitrary commands with root privileges on Ruggedcom Rox devices, potentially shutting down network services, altering configurations, or disrupting communications across your industrial network.

Operators of Siemens Ruggedcom Rox industrial network management devices. These are industrial-grade Ethernet switches and routers used in power generation, oil/gas, water utilities, and manufacturing to provide secure, redundant communication networks. If you use Ruggedcom Rox devices for critical network connectivity (such as control system data or SCADA communications), they are affected.

An attacker with valid administrative credentials accesses the Ruggedcom Rox web interface or management console and submits a malicious command through the Scheduler functionality. The input validation flaw allows the attacker to inject OS commands that execute with root privileges, giving full control of the device.