Ruggedcom Rox Mx5000 (Siemens) - vulnerabilities (CVEs)

91 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-05-12. Vendor: Siemens.

CVEs of Ruggedcom Rox Mx5000

CVE-2025-40948 - CVSS 6.8 (medium), 2026-05-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400…
CVE-2025-40947 - CVSS 7.7 (high), 2026-05-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400…
CVE-2025-40949 - CVSS 9.1 (critical), 2026-05-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400…
CVE-2025-15467 - CVSS 9.8 (critical), 2026-01-27: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact…
CVE-2024-56839 - CVSS 8.6 (high), 2025-12-09: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400…
CVE-2024-56838 - CVSS 8.6 (high), 2025-12-09: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400…
CVE-2024-56840 - CVSS 7.5 (high), 2025-12-09: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400…
CVE-2024-56836 - CVSS 8.8 (high), 2025-12-09: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400…
CVE-2024-56835 - CVSS 8.8 (high), 2025-12-09: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400…
CVE-2024-56837 - CVSS 8.6 (high), 2025-12-09: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400…
CVE-2025-9714 - CVSS 6.2 (medium), 2025-09-10: Uncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted…
CVE-2025-40761 - CVSS 8.6 (high), 2025-08-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions),…
CVE-2025-33023 - CVSS 5.1 (medium), 2025-08-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGEDCOM ROX RX1400 (All versions),…
CVE-2025-7425 - CVSS 7.8 (high), 2025-07-10: A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such…
CVE-2025-6020 - CVSS 7.8 (high), 2025-06-17: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their…
CVE-2025-49796 - CVSS 9.1 (critical), 2025-06-16: A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an…
CVE-2025-49794 - CVSS 9.1 (critical), 2025-06-16: A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the…
CVE-2025-40591 - CVSS 8.3 (high), 2025-06-10: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400…
CVE-2025-46836 - CVSS 6.6 (medium), 2025-05-14: net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and…
CVE-2025-32469 - CVSS 9.9 (critical), 2025-05-13: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400…
CVE-2025-33025 - CVSS 9.9 (critical), 2025-05-13: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400…
CVE-2025-33024 - CVSS 9.9 (critical), 2025-05-13: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400…
CVE-2025-3576 - CVSS 5.9 (medium), 2025-04-15: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum…
CVE-2024-57256 - CVSS 7.1 (high), 2025-02-18: An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem…
CVE-2024-57258 - CVSS 7.8 (high), 2025-02-18: Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because…
CVE-2024-12243 - CVSS 5.3 (medium), 2025-02-10: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded…
CVE-2024-12133 - CVSS 5.3 (medium), 2025-02-10: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much…
CVE-2025-0395 - CVSS 6.2 (medium), 2025-01-22: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and…
CVE-2020-28398 - CVSS 8.8 (high), 2024-12-10: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2024-3447 - CVSS 6 (medium), 2024-11-14: A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer`…
CVE-2024-52533 - CVSS 9.8 (critical), 2024-11-11: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a…
CVE-2024-50602 - CVSS 5.9 (medium), 2024-10-27: An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted…
CVE-2024-3596 - CVSS 9 (critical), 2024-07-09: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or…
CVE-2024-28085 - CVSS 3.3 (low), 2024-03-27: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv.…
CVE-2024-22365 - CVSS 5.5 (medium), 2024-02-06: linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for…
CVE-2023-46218 - CVSS 6.5 (medium), 2023-12-07: This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible.…
CVE-2020-21047 - CVSS 5.5 (medium), 2023-08-22: The libcpu component which is used by libasm of elfutils version 0.177 (git 47780c9e), suffers from denial-of-service vulnerability caused by application…
CVE-2023-3019 - CVSS 6.5 (medium), 2023-07-24: A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to…
CVE-2023-36750 - CVSS 9.1 (critical), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36753 - CVSS 9.1 (critical), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36749 - CVSS 7.4 (high), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36752 - CVSS 9.1 (critical), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36755 - CVSS 9.1 (critical), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36748 - CVSS 6.8 (medium), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36751 - CVSS 9.1 (critical), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36754 - CVSS 9.1 (critical), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2022-29562 - CVSS 5.3 (medium), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36390 - CVSS 8.8 (high), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36389 - CVSS 8.8 (high), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-36386 - CVSS 8.8 (high), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2022-29561 - CVSS 8.8 (high), 2023-07-11: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400…
CVE-2023-27043 - CVSS 5.3 (medium), 2023-04-19: The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is…
CVE-2023-29383 - CVSS 3.3 (low), 2023-04-14: In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to…
CVE-2023-29491 - CVSS 7.8 (high), 2023-04-14: ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a…
CVE-2022-2347 - CVSS 7.7 (high), 2022-09-23: There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does…
CVE-2020-35525 - CVSS 7.5 (high), 2022-09-01: In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
CVE-2022-37434 - CVSS 9.8 (critical), 2022-08-05: zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications…
CVE-2022-36123 - CVSS 7.8 (high), 2022-07-29: The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of…
CVE-2022-29560 - CVSS 7.2 (high), 2022-07-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < 2.15.1), RUGGEDCOM ROX MX5000RE (All versions < 2.15.1), RUGGEDCOM ROX RX1400 (All…
CVE-2022-34835 - CVSS 9.8 (critical), 2022-06-30: In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the…
CVE-2022-30790 - CVSS 7.8 (high), 2022-06-08: Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
CVE-2022-30552 - CVSS 5.5 (medium), 2022-06-08: Das U-Boot 2022.01 has a Buffer Overflow.
CVE-2022-0778 - CVSS 7.5 (high), 2022-03-15: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this…
CVE-2021-41546 - CVSS 7.5 (high), 2021-10-12: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All…
CVE-2021-37174 - CVSS 8.8 (high), 2021-09-14: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All…
CVE-2021-37173 - CVSS 8.8 (high), 2021-09-14: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All…
CVE-2021-37175 - CVSS 5.3 (medium), 2021-09-14: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All…
CVE-2021-3712 - CVSS 7.4 (high), 2021-08-24: ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the…
CVE-2021-36086 - CVSS 3.3 (low), 2021-07-01: The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
CVE-2021-36085 - CVSS 3.3 (low), 2021-07-01: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
CVE-2021-36084 - CVSS 3.3 (low), 2021-07-01: The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).
CVE-2021-36087 - CVSS 3.3 (low), 2021-07-01: The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because…
CVE-2020-12762 - CVSS 7.8 (high), 2020-05-09: json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CVE-2020-10648 - CVSS 7.8 (high), 2020-03-19: Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a…
CVE-2019-13106 - CVSS 7.8 (high), 2019-08-06: Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow…
CVE-2019-13104 - CVSS 7.8 (high), 2019-08-06: In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack)…
CVE-2019-14204 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
CVE-2019-14199 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer…
CVE-2019-14202 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.
CVE-2019-14192 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer…
CVE-2019-14195 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after…
CVE-2019-14198 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in…
CVE-2019-14201 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
CVE-2019-14194 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in…
CVE-2019-14197 - CVSS 9.1 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
CVE-2019-14200 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
CVE-2019-14203 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
CVE-2019-14193 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after…
CVE-2019-14196 - CVSS 9.8 (critical), 2019-07-31: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
CVE-2019-13103 - CVSS 7.1 (high), 2019-07-29: A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow…
CVE-2019-12900 - CVSS 9.8 (critical), 2019-06-19: BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.