Riskcovery

CVE-2021-37174

State
Published
Severity
Not scored
Published
Sep 14, 2021
Updated
Aug 4, 2024
Reserved
Jul 21, 2021

Read the record on cve.org

Description

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1). The affected devices have a privilege escalation vulnerability, if exploited, an attacker could gain root user access.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-250 Execution with Unnecessary Privileges

Affected Products

ProductVersions
RUGGEDCOM ROX MX5000Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1400Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1500Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1501Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1510Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1511Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1512Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1524Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX1536Siemens
  • All versions < V2.14.1Affected
RUGGEDCOM ROX RX5000Siemens
  • All versions < V2.14.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.