CVE-2025-33024
Estado: AplazadaCrítica (9.4)—
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5).
Leer descripción completaMostrar menos
The 'tcpdump' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges.
CVSS
- Versión: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Puntuación base: 9.4
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.20%
- Percentil entre todas las CVEs puntuadas: 67
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1210Exploitation of Remote Serviceslateral movement90 % - Impacto principal
T1059Command and Scripting Interpreterexecution95 % - Impacto secundario
T1068Exploitation for Privilege Escalationprivilege escalation90 %
Acceso remoto con PR:L y sin UI:R. Inyección de comandos en tcpdump permite ejecución de código arbitrario con privilegios root en dispositivo remoto de red.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (11)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Siemens — Ruggedcom ROX Mx5000AISiemens — Ruggedcom ROX Mx5000reAISiemens — Ruggedcom ROX Rx1400AISiemens — Ruggedcom ROX Rx1500AISiemens — Ruggedcom ROX Rx1501AISiemens — Ruggedcom ROX Rx1510AISiemens — Ruggedcom ROX Rx1511AISiemens — Ruggedcom ROX Rx1512AISiemens — Ruggedcom ROX Rx1524AISiemens — Ruggedcom ROX Rx1536AISiemens — Ruggedcom ROX Rx5000AI
CWE
- CWE-602
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-33024",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-33024",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-05-13T13:29:43.390237Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 9.9,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 3.1
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 9.4,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"subIntegrityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "productcert@siemens.com",
"affectedData": [
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX MX5000",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX MX5000RE",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1400",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1500",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1501",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1510",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1511",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1512",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1524",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1536",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX5000",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.16.5",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2025-05-13T10:15:25.373",
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-301229.html",
"source": "productcert@siemens.com"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "productcert@siemens.com",
"description": [
{
"lang": "en",
"value": "CWE-602"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5), RUGGEDCOM ROX RX1500 (All versions < V2.16.5), RUGGEDCOM ROX RX1501 (All versions < V2.16.5), RUGGEDCOM ROX RX1510 (All versions < V2.16.5), RUGGEDCOM ROX RX1511 (All versions < V2.16.5), RUGGEDCOM ROX RX1512 (All versions < V2.16.5), RUGGEDCOM ROX RX1524 (All versions < V2.16.5), RUGGEDCOM ROX RX1536 (All versions < V2.16.5), RUGGEDCOM ROX RX5000 (All versions < V2.16.5). The 'tcpdump' tool in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated remote attacker to execute arbitrary code with root privileges."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en RUGGEDCOM ROX MX5000 (Todas las versiones < V2.16.5), RUGGEDCOM ROX MX5000RE (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1400 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1500 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1501 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1510 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1511 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1512 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1524 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1536 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1536 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1540 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1550 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1560 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1570 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1580 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1590 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1600 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX1610 (Todas las versiones < V2.16.5), RUGGEDCOM ROX RX16 V2.16.5), RUGGEDCOM ROX RX5000 (Todas las versiones anteriores a V2.16.5). La herramienta 'tcpdump' en la interfaz web de los dispositivos afectados es vulnerable a la inyección de comandos debido a la falta de depuración de la entrada del servidor. Esto podría permitir que un atacante remoto autenticado ejecute código arbitrario con privilegios de root."
}
],
"lastModified": "2026-06-17T09:12:58.200",
"sourceIdentifier": "productcert@siemens.com"
}